Skip to main content

Information on sub-processors

Pursuant to art. 28 paragraph 4 of the General European Data Protection Regulation no. 679/2016 (hereinafter also "GDPR"), "Where a processor engages another processor for carrying out specific processing activities on behalf of the controller, the same data protection obligations as set out in the contract or other legal act between the controller and the processor as referred to in paragraph 3 shall be imposed on that other processor […], in particular providing sufficient guarantees to implement appropriate technical and organizational measures in such a manner that the processing will meet the requirements of this Regulation. Where that other processor fails to fulfil its data protection obligations, the initial processor shall remain fully liable to the controller for the performance of that other processor's obligations."

Deloitte uses different types of sub-processors to perform its services and has implemented a third-party selection process aimed at assessing the adequacy of their guarantees in terms of security, privacy and confidentiality.

The following table contains the list of the main sub-processors used for the provision of services and products offered by one or more of the Legal Entities of the Italian Deloitte Network, when these are hired as data processors pursuant to art. 28 GDPR.

Last update: May 2023

Data Controller
Deloitte Network's Legal Entity where the employee is hired

Data Processor
Deloitte Italy

Sub-Processor
Deloitte Business Solution S.r.l.

Data Controller
Deloitte Network's Legal Entity where the employee is hired

Data Processor
Deloitte Italy

Sub-Processor
CWT Italia S.r.l.

Data Controller
Deloitte Network's Legal Entity where the employee is hired

Data Processor
Deloitte Italy

Sub-Processor
Jointly il Welfare Condiviso S.r.l.

Data Controller
Deloitte Network's Legal Entity where the employee is hired

Data Processor
Deloitte Italy

Sub-Processor
SODEXO Italia S.p.A.

Data Controller
Deloitte Network's Legal Entity where the employee is hired

Data Processor
Deloitte Italy

Sub-Processor
MADOC ITALIA S.r.l.

Data Controller
Deloitte Network's Legal Entity where the employee is hired

Data Processor
Deloitte Italy

Sub-Processor
Manpower S.r.l.

Data Controller
Deloitte Network's Legal Entity where the employee is hired

Data Processor
Deloitte Italy

Sub-Processor
MERCURI URVAL S.r.l

Data Controller
Deloitte Network's Legal Entity where the employee is hired

Data Processor
Deloitte Italy

Sub-Processor
SICURITALIA GROUP SERVICE S.c.p.a.

To receive more information regarding sub-processors, please send an e-mail to dataprotectionofficer@deloitte.it.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities (collectively, the “Deloitte organization”). DTTL (also referred to as “Deloitte Global”) and each of its member firms and related entities are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of each other. DTTL does not provide services to clients. Please see About Deloitte to learn more.