Introduction

In offering our solutions and products, ORTEC processes various categories of data, including customer data and personal data. In those cases where ORTEC hires a supplier to perform work that may require the supplier to use or process such data in order to provide some aspects of the solution or product, they are identified as a “Sub-processor” (following GDPR terminology). These Sub-processors are disclosed below. When hiring suppliers, ORTEC documents all the information security requirements for mitigating the risks associated with suppliers’ access to the organization’s assets - The personal data to be processed by the Sub-processors as well as formal procedures are well documented in Data Processing Agreements ORTEC has with these Sub-processors.

This page identifies the Sub-processors authorized to access both (i) customer data and the personal data contained within it, as well as (ii) personal data other than that contained in customer data. Any such Sub-processors will be permitted to process customer data or personal data only to deliver the services ORTEC has retained them to provide, and they are prohibited from using such data for any other purpose.

The Sub-processors are grouped by type and ORTEC solution/product.

Sub-processors - General

The following Sub-processors are used in all solutions and products ORTEC offers. The Sub-processor(s) identified here may process, store, or otherwise access customer data or personal data in the course of helping us to provide that solution or product.

Sub-processor

Location

Purpose

Safeguard mechanism *

SmartDC

Rotterdam, the Netherlands

Housing of ORTEC hardware used for internal IT.
No customer hosting is located at SmartDC.

A

Auth0

Bellevue, WA, USA

General :
Authentication services used in ORTEC products


Auth0 Tenant Location :

Depending on the location of the customer ORTEC utilizes a dedicated Auth0 tenant located in the region closest to the customer. This tenant will hold all the data and perform all processes needed to provide the authentication services for the ORTEC products.

The following regions are used to host Auth0 tenants :

Australia

Europe

United States

A, B, C

Cloudflare

San Francisco, USA

Optimize the connection and logon process for remote workers.

To optimize the connections to the ORTEC application, ORTEC uses the services of Cloudflare. Cloudflare services are designed to establish a secure and fast connection to the ORTEC application by using local access servers based on the remote user's location.
Cloudflare only processes data for security/firewall related purposes. It does not store any data related to the ORTEC application. The IP addresses of visitors to ORTEC application are logged to Cloudflare's data center in the EU for a limited period of time. They are not combined with any other personally identifiable information, such as the name or email address of an individual accessing ORTEC application.

Website:
www.cloudflare.com

A, B, C

Bird

Amsterdam, the Netherlands

Communication to employees, contractors or any other individual that is part of the services we offer through the ORTEC solution.

Bird is an AI-powered Customer Relationship Management (CRM) Platform for Customer Service, used by ORTEC to sent operational focused SMS-messages related to the ORTEC solution.
Typically these SMS-messages will contain operational related data such as but not limited to the number of the dock truckdrivers need to use to unload their truck.
For this service the mobile phone number of the recipient of the SMS-message is stored and used. The SMS messages do not contain any other personal data.

Website:
www.bird.com

A

Zendesk

San Francisco, USA

Zensdesk is a ticketing and supportcenter platform to increase our customer support and experience. It allows for 24/7 contact, overview of tickets and their status and creation of new requests to report an incident, service request or change request. 

Access is restricted to registered users and users only have access to their own customer environment and tickets. 

Location of processing: 
Ireland, EU (AWS Hosting)

Website: 
www.zendesk.com

A, B

SweetHawk

Melbourne, Australia

Plugin to Zendesk. 

SweetHawk's Zendesk apps are used to build workflow & automation processes to extend the functionality of Zendesk. Sweethawk assists to capture, track, and manage change requests initiated by customers. This includes features for submitting change requests, documenting change details, assessing impacts, and testing. As well as obtaining necessary customer approvals before implementing changes in Production environments, and acceptance after delivery. 

Location of processing: 
California, USA (AWS Hosting)

Website: 
www.sweethawk.com

A, B

Unbabel

San Francisco, USA

Plugin to Zendesk. 

Translation of specific input fields. Attachments like screenshots won't be processed and are not accessible for this plugin. Translations are only activated after a manual action of the support employee and will only translate specific input fields of Zendesk to English and back to enable support in local languages e.g. French, Dutch, German or Portuguese. 

When Unbabel's system detects personally identifiably information (PII), it is automatically removed from the information field and stored in an encrypted vault. It is replaced by a token in the document that indicates the type of stored information removed. After translation, the anonymized information is automatically reinserted into the translated text into Zendesk. 

