Processors And Service Providers
Last updated: 15 January 2024
Related page: Privacy Policy.
This page provides a broad list of service providers and service families that Srvey Group OÜ may use for PollPlaz depending on the project, technical architecture, client requirements, security needs, communication channel or specific workflow.
1. Extended List
| Service provider / service family | Typical role | Possible data categories | Location or processing note |
|---|---|---|---|
| Zone Media OÜ | Web hosting, domains, email, server and website infrastructure | Website logs, technical data, possible website content, service administration data | Estonia; mainly used for local hosting and service reliability |
| Amazon Web Services (AWS) | Cloud infrastructure, hosting, data storage, logs, backup, processing | Project data, technical logs, application data, files, backups, communication and system data | May include processing inside and outside the EEA depending on service and selected region |
| Google / Google Cloud / Google Workspace | Cloud, email, file management, document collaboration, analytics, advertising, captcha, measurement | Email, documents, files, logs, cookies, usage metrics, campaign data, technical identifiers | May include Google services such as Analytics, Ads, Tag Manager, reCAPTCHA, Workspace and Cloud |
| Meta | Advertising, retargeting, conversion measurement, campaign audiences | Cookies, advertising identifiers, campaign metrics, website behaviour events | May include Meta Business Tools such as Pixel, audiences and ad management |
| Cloudflare | DNS, CDN, WAF, security filters, bot protection, traffic routing, Turnstile | IP addresses, request logs, security data, cookies, technical identifiers | May process data as part of global security and network services |
| Microsoft Azure | Cloud infrastructure, hosting, storage, compute resources, logging | Application data, technical logs, files, backups, service administration data | May be used in the technical layer of applications or client projects |
| Microsoft 365 | Work email, file management, documents, collaboration tools, office work | Email, attachments, documents, contacts, calendar and collaboration data | May include Outlook, SharePoint, OneDrive, Teams and related services |
| Infomaniak | Hosting, server resources, data hosting, technical web infrastructure | Website content, logs, technical data, possible application data | Switzerland / Europe-focused infrastructure, depending on service |
| Kood Kolm OÜ | Survey software, SaaS, technical delivery, development, hosting and system implementation | Sample data, survey processing data, technical logs, administration and project materials | Estonia; may participate in platform and project-level technical processing |
| Opinion Eesti OÜ | Survey operations, panel support, project support, technical delivery and research workflow support | Sample data, survey processing data, panel support data, technical logs, administration and project materials | Estonia; may participate in PollPlaz panel, platform and project-level operational processing |
| Twilio SendGrid | Outgoing email, transactional emails, system notifications, invitation delivery | Email addresses, email content, sending logs, delivery statistics | May be used for panel and project communication |
| Twilio | SMS, phone-based notifications, communication channels | Phone numbers, message content, sending logs, communication metadata | May be used for invitations, confirmations or other notifications |
| OpenAI | Text processing, analysis, automation, content support and workflow support using AI | Text input, task descriptions, analysis material, technical metadata | We use only models and settings where inputs are not used to train on our data or inputs |
| Anthropic | Text-based AI processing, analysis, automated drafting and content support | Text input, workflow data, analysis or drafting metadata | We use only models and settings where inputs are not used to train on our data or inputs |
| OpenRouter | AI routing layer, model routing, API mediation | Text input, API requests, technical metadata | Used as a routing layer between AI services; training restrictions must be ensured at the model or service level |
| Elisa Eesti AS | Connectivity, mobile services, communication services, reliability | Communication and connectivity data, technical metadata | Estonia; may support company communication infrastructure or project-specific communication |
| Telia Eesti AS | Data connection, connectivity, network infrastructure, reliability | Communication and connectivity data, technical metadata | Estonia; may be used in company or project technical network layers |
| Tele2 Eesti AS | Connectivity, mobile services, communication services, reliability | Communication and connectivity data, technical metadata | Estonia; may be used to support communication channels and technical availability |
| Google Analytics and related measurement tools | Analytics, understanding usage patterns, service improvement | Cookies, device and browser data, approximate IP-based location, usage events | We may also use similar measurement and reporting tools in the same functional class |
| Google Ads, Meta Ads and other advertising platforms | Campaign management, audiences, conversion measurement, retargeting | Cookies, advertising identifiers, website behaviour events, campaign metrics | Use depends on campaign; may include the platform's own subprocessors |
| Bot protection, anti-fraud and security tools | Spam filtering, bot traffic prevention, duplicate response and abuse reduction | IP addresses, device identifiers, request metadata, behavioural security signals | May include Cloudflare, Google and other services in the same functional class |
| Additional email, collaboration and file-sharing services | Correspondence, document sharing, project collaboration, file transfer | Correspondence, attachments, contacts, work files, project materials | May include sub-services from Google and Microsoft service families |
2. General Principles For Using Service Providers
We use service providers according to the needs of the specific workflow or project.
Where needed, we separate identifying data from the analysis phase and restrict access by role.
For international processing, we prefer service providers that confirm GDPR compliance and use suitable safeguards.
For AI services, we use only models or settings where inputs are not used to train on our data or inputs.
Identifiable data is provided to clients only on the basis of separate, clear consent or another valid legal basis.