These are the companies that handle personal data on our behalf or receive it because you use a feature that involves them. The list is factual — it was compiled by looking at what the platform actually connects to — and we update it before adding anyone to it. Where a sub-processor is outside the EU, the column says on what basis data may go there.
Always involved
| Who | What they do | What they receive | Where |
|---|---|---|---|
| Hetzner Online GmbH | Hosts every system that makes up Neda eCampus, and the backups | Everything, on servers we control | Germany (EU) |
| Purelymail | Relays our outgoing email and receives incoming email | Email addresses and message content | United States — EU–US Data Privacy Framework. We have decided to replace this with an EU provider. |
Only if you use the feature
| Who | When | What they receive | Where |
|---|---|---|---|
| Google (Google Ireland Ltd) | If you sign in with Google | Your identity and the fact that you signed in to us; we receive your name, email and picture | EU / US — Data Privacy Framework |
| If you use the language switcher | The text of the page you are viewing, for translation. Nothing is sent until you pick a language. | EU / US — Data Privacy Framework | |
| LinkedIn (LinkedIn Ireland) | If you sign in with LinkedIn | As for Google sign-in | EU / US — Data Privacy Framework |
| European Commission — VIES | If you give us a VAT number as a creator | The VAT number, to confirm it is registered | EU |
Planned — not yet live
| Who | What they will do | What they will receive | Where |
|---|---|---|---|
| Stripe (Stripe Payments Europe Ltd) | Process payments; hold creators’ balances; verify creators’ identity; make payouts | Payment details, billing name and address, and for creators the identity and bank details Stripe requires | EU (Ireland); Stripe Inc. in the US under the Data Privacy Framework and standard contractual clauses |
Not sub-processors
For completeness, two things the platform uses that receive no personal data: the European Central Bank, from which we download published exchange rates; and DB-IP, whose country database we download monthly and query on our own server, so that an IP address is never sent anywhere to be located.
Changes
When we intend to add a sub-processor, we will update this page and email account holders at least 30 days beforehand. If you object, you may close your account before the change, and we will tell you whether the objection changes our decision.
Version 1.0 — 22 August 2026.