Sub-processors
This page lists the sub-processors that Just Growing GmbH engages to provide the Obseria platform, and explains how we inform customers about changes.
Last updated: October 14, 2026
Note: This English version is provided for convenience. Only the German version is legally binding (Ausschließlich die deutsche Fassung ist rechtsverbindlich).
1. Scope
When Just Growing GmbH processes personal data on behalf of its customers as a processor under Art. 28 GDPR, it engages further processors (sub-processors) only in accordance with the Data Processing Agreement (DPA). Each sub-processor is contractually bound to data protection obligations that are no less protective than those in the DPA. Customer telemetry is stored in the data region selected by the customer: EU (Frankfurt, Dublin), UK (London) or the customer's own cloud account.
2. Current sub-processors
| Category | Provider | Purpose | Location |
|---|---|---|---|
| Cloud infrastructure (EU region) | [cloud provider, address] | Hosting, storage and processing of customer telemetry in the EU region | Germany (Frankfurt), Ireland (Dublin) |
| Cloud infrastructure (UK region) | [cloud provider, address] | Hosting, storage and processing of customer telemetry in the UK region | United Kingdom (London) |
| E-mail delivery | [e-mail delivery provider, address] | Sending transactional e-mails such as alerts, invitations and account notifications | [location] |
| Customer support tooling | [support tool provider, address] | Handling support requests and communication with customers | [location] |
| Payment processing | [payment provider, address] | Processing payments and invoices | [location] |
| Form forwarding (website enquiries only) | FormSubmit (formsubmit.co), operated by Devro LABS [full company name and address, to be confirmed] | Forwarding contact, demo and trial form entries from the website by e-mail | [location not published by the provider; third-country transfer possible] |
FormSubmit does not process customer telemetry from the Obseria platform. It is listed for transparency because it receives the enquiries submitted through our website.
If a customer chooses deployment in its own cloud account, telemetry is stored with the customer's cloud provider under the customer's own contract; that provider is not our sub-processor.
3. Transfers to third countries
Where a sub-processor processes personal data outside the EU or EEA, this takes place only on the basis of an adequacy decision of the European Commission (for example for the United Kingdom) or appropriate safeguards under Art. 46 GDPR, in particular the EU standard contractual clauses. [Safeguards per sub-processor, to be confirmed]
4. Notification of changes
We inform customers of any intended addition or replacement of a sub-processor at least 30 days before the change takes effect. Notification is sent by e-mail to the contact designated in the customer account and is reflected on this page. Customers can also subscribe to updates by writing to info@webect.de.
5. Right to object
Customers may object to a new sub-processor in writing within the notice period on reasonable data protection grounds, by e-mail to info@webect.de. We will then work with the customer in good faith to find a solution, for example by not using the sub-processor for the customer's data. If no solution can be found, the customer may terminate the affected services with effect from the date of the change. Details are governed by the DPA.