PinMeTo - Sub-processors

PinMeTo sub-processors

This page is the canonical list of sub-processors (the "Agreed List") referred to in clause 7.7(a) of PinMeTo's Data Processing Agreement, for customers whose agreement is with PinMeTo AB or PinMeTo Polska sp. z o.o. We give at least 30 days' written notice before adding or replacing a sub-processor, so you have time to object before the change takes effect. Questions and objections: privacy@pinmeto.com.

Where your data is processed

The personal data covered by the Data Processing Agreement is stored and processed in the European Economic Area (EEA), and none of it is transferred to the United States. If a sub-processor's personnel outside the EEA can access personal data, we name the transfer in the tables below together with the safeguard it relies on, such as the EU Standard Contractual Clauses. No sub-processor on this page currently relies on such a transfer.

PinMeTo group companies

The PinMeTo Places platform is operated, developed, and supported by PinMeTo's group companies. The PinMeTo company named in your agreement (your "Contracting Entity") is your data processor. Where the other group company processes personal data in delivering the service, it acts as a sub-processor of your Contracting Entity, under an intra-group data processing agreement imposing in substance the same data protection obligations. All processing of personal data under the Data Processing Agreement by PinMeTo group companies takes place within the EEA.

Entity	Address	Processing	Personnel locations	Role
PinMeTo AB (Corporate Identity No. 556941-6893)	Adelgatan 9, 211 22 Malmö, Sweden	Operation and development of the PinMeTo Places platform, onboarding, and customer support	Sweden, Finland	Sub-processor only where PinMeTo Polska sp. z o.o. is your Contracting Entity
PinMeTo Polska sp. z o.o. (NIP 5851489498)	Aleja Grunwaldzka 163, 80-258 Gdańsk, Poland	Onboarding and customer support	Poland	Sub-processor only where PinMeTo AB is your Contracting Entity

Personal data processed: the platform user and end-user data described in the Data Processing Agreement (names, email addresses, phone numbers, and the content of posts, ratings, reviews, comments, and direct messages handled in delivering and supporting the platform).

Third-party sub-processors

Third-party sub-processors are contracted by PinMeTo AB. Where PinMeTo Polska sp. z o.o. is your Contracting Entity, they act as its sub-processors through PinMeTo AB under the intra-group data processing agreement.

Sub-processor	Processing	Address	Data centers	Personal data processed	Transfers outside the EEA
Amazon Web Services EMEA SARL	Hosting and storage for the PinMeTo Places platform	38 Avenue John F. Kennedy, L-1855 Luxembourg	Ireland	All personal data described in the Data Processing Agreement (hosted platform data), including platform-user account data and IP addresses	None
Planhat AB (Corporate Identity No. 556991-6421)	Customer success services and analytics	Sveavägen 17, 111 57 Stockholm, Sweden	European Union	Names, phone numbers, and email addresses of platform users, and the content of communications with platform users handled in customer success work (emails, meeting notes, and logged support interactions)	None
Sendinblue SAS, trading as Brevo (RCS Paris 498 019 298)	Email services: invites, password resets, notifications, newsletters	9-17, rue Salneuve, 75017 Paris, France	France, Belgium	Names and email addresses of platform users, and the usage data generated when an email is sent and opened: IP address, timestamp, open and click logs, and the content of the message	None
Crisp IM SAS (SIREN 833085806)	Support chat for platform users of the PinMeTo Places platform	2 Boulevard de Launay, 44100 Nantes, France	Netherlands and Germany (DigitalOcean), Ireland (encrypted backups, AWS), France (Scaleway)	Names, email addresses, and support-chat content of platform users, and the technical data of a chat session: IP address, connection timestamps, user agent, and session cookies	None

Optional AI services and sub-processors

These services are optional and you can turn them off at any time. Depending on your agreement, they are either included from the start or activated by you (see the Data Processing Agreement, Part B). A new optional service is never switched on for existing customers: it starts processing your data only if you activate it. No customer data is used to train the models. The models run inside Amazon Web Services' own environment: the companies that developed them receive none of your data and are not sub-processors. Amazon Bedrock does not retain the text sent to it or the text it generates.

