Sub-processors
Last updated: 1 June 2026
Gast (BetterVue) uses the following sub-processors to operate the platform. We engage each sub-processor under a written contract that imposes data protection obligations equivalent to those between Gast and its business customers (Art. 28(4) GDPR). Sub-processors located outside the EU/EEA process data under EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
Business customers are notified at least 30 days in advance of any addition or replacement via this page. To receive notifications by email, contact privacy@mygast.com.
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Google Cloud Platform (Google Ireland Ltd.) | API hosting (Cloud Run), database (Cloud SQL), object storage (Cloud Storage), background jobs | EU — europe-west3 (Frankfurt) | EU — none required |
| Cloudflare, Inc. | DNS, CDN, TLS termination for website and app | Global edge network; EU processing where available | EU SCCs + Data Privacy Framework |
| Firebase Authentication (Google) | Sign-in for business users (email, magic link, Google OAuth) | Google Cloud (EU/US) | EU SCCs + Data Privacy Framework |
| Apple Inc. | Apple Wallet (PassKit), Apple Push Notification service (APNs) | USA | EU SCCs + Data Privacy Framework |
| Google Wallet API (Google Ireland Ltd.) | Google Wallet loyalty passes (Android) | EU/US | EU SCCs + Data Privacy Framework |
| Google Fonts (Google Ireland Ltd.) | Web fonts for marketing site | EU/US (IP may be transmitted) | EU SCCs + Data Privacy Framework |
| Plausible Insights OÜ | Cookieless web analytics (only if enabled) | EU — Estonia | EU — none required |
| Google Analytics (Google Ireland Ltd.) | Web analytics (only if user accepts in cookie banner) | Google Cloud (EU/US) | EU SCCs + Data Privacy Framework, consent-gated |
Not currently engaged
The following providers are referenced in commercial contexts but do not currently process personal data:
- Payment processors — no payment processing during the pilot phase
- Transactional email — confirmations are currently dispatched manually by the operator
- Error tracking (e.g. Sentry) — not enabled
When any of these are introduced, this page will be updated at least 30 days before the new sub-processor begins processing.