Sub-processors

Last updated: 12 October 2026

Rules

Below are all the companies we entrust with data processed on behalf of customers or with panel account data. We tell customers by email at least 30 days before adding or changing a sub-processor.

Cloudflare, Inc.

Role: service infrastructure, that is the application server, the database holding the consent log and account data, and delivery of the window script.

Data: consent log entries and panel account data. The visitor's IP address is processed only momentarily to deliver the script and is not written to the log.

Location: database restricted to the European Union jurisdiction. Company seat: United States.

Basis for transfer outside the EEA: participation in the Data Privacy Framework and standard contractual clauses.

Google Ireland Limited

Role: logging in to the panel with a Google account. It applies only to people who choose this login method.

Data: email address and account name.

Location: Ireland, European Union.

Migadu-Mail GmbH

Role: the kontakt@consentgate.eu mailbox.

Data: the content and addresses of messages you send us.

Location: Switzerland, a country covered by a European Commission adequacy decision.