Sub-processors
Annex III to the NewsIntel Data Processing Agreement
About this list
This page is Annex III to the NewsIntel Data Processing Agreement and lists the Sub-processors engaged by Global Staffing Support B.V. (“GSS”) for the Processing of Client Personal Data. Capitalized terms have the meaning given in the Data Processing Agreement.
Changes. GSS notifies each Client of any intended addition or replacement of a Sub-processor at least thirty (30) days in advance, by e-mail to the Client’s registered administrative contact and by updating this page. A Client may object on reasonable, documented data-protection grounds within fourteen (14) days. The full procedure, including the right to terminate where an objection cannot be resolved, is in DPA §7.4 to §7.6.
III.1 Infrastructure
Compute, database and object storage are operated by GSS on its own infrastructure; no third-party hosting or content-delivery provider Processes Client Personal Data.
| Sub-processor | Legal entity & country | Service | Data categories |
|---|---|---|---|
| TransIP | TransIP B.V. — Netherlands | Verification e-mails, notifications and newsletter sending | Recipient e-mail address, name, message content |
III.2 AI model providers
| Sub-processor | Legal entity & country | Service | Data categories |
|---|---|---|---|
| OpenAI | OpenAI Ireland Limited — Ireland | Text generation; cover-image generation | Prompt content, source excerpts, configuration context |
AI providers are bound by contractual restrictions on retention and on the use of submitted data for model training, as required by DPA §3.4 and §7.2.
III.3 Operations, payments and analytics
| Sub-processor | Legal entity & country | Service | Data categories |
|---|---|---|---|
| Stripe | Stripe Payments Europe, Limited — Ireland | Subscription billing, SEPA direct debit and card payments, invoicing | Billing contact, company, VAT number, payment status; card data collected directly by Stripe |
| Sentry | Functional Software, Inc. d/b/a Sentry — United States | Error and performance monitoring | Error traces, technical metadata, sanitized context |
| Amplitude | Amplitude, Inc. — United States | Product analytics (consent-gated) | Pseudonymous identifiers, event data, truncated IP |
| Google Analytics | Google Ireland Limited / Google LLC — Ireland / United States | Website analytics on newsintel.eu (consent-gated GA4) | Pseudonymous identifiers, page views, technical/device data, approximate location; IP anonymised in configuration |
| Cal.com | Cal.com, Inc. — United States | Demo and appointment scheduling (GSS-controller activity; listed for completeness) | Name, e-mail, booking details |
| DuckDuckGo | Duck Duck Go, Inc. — United States | Discovery of source material | Search queries derived from keywords |
III.4 Client-enabled integrations
Where the Client registers a Channel or other delivery target operated by a third party, Articles and the Personal Data they contain flow to that system on the Client’s instruction. That provider acts under the Client’s own agreement with it and is not a Sub-processor of GSS; GSS Processes only the credentials necessary to operate the connection.
International transfers
GSS does not transfer Client Personal Data outside the European Economic Area, and does not permit a Sub-processor to do so, except on a valid transfer mechanism under Chapter V GDPR — an adequacy decision, including certification under the EU–US Data Privacy Framework where applicable, or the Standard Contractual Clauses supplemented by a documented transfer impact assessment. GSS maintains a record of the mechanism applicable to each Sub-processor listed above and makes it available to a Client on request (DPA §8.4).
Contact
Questions about this page, or a request for the transfer documentation referred to above: privacy@newsintel.eu.