RELEX services’ processors

1. About this page
2. What kind of data does RELEX process?
3. Services delivery related activities for which RELEX operates as a processor
4. Services delivery related activities for which RELEX operates as a controller
5. Future changes
6. Further information

1. About this page

This page lists and provides information related to the third-party sub-processors and RELEX corporate affiliates that may have incidental access to RELEX customer data while providing cloud or support services to those customers.

The page utilizes the following abbreviations when referring to different RELEX service families:

• RELEX Plan = Forecasting and Replenishment  
• RELEX Store = Space & Assortment and On-the-Go Replenishment  
• RELEX Work = Workforce Optimization and Management  
• RELEX Promo = Pricing and Promotions 
• RELEX Make (Optimity) = Supply Chain Optimization and Production Scheduling

Understanding the compliance requirements imposed on RELEX customers in terms of processing and subcontracting the processing of personal data, RELEX has split this page into those activities where RELEX undertakes personal data processing in the name of and on behalf of its customers and those where RELEX utilizes subcontractors for its own, independently defined purposes.

2. What kind of data does RELEX process? 

Logistic service data 

The majority of RELEX’s service-related data processing involves information not attributable to individuals, including:  

• Information on articles manufactured, shipped, stored, distributed, sold, and remaining  
• Enhanced information, learnings, and suggestions based on the above  
• Data typically needed to authenticate services, related communications, and tracking-related competencies  

Personal data 

RELEX typically processes the following categories of personally identifiable data, which relate to both RELEX’s and our customers’ employees as well as to customers’ business partners (such as customers’ suppliers and customers’ corporate customers):  

• User credentials  
• Email addresses and phone numbers  
• Device IP addresses  
• Service usage information  
• Training course data  

The only RELEX solution that processes personal data as part of its core functionality is Workforce Optimization and Management. In this context, RELEX processes the following data on customer employees:  

• Work history and competency information  
• Employee default work location   
• Work locations and shifts  
• Absences  
• Contractual employment information  
• Terms of applicable collective agreements  

Each class of data may be complemented by other data of similar stature and sensitivity.  More information is available from respective service’s privacy notices. 

Excluded data 

Special categories of data such as employee race or health are not collected or processed in any RELEX service, including Workforce Optimization.  

RELEX solutions do not collect data on RELEX customers’ end-consumers in an identifiable format. In other words, data is not collected on individual shoppers making purchases from stores serviced by RELEX solutions.    

Processing roles and document scope 

RELEX processes personal data both in the roles of ‘processor’ and ‘controller’ as defined by the European Union’s General Data Protection Regulation (2016/679). By comparison, the respective roles under California Consumer Privacy Act would be ‘business’ and ‘service provider’.   

3. Services delivery related activities for which RELEX operates as a processor  

This section focuses on providing transparency to RELEX customers on the data processing that RELEX undertakes in the role of a processor.  

RELEX utilizes sub-processors to process personal data on behalf of its customers in the following contexts.    

• Global support – RELEX services are operated, delivered, and maintained with the help of RELEX employees around the globe.   
• Cloud hosting – RELEX service infrastructure is based on both private and public clouds.  
• Managed services – Providing specific capabilities inside RELEX services, such as service user authentication.   
• Ancillary services – Services that support customers’ use of RELEX core service offering, such as a training platform.   
• Contractors – RELEX utilizes selected third party-contractors in areas requiring specific technical competencies.  

The below sections provide more information on RELEX’s affiliates and specific subcontractors utilized for the above purposes.  

RELEX affiliates

RELEX maintains a global pool of technical and solution consultants to support, operate, deliver, and maintain services. While doing so, RELEX support personnel may process, store, or otherwise access customer employees’ personal data. Such access is subject to RELEX policies and supervision and may take place by the employees of the following RELEX affiliates.  

Cloud hosting by RELEX 

Personal data from customers in Europe, the Middle East, and Africa is primarily stored in EU regions by public cloud providers. Personal data from customers in other regions is primarily stored in the USA by public cloud providers.  

Cloud hosting providers provide international support and maintenance for their services and may access limited amounts of customer personal data from regions other than their own. Such access is typically limited to technical operation and troubleshooting of the servers, storage systems, and application platforms used to provide applicable services.  

Where RELEX private cloud is used, RELEX maintains the processing of customer data in private clouds located in Finland and the USA and that data is split by customer region like the public cloud above. Third-party cloud providers do not have access to data processed in private clouds. 

Managed services  

Managed service providers provide support and maintenance for their services internationally and may access limited amounts of customer personal data residing in RELEX infrastructure from regions other than their own. Such access is typically necessary to enable or restore the correct operation of managed service servers, storage systems, and application platforms.   

Ancillary services 

The following sub-processors provide ancillary services to help support, operate, and maintain the service and may process, store, or otherwise access limited customer personal data while providing their ancillary services.  

The most relevant ancillary service which RELEX uses is a third-party online training tool. The provider of the tool stores and processes the user account information and profiles of persons participating in training courses.  

Contractors 

The following sub-processors provide contract staff that work in close cooperation with RELEX staff to help support, operate, and maintain the service.  

4. Services delivery related activities for which RELEX operates as a controller 

RELEX services are operated, delivered, and maintained with the help of RELEX employees located around the world. In addition to third parties listed hereunder, RELEX affiliated companies (listed first above under ‘RELEX affiliates’) may be utilized by RELEX to undertake any of the activities referred to in this section 4. 

The below charts list service delivery related activities where RELEX undertakes personal data processing – with the help of its processors – for which it has defined the purposes and means itself.

• Global support processes and corporate infrastructure – Tools for structuring RELEX’s sales and support processes, conducting communications and collecting feedback.
• Managed services – Monitoring service performance and authorized service usage.
• Ancillary services – Tracking and sharing status information on ongoing tickets, tasks, and projects.

Global support processes and corporate infrastructure

Operating the related corporate infrastructure involves utilization of processors, which provide services related to RELEX’s larger corporate operations, such as provision of service support framework composed of support ticketing, and communications services.  

Managed services 

Managed service providers provide support and maintenance for their services internationally and may access limited amounts of personal data processed in such services. Such access is typically necessary to enable or restore the correct operation of managed service servers, storage systems, and application platforms.   

Ancillary services 

The following processors provide ancillary services to help support, operate, and maintain the service and may process, store, or otherwise access limited customer personal data while providing ancillary services.  

5. Future changes 

RELEX will maintain and update this page to communicate changes in sub-processors utilized by RELEX that process personal data.   

To provide cutting edge services to its customers, RELEX, like other SaaS -providers, will constantly evaluate subcontractors’ fit within RELEX’s platform and architecture. To keep the information on this page up to date, RELEX will make changes and additions to the page from time to time, and changes will apply from the date that the revised version of the page is published.  

RELEX will inform customers of material page updates by email. Customer employees may adjust the recipients of such communications by following the instructions on communication emails. 

6. Further information 

For more information about RELEX’s subcontracting practices and related privacy implications and safeguards, please contact: subprocessor-communications@relexsolutions.com