04.
Strawberry Production uses third-party technical service providers (subprocessors under the GDPR), only to the extent necessary for the execution of the services offered:
Formspree (Formspree Inc., Boston, United States)
Contact form processing. Data transferred: name, email, message.
Framework for transfer outside the EU: European Commission Standard Contractual Clauses.
Stripe (Stripe Payments Europe Limited, Dublin, Ireland)
Online payment processing. Data transferred: identity, email, billing, payment card (processed and stored exclusively by Stripe, never by Strawberry Production).
Stripe is PCI-DSS Level 1 certified (the strictest banking security standard).
Vercel (Vercel Inc., Covina, United States)
Technical hosting of the site. Data processed: technical logs, visitor IP address.
Framework for transfer outside the EU: European Commission Standard Contractual Clauses.
Google (Google LLC, Mountain View, United States)
Professional email service (Gmail) used for receiving emails. Data processed: content of received emails.
Framework for transfer outside the EU: EU-US Data Privacy Framework (DPF).
The data is never sold, rented, exchanged or communicated to third parties for commercial or advertising purposes.