Subprocessors

These are the parties that process personal data for Denkploeg, with what for, where and with which safeguard. This list is part of the privacy statement and the data processing agreement. We announce a new or replacement sub-processor in advance on this page and by email to the owner of a workspace (at least 30 days in advance).

Always, for the platform itself

The current list is inserted directly from the same core register as the agency screen. Account regions and contracts still require confirmation. A technical connection is not legal approval. The previous references to Meppel and Paris are not confirmed account evidence.

Statistics on our sales pages, only after a yes

Google Analytics (Google Ireland, transfer to Google LLC) and Microsoft Clarity (Microsoft) only receive data if you say yes in our cookie banner. The Meta Pixel (Meta Platforms Ireland, transfer to Meta Platforms Inc.) only after a yes for marketing, with no email address or phone number from the browser. See the cookie statement. Google Ireland and Microsoft are processors here; the transfer to Google LLC and Microsoft Corporation rests on the EU-US Data Privacy Framework and the standard contractual clauses in their processing terms. Only with a yes do we also pass a checkout step, purchase, renewal, refund (Google Analytics only), sign-up (sign_up) or enquiry (generate_lead) on to Google Analytics and to Meta (Conversions API: Lead, CompleteRegistration, Purchase), with a hashed email address for enhanced conversions if you also gave consent for marketing. For collecting and passing on with the Meta Pixel and the Conversions API we and Meta are jointly responsible (Article 26 GDPR); for what Meta then does for its own purposes, Meta is independently responsible.

Monitoring and notifications

Discord receives short platform notifications (without the content of a workspace and without personal data of customers) and is its own controller for its own part. Its servers are in the US; Discord uses DPF and standard contractual clauses. KvK, PDOK and VIES (European Commission) receive only the search term or number you enter at checkout; they are public bodies.

Connected customer accounts and platform credits

These parties only receive data if a customer sets up an integration or its own key. The customer then enters into the agreement with that party itself, as the data processing agreement states (Article 6, paragraph 5). Examples: OpenAI and other AI providers with its own key, ElevenLabs, OpenArt, Context.dev, Meta (advertising, Instagram, WhatsApp), Google (Analytics, Search Console, Drive), Kapso, Figma and shop platforms. The resolved key source determines the processing route. OpenArt is an external connected account; the supplier name alone does not establish consent or what material is sent. Google (Fonts) receives the IP address of a visitor to a customer site only if the customer chooses Google fonts in the Support widget. Some image and speech suppliers train on input by default; for customer material they stay off until a workspace turns them on with a recorded choice.

Questions

Send your question or objection to privacy@denkploeg.nl.