What this page shows
This page says whether, and on what basis, data of the freestays platform can reach countries outside the EU and the EEA. It supplements the list of sub-processors. The platform is pre-launch, and the contracts are not yet evidenced as signed.
Status by provider
| Provider | Processing location | Third-country link | Basis |
|---|---|---|---|
| Vercel | Function region Frankfurt (fra1) | The company is controlled from the USA; the reach of the region setting is being checked. | Being checked; the EU Standard Contractual Clauses are intended. |
| Supabase | EU (Ireland); a move to Frankfurt is being checked | Whether the provider can access the data from a third country is being checked. | Being checked; the EU Standard Contractual Clauses are intended where a third-country link exists. |
| Cloudflare, Resend, Sentry, Amazon Web Services, Google, Apple | not yet settled, or planned in the EU | Planned, not yet in use. The third-country link is checked per provider before use; Google and Apple are companies controlled from the USA. | Settled before use. |
What is not yet settled
Whether the standard clauses are already signed is not evidenced. Whether an adequacy decision can also be used, and whether supplementary safeguards are needed, is being checked. Until then, this page presents no basis as given.
Legal assessment
The classification as a transfer under Art. 44 et seq. GDPR and the choice of basis are open for legal review.
Questions
Questions are answered at support@freestays.app.