Subcontractor (Sub-Processor)
The contractor uses services from third parties for the processing of personal data on behalf of the client; these third parties process personal data on the client's behalf ("subcontractors").
The following are the currently approved subcontractors, including their purpose and place of processing:
Approved subcontractors
| Subcontractor | Service | Description | Purpose of processing | Place of processing |
|---|---|---|---|---|
| Cloudinary | Media management platform | Cloud-based platform for image and video management | Storage, optimization and processing of media files (images/videos) | Global (USA + CDN-Statusorte) |
| Pusher | Real-time WebSocket service | Hosted API for bidirectional real-time communication | Chat functionality and real-time notifications | Global (EU/USA depending on routing) |
| Brevo (Transaktional) | Transactional email platform | Sending platform for transactional emails | System emails and notifications (e.g. login, hints, confirmations) | EU (France) |
| Brevo (Marketing) | Marketing-Automation | Email marketing and automation platform | Marketing communication and campaigns via email | EU (France) |
| Amazon Web Services (AWS) | Cloud Infrastructure | Hosting, deployment and infrastructure services (including EC2, Lambda, SNS, Elastic Beanstalk, Metadata Services) | Infrastructure and application hosting, operation, monitoring, deployment | EU / Global (primarily EU regions, depending on configuration) |
| Amazon CloudFront (AWS) | Content Delivery Network (CDN) | Global CDN integrated into AWS | Fast and secure delivery of media files | Global (CDN status locations worldwide) |
| Hetzner | Hosting-Provider | Data center and hosting service provider | Dedicated servers for caching and system components | Germany (EU) |
| MongoDB Atlas | Managed NoSQL-Datenbank | Cloud database service (document-based) | NoSQL data storage and processing | EU (Germany / AWS eu-central-1) (if configured) |
| DomainFactory | Domain services | Domain registration and DNS services | Domainregistrierung, DNS-Hosting | Germany (EU) |
| IONOS SE | Domain- & Cloud-Services | Domain hosting and cloud services | Domain hosting and cloud storage services | Germany / EU |
| IONOS HiDrive | Cloud storage | Cloud storage platform | File storage | Germany / EU |
| Dropbox | Cloud storage | Cloud storage and collaboration solution | File storage and collaboration | EU/USA (depending on settings) |
| Google Workspace | Office/productivity suite | Email, calendar, document management | Internal communication and office productivity | EU/Global (depending on settings) |
| Atlassian (Wait) | Ticketing / Project Management | Task and ticket management system | Task, ticket and issue tracking | EU/USA (depending on settings) |
| Slack | collaboration tool | Messaging and collaboration platform | Internal Team Communication | EU/USA (depending on settings) |
| Notion | Documentation / Wiki | Collaborative documentation tool | Knowledge management and internal documentation | deer |
| Zoom | video conference | Video conferencing and webinar platform | Virtual meetings and webinars | USA / Global |
| DocuSign | Electronic signature | E-Signature-Service | Document signing and verification | USA / Global |
| Firebase (Google) | App platform | Backend, hosting, crash reporting, analytics, push notifications, etc. | Backend infrastructure and app services | Global (EU/USA depending on configuration) |
| Google Analytics | Web analytics | Website tracking and analytics service | Evaluation and analysis of website usage | EU/USA (depending on configuration & consent) |
| Consentmanager | Consent-Management-Plattform (CMP) | Tool for managing cookie consents | Obtaining and documenting consents | Germany / EU |
| Stripe | Payment service provider | Online-Payment-Service | Payment processing (including fraud prevention) | EU/USA (depending on entity) |
| Twilio | Cloud communication | Communication platform (SMS, Voice, WhatsApp integration) | Customer communication via SMS/Voice/WhatsApp | USA / Global |
| WhatsApp Business API (Meta) | Messaging platform | Meta's messaging infrastructure | Customer communication via WhatsApp | EU/USA (Meta) |
| TestFlight (Apple) | Beta-App-Distribution | iOS app distribution for beta testing | App testing and feedback | deer |
| SevDesk | Accounting | Software for accounting and invoicing | Accounting and invoicing | Germany (EU) |
| DATEV | Payroll & Accounting | Accounting and payroll services | HR and accounting | Germany (EU) |
| DATEVconnect | DATEV interface (API) | Interface for automated data transfer | Automated transfer of accounting data | Germany (EU) |
| invoicefetcher | Invoice management | Tool for invoice retrieval and management | Central invoice collection | Germany (EU) |
| Pleo | Expense management | Corporate Spend Management & Virtual Company Cards | Expense management and company card management | Denmark (EU) |
| Monta (Krefeld) | Fulfillment-Service Provider | Fulfillment and logistics services | Order processing and shipping | Germany (EU) |
Update notice
The contractor may update subcontractors in accordance with the contractually agreed regulations, provided that the legal requirements (in particular Art. 28 GDPR) are complied with and – where necessary – the client is informed or authorized in advance.