Last Updated: January 26, 2026
This Recipient Register forms part of the Onde Website Privacy Policy and is incorporated by reference. It lists (i) our processors (service providers processing personal data on our documented instructions) and (ii) independent controllers (e.g., advertising platforms that determine their own purposes and means of processing).
International transfers (Chapter V GDPR). A transfer occurs when personal data is made available to a recipient in a third country, including remote access from a third country. Where an EEA‑based provider involves third‑country access (e.g., group support), we ensure appropriate safeguards apply.
Transfer tools and safeguards:
Government access requests (Art. 48 GDPR). We do not disclose personal data solely on the basis of a third‑country authority judgment/decision that is not grounded in an applicable international agreement (e.g., MLAT). Where disclosure is legally required, we assess legality and proportionality, disclose only the minimum necessary, and ensure a valid Chapter V mechanism applies if the disclosure constitutes an international transfer.
A) Service providers (Processors / Sub‑processors)
| Recipient | Purpose | Location of processing | Transfer tool (if any) |
|---|---|---|---|
| Amazon Web Services EMEA S.à r.l. | Hosting / infrastructure | EEA (EU regions, as configured) | N/A (EEA). EU SCCs (2021/914) if third‑country access occurs (where applicable) |
| Hetzner Online GmbH | Hosting / infrastructure | EEA (EU) | EEA (as configured). If remote access/support from third countries occurs, Chapter V safeguards apply (e.g., SCCs) |
| Leaseweb Netherlands B.V. (or relevant Leaseweb EU entity) | Hosting / infrastructure | EEA (EU) | EEA (as configured). If remote access/support from third countries occurs, Chapter V safeguards apply (e.g., SCCs) |
| Gcore S.A. | Hosting / CDN | EEA (EU, as configured) | EEA (as configured). If remote access/support from third countries occurs, Chapter V safeguards apply (e.g., SCCs) |
| Functional Software, Inc. (Sentry) | Error & crash reporting | US (or EEA if EU region is configured) | EU–US DPF (if certified & applicable); otherwise EU SCCs (2021/914) + supplementary measures |
| PostHog, Inc. | Product analytics | EEA (Frankfurt) if PostHog Cloud EU. US otherwise | N/A (EU Cloud); otherwise EU‑U.S. DPF (Art 45) or EU SCCs (2021/914) (as applicable) |
| Brevo SAS | Email communications | EEA (EU) | N/A (EEA) |
| Typeform S.L. | Web forms/lead capture | US (Virginia) by default. EEA only if EU data hosting is enabled | EU SCCs (2021/914) for any non‑EEA processing/onward transfers (where applicable) |
| Zendesk International Limited (Ireland) → Zendesk, Inc. (US) | Support ticketing/helpdesk | EEA + possible US access/processing | Zendesk BCR / EU‑U.S. DPF (Art 45) / EU SCCs (2021/914) (as applicable) |
| Intercom R&D Unlimited Company → Intercom, Inc. (US) | Support chat/messaging | EEA (Dublin) / US / AU (workspace-region dependent) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable) |
| Gleap GmbH | Support widget/user feedback | EU/EEA | N/A (EU/EEA). SCCs (2021/914) if third‑country processing occurs (where applicable) |
| GrowthBook, Inc. | Feature flags / A/B testing | US | EU SCCs (2021/914) + supplementary measures. |
| Calendly LLC | Scheduling demos/calls | US (data centers) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable) |
| Zapier, Inc. | Automation/integration for lead routing | US and other jurisdictions (Zapier + sub‑processors) | EU‑U.S. DPF (Art 45); SCCs (2021/914) fallback + supplementary measures. |
| Google Ireland Limited → Google LLC (Google Workspace) | Email/docs storage & collaboration | Global (including EEA & US) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable). |
| Google Ireland Limited → Google LLC (reCAPTCHA) | Anti‑bot / abuse prevention for forms (security) | EEA + US / global (as applicable) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable). |
| Slack Technologies, LLC (Salesforce group) | Internal communications | US (default AWS hosting) + other regions for certain data residency options. | EU‑U.S. DPF (via Salesforce) and/or EU SCCs (2021/914) (as applicable). |
B) Advertising & lead generation partners (Independent controllers)
| Recipient | Purpose | Location of processing | Transfer tool (if any) |
|---|---|---|---|
| Google Ireland Limited → Google LLC (Google Ads / Google Marketing Platform) | Advertising measurement & targeting | Global (incl. EEA & US) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable) |
| Meta Platforms Ireland Limited → Meta Platforms, Inc. | Advertising measurement & targeting | Global (incl. EEA & US) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable) |
| LinkedIn Ireland Unlimited Company → LinkedIn Corporation | Advertising measurement & targeting | Global (incl. EEA & US) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable) |
| X Internet Unlimited Company (Ireland) → X Corp. | Advertising measurement & targeting | Global (incl. EEA & US) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable) |
| Microsoft Ireland Operations Limited → Microsoft Corporation (e.g., Microsoft Advertising) | Advertising measurement & targeting | Global (incl. EEA & US) | EU‑U.S. DPF (Art 45) and/or EU SCCs (2021/914) (as applicable) |
| Capterra, Inc. (Gartner Digital Markets) | Lead generation marketplace/ads | US / Global | EU‑U.S. DPF (Art 45) (as stated by provider). |