Liferay International Limited (Liferay IE) 100 Mount Street Lower Dublin 2 Ireland Privacy Office, [email protected] |
Dublin, Ireland |
Where Liferay IE is not the contracting entity selling the Services to the Customer, Liferay IE is the principal Subprocessor. Otherwise, Liferay IE directly subcontracts parts of the services to the Sub-processors listed below. Liferay IE owns a Google Cloud Platform (GCP) Account used for hosting of the service and subcontracts maintenance and support services to its Sub-processors as specified below. Liferay IE furthermore relies on several contractors, serving as staff-augmentation, located in the EEA, not individually called out in the list of Sub-processors below. Liferay IE does not access any Customer data stored in the service. |
The extent, categories, and types of Personal Data that the Customer submits to the Services is fully controlled and determined by the Customer and may vary depending on Customer’s individual use of the Services. |
n/a, EEA |
Liferay Latin America Ltda. (Liferay BR) 160 Arcos Street, rooms 7, 9 and 11-18, Poço, Recife, PE, Brazil 52061-180 Privacy Office, [email protected] |
Recife and São Paulo, Brazil |
Maintenance & Support, globally Customer’s use of the Services and Liferay’s ordinary performance of the Services do not require the disclosure of any Personal Data to Liferay BR. If and to the extent the Customer provides Liferay’s support team with Personal Data (e. g. contained in unsanitized data dumps or screenshots), Liferay BR will be able to access such Personal Data provided by the Customer. In addition, certain Liferay Engineers of Liferay BR hold super-admin rights to the Liferay IE Infrastructure that could technically provide them access to systems holding Personal Data. However, Liferay IE has implemented organizational measures to prevent unauthorized access by such Liferay Engineers including the requirement to obtain approval of a Security Committee prior to provisioning any access to systems. Liferay BR furthermore relies on several contractors, located in Peru, serving as staff-augmentation, not individually called out in the list below. |
The extent, categories, and types of Personal Data that the Customer submits to Liferay’s Support Team is fully controlled and determined by the Customer. Otherwise, business contact data of Customers’ support contacts is used only for purposes of contract fulfillment on behalf of the Liferay entity acting as controller. |
Standard Contractual Clauses. In addition, in line with the EDPB guidelines, an assessment has been conducted by reputable law firms in Brazil and Peru confirming that there is nothing in the laws in Brazil and Peru that could impede on the level of protection afforded by the EU data protection laws. |
Liferay Hungary Kft (Liferay HU) 1138 Budapest Madarász Viktor Utca 47. a-b Hungary Privacy Office, [email protected] |
Budapest, Hungary |
Maintenance & Support, globally Customer’s use of the Services and Liferay’s ordinary performance of the Services do not require the disclosure of any Personal Data to Liferay HU. If and to the extent the Customer provides Liferay’s support team with Personal Data (e. g. contained in unsanitized data dumps or screenshots), Liferay HU will be able to access such Personal Data provided by the Customer. |
The extent, categories, and types of Personal Data that the Customer submits to Liferay’s Support Team is fully controlled and determined by the Customer. Otherwise, business contact data of Customers’ support contacts is used only for purposes of contract fulfillment on behalf of the Liferay entity acting as controller. |
n/a, EEA |
Liferay S. L. U., Spain (Liferay ES) Paseo de la Castellana, 280 Planta 1ª. Módulo B 28046 - Madrid Spain Privacy Office, [email protected] |
Madrid, Spain |
1st level Support for ES & PT Customers. Customer’s use of the Services and Liferay’s ordinary performance of the Services do not require the disclosure of any Personal Data to Liferay ES. If and to the extent the Customer provides Liferay’s support team with Personal Data (e. g. contained in unsanitized data dumps or screenshots), Liferay ES will be able to access such Personal Data provided by the Customer. |
The extent, categories, and types of Personal Data that the Customer submits to Liferay’s Support Team is fully controlled and determined by the Customer. Otherwise, business contact data of Customers’ support contacts is used only for purposes of contract fulfillment on behalf of the Liferay entity acting as controller. |
n/a, EEA |
Liferay Japan K. K. (Liferay JP) 1F Faveur Ebisu, 1-26-7 Ebisu Nishi, Shibuya-ku Tokyo 150-0021 JAPAN Privacy Office, [email protected] |
Tokyo, Japan |
Maintenance & Support, globally Customer’s use of the Services and Liferay’s ordinary performance of the Services do not require the disclosure of any Personal Data to Liferay JP. If and to the extent the Customer provides Liferay’s support team with Personal Data (e. g. contained in unsanitized data dumps or screenshots), Liferay JP will be able to access such Personal Data provided by the Customer. |
