As of: 2026-04-24
This is an English translation of the German "Liste der Unterauftragsverarbeiter" provided for informational purposes. The German version is legally binding; in case of discrepancies between the language versions, the German version prevails.
This page contains the current list of sub-processors engaged by Melvin Ciurletti, operating as a sole proprietor under the name FAER (hereinafter the "Processor"), in the course of the commissioned processing of lead data for its Exhibitor customers (hereinafter the "Controller").
The list is an integral part of the Data Processing Agreement (DPA) between the Processor and the respective Controller; it is incorporated into the DPA by express reference in § 4 (1) DPA. The version of the DPA in force from time to time is available at https://www.faer.app/en/dpa.
| Sub-processor | Location | Purpose | Legal basis for third-country transfer |
|---|---|---|---|
| Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany | Germany | hosting of the application and database (Frankfurt am Main, Nuremberg sites) | not applicable (EU) |
| Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA | USA | content delivery network, DDoS protection, web application firewall; lead data is processed exclusively transiently in the context of traffic handling | EU-US Data Privacy Framework; EU Standard Contractual Clauses |
| Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA | USA | hosting of the frontend application (Edge Network); lead data is processed exclusively transiently in the context of request handling | EU-US Data Privacy Framework; EU Standard Contractual Clauses |
| Functional Software, Inc. d/b/a Sentry, 45 Fremont St, 8th Floor, San Francisco, CA 94105, USA | USA (data residency: EU region, Frankfurt am Main) | error and performance monitoring | EU-US Data Privacy Framework; EU Standard Contractual Clauses |
| Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA | USA | delivery of transactional emails (in particular consent confirmation to Visitors) | EU Standard Contractual Clauses |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace) | Ireland; onward processing may be carried out by Google LLC, USA | operation of the email address hello@faer.app; transient processing of lead data in the context of incoming consent withdrawals or other data-subject requests | EU-US Data Privacy Framework; EU Standard Contractual Clauses |
Changes to this list — in particular the engagement of a new sub-processor or the replacement of an existing one — are announced to the Controller pursuant to § 4 (2) DPA in text form at least 30 days prior to taking effect. Notification is given either by email to the contact address on file in the Exhibitor account or by updating this list; in the event of an update to this list, the Controller will additionally be notified by email.
The Controller may object to the change within 30 days of receipt of the notification on objectively justified data protection grounds. The legal consequences of an objection follow from § 4 (3) DPA.
Payment processing for chargeable services is handled via Lemon Squeezy (Saltbox, LLC, 717 Ponce De Leon Ave NE, Atlanta, GA 30306, USA). Lemon Squeezy acts as Merchant of Record vis-à-vis the Controller and is independently responsible under data protection law for the payment and billing data it processes in this context; that processing is therefore not subject matter of the Data Processing Agreement. Further details are set out in Lemon Squeezy's privacy policy and in the Processor's Privacy Policy at https://www.faer.app/en/privacy.
Language versions: This list is provided in a German and an English version. Only the German version is legally binding. The English version at https://www.faer.app/en/subprocessors is provided for informational purposes only; in the event of discrepancies between the language versions, the German version prevails.
As of: 2026-04-24