Legal
List of Subprocessors
Infrastructure and service providers we rely on.
Document content
Effective date: 15 May 2026
The subprocessors listed below process personal data of users of the udalist.app service on behalf of the controller (BHPS Labs s.r.o. Company ID: 29574668 Registered office: Klínová 620/1, Hulváky, 709 00 Ostrava Registered in the Commercial Register maintained by the Regional Court in Ostrava, Section B, Insert 103978). For each subprocessor, the purpose, registered office, the categories of personal data transferred, and a link to its privacy policy / Data Processing Agreement (DPA) are provided.
| # | Subprocessor | Purpose of processing | Registered office / Country | Categories of personal data | DPA / GDPR link |
|---|---|---|---|---|---|
| 1 | Hetzner Online GmbH | Hosting of the application and database (operation of the service) | Gunzenhausen, Germany (EU) | all user data stored in the application (account, e-mail, content, IP, logs) | https://www.hetzner.com/legal/privacy-policy |
| 2 | Backblaze, Inc. (B2 / S3) | Backups of application data | registered office: San Mateo, California, USA; data stored in the EU region (Amsterdam, Netherlands) | all user data contained in the backups | https://www.backblaze.com/company/dpa.html |
| 3 | Heinlein Support GmbH (Mailbox.org) | Corporate e-mail – communication with users | Berlin, Germany (EU) | user's e-mail address, content of e-mail communication, name | https://mailbox.org/en/data-protection |
| 4 | Resend, Inc. | Sending of transactional and notification e-mails | San Francisco, California, USA | recipient's e-mail address, name, content of the e-mail | https://resend.com/legal/dpa |
| 5 | Paddle.com Market Ltd. | Processing of payments and issuing of invoices | London, United Kingdom | name, e-mail, billing address, payment details, payment history | https://www.paddle.com/legal/dpa |
| 6 | Functional Software, Inc. (Sentry) | Monitoring of application errors and stability | registered office: San Francisco, California, USA; data stored in the EU region (Frankfurt, Germany) | IP address, user-agent, user ID, technical data about the error | https://sentry.io/legal/dpa/ |
| 7 | Google Ireland Ltd. (Google Search Console) | Search statistics in the Google service | Dublin, Ireland (EU); parent company Google LLC, USA | aggregated data about search queries and traffic | https://business.safety.google/gdpr/ |
| 8 | Microsoft Ireland Operations Ltd. (Bing Webmaster Tools) | Search statistics in the Bing service | Dublin, Ireland (EU) | aggregated data about search queries and traffic | https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA |
| 9 | Seznam.cz, a.s. (Seznam Webmaster) | Search statistics in the Seznam service | Prague, Czech Republic (EU) | aggregated data about search queries and traffic | https://o.seznam.cz/ochrana-udaju/ |
Transfer of personal data outside the EU/EEA
Some subprocessors are based outside the EU/EEA (Resend — USA; Paddle — United Kingdom). Backblaze, Inc. and Functional Software, Inc. (Sentry) are indeed based in the USA, but the data is physically stored in the EU (Backblaze — Amsterdam, Netherlands; Sentry — Frankfurt, Germany); access from the USA is theoretically possible, and therefore the regime set out below also applies to them. The transfer of personal data to these countries takes place on the basis of:
- United Kingdom (Paddle) — on the basis of the European Commission's adequacy decision of 28 June 2021.
- USA (Backblaze, Resend, Sentry) — on the basis of the Standard Contractual Clauses adopted by the European Commission, or the EU–U.S. Data Privacy Framework, if the given subprocessor is certified.
Sub-suppliers without access to users' personal data
For the sake of completeness: The controller also uses other technical suppliers that do not process personal data of users of the service — e.g. GitLab (storage of source code, without user data), Discord (internal team communication), and Gmail (sign-in to corporate services). These sub-suppliers are therefore not listed in the list of subprocessors.
The list is valid as of 15 May 2026 and may be updated from time to time. The current version is available at the service's address.