Subprocessors List
Service operator: Jakub Ciepielowski, Kaskadowa 17F, 43-300 Bielsko-Biała.
Contact: [email protected]
1. Introduction
To provide the service, we use trusted third-party providers (subprocessors) that process some data on our behalf. We have appropriate data protection commitments with each of them, and transfers outside the EEA rely on GDPR-compliant mechanisms (e.g. Standard Contractual Clauses).
2. Current Subprocessors
| Provider | Purpose of processing | Location |
|---|---|---|
| Stripe Payments Europe, Ltd. | Payment and subscription processing | EU / USA |
| OVHcloud (OVH SAS) | Server hosting (VPS) and email delivery (SMTP). A photographer can configure their own SMTP server, in which case email is sent by the provider they chose | EU (France / Poland) |
| Cloudflare, Inc. | CDN, proxy, attack protection (including Turnstile); storage of files and backups (Cloudflare R2) | EU / USA |
| Google LLC (Google Analytics, Google Ads) | Traffic analytics and conversion measurement (with consent only) | EU / USA |
| Google LLC / Meta Platforms / Apple Inc. | OAuth social login (when you use it) | EU / USA |
| Microsoft Corporation (Microsoft Clarity) | Usage analysis and session recording on public pages and in the photographer panel, excluding client galleries (with consent only) | EU / USA |
| Google Fonts (Google LLC) | Delivery of web fonts (IP address on download) | EU / USA |
| Push notification providers (Google, Mozilla, Apple) | Delivery of web push notifications to the client's browser (when the client enables them) | EU / USA |
| Telegram | Support chat handling and technical alerts (when you use the chat) | International |
3. Photo Storage
Original photos and previews may be stored in Cloudflare R2 object storage and on the hosting server. We process photos solely to provide the gallery service. We keep backups of the database and configuration on the hosting server and in Cloudflare R2, with a 30-day retention.
4. Changes to the List
We may update the list of subprocessors as the service evolves. We will announce significant changes that may affect the protection of your data within the service.
5. Contact
For questions about subprocessors and data processing, contact: [email protected].