This list contains every external service provider that may access personal data in the operation of the Vomi Board application. Each is contractually bound by the same data protection obligations as Vomi (Annex 1, Section E of the Terms of Use).
| Sub-processor | Service | Data | Processing location |
|---|---|---|---|
| VOMI d.o.o., OIB 36946449172 | Technical operator of the Application, development, hosting and maintenance (only where the Contracting Company is Vomi Consulting d.o.o.) | All categories of Client Data | Republic of Croatia |
| Amazon Web Services EMEA SARL | Application hosting, databases, document storage and backups | All categories of Client Data (encrypted) | EU — Frankfurt, Germany (eu-central-1) |
| Vobis d.o.o., Jankovačka ulica 9, Osijek, OIB 78442645441 | Delivery of e-mails and notifications from the Application | Name, e-mail address, notification content | Republic of Croatia |
| Google Ireland Ltd. (Firebase Cloud Messaging) | Push notifications to mobile and web clients | Device identifier (token), notification text without employee personal data | EU / USA (EU-US Data Privacy Framework, standard contractual clauses) |
| Sentry (instalacija na vlastitom poslužitelju OG Consultancy Servicesa) | Error and stability monitoring of the Application | Technical error data, user account identifier, IP address (truncated) | EU |
| OG Consultancy Services d.o.o. | Development and technical support of the Application | Access only when needed and logged | Republic of Croatia |
Changes to the list
We will notify clients of any intended addition or replacement of a sub-processor at least 15 days in advance, through the Application or by e-mail. Within that period the client may object on reasonable grounds, as set out in Annex 1, Section E.3 of the Terms of Use.