LAST UPDATED 11 JUNE 2026
Sub-processors overview
When Cheffelo AB and its brands (Linas Matkasse, Godtlevert, RetNemt and Cheffelo) process your personal data, we may share information with other companies. These companies are either:
- Data processors — companies we have an agreement with, restricting them to exclusively process data on our behalf; or
- Third party data controllers — partners we share data with, who also process data for their own purposes. These companies are responsible for compliance with privacy laws, including ensuring our customers’ individual rights.
Note on transfers outside the EU/EEA
We mainly process personal data within the EU/EEA. In some cases we work withpartners located outside the EU/EEA (sometimes referred to as “third countries”), and inthose situations we take extra precautions to ensure your data is processed to ourstandards, through measures such as: Where a provider hosts our data inside theEU/EEA but is headquartered in the United States or elsewhere outside the EU/EEA, anyresidual access by the provider (for example for support) is additionally safeguarded bythe EU–US Data Privacy Framework or EU standard contractual clauses.
- using the European Commission’s Standard Contractual Clauses (SCCs); and
- transferring data to countries or recipients covered by a European Commissionadequacy decision (including the EU–US Data Privacy Framework).
Our precautions also include organisational, contractual and technical measures — riskassessments, access management, archiving and data-handling routines, and more.
Sub-processors processing data on behalf of Cheffelo
|
Third Party Sub-Processor |
Purpose/Activity |
Data Storage |
|
Microsoft Azure |
Cloud hosting and infrastructure |
Inside EU/EEA |
|
Databricks |
Data platform — analytics, personalisation andsegmentation |
Inside EU/EEA |
|
Vercel |
Web hosting / frontend platform (EU region hosting) |
Inside EU/EEA |
|
Upstash |
Managed Redis — session & sign-up / cache store |
Inside EU/EEA |
|
Sanity |
Headless CMS — frontend content |
Inside EU/EEA |
|
Customer.io |
Email & marketing automation, CRM andsegmentation (policy 3.11) |
Outside EU/EEA |
|
Intercom |
Customer service — live chat and ticketing |
Outside EU/EEA |
|
Segment |
Customer data platform — event collection androuting |
Outside EU/EEA |
|
Mixpanel |
Product analytics |
Inside EU/EEA |
|
Datadog |
Observability — application monitoring and logging |
Inside EU/EEA |
|
Microsoft Power BI |
Business intelligence — reporting and dashboards |
Inside EU/EEA |
|
Google Ireland Ltd |
Website analytics (Google Analytics) |
Inside/OutsideEU/EEA |
|
Gordon |
Last-mile delivery of meal-kit boxes and order tracking |
Inside EU/EEA |
|
Regional transport companies |
Last-mile delivery of meal-kit boxes in specific regions(e.g. Transferd, GF Logistikk, Best Transport, Bring,Sublog) |
Inside EU/EEA |
|
OpenAI |
Automated analysis of customer feedback (sentimentflags to customer service) |
Outside EU/EEA |
|
SMS-Teknik |
Delivery and transactional SMS send-outs |
Inside EU/EEA |
Third party data controllers/partners
|
Third Party Partner |
Purpose/Activity |
Data Storage |
|
Meta Platforms Ireland Ltd |
Targeted marketing, retargeting and audience matchingon Facebook / Instagram |
Inside/OutsideEU/EEA |
|
Google (Ads /Marketing Platform) |
Advertising, conversion measurement and audiencematching |
Inside/OutsideEU/EEA |
|
Snap (Snapchat) |
Advertising and audience matching on Snapchat |
Outside EU/EEA |
|
TikTok |
Advertising and audience matching on TikTok |
Inside/OutsideEU/EEA |
|
|
Advertising and audience matching on Pinterest |
Inside/OutsideEU/EEA |
|
Adyen |
Payment processing (independent controller) |
Inside EU/EEA |
|
Vipps MobilePay |
Payment processing — mobile wallet (independentcontroller) |
Inside EU/EEA |
|
Walley |
Payment processing — invoice / instalments(independent controller) |
Inside EU/EEA |
|
Colligent InkassoAB |
Debt collection — unpaid invoices (independentcontroller; Sweden) |
Inside EU/EEA |
|
Likvido |
Debt collection — unpaid invoices (independentcontroller; Denmark) |
Inside EU/EEA |
|
Intrum |
Debt collection and invoice administration (Norway) |
Inside EU/EEA |
|
SAS EuroBonus |
Partner loyalty campaign (new-customer points); hashedmembership number for abuse prevention (policy 3.10) |
Inside EU/EEA |
|
Scandic Friends |
Partner loyalty campaign (free hotel night); hashedmembership number for abuse prevention (policy 3.10) |
Inside EU/EEA |
|
Social media —page interaction |
When you visit, follow or interact with our pages andprofiles (Meta/Instagram, TikTok, Snapchat, Pinterest) —distinct from the advertising rows above |
Inside/OutsideEU/EEA |
Cheffelo group affiliate sub-processors
This list identifies the affiliates authorised to process personal data for each of the relevant Cheffelo companies.
|
Name of entity |
Entity country |
Entity type |
Applicable Service(s) |
|
Cheffelo AB (publ) |
Sweden |
Group parent (listed) |
All |
|
Cheffelo Sweden AB (LinasMatkasse) |
Sweden |
Operating company |
Linas (SE) |
|
Cheffelo Norway AS (Godtlevert) |
Norway |
Operating company |
Godtlevert (NO) |
|
Cheffelo Denmark ApS (RetNemt) |
Denmark |
Operating company |
Retnemt (DK) |
|
Cheffelo Finland Oy (Cheffelo) |
Finland |
Operating company |
Cheffelo (FI) |
