Version August 2023

WITHINGS SUBCONTRACTORSIn order to provide its Products and Services, Withings uses subcontractors who may process
personal data relating to the users. Withings has signed processing agreements with all of thesubcontractors listed below and makes sure they implement organizational and technicalmeasures that comply with the provisions of GDPR.

HOSTING
Subcontractor

BSO

WITHINGSStorage place

Mechanism allowinginternational data transfer

Service provided andPerformed task

FranceHosting
No international transfer (dataHostingofhosted within the EEA)
infrastructures

FranceHostingandNo international transfer (data services
hosted within the EEA)
Security page

WITHINGS
managedBACKUPS
Subcontractor

Storage place

Mechanism allowinginternational data transfer

Service provided andPerformed task
Backup

GCS (GoogleCloud Storage)

EuropeanEconomic Area

No international transfer Backups are encrypted before(data hosted within the EEA) being sent to GCS in order tostrengthen the confidentialityof personal data.

CUSTOMER SUPPORT
Service provided andPerformed task

Subcontractor

Storage place

Mechanism allowinginternational data transferZendesk

EuropeanEconomic Area

CRM
No international transfer
Provides a more efficient(data hosted in the European
customer
relationshipEconomic Area)
management
1Version August 2023

WITHINGS SUBCONTRACTORSCPMTELUS
International

PlayvoxSpain

Customer Support
No international transfer
Helps manage customer(data hosted within the EEA)
relationshipPhilippines

Customer Support
Standard Contractual Clauses Helps manage customer
relationship

USA

Customer Support
Standard Contractual Clauses Quality
assessment
Customer Support agentsofCOMMUNICATION
Service provided andPerformed task

Subcontractor

Storage place

Mechanism allowinginternational data transfer

MailgunEuropeanEconomic Area

No international transfer Sending emails(data hosted within the EEA) Allows to send emails to users

Mailchimp

EuropeanEconomic Area

Sendingemails(backupNo international transfersolution)(data hosted within the EEA)
Allows to send emails to users

TwilioUSA

Binding Corporate Rules
Standard Contractual Clauses

Sending SMS
Sending SMS to use 2FA

LOGISTICS
Subcontractor

Dimotrans

Logistech

Storage place

Mechanism allowinginternational data transfer

Service provided andPerformed task

FranceNo international transfer Logistics(data hosted within the Allows delivery of products inEEA)
EuropeUSALogistics
Allows delivery of products inthe USA

Data Privacy Framework

2Version August 2023

WITHINGS SUBCONTRACTORS
Revers.io

Shipup

ShopRunBack

The Netherlands

No international transfer After-sales services(data hosted within the Facilitate management
EEA)
product returnsofBelgium

No international transfer Logistics(data hosted within the Improve customer experience
EEA)
during transport

FranceNo international transfer
Product returns(data hosted within theFacilitate product returns
EEA)

PAYMENT
Subcontractor

Storage place
Ireland(users in Europe)

KlarnaBrainTreeSignifydUSA(users in NorthernAmerica)
USAUSA

Mechanism allowinginternational data transfer

Service provided andPerformed task

No international transfer Payment
on
WITHINGS(data hosted within the EEA websitefor European users)
Payment management

Binding Corporate Rules

Paymenton
WITHINGSwebsite
Payment management

Data Privacy Framework

Paymenton
WITHINGS
websiteFight against fraud

OTHERS
Subcontractor[US Only]
HeartBeat Health

Storage place

USA

Mechanism allowinginternational data transfer

Service provided andPerformed task

No international transfer Medical advice(data hosted within the Validation of the first ECG
EEA)
recorded with the Scan Watch

3