The extent, categories, and types of Personal Data that the Customer submits to Liferay’s Support Team is fully controlled and determined by the Customer. Otherwise, business contact data of Customers’ support contacts is used only for purposes of contract fulfillment on behalf of the Liferay entity acting as controller. |
Adequacy Decision |
Liferay, Inc., USA (Liferay US) 1400 Montefino Ave Diamond Bar, CA 91765 Privacy Office, [email protected] |
Diamond Bar, California, and Hamilton, Ohio, U. S. |
Maintenance & Support for NA & APAC Customers (except Japan) only. Customer’s use of the Services and Liferay’s ordinary performance of the Services do not require the disclosure of any Personal Data to Liferay US. If and to the extent the Customer provides Liferay’s support team with Personal Data (e. g. contained in unsanitized data dumps or screenshots), Liferay US will be able to access such Personal Data provided by the Customer located in NA and APAC (except Japan). Globally, if and to the extent, a Customer chooses to purchase, activate and use Dynatrace services. Dynatrace provides additional performance monitoring services, the services are provided on behalf of Liferay, Inc. by Dynatrace LLC, USA (optional) (Dynatrace) 1601 Trapelo Road, Suite 116, Waltham, MA 02451, USA [email protected] Dynatrace utilizes certain sub-processors as identified here. Detailed information regarding retention terms can be found here. |
The extent, categories, and types of Personal Data that the Customer submits to Liferay’s Support Team is fully controlled and determined by the Customer. Otherwise, business contact data of Customers’ support contacts is used only for purposes of contract fulfillment on behalf of the Liferay entity acting as controller. Dynatrace service merely reports on metrics like memory, traffic, CPU, etc. While it also provides for certain logging capabilities which might involve Personal Data, it provides for smart obfuscation and Liferay applies it in accordance with Dynatrace instructions per default. Detailed information regarding Personal Data captured by Dynatrace can be found here. |
n/a For Dynatrace: Standard Contractual Clauses |
Liferay India Pvt. Ltd., India (Liferay IN) #147, 1st floor, Green Glen Layout, Sobha City Outer ring road, Bellandur Bangalore - 560103 India Privacy Office, [email protected] |
Bellandur, India |
Maintenance & Support for APAC Customers only (except Japan) and where explicitly requested by a NA Customer. Customer’s use of the Services and Liferay’s ordinary performance of the Services do not require the disclosure of any Personal Data to Liferay IN. If and to the extent the Customer provides Liferay’s support team with Personal Data (e. g. contained in unsanitized data dumps or screenshots), Liferay IN will be able to access such Personal Data provided by the Customer located in APAC (except Japan), and where explicitly requested by a NA Customer. |
The extent, categories, and types of Personal Data that the Customer submits to Liferay’s Support Team is fully controlled and determined by the Customer. Otherwise, business contact data of Customers’ support contacts is used only for purposes of contract fulfillment on behalf of the Liferay entity acting as controller. |
n/a |
Google Cloud EMEA Ltd. (Google IE) 70 Sir John Rogersons Quay Dublin , Ireland, 2 Contact Details: https://support.google.com/cloud/contact/dpo |
Dublin, Ireland |
Google IE is the hosting provider. Hosting location of the data depends on the region that is chosen by the customer (according to setting in the admin console). Google utilizes certain subprocessors as identified at: https://cloud.google.com/terms/subprocessors. Liferay IE will remove Customer data from the Services upon expiration of a 30 day period after expiration of Customer’s subscription. |
The extent, categories, and types of Personal Data that the Customer submits to the Services is fully controlled and determined by the Customer and may vary depending on Customer’s individual use of the Services. |
n/a, EEA |
Liferay Dalian Software Co. Ltd. (Liferay China) 537 Huangpu Road Taide Building, 1005 High-Tech Zone, Dalian Liaoning, 116023 Privacy Office, [email protected] |
|
Maintenance & Support for APAC Customers only (except Japan) and where explicitly requested by a NA Customer. Customer’s use of the Services and Liferay’s ordinary performance of the Services do not require the disclosure of any Personal Data to Liferay China. If and to the extent the Customer provides Liferay’s support team with Personal Data (e. g. contained in unsanitized data dumps or screenshots), Liferay China will be able to access such Personal Data provided by the Customer located in APAC (except Japan), and where explicitly requested by a NA Customer. |
The extent, categories, and types of Personal Data that the Customer submits to Liferay’s Support Team is fully controlled and determined by the Customer. Otherwise, business contact data of Customers’ support contacts is used only for purposes of contract fulfillment on behalf of the Liferay entity acting as controller. |
n/a |