Subprocessors
The third-party providers Artidal uses to deliver its website and platform, what each is used for, where they process data, and the safeguards for any transfers outside the EEA.
To deliver www.artidal.com and the Artidal platform, Artidal OÜ relies on the third-party providers ("subprocessors") listed below. Each processes personal data only as needed to provide its service to us and is bound by data-protection terms consistent with our Data Processing Agreement. Where a provider processes data outside the EEA, we rely on an approved transfer safeguard (see our Privacy Policy).
To deliver our website and the Artidal platform we rely on the third-party providers (“subprocessors”) listed below. Each processes personal data only as needed to provide its service to us and is bound by data-protection terms consistent with our Data Processing Agreement. Where a provider processes data outside the EEA, we rely on an approved transfer safeguard, noted against that provider.
Infrastructure and hosting
- Vercel Inc. — website hosting, content delivery, and performance measurement. Processing region: European Union and United States. Transfer safeguard: Standard Contractual Clauses, as set out in Vercel's Data Processing Addendum.
- Amazon Web Services EMEA SARL — hosting for the Artidal platform and its databases. Processing region: European Union (Frankfurt). Transfer safeguard: none required, as platform data is not processed outside the EEA.
Content, data, and communications
- Sanity AS — content management and storage for our website's content and media. Processing region: European Union. Transfer safeguard: none required, as this data is not processed outside the EEA.
- Databases and file storage — our website's content and media are stored by Sanity, above. Platform and customer data are stored in the Amazon Web Services region listed under Infrastructure and hosting. We use no separate database provider.
- Google Ireland Limited — Google Workspace, used for our business email and the correspondence we exchange with you. Processing region: European Union and United States. Transfer safeguard: Standard Contractual Clauses.
- Customer relationship management — we use our own system, which we host on Amazon Web Services in Frankfurt. It is not a third-party service, and contact data held in it does not leave the infrastructure listed under Infrastructure and hosting.
- Google Ireland Limited — Google Tag Manager and Google Analytics, used to load our measurement and advertising tags and to measure how the website is used. Both load only after a visitor accepts cookies. Processing region: European Union and United States. Transfer safeguard: Standard Contractual Clauses.
- Meta Platforms Ireland Limited — the Meta (Facebook) Pixel, used to measure the performance of our advertising. It is loaded through Google Tag Manager and only after a visitor accepts cookies. Processing region: European Union and United States. Transfer safeguard: Standard Contractual Clauses.
- Stripe Payments Europe, Limited — payment processing for subscriptions and platform payments. Card details are handled by Stripe and are not stored by us. Processing region: European Union and United States. Transfer safeguard: Standard Contractual Clauses.
- Gleap GmbH (Austria) — Gleap.io, used for in-product support, feedback and bug reports. Processing region: European Union. Transfer safeguard: none required, as this data is not processed outside the EEA.
Changes and notification
We update this list whenever we add or replace a subprocessor. Customers can ask to be notified in advance of changes, and to raise reasonable objections, by contacting privacy@artidal.com.