Overview
We engage a small number of carefully vetted subprocessors to help us operate the Service. Each subprocessor is bound by written data-protection terms no less protective than those in our Data Processing Addendum, and is reviewed before engagement and periodically thereafter.
Change notifications
We will notify subscribed Customers at least 30 days before adding a new subprocessor that will process Customer Personal Data. To receive notifications, write to privacy@deertrack.net with the subject “Subscribe — Subprocessor updates”.
Current subprocessors
| Subprocessor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Stripe Payments Europe, Limited | Payment processing, fraud prevention, subscription billing. | Ireland (EU); group entities in the US and elsewhere. | EU SCCs incorporated in Stripe's data processing terms. |
| Cloud hosting & infrastructure provider | Application hosting, CDN, edge compute, object storage and database hosting. | EU region(s). | Within the EEA where possible; EU SCCs for any onward transfer. |
| Transactional email provider | Delivery of account, billing and product emails. | EU / EEA. | EU SCCs where applicable. |
| Product analytics provider | Aggregated product-usage analytics; consent-gated where required. | EU region where available. | EEA hosting where available; otherwise EU SCCs. |
| Error & performance monitoring provider | Error tracking, performance monitoring and debugging. | EU / EEA. | EU SCCs where applicable. |
| Customer support provider | Inbound and outbound customer-support communications. | EU / EEA. | EU SCCs where applicable. |
The specific legal entity name and location of each subprocessor is available to Customers on request — write to privacy@deertrack.net.
Deer Track affiliates
Where MB Travel Solutions establishes group affiliates, those affiliates may act as subprocessors under the same terms as the third-party subprocessors above. The current list of affiliates will be maintained on this page.
Optional integrations
Customers may choose to enable third-party integrations from within the Service (for example, Stripe Connect on a different account, accounting tools, GDS providers, Slack, calendar providers). When a Customer enables an integration, the receiving party becomes a controller (or independent processor) of any Personal Data sent to it under its own terms, and is not a subprocessor of MB Travel Solutions for that purpose.