LAST UPDATED JUNE 11, 2026
Sub-processors overview
When Cheffelo AB and its brands (Linas Matkasse, Godtlevert, RetNemt, and Cheffelo) process your personal data, we may share information with other companies. These companies are either:
- Data processors — companies with which we have an agreement that requires them to process data exclusively on our behalf; or
- Third-party data controllers — partners with whom we share data, who also process data for their own purposes. These companies are responsible for complying with privacy laws, including ensuring our customers’ individual rights.
Note on Transfers Outside the EU/EEA
We primarily process personal data within the EU/EEA. In some cases, we work with partners located outside the EU/EEA (sometimes referred to as “third countries”), and in those situations, we take extra precautions to ensure your data is processed in accordance with our standards, through measures such as: When a provider hosts our data within the EU/EEA but is headquartered in the United States or elsewhere outside the EU/EEA, any residual access by the provider (for example, for support purposes) is additionally safeguarded by the EU–US Data Privacy Framework or EU standard contractual clauses.
- using the European Commission’s Standard Contractual Clauses (SCCs); and
- transferring data to countries or recipients covered by a European Commission adequacy decision (including the EU–U.S. Data Privacy Framework).
Our precautions also include organizational, contractual, and technical measures—risk assessments, access management, archiving and data-handling procedures, and more.
Subprocessors processing data on behalf of Cheffelo
|
Third-Party Sub-Processor |
Purpose/Activity |
Data Storage |
|
Microsoft Azure |
Cloud Hosting and Infrastructure |
Within the EU/EEA |
|
Databricks |
Data platform — analytics, personalization, and segmentation |
Within the EU/EEA |
|
Vercel |
Web hosting / front-end platform (hosting in the EU region) |
Within the EU/EEA |
|
Upstash |
Managed Redis — session & sign-up / cache store |
Within the EU/EEA |
|
Sanity |
Headless CMS — front-end content |
Within the EU/EEA |
|
Customer.io |
Email & marketing automation, CRM, and segmentation (Policy 3.11) |
Outside the EU/EEA |
|
Intercom |
Customer Service — Live Chat and Ticket System |
Outside the EU/EEA |
|
Segment |
Customer Data Platform — Event Collection and Routing |
Outside the EU/EEA |
|
Mixpanel |
Product Analytics |
Within the EU/EEA |
|
Datadog |
Observability — Application Monitoring and Logging |
Within the EU/EEA |
|
Microsoft Power BI |
Business Intelligence — Reporting and Dashboards |
Within the EU/EEA |
|
Google Ireland Ltd |
Website analytics (Google Analytics) |
Inside/Outside the EU/EEA |
|
Gordon |
Last-mile delivery of meal-kit boxes and order tracking |
Within the EU/EEA |
|
Regional transportation companies |
Last-mile delivery of meal-kit boxes in specific regions (e.g., Transferd, GF Logistikk, Best Transport, Bring, Sublog) |
Within the EU/EEA |
|
OpenAI |
Automated analysis of customer feedback (sentiment flags for customer service) |
Outside the EU/EEA |
|
SMS Technology |
Delivery and transactional SMS messages |
Within the EU/EEA |
Third-party data controllers/partners
|
Third-Party Partner |
Purpose/Activity |
Data Storage |
|
Meta Platforms Ireland Ltd |
Targeted marketing, retargeting, and audience matching on Facebook and Instagram |
Inside/Outside the EU/EEA |
|
Google (Ads / Marketing Platform) |
Advertising, conversion measurement, and audience matching |
Inside/Outside the EU/EEA |
|
Snap (Snapchat) |
Advertising and Audience Targeting on Snapchat |
Outside the EU/EEA |
|
TikTok |
Advertising and Audience Targeting on TikTok |
Inside/Outside the EU/EEA |
|
|
Advertising and Audience Targeting on Pinterest |
Inside/Outside the EU/EEA |
|
Adyen |
Payment processing (independent data controller) |
Within the EU/EEA |
|
Vipps MobilePay |
Payment processing — mobile wallet (independentcontroller) |
Within the EU/EEA |
|
Walley |
Payment processing — invoice / installments (independent controller) |
Within the EU/EEA |
|
Colligent Inkasso AB |
Debt collection — unpaid invoices (Independent Controller; Sweden) |
Within the EU/EEA |
|
Likvido |
Debt collection — unpaid invoices (Independent Controller; Denmark) |
Within the EU/EEA |
|
Intrum |
Debt Collection and Invoice Management (Norway) |
Within the EU/EEA |
|
SAS EuroBonus |
Partner loyalty campaign (new-customer points); hashed membership number for fraud prevention (policy 3.10) |
Within the EU/EEA |
|
Scandic Friends |
Partner loyalty campaign (free hotel night); hashed membership number to prevent abuse (policy 3.10) |
Within the EU/EEA |
|
Social media — page interaction |
When you visit, follow, or interact with our pages and profiles (Meta/Instagram, TikTok, Snapchat, Pinterest)—as opposed to the ad sections above |
Inside/Outside the EU/EEA |
Cheffelo Group affiliate sub-processors
This list identifies the affiliates authorized to process personal data for each of the relevant Cheffelo companies.
|
Name of entity |
Entity country |
Entity type |
Applicable Service(s) |
|
Cheffelo AB (publ) |
Sweden |
Group parent (listed) |
All |
|
Cheffelo Sweden AB (LinasMatkasse) |
Sweden |
Operating company |
Linas (SE) |
|
Cheffelo Norway AS (Delivered) |
Norway |
Operating company |
Godtlevert (NO) |
|
Cheffelo Denmark ApS (RetNemt) |
Denmark |
Operating company |
Retnemt (DK) |
|
Cheffelo Finland Oy (Cheffelo) |
Finland |
Operating company |
Cheffelo (FI) |
