Subprocessors
Under the GDPR, a sub-processor is any business or contractor customer data that may pass through as a side effect of using Willo's service. This definition is very broad and includes things some might simply consider "hardware", like cloud infrastructure.
Where Customer Personal Data is transferred from the EEA/UK to a third country, Willo relies on (i) the EU–US Data Privacy Framework (DPF) and, where applicable, the UK Extension, and/or (ii) the EU Standard Contractual Clauses (2021/914) (with the UK Addendum for UK data). If a certification lapses or no longer covers the processing, Willo automatically relies on the SCCs + UK Addendum without reducing the level of protection.
We use partners for some business processes that are not core to our expertise but are critical to our customers and candidates having a quality experience.