Subprocessors
As of: 10 November 2026
Fischer & Habel GmbH engages the following subprocessors when processing personal data on behalf of its clients (§ 8 of the Data Processing Agreement).
Not listed are the platforms our clients use themselves and in which we work for them, such as Shopify, Amazon, Meta, Google Ads, Google Analytics, Klaviyo or Stape. The client is the contractual partner of these providers (§ 2 of the Data Processing Agreement).
| Name and address | Service | Place of processing | Basis for third-country transfer |
|---|---|---|---|
| Google Cloud EMEA Limited (Google Workspace)70 Sir John Rogerson’s Quay Dublin 2, Ireland | Email, calendar, documents and file storage | Google data centres worldwide | EU-US Data Privacy Framework (Google LLC); Standard Contractual Clauses (2021/914) as fallback |
| AgileBits Inc. (1Password)4711 Yonge Street, 10th Floor Toronto, ON M2N 6K8, Canada | Password management (credentials for client systems) | USA (1Password.com) | Adequacy decision (Canada); Standard Contractual Clauses (2021/914) |
| Asana, Inc.633 Folsom Street, Suite 100 San Francisco, CA 94107, USA | Project and task management | USA and other regions (AWS) | EU-US Data Privacy Framework; Standard Contractual Clauses (2021/914) as fallback |
| Vercel Inc.440 N Barranca Ave #4133 Covina, CA 91723, USA | Hosting of web applications | USA; execution in the EU (Frankfurt) possible | EU-US Data Privacy Framework; Standard Contractual Clauses (2021/914) as fallback |
| Supabase Pte. Ltd.65 Chulia Street #38-02/03, OCBC Centre Singapore 049513 | Database for internal applications | EU | Standard Contractual Clauses (2021/914) |
| Functional Software, Inc. (Sentry)45 Fremont Street, 8th Floor San Francisco, CA 94105, USA | Error monitoring of internal applications | EU (Frankfurt); account and support data in the USA | EU-US Data Privacy Framework; Standard Contractual Clauses (2021/914) as fallback |
Changes to this list
Before we add or replace a subprocessor, we inform all active clients by email at least 14 days in advance. Within this period, clients may object to the change for an important reason relating to data protection. Details, including the right to terminate, are set out in § 8 of the Data Processing Agreement.