Sub-processors List
Data Processors pursuant to GDPR Art. 28
Last updated: 2026-10-09
Transparency Notice: This list contains all third-party providers (sub-processors) that process personal data on our behalf as part of our services.
We have concluded Data Processing Agreements (DPA) pursuant to GDPR Art. 28 with all listed sub-processors.
AI Providers (Artificial Intelligence)
| Provider | Purpose | Data Processed | Location | DPA Status | Training |
|---|---|---|---|---|---|
|
Anthropic PBC
San Francisco, USA
|
EEAT Analyses, SEO Copilot (Primary) |
Chat queries
Website content
|
USA |
✓ Concluded
|
Opt-Out |
|
OpenAI LLC
San Francisco, USA
|
AI Analyses (Fallback System) |
Chat queries
Website content
|
USA |
✓ Concluded
|
Opt-Out |
Payment Processing
| Provider | Purpose | Data Processed | Location | DPA Status | Certification |
|---|---|---|---|---|---|
|
Stripe Inc.
Dublin, Ireland (EU)
|
Payment Processing, Subscriptions |
Email
Payment data
Transactions
|
EU |
✓ Concluded
|
PCI DSS |
Privacy Policy: stripe.com/privacy
SEO Data APIs
| Provider | Purpose | Data Processed | Location | DPA Status | Note |
|---|---|---|---|---|---|
|
DataForSEO
Nicosia, Cyprus (EU)
|
Keywords, Backlinks, Traffic Data |
Domains
Keywords
|
EU |
✓ Concluded
|
No PII |
Google APIs (Optional - only when connected)
| Service | Purpose | Data Processed | Location | Legal Basis | Activation |
|---|---|---|---|---|---|
|
Google Search Console API
Google Ireland Ltd.
|
Search Performance Data, Rankings |
Email
Properties
Search data
|
EU | Consent (OAuth) | Optional |
|
Google Analytics Data API
Google Ireland Ltd.
|
Website Statistics, GA4 Data |
Email
Properties
Analytics data
|
EU | Consent (OAuth) | Optional |
|
Google Custom Search API
Google Ireland Ltd.
|
SERP Data, Keyword Rankings |
Search queries
Domains
|
EU | Contract Performance | Automatic |
Infrastructure & Hosting
| Provider | Purpose | Data Processed | Location | DPA Status | Certification |
|---|---|---|---|---|---|
|
PythonAnywhere LLP
Birmingham, UK
|
Web Hosting, Database |
All user data
Logs
|
UK |
✓ Concluded
|
UK GDPR |
|
Railway Corp.
San Francisco, USA
|
Hosting members area (members.antonioblago.com), redirect service |
Member email addresses
Logs
|
USA |
✓ Concluded
|
SCC |
|
IONOS SE
Montabaur, Germany
|
Email Delivery (SMTP) |
Email addresses
Email content
|
DE |
✓ Concluded
|
ISO 27001 |
Consent Management & Statistics
| Provider | Purpose | Data Processed | Location | DPA Status | Note |
|---|---|---|---|---|---|
|
CCM19 (Papoo Software & Media GmbH)
Bonn, Germany
|
Consent banner, proof of consent |
Truncated IP
Consent data
|
DE |
✓ Concluded
|
Servers in DE |
|
Google Analytics 4 (Google Ireland Ltd.)
Dublin, Ireland
|
Audience measurement, only after consent |
Pseudonymous usage data
Truncated IP
|
EU / USA |
✓ Google Data Processing Terms
|
DPF |
Summary
| Category | Count | EU/EEA | Third Countries | DPA Status |
|---|---|---|---|---|
| AI Providers | 2 | 0 | 2 (USA) | All concluded |
| Payment Processing | 1 | 1 (EU) | 0 | Concluded |
| SEO Data APIs | 1 | 1 (EU) | 0 | Concluded |
| Google APIs | 3 | 3 (EU) | 0 | Google ToS |
| Infrastructure | 2 | 2 (UK/DE) | 0 | All concluded |
| Consent & Statistics | 2 | 1 (DE) | 1 (USA, DPF) | All concluded |
| Total | 11 | 8 | 3 | 100% DPA |
Data transfer to US providers (OpenAI, Anthropic) is based on:
- EU-US Data Privacy Framework (Adequacy Decision)
- Standard Contractual Clauses (SCC) as additional safeguard
- Technical safeguards (encryption, pseudonymization)
Change History
| Date | Change | Affected Provider |
|---|---|---|
| 2026-10-09 | Initial publication of sub-processors list | All |
You will be notified by email of significant changes to the sub-processors list.
Questions about Sub-processors?
Controller:
Antonio Blago
Email: info@antonioblago.com
Additional Legal Information:
Privacy Policy |
Terms of Use |
Terms & Conditions |
Imprint
Last updated: 2026-10-09 | Antonio Blago - SEO Tools