Information on data processors pursuant to Article 28 of the GDPR
Last updated: 2026-03-25
Enquiries to: data-security@alfamedia.com
Cybersecurity incidents in the last 12 months:
None
Significant incidents in the last 12 months:
None
Planned changes:
None
External data processors used in alfa software or for the development of alfa software:
| Name | Storage location | Purpose of processing | Personal data | Software products |
|---|---|---|---|---|
| Informatikbüro Plass | DE | Software development | Contact details of contact persons, tasks | Cross-product |
| kauf.cc Consulting | DE | External data protection officer, accountancy, maintenance of internal systems | Contact details of contact persons, tasks, personnel data | Not product-related |
| IMT-Systems GmbH | DE | Hosting provider supplying the hosting infrastructure in Digital Realty’s data centres for alfa Media Partner GmbH | Internal contact persons at alfa and their visits to data centres | Cross-product |
| Aptoma AS | NO | Provider of layout software for the editorial preparation of editions. Aptoma AS employs its own data processors. | Users and the data contained in the texts to be processed | DrEdition, DrPublish |
| OpenAI Inc. | Worldwide | Provider of artificial intelligence (large language model). Used when AI functionalities are enabled. OpenAI employs its own data processors. | Data from the texts/articles to be analysed by AI. According to the Enterprise Privacy statement (https://openai.com/enterprise-privacy/), OpenAI does not use business customers’ data to train its AI models — neither the texts transmitted to OpenAI nor the texts returned by OpenAI. | AdSuite, ContentLine |
| Mistral AI SAS | FR | Provider of artificial intelligence (large language model). Used when AI functionalities are enabled. Mistral employs its own data processors. | Data from the texts/articles to be analysed by AI. According to the Legal Terms and Conditions (https://mistral.ai/terms/), Mistral AI does not use business customers’ data to train its models. | ContentLine |
| Anthropic PBC | Worldwide | Provider of artificial intelligence (large language model). Used when AI functionalities are enabled. Anthropic employs its own data processors. | Data from the texts/articles to be analysed by AI. According to the Privacy Policy (https://www.anthropic.com/legal/privacy), Anthropic complies with the requirements of the EU General Data Protection Regulation. | ContentLine |
| Leonardo Interactive Pty Ltd | Worldwide | Provider of artificial intelligence (static image processing), now part of Canva. Used when AI functionalities are enabled and utilised. Leonardo.Ai employs its own data processors. | A minimal set of data is exchanged with Leonardo.Ai; no personal data is transferred. One exception: if the end user has their own images edited when designing an image for an advertisement, those images are uploaded to the servers of Leonardo.Ai or its data processors and processed there. | Stylo and other products using the Stylo editor |
Werkzeuge, die für die Arbeitsprozesse verwendet werden:
| Name | Storage location | Purpose of processing | Personal data |
|---|---|---|---|
| Microsoft 365 | EU | Collaboration platform: email, calendar, contacts, video conferencing, portal applications, office applications | Users, contact persons, appointments, tasks |
| HubSpot | EU | Platform for marketing, sales and customer relationship management | Users, contact persons, appointments, tasks, quotations and their follow-up |
| ZenDesk | EU | Platform for recording and tracking customer enquiries | Users, contact persons, tickets |
| ClickUp | Worldwide | Platform for internal project management | Users, contact persons, projects |
| Internal ERP system | DE | Application for quotation management, invoicing and accountancy | Users, customers and their account transactions, suppliers and their account transactions, projects |
| Internal payroll system | DE | Application for maintaining wage accounts and processing payroll | Users, employees and their account transactions, insurance carriers and other data relating to the payroll of the company’s own employees |
| Sentry | Worldwide | Real-time error tracking and application performance monitoring | No personal data |
| Various AI providers | Worldwide | AI assistance | Internal user management. Otherwise no personal data, or anonymised/pseudonymised data |
| Deepl | DE | Online translation service | No personal data, or anonymised/pseudonymised data |
| Figma | Worldwide | Platform for user interface prototyping | Internal user management. Otherwise no personal data, or anonymised/pseudonymised data |
| Adobe Creative Cloud | Worldwide | Development on the Adobe platform | Internal user management. Otherwise no personal data, or anonymised/pseudonymised data |
| Canva | Worldwide | Platform for design work | Internal user management. Otherwise no personal data, or anonymised/pseudonymised data |
| Docker | Worldwide | Open platform for application containerisation | Internal user management. Otherwise no personal data, or anonymised/pseudonymised data |