AWS service	Sub-processor	Processing	Data centers	Personal data processed	Transfers outside the EEA
Amazon Comprehend	Amazon Web Services EMEA SARL	Language detection and sentiment scoring of ratings, reviews, and comments	Ireland	End-user names and content of ratings, reviews, and comments	None
Amazon Bedrock	Amazon Web Services EMEA SARL	Text generation and analysis on your content and location data: AI writing assistance when creating or editing posts, suggested texts and templates when replying to reviews and direct messages, qualitative insights on reviews, spam detection, and the in-product assistant that answers platform users' questions about their locations	EU only: Germany (Frankfurt), Ireland, Sweden (Stockholm), France (Paris), Italy (Milan), and Spain. Requests are sent from Frankfurt and Ireland and processed in one of those six regions	End-user names and content of posts (including drafts), ratings, reviews, comments, and direct messages; and, for the in-product assistant, the questions platform users type into it together with the location and account data retrieved to answer them (which may include platform-user names and location contact details)	None

Updated on: 3 September 2026

Change history

Date	Change
3 September 2026	Added PinMeTo group companies section; identified PinMeTo Polska sp. z o.o. by its NIP instead of its KRS number; named Planhat as the legal entity Planhat AB with its corporate identity number, and stated its office address (Sveavägen 17, Stockholm) in place of the PO box; expanded the Planhat data description to include the content of communications with platform users handled in customer success work; clarified processing descriptions, contracting entities, and data allocation; corrected "Amazon Web Service, Inc." to the contracting legal entity and its registered address (Amazon Web Services EMEA SARL, Luxembourg); corrected the Amazon Bedrock processing location (Paris to the six EU regions the EU inference profile can process in: Frankfurt, Ireland, Stockholm, Paris, Milan, and Spain); expanded the Amazon Bedrock description to cover all current AI features (writing assistance, suggested texts and templates, qualitative review insights, spam detection, and the in-product assistant) and added the platform-user data the assistant processes; corrected the Planhat processing location from Ireland to the European Union; narrowed the Amazon Comprehend description to language detection and sentiment scoring, to distinguish it from the generated review insights that now run on Amazon Bedrock; replaced the per-sub-processor "No EU-US transfer" statement with the wider "Transfers outside the EEA" column and added a "Where your data is processed" section stating the EEA rule and how any transfer outside the EEA is disclosed; stated that model developers are not sub-processors and that Bedrock does not retain inputs or outputs; renamed the AI section "Optional AI services and sub-processors" and restructured its table to name Amazon Comprehend and Amazon Bedrock as AWS services with Amazon Web Services EMEA SARL as the sub-processor engaged, since the services are not legal entities.
19 November 2025	Previous version. https://help.pinmeto.com/en/article/pinmeto-previously-sub-processors-versions-y4oz2m/

Date

Change

3 September 2026

Added PinMeTo group companies section; identified PinMeTo Polska sp. z o.o. by its NIP instead of its KRS number; named Planhat as the legal entity Planhat AB with its corporate identity number, and stated its office address (Sveavägen 17, Stockholm) in place of the PO box; expanded the Planhat data description to include the content of communications with platform users handled in customer success work; clarified processing descriptions, contracting entities, and data allocation; corrected "Amazon Web Service, Inc." to the contracting legal entity and its registered address (Amazon Web Services EMEA SARL, Luxembourg); corrected the Amazon Bedrock processing location (Paris to the six EU regions the EU inference profile can process in: Frankfurt, Ireland, Stockholm, Paris, Milan, and Spain); expanded the Amazon Bedrock description to cover all current AI features (writing assistance, suggested texts and templates, qualitative review insights, spam detection, and the in-product assistant) and added the platform-user data the assistant processes; corrected the Planhat processing location from Ireland to the European Union; narrowed the Amazon Comprehend description to language detection and sentiment scoring, to distinguish it from the generated review insights that now run on Amazon Bedrock; replaced the per-sub-processor "No EU-US transfer" statement with the wider "Transfers outside the EEA" column and added a "Where your data is processed" section stating the EEA rule and how any transfer outside the EEA is disclosed; stated that model developers are not sub-processors and that Bedrock does not retain inputs or outputs; renamed the AI section "Optional AI services and sub-processors" and restructured its table to name Amazon Comprehend and Amazon Bedrock as AWS services with Amazon Web Services EMEA SARL as the sub-processor engaged, since the services are not legal entities.

19 November 2025

Previous version. https://help.pinmeto.com/en/article/pinmeto-previously-sub-processors-versions-y4oz2m/

Updated on: 03/09/2026

Was this article helpful?

Thank you!