Legal information
Our subprocessors
Updated on 13 September 2026
Translation provided for information only; only the French version is authoritative.
We host the websites we build, so we process data on behalf of the businesses they serve. A few providers work behind us, and the General Data Protection Regulation requires us to name them, one by one.
This list is the one our contracts refer to. It is short, and deliberately so: every name we add is one more company that sees something pass through.
OVH SAS
- What it does: Server, databases and backup storage
- Where: Strasbourg, France
- Safeguards: No transfer outside the European Union.
Cloudflare, Inc.
- What it does: Domain name resolution, page relay and caching, protection against attacks
- Where: Global network, European points of presence first
- Safeguards: Adequacy decision between the European Union and the United States of 10 July 2023.
Stripe Payments Europe Ltd
- What it does: Collection of Nolitana’s subscriptions, and of online sales for client websites that sell online
- Where: Ireland, with processing by Stripe, Inc. in the United States
- Safeguards: Adequacy decision of 10 July 2023 and standard contractual clauses.
Plus Five Five, Inc. (Resend)
- What it does: Sending the client area’s emails: login codes, acknowledgements and notices of contact requests
- Where: United States
- Safeguards: Standard contractual clauses of the European Commission, decision 2021/914.
Freelancers
We entrust part of the development and operations to freelancers. None of them accesses a client’s data without having signed a contract that imposes on them exactly the same obligations as those we have taken on towards that client, and their access is closed on the day their assignment ends.
When one of them needs to access a website’s data, we notify the client 30 days in advance and we add their name here. To date, no freelancer has open access.
What changes, and how you will know
Any addition or replacement is announced to you by email at least 30 days before it takes effect. You may object to it in writing during that period, on grounds relating to data protection. If we cannot find a solution together, you may terminate without compensation or notice, and without the 12-month commitment being held against you. This is written in the data processing annex and in the subscription terms.
Questions about this list can be sent to contact@nolitana.com. The full policy is on the privacy and cookies page.