Sub-processors

This list is an annex to the Data Processing Agreement (DPA) and names the third parties involved in processing our customers’ personal data.

We inform customers of an intended change at least 30 days in advance by e-mail or in the Customer Portal. Within that period the Customer may raise a reasoned objection under Article 8.6 of the DPA.

Current list

Sub-processor	Registered office	Purpose	Data processed
Stripe Payments Europe, Ltd.	Ireland	Card payment processing	Billing and payment data
PayPal (Europe) S.à r.l. et Cie, S.C.A.	Luxembourg	Payment processing	Billing and payment data
GRANSY s.r.o.	Czech Republic	Registration of domains other than .sk	Domain holder data
SK-NIC, a.s.	Slovakia	Registry for .sk domains	Domain holder data

What is not a sub-processor

Our own infrastructure. The SMTP server, monitoring, DDoS protection and the Customer Portal all run on our own infrastructure. No third party is involved in them.

The data centre. We operate the Services on our own servers housed in a data centre within the European Union. The storage media are encrypted, and the data centre operator provides only physical space, power, connectivity and physical security; it has no logical access to the data.

Analytics. Our website uses no third-party analytics or measurement tools.

Optional services activated by the customer

QUIC.cloud (CDN). The Customer may activate it as part of LiteSpeed Enterprise. If they do, it is they who bring the CDN provider into the processing and they who answer for it. Without activation no traffic is routed through the CDN. Note that the CDN operates nodes outside the European Economic Area as well.

Where processing takes place

Apart from the case described in the previous section, all processing takes place within the EU and the EEA.