Sub-processors
The third parties Syncek engages to help provide the Service.
Last updated: April 20, 2026
This page lists the sub-processors that Syncek SL engages to help provide the Syncek Service. A sub-processor is a third party engaged by Syncek to process personal information on behalf of our customers, pursuant to Art. 28(2)–(4) of the GDPR and our Data Processing Addendum (DPA). Each sub-processor is bound by a written contract that imposes the same data-protection obligations we owe to you.
1. Current sub-processors
| Sub-processor | Purpose | Location | Transfer safeguards |
|---|---|---|---|
| Hostinger International Ltd. | Application hosting and infrastructure — production servers, primary database, and backups. | European Union | EU-based infrastructure; no transfer of Customer Data outside the EU for hosting. |
| Stripe, Inc. | Payment processing for subscription billing. Syncek does not see or store full payment-card numbers; Stripe handles card data under PCI-DSS. | United States | EU-US Data Privacy Framework (certified) + EU Standard Contractual Clauses |
| Resend, Inc. | Transactional email delivery (account verification, invoices, security alerts, notifications). | United States | EU Standard Contractual Clauses + supplementary measures (TLS in transit) |
| Cloudflare, Inc. | Object storage (R2) for uploaded files, content delivery network (CDN), and edge security / DDoS mitigation. | Global network (EU edge nodes preferred for EU traffic) | EU-US Data Privacy Framework (certified) + EU Standard Contractual Clauses |
| Google LLC (Google Analytics 4) | Aggregated web analytics on the marketing site only. Operates under Google Consent Mode v2 with ads_data_redaction=true: before the visitor accepts analytics in the cookie banner, Google receives only a cookieless, redacted measurement ping (used for modeled conversions); no _ga* cookies are written. After consent, full GA4 cookies and events are recorded. Data retention: 14 months. Google Signals: off. Not used inside the Syncek application. | United States | EU-US Data Privacy Framework (certified) + EU Standard Contractual Clauses |
2. Change notification
Before adding or replacing a sub-processor, we will update this page at least thirty (30) days in advance. Customers may object on reasonable grounds related to data protection by writing to legal@syncek.com within that 30-day window; the objection procedure is described in the Data Processing Addendum.
To receive advance notice of sub-processor changes by email, subscribe by writing to legal@syncek.com with the subject "Subprocessor notifications".
3. Infrastructure hosting
Syncek's production application, primary database, and backups are hosted with Hostinger in the European Union (see Section 1). Customer Data never leaves the EU for hosting purposes; the only cross-border transfers are to the limited- purpose sub-processors listed in Section 1 (Stripe, Resend, Cloudflare, Google Analytics), each covered by the transfer safeguards described there.
4. Contact
Questions about our sub-processors: legal@syncek.com. For the Data Processing Addendum itself, see our Data Processing Addendum.