Sub-processors
This page lists all sub-processors currently engaged by Lacop Studio OG pursuant to Art. 28 GDPR. It supplements the Data Processing Agreement (DPA) and is updated without delay upon any changes.
Last updated: 2026-04-24
Current Sub-processors
| Provider | Purpose | Location | Transfer Basis | DPA / Privacy |
|---|---|---|---|---|
| Vercel Inc. | Hosting, edge network, web analytics | USA | EU-U.S. Data Privacy Framework | Vercel DPA |
| Supabase Inc. | Database, authentication, file storage | EU (Frankfurt, eu-central-1) | Innerhalb EU / Within EU | Supabase Privacy |
| Resend Inc. | Transactional email delivery | USA | EU-U.S. Data Privacy Framework | Resend DPA |
| ALL-INKL.COM (Neue Medien Münnich) | Email hosting (optional add-on) | EU (Deutschland / Germany) | Innerhalb EU / Within EU | All-Inkl Datenschutz |
| Sentry (Functional Software Inc.) | Error monitoring (no personal content) | USA | EU-U.S. Data Privacy Framework | Sentry DPA |
| Stripe Inc. | Payment processing | USA | EU-U.S. Data Privacy Framework | Stripe DPA |
Information About Changes
If LACOP intends to add a new sub-processor or replace an existing one, the controller will be informed by email at least 30 days before the change takes effect. The controller may object to the change within this period for important data protection reasons; in case of objection, both parties have a special right of termination effective at the time of the change (cf. DPA § 8.3).
Transfers to Third Countries
Some of the sub-processors listed above are based in the USA. These transfers take place on the basis of the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR). A separate data processing agreement meeting the requirements of Art. 28 GDPR is in place with each of these providers.
Contact
For questions about the processing of personal data by sub-processors, please contact office@lacop.app.