VIBBLIN

Sub-processors

Who processes data on VIBBLIN's behalf, and where

List in force since 02/11/2026

This list is the annex to the data processing agreement (Art. 28 GDPR) and forms part of it. It is the same table the shopkeeper accepts together with the agreement.

The list

If we change or add a sub-processor, we write to the account email address thirty days in advance and update this page. Within that period the controller may object and, if the objection is well founded and we find no alternative, may terminate without penalty.

Sub-processorWhat it does SeatOutside the EU
Anthropic Ireland, Limited generating the assistant's replies and translations Ireland (EU); data processed in the United States Yes — EU standard contractual clauses (modules 2 and 3), in Anthropic's data processing agreement
OpenAI Ireland Ltd. / OpenAI, L.L.C. automatic check of the replies before they are sent, with the visitor's message they answer in shops with custom instructions; replies and translations only when the main provider does not respond Ireland (EU) and United States Yes — standard contractual clauses or, where it applies, an adequacy decision of the European Commission
Hostinger International Ltd. servers, database and backups Cipro (UE); dati in Germania (UE), copie settimanali in Lituania (UE) No
Brevo (Sendinblue SAS) delivery of service emails Francia (UE) No
Telegram FZ-LLC delivering notifications to the shop owner on Telegram (only if the shop turns on Telegram notifications) United Arab Emirates Yes — standard contractual clauses

Each sub-processor is bound by obligations no less strict than those of the agreement. We answer for their acts as for our own.

Back to the site Data processing agreementPrivacy notice