Subcontractor Data Processing
This page lists all subcontractors with whom Ur-Store Systems AG exchanges personal data in accordance with our data processing agreement.
A. Core Platform & Infrastructure
Google (Main Cloud Provider)
Company: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA).
Description: Hosting of the application infrastructure (YourStore Cloud Platform), databases, and application logic. Also provider of Google Workspace (Email/Drive).
Data Location:
- Core Data & Databases: Switzerland (Region: Zurich) & EU (Backup).
- Global Services: Authentication (Identity Platform) and Content Delivery (CDN) use globally distributed locations for performance and availability.
Data Categories: Encrypted production data, user authentication profiles (Identity Platform), system logs, database backups.
Legal Safeguard: Processing in EU/CH (Adequacy Decision) & EU-Standard Contractual Clauses (SCCs) for global services.
Link Privacy Info: Google Cloud Privacy
Twilio (SMS Gateway)
Company: Twilio Inc. (375 Beale Street, Suite 300, San Francisco, CA 94105, USA) and Twilio Ireland Ltd.
Description: Gateway for sending SMS messages, primarily used for alarm notifications.
Data Location: USA / Global.
Data Categories: Operator mobile phone numbers, content of SMS messages.
Legal Safeguard: EU-US Data Privacy Framework (DPF).
Link Privacy Info: Twilio Privacy
balenaCloud (Edge Infrastructure)
Company: Balena Ltd. (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom).
Description: Infrastructure and management for Edge Devices (IoT gateways) in the physical stores.
Data Location: United Kingdom / USA.
Data Categories: Device status logs, IP addresses, configuration data (no personal end-user data).
Legal Safeguard: UK Adequacy Decision / Standard Contractual Clauses (SCCs).
Link Privacy Info: Balena Privacy
Atlassian (Internal Collaboration)
Company: Atlassian Pty Ltd (Level 6, 341 George Street, Sydney NSW 2000, Australia).
Description: Internal tools for project management (Jira) and knowledge base (Confluence).
Data Location: Global (Data residency primarily in USA/EU).
Data Categories: Names and emails of internal staff and customer contact persons.
Legal Safeguard: Standard Contractual Clauses (SCCs).
Link Privacy Info: Atlassian Privacy
1Password (Security)
Company: AgileBits Inc. (4711 Yonge St, Suite 1206, Toronto, Ontario, M2N 6K8, Canada).
Description: Secure password management for internal staff access to systems.
Data Location: Canada / USA.
Data Categories: Encrypted credentials (passwords, API keys) for system maintenance.
Legal Safeguard: Adequacy Decision (Canada/EU Commercial Organizations).
Link Privacy Info: 1Password Privacy
B. Administrative Services (B2B Data)
Bexio (Accounting)
Company: bexio AG (Alte Jonastrasse 24, 8640 Rapperswil-Jona, Switzerland).
Description: Software for accounting, invoicing, and contact management.
Data Location: Switzerland.
Data Categories: B2B contact details (invoice recipients), contract data.
Legal Safeguard: Domestic Processing (Switzerland).
Link Privacy Info: Bexio Privacy
Zoho (CRM, Support, Newsletter)
Company: Zoho Corporation B.V. (Beneluxlaan 4B, 3527 HS Utrecht, The Netherlands).
Description: Customer Relationship Management (CRM), Customer Support Ticketing System, Newsletters.
Data Location: Netherlands (EU).
Data Categories: Lead and customer contact details, communication history, support ticket contents, newsletter subscriptions.
Legal Safeguard: Processing in EU/EAA.
Link Privacy Info: Zoho Privacy
C. Optional Managed Services
The following providers are only involved if explicitly part of the service agreement (e.g., if YourStore manages the cloud accounts on behalf of the customer).
Ubiquiti / Unifi (Video Access)
Company: Ubiquiti Inc. (685 Third Avenue, New York, NY 10017, USA).
Description: Cloud access management for video surveillance systems. Only applicable if YourStore manages the Unifi account on behalf of the customer.
Data Location: USA / Global.
Data Categories: User login data, access logs, system metadata. Note: Video footage is stored locally on the customer's hardware.
Legal Safeguard: EU-US Data Privacy Framework (DPF).
Link Privacy Info: Ubiquiti Privacy
Loxone (Building Control)
Company: Loxone Electronics GmbH (Smart Home 1, 4154 Kollerschlag, Austria).
Description: Remote access for building control systems. Only applicable if YourStore manages the Loxone account.
Data Location: Austria / EU.
Data Categories: Weather data, system status metadata.
Legal Safeguard: Processing in EU/EAA.
Link Privacy Info: Loxone Privacy
Last Update: February 2026