Last updated: August 2026
1. Purpose of this page
Echo (operated by Frank Business Insights) engages specialized service providers (sub-processors) to deliver its services. This page lists all sub-processors that may have access to personal data in the course of their work.
- This page supplements section 4 of the Privacy Policy.
- This list forms part of the Data Processing Agreement (AVV) for organizations.
2. Current sub-processors
| Sub-processor | Function | Data processed | Data location | Safeguards |
|---|---|---|---|---|
| Infomaniak Network SA | Hosting & infrastructure | Account and content data (encrypted) | Switzerland | DPA |
| Pingen GmbH | Printing & mailing | Letter content, recipient name/address | Switzerland | DPA, deletion after 30 days |
| Swiss Post | Physical delivery | Recipient name/address | Switzerland | Postal secrecy |
| Payrexx AG | Payment processing | Billing and payment data | Switzerland | DPA, PCI-DSS |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical diagnostic data | EU | DPA, SCCs |
3. Deletion periods for sub-processors
Echo’s sub-processors delete data stored with them in accordance with the following deletion periods. The specific periods are:
- Infomaniak Network SA: Deletion at the end of the contract or on Echo’s instruction
- Pingen GmbH: 30 days after printing
- Swiss Post: In accordance with postal retention periods
- Payrexx AG: In accordance with statutory retention periods for financial data
- Functional Software, Inc. (Sentry): Typically 90 days
4. Changes to the sub-processor list
Echo reviews this list regularly. If we add or replace a sub-processor, we will notify affected organizations by email at least 30 days before the change takes effect. Organizations have the right to object to the change within that period. In the event of an objection, Echo may terminate the contract extraordinarily with 30 days’ notice to the end of the month, effective as of the date the change takes effect. If the Customer does not object within the period, the change is deemed approved.
Individuals are informed of material changes through the Privacy Policy.