Location of processing: 
California, USA (AWS Hosting)

Website: 
www.unbabel.com

A, B

*) A = Data Processing Agreement       B = EU Standard Contractual Clauses       C = Data Privacy Framework

Sub-processors - Hosting

Sub-processor

Location

Purpose

Safeguard mechanism *

Microsoft Azure

Dublin, Ireland

General :
Hosting Platform :
Virtual servers used for customer hosting of ORTEC products/solutions.

Customers based in the EEA are hosted by either Microsoft Azure or Ekco. Details are included in the agreed upon Data Processing Agreement (DPA).

Azure Tenant name/location :
Per region ORTEC uses 2 tenant locations. One tenant will act as the production site and the other tenant will function as the failover site. Which tenants are used depends on the location of the customer, unless determined differently in the DPA.

EEA or Switzerland based customers
West Europe (the Netherlands)
North Europe (Ireland)

UK based customers
UK South
UK West

US based customers
East US
West US

Latin American based customers
Brazil South
South Central US

Australia and New Zealand based customers
Australia SouthEast
Australia East

A, B

Ekco

Rotterdam/Amsterdam, the Netherlands

General :
Hosting Platform :
Virtual servers used for customer hosting of ORTEC products/solutions.

Customers based in the EEA are hosted by either Microsoft Azure or Ekco. Details are included in the agreed upon Data Processing Agreement (DPA).

Ecko tenant location :

ORTEC uses multiple tenant locations. Per customer one tenant will act as the production site and the other tenant will function as the fail-over site. Which tenants are used depends on the location of the customer.

EEA based customers
West Europe (the Netherlands)
North Europe (Ireland)

A

Ekco

Rotterdam/Amsterdam, the Netherlands

SMTP services

These services are used to provision the sending of reports  from the hosted ORTEC application via email.

A

Ekco

Rotterdam/Amsterdam, the Netherlands

Single Sign On (SSO) services

These services provide an additional layer of authentication for the hosted ORTEC applications.
These services are not mandatory but can be activated upon request of the customer.

A

Trend Micro (EMEA) Limited

Cork, Ireland

Cyber Security Operations Center

To increase the Cyber Security of hosted ORTEC products, Trend Micro is contracted to provide SOC services for ORTEC.
Trend Micro analyzes Operating systems and Network log information to detect and respond to threads.

Trend Micro only processes this data for security related purposes. Trend Micro does not store any data related to the ORTEC applications or solutions, and will not have access to the data contained within the ORTEC applications or solutions. 
In order to provide the SOC services certain characteristics of the connections made to the ORTEC hosting environment are analyses and stored for a limited time. These characteristics could include, but are not limited to IP address, device OS, originating country, URLs, used protocals and ports,  and where applicable and depending on the configuration of the ORTEC hosting environment email address end username.
This data is stored for 180 days and then deleted automatically.
 
 The SOC services of Trend Micro and the storage of the data are located at data centers in Frankfurt, Germany.
 

For more information please see the Trend Micro website :
https://www.trendmicro.com/en_nl/business/services/service-one.html

A, B

*) A = Data Processing Agreement   B = EU Standard Contractual Clauses   C = Data Privacy Framework

Specific ORTEC Products

Product / Solution

Sub-processor

Location

Purpose

Safeguard mechanism *

LogiqCare Science Research

Sendgrid

Denver (Co), USA

Automated communication via email

A, B

LogiqCare Treatment Services

Sendgrid

Denver (Co), USA

Automated communication via email

A, B

ORTEC 4 Communications

Leaseweb BV

Amsterdam, the Netherlands

Hosting provider

A

 

Digital Ocean

Amsterdam, the Netherlands

Hosting Provider

A

 

Amazon S3

Amsterdam, the Netherlands

Hosting Provider

A

ORTEC Big Data Portal

Sendgrid

Denver (Co), USA

Automated communication via email

A, B

ORTEC Carrier Portal

Sendgrid

Denver (Co), USA

Automated communication via email

A, B

ORTEC Cloud Services

HERE Technologies

Eindhoven, the Netherlands

Mapping technologies provider

A

*) A = Data Processing Agreement      B = EU Standard Contractual Clauses    C = Data Privacy Framework

ORTEC controlled subsidiaries

Subsidiary

Location

ORTEC B.V.

the Netherlands

Rhythm BV

the Netherlands

ORTEC Industrial Automation BV

the Netherlands

ORTEC Logiqcare BV

the Netherlands

ORTEC GmbH

Germany

ORTEC Belgium BvbA

Belgium

ORTEC SAS

France

ORTEC Int. USA Inc.

