Version: 19th June 2023
How We Process Personal Data
Below you will find information on how Personal Data Controlled by Customers of the BM Group are Processed in the context of the BuildingMinds Platform Services and Professional Services (collectively “Service(s)”) which are provided by a BM Group entity as a Contractor:
Definitions
In the context of this document all capitalized terms which are defined in the General Data Protection Regulation (EU 2016/679 –“GDPR”) shall have the meaning as defined in the GDPR.
The term “BM Group” refers to BuildingMinds Technology AG and its corporate affiliates, the term “Customer” shall mean the customer Controlling the Personal Data, the term “Contractor” shall mean the BM Group entity Processing Personal Data Controlled by the Customer and the terms BuildingMinds Platform Services, Professional Services, and Services refer to the products and services defined in the individual contract between the Customer and the Contractor (“Contract”).
Processing of Personal Data
Personal Data are Processed to provide Services under the Contract in accordance with its terms. The respective roles and responsibilities of the members of the BM Group with respect to the provision of the BuildingMinds Platform Services and Professional Services are described below.
Roles and Responsibilities of the BM Group Entities
The following members of the BM Group are responsible for the following Processing activities:
BuildingMinds Technology AG
BuildingMinds Technology AG, Seestrasse 55, 6052 Hergiswil (NW), Switzerland is the central contracting hub of the BM Group for international Contracts and for international Master Services Agreements which may provide a framework for individual Contracts, and serves as the Customers’ central point of contact. BuildingMinds Technology AG has contracted the provision of all Services to BuildingMinds GmbH. BuildingMinds GmbH has contracted customer and contract administration to BuildingMinds Technology AG. BuildingMinds Technology AG will therefore have access to Personal Data (whether as a Contractor or not) for contract administration and accounting purposes only.
BuildingMinds GmbH
BuildingMinds GmbH, Schindler-Platz, 12105 Berlin, Germany is the central technical and operational hub of the BM Group. BuildingMinds GmbH operates the BuildingMinds Platform and provides all Services, whether as a Contractor or as a sub-contractor of other BM Group entities. BuildingMinds GmbH therefore has access to all Personal Data Processed on behalf of Customers within the BM Group and Processes such Personal Data for the provision of the Services.
Subprocessors and Sub-Subprocessors
The BM Group makes use of the following third-party services to provide its own Services:
Hosting of the BuildingMinds Platform
The BuildingMinds Platform is hosted in the Microsoft Azure European cloud. The cloud is operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland. Microsoft Ireland Operations Limited is a subsidiary of Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, USA.
The Microsoft Azure European cloud is ISO 27001 certified. Use of the Microsoft Azure European cloud is subject to standard terms which ensure that the users control all data hosted on their behalf.
For more information on Processing activities, see:
https://servicetrust.microsoft.com/ViewPage/TrustDocumentsV3
A current list of sub-processors is available here:
https://servicetrust.microsoft.com/DocumentPage/aead9e68-1190-4d90-ad93-36418de5c594
Data Storage Services
The BuildingMinds Platform makes use of the MongoDB data storage service. The MongoDB data storage service is operated by MongoDB Ltd., Building two, Number One Ballsbridge, Dublin 4, Ireland. MongoDB Ltd. is a subsidiary of MongoDB, Inc., 1633 Broadway 38th Floor, New York NY 10019.
The MongoDB data storage service is ISO 27001 certified. Use of the MongoDB data storage service is subject to standard terms which ensure that users control all data Processed on their behalf.
For more information on Processing activities, see:
https://www.mongodb.com/technical-and-organizational-security-measures
A current list of sub-processors is available here:
https://www.mongodb.com/cloud/trust/compliance/subprocessors
Mailing Services
For sending mails in connection with our Services, BM Group makes use of the Mailjet mailing service. The Mailjet mailing service is operated by Mailjet SAS, 13-13 bis, rue de l’Aubrac, 75012 Paris, France. Mailjet SAS is a subsidiary of Mailgun Technologies, Inc., 112 East Pecan Street Suite 1135 San Antonio, TX 78205 USA.
The Mailjet mailing service is ISO 27001 certified. Use of the Mailjet mailing service is subject to standard terms which ensure that users control all data processed on their behalf.
For more information on Processing activities and a current list of sub-processors, see:
https://www.mailgun.com/legal/dpa/
Utility Sync Add-On
For the BuildingMinds Platform’s optional Utility Sync Add-On, BM Group makes use of the utility consumption data integration service of Metry AB, Kämpegatan 6, 411 04 Göteborg, Sweden ("Metry Service"). A data processing agreement is in place with the provider of the Metry Service, which ensures that users control all data Processed on their behalf.
For more information on Processing activities see:
