{"id":140,"date":"2026-05-21T00:31:33","date_gmt":"2026-05-20T22:31:33","guid":{"rendered":"https:\/\/promastro.be\/sub-processors\/"},"modified":"2026-05-21T00:31:33","modified_gmt":"2026-05-20T22:31:33","slug":"sub-processors","status":"publish","type":"page","link":"https:\/\/promastro.be\/en\/sub-processors\/","title":{"rendered":"List of sub-processors"},"content":{"rendered":"\n<style>\n  :root { color-scheme: light; }\n  .apb-legal-page { background: #fff; color: #1a1a2e; padding: 24px 32px; font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif; line-height: 1.65; max-width: 920px; margin: 0 auto; }\n  .apb-legal-page h2 { color: #0C447C; margin-top: 1.8em; border-bottom: 1px solid #E2E6EA; padding-bottom: 6px; }\n  .apb-legal-page h3 { color: #185FA5; margin-top: 1.4em; }\n  .apb-legal-page a { color: #185FA5; }\n  .apb-legal-page strong { color: #1a1a2e; }\n  .apb-legal-page table { border: 1px solid #E2E6EA; margin: 1em 0; }\n  .apb-legal-page th { background: #F1F5F9; }\n  .apb-legal-page code { background: #F1F5F9; padding: 1px 6px; border-radius: 4px; font-size: 0.92em; }\n<\/style>\n<div class=\"apb-legal-page\">\n\n<p><em>Last updated: <strong>[TO BE COMPLETED: publication date]<\/strong> \u00b7 Version <strong>1.0<\/strong>.<\/em><\/p>\n\n<p>This page lists all subprocessors involved in the processing of your personal data as part of the Promastro service (<a href=\"https:\/\/promastro.be\/en\/\">promastro.be<\/a>).<\/p>\n\n<p>In accordance with Articles 28 and 30 of the R\u00e8glement g\u00e9n\u00e9ral sur la protection des donn\u00e9es (RGPD) (General Data Protection Regulation) and the transparency owed to users, this list is kept up to date. Any substantial modification (addition of a non-substitute subprocessor, change of location, additional transfer outside the EU) is notified by email to the affected users at least <strong>30 jours<\/strong> (30 days) before its effective date, allowing you the possibility to object to the processing or terminate your account.<\/p>\n\n<h2>Summary<\/h2>\n<ul>\n<li><strong>Number of active subprocessors<\/strong>: 7<\/li>\n<li><strong>Subprocessors located in the EU\/EEA<\/strong>: 5<\/li>\n<li><strong>Subprocessors outside the EU\/EEA<\/strong>: 2 (United Kingdom \u2014 adequacy decision, United States \u2014 SCCs)<\/li>\n<li><strong>No<\/strong> advertising subprocessors, no data brokers, no profiling brokers<\/li>\n<\/ul>\n\n<h2>Detailed List of Subprocessors<\/h2>\n\n<h3>1. Mollie B.V.<\/h3>\n<table style=\"width:100%;border-collapse:collapse\">\n<tbody>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee;width:30%\"><strong>Purpose<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Payment processing (credit cards, Bancontact, SEPA mandates), invoicing<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Data processed<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Last name, first name, email, billing address, card data (PCI-DSS \u2014 not visible to Promastro), transaction history<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Headquarters<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Amsterdam, Netherlands (EU)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Hosting<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">European Union<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Framework<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">DPA Mollie + PSP authorization by the Dutch Central Bank (DNB) \u2014 compliant with RGPD + DSP2<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Documentation<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\"><a href=\"https:\/\/www.mollie.com\/privacy\" rel=\"noopener\" target=\"_blank\">Mollie Privacy Policy<\/a><\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h3>2. Sendinblue SAS (Brevo)<\/h3>\n<table style=\"width:100%;border-collapse:collapse\">\n<tbody>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee;width:30%\"><strong>Purpose<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Sending transactional emails (registration, payment, notifications) via SMTP relay and API<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Data processed<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Recipient email, last name\/first name, email content (template configured on Promastro side)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Headquarters<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Paris, France (EU)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Hosting<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">European Union (Germany)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Framework<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">DPA Brevo compliant with RGPD \u2014 click tracking disabled<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Documentation<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\"><a href=\"https:\/\/www.brevo.com\/fr\/legal\/privacypolicy\/\" rel=\"noopener\" target=\"_blank\">Brevo Privacy Policy<\/a><\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h3>3. Anthropic PBC <span style=\"font-size:0.85em;color:#b54708\">\u2014 United States Transfer<\/span><\/h3>\n<table style=\"width:100%;border-collapse:collapse\">\n<tbody>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee;width:30%\"><strong>Purpose<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Claude AI model \u2014 automated moderation of reviews and descriptions, natural language search, description writing assistance, FR\/NL\/EN translations<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Data processed<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Review text (moderation), search query (natural language), description draft or text to be translated (only upon explicit consent from the Pro). <strong>No identifying data<\/strong> (email, TVA, GPS, address) is ever sent to Anthropic<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Headquarters<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">San Francisco, California, United States<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Hosting<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">United States (with potential use of AWS \/ GCP \u2014 see Anthropic DPA)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Framework<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">DPA Anthropic + Clauses contractuelles types (CCT\/SCCs) (Standard Contractual Clauses) Module 2 \u2014 European Commission, June 2021 version. Contractual commitment by Anthropic <strong>not to use the data to train its models<\/strong> (standard API clause). Schrems II Transfer Impact Assessment (TIA) documented and available upon request.<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Supplementary measures<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Minimization of data sent, end-to-end TLS encryption, call logging (audit), retention limited to 30 jours (30 days) on Anthropic side then deletion<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Documentation<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\"><a href=\"https:\/\/www.anthropic.com\/legal\/privacy\" rel=\"noopener\" target=\"_blank\">Anthropic Policy<\/a> \u00b7 <a href=\"https:\/\/www.anthropic.com\/legal\/dpa\" rel=\"noopener\" target=\"_blank\">Anthropic DPA<\/a><\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h3>4. Horus \/ Falco SA<\/h3>\n<table style=\"width:100%;border-collapse:collapse\">\n<tbody>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee;width:30%\"><strong>Purpose<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Issuance of electronic invoices in PEPPOL \/ UBL format, compliance with Belgian B2B invoicing 2026<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Data processed<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Company name, TVA (VAT number), billing address, invoice lines, amounts, payment method and status<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Headquarters<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Belgium (EU)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Hosting<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">European Union<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Framework<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">DPA Falco compliant with RGPD<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Documentation<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\"><a href=\"https:\/\/falco-app.be\" rel=\"noopener\" target=\"_blank\">falco-app.be<\/a><\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h3>5. Contabo GmbH<\/h3>\n<table style=\"width:100%;border-collapse:collapse\">\n<tbody>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee;width:30%\"><strong>Purpose<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Hosting of production server: WordPress application, MariaDB database, user files (photos, encrypted KYC)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Data processed<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">All Site data (in the passive hosting sense \u2014 no logical access to content by Contabo)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Headquarters<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Munich, Germany (EU)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Hosting<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Germany (EU) \u2014 Nuremberg datacenter<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Framework<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">DPA Contabo compliant with RGPD \u2014 ISO 27001 (datacenters)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Documentation<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\"><a href=\"https:\/\/contabo.com\/legal\/data-protection\" rel=\"noopener\" target=\"_blank\">Contabo Data Protection<\/a><\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h3>6. OpenStreetMap Foundation <span style=\"font-size:0.85em;color:#b54708\">\u2014 United Kingdom (adequacy decision)<\/span><\/h3>\n<table style=\"width:100%;border-collapse:collapse\">\n<tbody>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee;width:30%\"><strong>Purpose<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Provision of map backgrounds (map tiles) displayed on profile pages and geo-pages<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Data processed<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Visitor&#8217;s IP address (when loading tiles \u2014 standard HTTP request, anonymous), coordinates of the displayed area (latitude\/longitude)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Headquarters<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Cambridge, United Kingdom<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Hosting<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">United Kingdom + EU mirrors<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Framework<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Transfer governed by the <strong>United Kingdom adequacy decision<\/strong> (Commission Decision (EU) 2021\/1772)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Documentation<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\"><a href=\"https:\/\/wiki.osmfoundation.org\/wiki\/Privacy_Policy\" rel=\"noopener\" target=\"_blank\">OSMF Privacy Policy<\/a><\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h3>7. European Commission \u2014 VIES<\/h3>\n<table style=\"width:100%;border-collapse:collapse\">\n<tbody>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee;width:30%\"><strong>Purpose<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Automated verification of intra-Community VAT number at the time of Pro registration<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Data processed<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">VAT number (sent in clear text for verification, never stored in clear text on Promastro side), return: validity status + company name<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Headquarters<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Brussels, Belgium (EU)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Framework<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\">Official public service of the European Union \u2014 legal basis: legitimate interest (fight against fraud)<\/td><\/tr>\n<tr><td style=\"padding:6px;border-bottom:1px solid #eee\"><strong>Documentation<\/strong><\/td><td style=\"padding:6px;border-bottom:1px solid #eee\"><a href=\"https:\/\/ec.europa.eu\/taxation_customs\/vies\/\" rel=\"noopener\" target=\"_blank\">VIES<\/a><\/td><\/tr>\n<\/tbody>\n<\/table>\n\n<h2><em>Optional<\/em> Subprocessors (depending on configuration)<\/h2>\n\n<h3>Twilio \/ Bird \u2014 SMS (if enabled)<\/h3>\n<p>If you enable SMS notifications in your account, the phone number and message content may be processed by <strong>Twilio Inc.<\/strong> (United States, under SCCs) or <strong>Bird<\/strong> (Netherlands, EU) depending on the provider selected by Promastro. The functionality is disabled by default.<\/p>\n\n<h2><em>Excluded<\/em> Subprocessors<\/h2>\n<p>For information and transparency purposes, Promastro has made the deliberate choice <strong>not to use<\/strong> the following services:<\/p>\n<ul>\n<li><strong>Google Analytics<\/strong> \u2014 replaced by Plausible Analytics (privacy-friendly, without third-party cookies);<\/li>\n<li><strong>Google Maps<\/strong> \u2014 replaced by OpenStreetMap;<\/li>\n<li><strong>Google reCAPTCHA<\/strong> \u2014 not used;<\/li>\n<li><strong>Facebook Pixel \/ Meta Ads<\/strong> \u2014 not used;<\/li>\n<li><strong>DeepSeek<\/strong> (Chinese AI) \u2014 formally excluded (Belgian DPA investigation, data outside EU without SCCs);<\/li>\n<li><strong>OpenAI \/ ChatGPT<\/strong> \u2014 not used (Claude\/Anthropic selected for its stricter contractual guarantees on non-training of models);<\/li>\n<li><strong>Any data broker, any advertising broker, any ad-tech platform.<\/strong><\/li>\n<\/ul>\n\n<h2>Notification Procedure in Case of Change<\/h2>\n<p>Any addition of a new non-substitute subprocessor or any substantial modification to this list (change of location outside the EU, new international transfer, change of purpose) is:<\/p>\n<ol>\n<li><strong>Published<\/strong> on this page with update of the version number and date;<\/li>\n<li><strong>Notified by email<\/strong> to affected users at least 30 jours (30 days) before effective date;<\/li>\n<li><strong>Subject to your right to object<\/strong>: you may object to the new subprocessor by writing to <a href=\"mailto:rgpd@promastro.be\">rgpd@promastro.be<\/a>. If the objection makes contract execution impossible, you may terminate your account without fees.<\/li>\n<\/ol>\n\n<h2>Version History<\/h2>\n<ul>\n<li><strong>v1.0<\/strong> \u2014 Initial publication, 7 active subprocessors.<\/li>\n<\/ul>\n\n<h2>Contact<\/h2>\n<p>For any question regarding a subprocessor or to request a copy of a DPA: <a href=\"mailto:rgpd@promastro.be\">rgpd@promastro.be<\/a>.<\/p>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Last updated: [TO BE COMPLETED: publication date] \u00b7 Version 1.0. This page lists all subprocessors involved in the processing of your personal data as part of the Promastro service (promastro.be). In accordance with Articles 28 and 30 of the R\u00e8glement g\u00e9n\u00e9ral sur la protection des donn\u00e9es (RGPD) (General Data Protection Regulation) and the transparency owed [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-140","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/promastro.be\/en\/wp-json\/wp\/v2\/pages\/140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/promastro.be\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/promastro.be\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/promastro.be\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/promastro.be\/en\/wp-json\/wp\/v2\/comments?post=140"}],"version-history":[{"count":0,"href":"https:\/\/promastro.be\/en\/wp-json\/wp\/v2\/pages\/140\/revisions"}],"wp:attachment":[{"href":"https:\/\/promastro.be\/en\/wp-json\/wp\/v2\/media?parent=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}