Subprocessor List
Version 1.0
Overview
Eigentum² engages the following third-party service providers (subprocessors) to process personal data on behalf of our customers (controllers) in connection with the provision of the Eigentum² platform.
This list is maintained pursuant to Article 28(2) of the General Data Protection Regulation (GDPR) and § 8 of our Data Processing Agreement (DPA).
Current Subprocessors
Infrastructure
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Vercel Inc. | Application hosting, content delivery, serverless compute | EU (Frankfurt) | EU processing; no third-country transfer |
| Neon Inc. | Managed PostgreSQL database hosting with automatic backups | EU (Frankfurt) | EU processing; no third-country transfer |
| Google Cloud Platform (Google LLC) | File and document storage (Firebase Cloud Storage) | EU (Frankfurt) / USA | EU-US Data Privacy Framework; Standard Contractual Clauses |
Authentication
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Google Ireland Ltd. | OAuth authentication (Google Sign-In) | Ireland / USA | EU-US Data Privacy Framework |
Payments
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Stripe, Inc. | Subscription billing and payment processing | USA / Ireland | EU-US Data Privacy Framework; Stripe Ireland acts as EU establishment |
Communication
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Mailjet SAS (Sinch Group) | Transactional email delivery (verification, password reset, notifications) | France / EU | EU processing; no third-country transfer |
AI Services
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| OpenAI, Inc. | AI-powered property valuation (data processed per API request; not used for model training under API terms) | USA | EU-US Data Privacy Framework; Standard Contractual Clauses |
Notification of Changes
In accordance with § 8(3) of our Data Processing Agreement, we will notify controllers of any intended addition or replacement of subprocessors at least 30 days before the change takes effect.
To receive notifications of changes to this list, please contact us at support@dein-eigentum.de with the subject line "Subscribe to Subprocessor Updates."
Objection Right
If you, as a controller, object to a new subprocessor on reasonable data protection grounds, the parties shall discuss the objection in good faith. If the objection cannot be resolved, you may terminate the service agreement without penalty as of the date the subprocessor change was intended to take effect (§ 8(4) of the DPA).
Further Information
- Data Processing Agreement: Available at https://dein-eigentum.de/legal/dpa
- Privacy Policy: Available at https://dein-eigentum.de/legal/privacy
- Contact: support@dein-eigentum.de
The effective date of this version is displayed above this document.