Data Processors
NEXUS / MEDITEX GmbH engages the processors listed below to provide, operate and support MedITEX products and services. Each of them processes personal data only on our documented instructions and under a data processing agreement pursuant to Art. 28 GDPR.
Processor
Nature of processing
Purpose
Categories of data
Data subjects
Location / Safeguard
Processor
Freshworks GmbH
Neue Grünstraße 17, 10179 Berlin, Germany
Nature of processing
Operation of the support ticketing system (Freshdesk); storage of tickets, attachments and communication
Purpose
Support and maintenance ticketing for MedITEX IVF
Categories of data
Contact and identity data, case content, and health data where applicable
Data subjects
Patients, clinic and support staff
Location / Safeguard
EU data region; where group access to the USA applies: SCC (2021/914) / DPF
Processor
Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
Nature of processing
Provision and operation of server and cloud infrastructure
Purpose
Hosting of the systems used for support and operations
Categories of data
All data stored as part of the hosting
Data subjects
Patients, clinic and support staff
Location / Safeguard
Germany / EU — no third-country transfer
Processor
NEXUS AG
78166 Donaueschingen, Germany
Nature of processing
Group-internal provision and administration of IT services (incl. Jira, Confluence); license procurement
Purpose
Handling of support and development cases; knowledge documentation
Categories of data
Identity and contact data, case content, and health data where applicable
Data subjects
Patients, clinic and support staff
Location / Safeguard
Germany / EU (group)
Processor
Atlassian Pty Ltd / Atlassian B.V.
Nature of processing
Issue and bug tracking (Jira); knowledge base (Confluence)
Purpose
Handling of support and development cases; documentation
Categories of data
Identity and contact data, case and documentation content, and health data where applicable
Data subjects
Clinic and support staff, and patients where applicable
Location / Safeguard
EU cloud hosting; SCC (2021/914)
Processor
Asana, Inc.
633 Folsom Street, San Francisco, CA 94107, USA
Nature of processing
Task and project management
Purpose
Management of internal support and project tasks
Categories of data
Identity and contact data, case content
Data subjects
Clinic and support staff
Location / Safeguard
EU data region; USA: SCC (2021/914) / DPF
Processor
Microsoft Ireland Operations Ltd
One Microsoft Place, South County Business Park, Dublin 18, Ireland
Nature of processing
Microsoft 365 (email, documents, Teams)
Purpose
Business communication and document processing in the context of support and contract
Categories of data
Contact and identity data, communication content, and health data in attachments where applicable
Data subjects
Patients, clinic and support staff
Location / Safeguard
EU data boundary; access from USA: SCC / DPF
Processor
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
Nature of processing
Google Workspace (Drive, Gmail) — used only where necessary
Purpose
File storage and email communication in individual cases
Categories of data
Contact and identity data, transmitted documents
Data subjects
Clinic and support staff, and patients where applicable
Location / Safeguard
EU; access from USA: SCC / DPF
Processor
Anthropic PBC
548 Market Street, San Francisco, CA 94104, USA
Nature of processing
AI-assisted processing of submitted ticket and text content
Purpose
Classification, draft responses and analyses in support
Categories of data
Support content and metadata; pseudonymized health data where applicable
Data subjects
Patients, clinic and support staff
Location / Safeguard
USA — SCC (2021/914) and/or DPF; TIA; no training on customer data
Processor
OpenAI Ireland Ltd
Dublin, Ireland (or OpenAI, L.L.C., San Francisco, USA)
Nature of processing
AI-assisted processing of submitted ticket and text content
Purpose
Classification, draft responses and analyses in support
Categories of data
Support content and metadata; pseudonymized health data where applicable
Data subjects
Patients, clinic and support staff
Location / Safeguard
EU / USA — SCC (2021/914) and/or DPF; TIA; no training on customer data
