Subprocessors
Version 2026-11-01
Ce document n'est disponible qu'en anglais. La version anglaise fait foi ; les traductions suivront.
Pähkinänsärkijä Oy uses the following subprocessors to provide Nutcracker. They are bound by data processing terms that give at least the protection of our Data Processing Agreement.
Current subprocessors
| Subprocessor | Service | Purpose | Data | Location |
|---|---|---|---|---|
| Google Cloud EMEA Ltd (Ireland) / Google LLC | Cloud Run, Cloud SQL (PostgreSQL), Firestore, Cloud Storage, Compute Engine, Secret Manager, Cloud Logging and Monitoring | Hosting of the apps, databases, uploaded documents, search index and backups | All Service data | EU: europe-north1 (Hamina, Finland) |
| Google Cloud EMEA Ltd / Google LLC | Cloud Load Balancing, Cloud CDN, Cloud Armor | Delivering the site, protection against attacks | IP addresses, request data; only public pages are cached | Global edge network, origin in Finland |
| Google Cloud EMEA Ltd / Google LLC | Cloud Scheduler | Starting scheduled jobs | No personal data | EU: europe-central2 (Warsaw, Poland) |
| Google Cloud EMEA Ltd / Google LLC | Vertex AI (Gemini models) | AI features: bid assistant, smart search, assistant, descriptions; search embeddings | Text of the request and relevant Customer Content; not used for training | EU multi-region endpoint; embeddings in europe-north1 |
| Google LLC (Firebase) | Firebase Authentication, Google Sign-In | Accounts and sign-in | E-mail, name, password hash, sign-in data | Global service; may process data in the USA |
| Google LLC (Firebase) | Firebase Cloud Messaging | Push notifications to the mobile apps | Push token, notification text (never message content) | Global service; may process data in the USA |
| Apple Inc. | Apple Push Notification service | Delivering push notifications to iOS devices | Push token, notification text | Global service |
| Stripe Payments Europe Ltd (Ireland) / Stripe, Inc. | Payments, subscriptions, invoices, Stripe Tax | Billing | Billing contact, address, VAT number, payment details | EU and USA |
| Amazon Web Services EMEA SARL (Luxembourg) | Amazon SES, SNS, SQS | Sending e-mail (alerts, invitations, notifications) and handling bounces | E-mail address, e-mail content, delivery events | EU: eu-north-1 (Stockholm, Sweden) |
| Amazon Web Services EMEA SARL | Route 53 | DNS for our domains | No personal data | Global service |
| Google Ireland Ltd / Google LLC | Google Analytics 4, Google Ads | Analytics and advertising measurement, only after consent | Pseudonymous identifiers, usage data, ad click identifiers | EU and USA |
| Google Ireland Ltd / Google LLC | Google Workspace (Gmail) | Support e-mail | Content of your messages to us | EU and USA |
Run by us (no third party)
- Vector search (Qdrant) on our own virtual machine in europe-north1.
- Document conversion (LibreOffice) as our own internal service in europe-north1.
- Map tiles (Protomaps) served from our own storage bucket; fonts are bundled with the site.
Transfers outside the EU/EEA
Where a subprocessor processes data outside the EU/EEA, the transfer relies on the EU-US Data Privacy Framework (for certified providers) or on the European Commission's Standard Contractual Clauses, with supplementary measures where needed.
Changes
We announce new subprocessors at least 30 days in advance by updating this page and notifying organisation owners by e-mail. A customer may object as described in the DPA. Questions: support@pahkinansarkija.fi.