United States of America

ORTEC Nordic A/S

Denmark

ORTEC UK Ltd.

United Kingdom

ORTEC CEE

Romania

ORTEC Australia & New Zealand Pty Limited

Australia

ORTEC LATAM

Brazil

ORTEC Italy

Italy

ORTEC SP. Z O.O.

Poland

ORTEC Optimization Technology BV

the Netherlands

ORTEC Heidelberg GmbH

Germany

ORTEC International BV

the Netherlands

ORTEC Greece

Greece

Changes

The ORTEC Sub processor page (ortec.com/sub-processor) discloses all sub-processors that are security cleared and authorized to process customer data or personal data related to ORTEC solutions or products. ORTEC publishes the names of any new sub processors or any proposed changes  on and via this page a minimum of 30 days in advance of the sub-processor's authorization to perform services that may involve secure access to customer data or of potential access to personal data related to ORTEC solutions or products. This advance notice enables customers to investigate the sub-processor, perform a risk assessment, and ask questions of ORTEC about the sub processing engagement. If a customer does not approve of a new sub-processor, the customer and ORTEC will enter into consultation to find a solution, as stipulated in the DPA.

Latest changes

2025-05-27 - 2 changes - supplemented the Sub-processors - General table with sub-processors ZenDesk, Sweethawk and Unbabel, fixed minor errors

2025-04-17 - 3 changes - added clarification to the sub-processors Microsoft Azure and Ekco, changed the tenant location of Ekco's Hosting Platform from Germany to Ireland, fixed minor errors

2025-04-14 - Implemented the proposed changes of March 13th 2025

2025-03-13 - Proposed 3 new subprocessor ZenDesk, Sweethawk and Unbabel

2024-09-23 - Implemented the proposed changes of August 8th 2024

2024-08-21 - Proposed new sub-processor Trend Micro

2024-08-12 - implemented 2 proposed changes of July 10th, 2024

2024-07-10 - 2 changes - new sub-processor Bird and a notification of the ORTEC Intra Group Data Transfer agreement

2023-03-14 - Effectuated proposed changes of January 30th 2023

2023-01-30 - Proposed a change to add new ORTEC Controlled subsidiary ORTEC Greece

2023-01-30 - Removed 2 ORTEC controlled subsidiaries - ORTEC Sports & IQ-TEC. Subsidaries have been sold.

2022-09-26 - Effectuated previous proposed changes of August 19th 2022

2022-08-19- Proposed a change to the use of sub-processor Cloudflare

2022-03-28 - Effectuated previous proposed changes of February 14th 2022

2022-02-14 - Proposed a textual change to the explanation text of the 'ORTEC Controlled Sunsidiaries' section of the sub-processor page

2022-02-14 - Effectuated previous proposed changes of January 6th 2022

2022-01-06 - Proposed a change to the use of sub-processor Auth0

2022-01-06 - Effectuated previous proposed changes to the sub-processors used in ORTECs hosting activities

2021-12-03 - Proposed a change to the sub-processors used in ORTECs hosting activities

2021-07-21 - Added ORTEC product 'ORTEC Carrier Portal' to Specific ORTEC Products-section

2021-04-26 - Added sub-processor Sendgrid to Product ORTEC Big Data Portal

2020-12-01 - General Textual modifications

2020-06-01 - Due to a name change the sub-processor Luna was renamed to Ekco.

Publication date

This Sub-processor page was published on May 27th, 2025 and replaces all prior publications.

For questions please contact your ORTEC account manager or contact the the Legal & Compliance department of ORTEC.
Alternatively you can contact the ORTEC Data Protection Officer via the contact forms on the website.

Notification Subscription

Any changes to the sub-processors used by ORTEC in relation to ORTEC's offerings are published via this ORTEC Subprocessor page.
If you would like to receive notifications of change to this page please provide your contact details using the form below. You will be notified via email of any change to this page. All notifications are in English. Should you at some point wish not to receive these notifications anymore, you can use the "unsubscribe" link at the bottom of the notification email.

Subscribe

* indicates required