Cette page est affichée en anglais. Le texte anglais fait foi tant que les traductions n’ont pas fait l’objet d’une relecture juridique.
Draft — pending legal review. Version 2.1 · Effective 20 October 2026 · Last updated 19 October 2026. This text is in force as published here; it is being reviewed by a lawyer and may be revised, and any revision that affects you will be announced as described below.
This page is written in English, and the English text is the authoritative version. It is shown in English whichever language you choose in the language switcher, with a short note at the top in your language, until translations of our policies have had legal review.
These are the companies that handle personal data on our behalf, or receive it because you use a feature that involves them. The list was compiled by looking at what the platform actually connects to, not from a template, and we update it before adding anyone. Where a company is outside the EU, the last column says on what basis data may go there. How we use your data overall is explained in the Privacy Policy.
1. Always involved
| Who | What they do | What they receive | Where, and on what basis |
|---|---|---|---|
| Hetzner Online GmbH | Hosts every system that makes up Neda eCampus, and stores our encrypted backups | All platform data, on servers we control | Finland (EU) for the servers; Germany (EU) for the backup storage |
| Cloudflare, Inc. (cdnjs), jsDelivr, and Google (Google Fonts) | Deliver software libraries used by some Moodle pages, and the typeface used by the Open edX platform. We are moving these files onto our own server. | Your IP address and browser details, when your browser fetches the files | Global networks; Cloudflare under the EU–US Data Privacy Framework |
| Purelymail | Sends our emails (receipts, account and security messages, replies) and receives email sent to us | Email addresses and the content of messages | United States — EU–US Data Privacy Framework or standard contractual clauses. We have decided to replace it with an EU provider. |
2. When you buy something
| Who | What they do | What they receive | Where, and on what basis |
|---|---|---|---|
| Stripe Payments Europe, Limited | Processes card payments, including Strong Customer Authentication (3-D Secure), and screens payments for fraud. For its own legal obligations Stripe is an independent controller under its own privacy policy. | Your card details (entered directly with Stripe, never seen by us), name, email address, billing address, the amount, and technical data about the device used to pay | Ireland (EU). Some processing at Stripe, Inc. in the United States — EU–US Data Privacy Framework and standard contractual clauses. |
3. Only if you use the feature
| Who | When | What they receive | Where, and on what basis |
|---|---|---|---|
| Google (Google Ireland Limited) | If you sign in with Google, on the account service or on Open edX | The fact that you are signing in to Neda eCampus. We receive your name, email address, picture and language from Google. | Ireland (EU) and United States — EU–US Data Privacy Framework |
| European Commission — VIES | If you give us a VAT number as a creator | The VAT number, to confirm it is registered | EU |
| An AI assistant you choose | Only if you, as a creator, connect one to your Neda Creator workspace | The course content you give it access to | Depends on the provider you choose. This is your own arrangement with that provider; we do not send it anything you have not connected. |
4. Not sub-processors
For completeness, things the platform uses that receive no personal data: the European Central Bank, from which we download published exchange rates; and DB-IP, whose country database we download and query on our own server, so that an IP address is never sent anywhere to be located (IP geolocation by DB-IP, licensed under Creative Commons Attribution 4.0). Links to WhatsApp and LinkedIn in the footer are plain links: nothing is loaded from those services until you click one.
5. Changes
When we intend to add or replace a company on this list, we update this page and email account holders at least 30 days beforehand. If you object, you may close your account before the change takes effect, and we will tell you whether your objection changes our decision. Organisations that use Neda eCampus for their own learners under our Data Processing Terms have the same notice and a right to object, as those terms describe.
Version 2.1 (draft pending legal review) — effective 20 October 2026, last updated 19 October 2026. Earlier versions are available on request from info@neda-els.com.