Sub-processors
The third-party providers CookieHub is authorised to use, what each does, and where it operates.
CookieHub engages third-party service providers to support its services. The customer grants CookieHub general authorisation to engage sub-processors for the provision of the service, and CookieHub keeps this list up to date and binds each sub-processor to data protection obligations no less protective than those in the data processing agreement.
The approved sub-processors are listed in Annex 2 of the DPA:
| Name | Purpose | Country |
|---|---|---|
| Amazon Web Services Inc. | Cloud hosting, data storage, monitoring and security solutions | Germany, United Kingdom |
| Amazon Web Services Inc. | Content delivery network | Worldwide |
| Online S.A.S. | Cloud hosting, data storage, monitoring and security solutions | France, Netherlands |
| BunnyWay d.o.o. | Content delivery network | Worldwide |
| Cloudflare | Content delivery network, WAF and DDoS protection | Multiple (Cloudflare network) |
| Help Scout | Customer support | United States |
| Userlist, Inc. | Transactional and marketing email delivery | United States |
The table reproduces Annex 2 of the DPA, which lists the providers and regions CookieHub is authorised to use. Personal data is stored in Germany, as Server locations describes; the other hosting regions in the table are authorised but not used. Content delivery runs on Bunny CDN and Amazon CloudFront.
Where sub-processors are located outside the EEA, transfers are subject to appropriate safeguards under Chapter V GDPR, including Standard Contractual Clauses where applicable.