Who else touches your data, and why.

Transfers

When data leaves the EEA.

The right-hand column above states the actual legal mechanism per vendor, checked against that vendor's own current notice, not a blanket assumption. Where a vendor participates in the EU-U.S. Data Privacy Framework, that transfer is covered by the European Commission's adequacy decision for DPF-certified US organisations. Where it does not, we rely on Standard Contractual Clauses. Hetzner processes data within the EU, so no international-transfer mechanism applies to it.