
These are the suppliers Eventleash engages as sub-processors to deliver the service. They process data for that purpose only and are bound by processing agreements with obligations no less onerous than the ones we owe our customers.
Any addition or replacement is notified at least 30 days in advance, by e-mail to the account administrator and through an in-platform notice. You may object within 15 days on reasonable grounds by writing to privacy@eventleash.com: if no workable alternative is found, you have the right to terminate. The details are in clause 8 of the DPA.
| Sub-processor | Activity | Processing location | Basis for any transfer |
|---|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) | Application hosting, managed relational database, e-mail sending, serverless functions, storage | European Union — Ireland (eu-west-1) | No transfer for storage. Support access from third countries covered by Standard Contractual Clauses |
| MongoDB Ltd / MongoDB, Inc. | Managed document database holding tenant data | European Union | Standard Contractual Clauses for non-EEA support access |
| Cloudflare Ltd / Cloudflare, Inc. | Content delivery network, application protection, edge execution of the front-end | European Union, on a globally present network | Standard Contractual Clauses |
| Stripe Payments Europe Ltd (Ireland) | Payment and recurring billing management. In respect of payment and anti-fraud data, Stripe acts as an independent controller | European Union — Ireland, with group access | Standard Contractual Clauses |
The Processor engages no further sub-processors for the processing of the Controller's data. As at the date of this DPA no statistical measurement or tracking tools are active on the application or on tenants' public pages; should any be enabled, this Annex will be updated with the notice period set out in clause 8.3.
The Processor's internal staff and collaborators act as authorised persons under Article 29 GDPR and not as sub-processors.