Our providers
Version 3 – 3 October 2026
This list belongs to our privacy notice (section 7). It names the providers in each category, where they process data, and the safeguard for any processing outside the EU/EEA.
| Category | Provider | What it does for us | Where the data is processed | Safeguard outside the EU/EEA | On the list since |
|---|---|---|---|---|---|
| Hosting and email | Hostinger | Website, server logs, reservations and form uploads, mailboxes, sending reservation emails | Website and reservations: Germany (Frankfurt), in the EU. Mailboxes: we will state the location once the provider confirms it | Not applicable to the website and reservations (EU) | 1 October 2026 |
| Domain and DNS | Porkbun | Domain registration and DNS for our domain | USA | Not applicable: receives none of your personal data from us | 1 October 2026 |
| Analytics | Google – Google Analytics 4 | Analytics on the public pages named in the privacy notice, not on the reservation form, only after you accept | USA | EU Standard Contractual Clauses in Google's data processing terms | 3 October 2026 |
| Analytics | Google – Search Console | Search performance reports; verified by a DNS record; receives nothing from our pages | USA | Not applicable | 1 October 2026 |
| AI | Named on request at contact@unvexa.com | AI processing of tender and customer documents | USA | EU Standard Contractual Clauses (modules two and three) in the provider's data-processing terms | 1 October 2026 |
| Payment | None yet | – | – | – | – |
Data we use
To see which organisation a visit to our ad landing pages comes from (privacy notice, section 2), we use IPinfo Lite, a database we download and keep on our own systems; no visitor data is sent to IPinfo. IP address data powered by IPinfo, licensed under CC BY-SA 4.0.
Changes
- Version 3, 3 October 2026: IPinfo Lite added under "Data we use", with its licence credit.
- Version 2, 3 October 2026: Google Analytics row updated, because the cookie banner now runs on all the public pages.
- Version 1, 1 October 2026: first publication.
Business customers with a data-processing annex are told in writing at least 14 days before a new provider receives their personal data, and may object (terms, section 10, item 2).