PhotoRobot Sub-Processor List

This document represents the PhotoRobot Sub-Processor List: Version 1.0 — PhotoRobot Edition, uni-Robot Ltd., Czech Republic.

‍

‍

1. Introduction - PhotoRobot Sub-Processor List 

This Sub-Processor List identifies the third-party service providers (“Sub-Processors”) engaged by uni-Robot Ltd. (“PhotoRobot”) to process personal data on behalf of customers using:

• PhotoRobot Controls Cloud
• PhotoRobot Cloud 2.0
• API services
• related hosting and synchronization infrastructure

Each Sub-Processor is bound by contractual commitments ensuring compliance with:

• GDPR (EU Regulation 2016/679)
• applicable EU and Czech law
• PhotoRobot’s internal security and data protection requirements

This document may be updated as new Sub-Processors are added or removed, in accordance with the Data Processing Agreement (DPA).

‍

‍

2. Cloud Infrastructure & Hosting Providers

2.1. Google Cloud Platform (GCP)

• ‍Role: Infrastructure, hosting, compute, storage, backup, networking‍
• Location: EU (primary), global (failover)‍
• Data Processed: Customer Data, project files, metadata, logs‍
• Legal Basis: GDPR-compliant SCC 2021, ISO 27001/17/18‍
• More info: https://cloud.google.com/security

Google Cloud is the primary platform hosting all PhotoRobot cloud services.

‍

‍

3. Email & Communication Services

3.1. Transactional Email Provider

(Current provider: to be assigned – e.g., Mailgun / SendGrid / MailerLite)

• ‍Role: Sending transactional system emails (password resets, confirmations, notifications)‍
• Location: EU or US (depending on chosen vendor)‍
• Data Processed: Name, email address, message metadata‍
• Legal Basis: SCC 2021 where applicable

( ! ) - Because PhotoRobot can choose the most optimal provider, the exact vendor name may be added once confirmed.

‍

‍

4. Analytics & Monitoring Providers

4.1. Google Analytics (Optional, if enabled)

• ‍Role: Website analytics‍
• Location: EU + USA‍
• Data Processed: IP (anonymized), device data, usage statistics‍
• Legal Basis: User consent + SCC 2021‍
• Note: Non-essential — used only if user opts in.

‍

‍

5. Customer Support & Ticketing

5.1. Email Support System

(Current provider: native email + optional ticketing integration)

• ‍Role: Handling support requests‍
• Location: EU or US (typically mailbox hosted under Google Workspace or alternative)‍
• Data Processed: Contact details, ticket content‍
• Legal Basis: contractual necessity

‍

‍

6. Backup & Disaster Recovery

6.1. Google Cloud Platform (as part of hosting)

No additional backup provider is used beyond GCP infrastructure.

• ‍Role: Redundant storage, snapshot backups‍
• Location: EU primary regions‍
• Data Processed: Customer Data, metadata

‍

‍

7. Security & Anti-Abuse Tools

(If implemented now or in future — structure prepared)

‍

7.1. Security Monitoring Services (Optional)

• ‍Role: Threat detection, anomaly detection‍
• Location: EU/US depending on provider‍
• Data Processed: Logs, IPs, authentication events‍
• Legal Basis: legitimate interest + SCC where needed

‍

‍

8. Optional / Future Sub-Processors

These may include (only if enabled):

• live chat / helpdesk providers
• logging and telemetry systems (Sentry, Datadog, etc.)
• CDN providers (Cloudflare, Fastly)
• marketing automation tools

Each will be added to this list before activation, following the DPA notification period.

‍

‍

9. How We Update This List

Changes to Sub-Processors follow this procedure:

1. PhotoRobot updates this public Sub-Processor List.
2. Customers are notified of material changes (if required).
3. Customers may object within the timeframe specified in the DPA (typically 15 days).
4. In case of objection, PhotoRobot will work with the Customer to find an acceptable solution.

‍

‍

10. Contact Information

For questions about Sub-Processors:

uni-Robot Ltd.
Vodičkova 710/31
110 00 Prague 1
Czech Republic

Email: legal@photorobot.com