Subprocessors
Last updated: 17 Ιουλίου 2026
The German version of this document is the legally binding original. Translations into other languages are provided as a courtesy; in case of discrepancies, the German version prevails.
Overview
Capwork e.U. (Owner: Nikolas Kain) uses the subprocessors listed below to provide the Capwork service. This list is provided pursuant to Art. 28(2) GDPR and our Data Processing Agreement (AVV).
Each subprocessor is contractually obligated to maintain a level of protection equivalent to GDPR requirements. Third-country transfers occur exclusively on the basis of appropriate safeguards (EU-US Data Privacy Framework and/or Standard Contractual Clauses pursuant to Module 2/3).
List of subprocessors
| Provider | Purpose | Data categories | Region / location | Transfer legal basis |
|---|---|---|---|---|
| Google Cloud Platform (Google Ireland Ltd.) | Hosting, database, application runtime, logging, secret management, storage | All personal data processed in the course of using the service (contact data, bookings, invoices, content) | europe-west1, europe-west4, eur3 | EU-US DPF + SCCs (Module 2/3) |
| Firebase Authentication / Identity Platform (Google Ireland Ltd.) | User authentication, session tokens | Email address, authentication tokens, IP address, sign-in timestamps | EU | EU-US DPF + SCCs (Module 2/3) |
| Vertex AI — Gemini & Anthropic Claude (Google Ireland Ltd.) | Εξαγωγή συμπερασμάτων ΤΝ (Google Gemini καθώς και μοντέλα συνεργατών όπως το Anthropic Claude, που λειτουργούν μέσω του Vertex AI) για ανάλυση σχολίων, insights, OCR, πλαίσιο παραγγελιών | Text inputs to AI features (anonymized/aggregated where possible) | europe-west1, europe-west4, eu | EU-US DPF + SCCs (Module 2/3) |
| Stripe Payments Europe Ltd. | Payment processing, billing, EU VAT/OSS tax management | Name, email, billing address, VAT ID, payment method details (processed by Stripe itself, never by Capwork) | Ireland (EU) | Within EU — no transfer |
| Twilio Ireland Limited | Sending and receiving SMS and WhatsApp messages | Phone number, message content, delivery status | Ireland (EU) | Within EU — no transfer |
| Bird B.V. | Subprocessors.rows.bird.purpose | Subprocessors.rows.bird.data | Amsterdam, Netherlands (EU) | Within EU — no transfer |
| Google Workspace / Gmail (Google Ireland Ltd.) | Αποστολή email της πλατφόρμας σε εγγεγραμμένους χρήστες (μηνύματα καλωσορίσματος και ένταξης) | Όνομα, διεύθυνση email, περιεχόμενο μηνύματος (συμπεριλαμβανομένων των αποδεκτών νομικών εγγράφων ως συνημμένων) | EU | EU-US DPF + SCCs (Module 2/3) |
| Google Maps Platform (Google Ireland Ltd.) | Αναζήτηση διευθύνσεων, υπολογισμός χαρτών και αποστάσεων (γεωκωδικοποίηση, μήτρα αποστάσεων) για λειτουργίες ραντεβού, παραγγελιών και οχημάτων | Καταχωρημένα ή αποθηκευμένα δεδομένα διευθύνσεων· κατά τη φόρτωση σε δημόσιες σελίδες, η διεύθυνση IP της συσκευής | EU / global | EU-US DPF + SCCs (Module 2/3) |
Changes and right to object
Capwork notifies controllers at least 30 days in advance of adding a new subprocessor, by email to the stored contact address and by updating this list.
Controllers may object within this period. In case of a legitimate objection, the parties will jointly seek a solution; if this is not possible, both sides have a right of extraordinary termination.