Subprocessors
Last updated:
To run SeniorMap.eu we use external providers. Those that process personal data on our behalf do so under a data processing agreement (Art. 28 GDPR), only on our instructions and under confidentiality. Michał Śnieżyński remains the controller (details in the privacy policy).
The Polish version of this page is the binding one. This English version is provided for convenience.
Processors
| Provider | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) and Amazon Web Services, Inc. (USA) | application hosting (AWS Amplify, including CDN and logs), database (Amazon RDS for PostgreSQL), care home photo storage (Amazon S3 with CloudFront), storage of configuration secrets | all data processed by the service, including request and care home account data, IP addresses in logs | USA (us-east-1 region, Northern Virginia); public content may be delivered from CDN servers worldwide | EU-US Data Privacy Framework and standard contractual clauses in the AWS data processing addendum |
| Resend (Plus Five Five, Inc., USA) | sending emails: verification codes, request and reply notifications, sign-in links | email address, first name, message content | Ireland (eu-west-1 region, European Union) | sending data stays in the EU; the provider is based in the USA, so its data processing agreement includes standard contractual clauses |
| Cloudflare, Inc. (USA) | Cloudflare Turnstile: protecting forms against bots; DNS for seniormap.eu; proxy for traffic to the statistics server | IP address, browser and device information, page interaction signals | Cloudflare's global network, including the USA | EU-US Data Privacy Framework and standard contractual clauses in Cloudflare's data processing addendum |
| Hetzner Online GmbH (Germany) | server for our own Plausible Analytics instance: aggregate, cookieless website statistics | page URL, referrer, browser and device type, country derived from the IP address (the IP address is not stored) | European Union | not applicable (data stays in the EEA) |
| Migadu (Switzerland) | the hello@seniormap.eu mailbox: receiving and sending correspondence, complaints and reports | message content, email address | Switzerland and the European Union | European Commission adequacy decision for Switzerland |
Traffic to SeniorMap.eu itself does not pass through Cloudflare: Cloudflare only provides DNS and pages are delivered by AWS CloudFront.
Other recipients
The following are not our processors. They receive data as separate controllers:
- Care homes that a family decides to share its contact with: first name, email address and phone number. Before that decision, care homes see only an anonymised request summary.
- OpenStreetMap Foundation (United Kingdom): when a map is shown, the browser loads map tiles directly from OpenStreetMap servers, which see the IP address and the page the request comes from. The United Kingdom has a European Commission adequacy decision.
- Public authorities, where the law requires it.
Changes to this list
When we add or change a provider, we will update this page and the date at the top. Send questions about providers or requests for a copy of the transfer safeguards to hello@seniormap.eu.