Sub-processors and recipients
Version 2026-09-06. Gültig ab 2026-09-06.
Dieses Dokument ist nur auf Englisch verfügbar.
This page lists every company that processes personal data for Stampomat, operated by Daniel Ilievski: who they are, where they are, what they do for us, which data reaches them, on what legal transfer mechanism the data leaves the EEA where it does, and which contract binds them. It renders from the same configuration our systems use, so this published list and the list our code follows are one and the same. The Privacy Policy explains each data flow in full, and the Data Processing and Joint Controller Terms govern how we engage these providers on behalf of businesses.
| Name | Standort | Zweck | Daten | Übermittlungsmechanismus | Vertragsgrundlage | Zuletzt geprüft |
|---|---|---|---|---|---|---|
| InterServer, Inc. | United States (New Jersey, and their other US facilities) | Hosting, database and outbound email (SMTP) | All service data and every email we send | EU-US Data Privacy Framework, participant 9913, certification active | Art. 28 terms in their terms of service, accepted on use | 2026-09-06 |
| Cloudflare, Inc. | United States, global edge | DNS, TLS, caching and DDoS protection on proxied hostnames | Request and response traffic, including IP addresses | EU-US Data Privacy Framework and SCCs | Cloudflare self-serve DPA v6.4 | Noch nicht geprüft |
| Google LLC | United States | Sign-in with Google (OAuth) and Google Wallet passes | Google account id, name, email; pass content for passes you save | EU-US Data Privacy Framework | Google API Services User Data Policy; Google Wallet API ToS | Noch nicht geprüft |
| OpenRouter, Inc. | United States | AI drafting of blog and spotlight posts | Prompts with business facts about a shop; no customer data | SCCs Module 2 | OpenRouter Terms section 10.2 (DPA by incorporation) | Noch nicht geprüft |
| GitHub, Inc. | United States | Source code hosting and CI | No production personal data | EU-US Data Privacy Framework and SCCs | GitHub Data Protection Agreement | Noch nicht geprüft |
| Browser push services (Google FCM, Mozilla, Apple, Microsoft WNS) | United States and EU | Delivering web push notifications (feature currently dormant) | Push endpoint, keys, notification title and body | Independent controllers chosen by your browser | Each service's own terms | Noch nicht geprüft |
Change history
A change to this list is made in configuration, bumps the version date at the top of this page, and appears as a dated row on the document versions page. Before a new or replacement sub-processor starts processing personal data on behalf of businesses, we email them at least 15 days in advance, and they may object as the Data Processing and Joint Controller Terms describe. Removing a provider is announced on the same page without a waiting period.
Questions about this page: hello@stampomat.com.