Purpose of this list
This page names the service providers that the operator, SnapNext GmbH & Co. KG, uses or intends to use for the freestays platform. The platform is pre-launch. A provider counts as "active" only if the platform uses it in its current state. All others are listed as "planned". It is not evidenced that a planned provider already processes platform data; this will be checked before launch.
List
| Provider | Purpose | Location | Status |
|---|---|---|---|
| Vercel | Operation of the website, delivery of content, scheduled calls | Function region Frankfurt (fra1); the scope of the region setting is being checked | active; contract under review |
| Supabase | Database, file storage, sign-in | EU (Ireland); a move to Frankfurt is being considered | active; contract under review |
| Cloudflare | DNS, transport encryption, protection against automated access | not yet determined | planned, not yet in use |
| Resend | Sending email notifications to signed-in users | EU sending region is being checked | planned, not yet in use |
| Sentry | Capture of technical errors, only after consent in the browser | EU instance planned | planned, not yet in use |
| Amazon Web Services (S3) | Encrypted backup copies in the operator's own account | eu-central-1 planned | planned, not yet in use |
| Sign-in with a Google account, if the person chooses this route | not yet determined | planned, not yet in use | |
| Apple | Sign-in with an Apple account, if the person chooses this route | not yet determined | planned, not yet in use |
The list is complete for the current planning stage. It may change before launch.
Data per provider
- Vercel: access data during delivery and application content, as far as it is processed in functions.
- Supabase: account data, profile and channel data, applications and agreements, uploaded files, consents, log entries and data requests.
- Resend: recipient address and content of the notification, once the service is in use.
- Google and Apple: sign-in identifier and email address, once the sign-in route is in use. Whether these providers are to be treated as processors or as independent controllers is being reviewed legally.
- Cloudflare, Sentry and Amazon Web Services: the data categories will be determined before the service is used.
Transfers to third countries
Several providers are companies controlled from outside the EU. Where a third-country link exists, the EU standard contractual clauses (Art. 46(2)(c) GDPR) are planned as the basis. Whether and with which providers they are already agreed is being checked; where the contract is not yet signed, the basis is not yet fixed. The classification will be reviewed legally.
Changes
Changes to this list will be announced before use; the notice period will be set before launch. A provider is moved from "planned" to "active" only once it is actually in use.
Questions
Questions about individual providers are answered at support@freestays.app.