Who processes data on VIBBLIN's behalf, and where
List in force since 02/11/2026This list is the annex to the data processing agreement (Art. 28 GDPR) and forms part of it. It is the same table the shopkeeper accepts together with the agreement.
If we change or add a sub-processor, we write to the account email address thirty days in advance and update this page. Within that period the controller may object and, if the objection is well founded and we find no alternative, may terminate without penalty.
| Sub-processor | What it does | Seat | Outside the EU |
|---|---|---|---|
| Anthropic Ireland, Limited | generating the assistant's replies and translations | Ireland (EU); data processed in the United States | Yes — EU standard contractual clauses (modules 2 and 3), in Anthropic's data processing agreement |
|
OpenAI Ireland Ltd. / OpenAI, L.L.C.
Source:
https://developers.openai.com/api/docs/guides/your-data
— verified on 21/10/2026
|
automatic check of the replies before they are sent, with the visitor's message they answer in shops with custom instructions; replies and translations only when the main provider does not respond | Ireland (EU) and United States | Yes — standard contractual clauses or, where it applies, an adequacy decision of the European Commission |
| Hostinger International Ltd. | servers, database and backups | Cipro (UE); dati in Germania (UE), copie settimanali in Lituania (UE) | No |
| Brevo (Sendinblue SAS) | delivery of service emails | Francia (UE) | No |
| Telegram FZ-LLC | delivering notifications to the shop owner on Telegram (only if the shop turns on Telegram notifications) | United Arab Emirates | Yes — standard contractual clauses |
Each sub-processor is bound by obligations no less strict than those of the agreement. We answer for their acts as for our own.