Erseni Hub

Sub-processors

Version and status of this document

Version of 29.09.2026.

For questions regarding its content, please contact hello@erseni.com.

Sub-processors engaged

The following overview lists all external service providers that we engage as sub-processors within the meaning of Art. 28 GDPR and with which personal data from the applications of our customers is processed. Entries marked "Only for ..." concern the applications named there and no others.

Company Purpose of the processing Location and region Data protection Hetzner Online GmbH Operation of the servers and databases of the applications, backups and resolution of the domains (DNS). Falkenstein data centre, Germany (EU). Privacy information
DPA seven communications GmbH & Co. KG Sending text messages, for example sign-in PINs and notifications: mobile number and message text. Only for the applications Meine MAV and Mein Betriebsrat. Kiel, Germany (EU). Privacy information DeepL SE Translation of user contributions such as forum posts, comments, chat messages and tickets. Only for the application Cyber Sovereigns. Cologne, Germany (EU). Privacy information Groq, Inc. Detecting the language of user contributions and, as a fallback, translating them when the translation service does not respond. Only for the application Cyber Sovereigns. USA. The transfer is based on the standard contractual clauses of the European Commission (Implementing Decision (EU) 2021/914) in the provider's data processing agreement for its commercial services. Privacy information Portunity GmbH (faxnummer.de) Sending forms by fax: content of the form and fax number of the recipient. Only for the application Cyber Sovereigns. Germany (EU). Privacy information

We announce changes to the above list of sub-processors at least 30 days in advance by email and on this page. The controller may object to a change on data protection grounds within this period; the details are governed by the section on sub-processors in the data processing agreement.

Sub-processors obtain access to personal data only to the extent required for their respective service.

Systems we operate ourselves (not processing by a sub-processor)

We operate the following systems ourselves, as Erseni Ltd. They are not sub-processors within the meaning of Art. 28 GDPR: there is neither an external contractual partner nor a separate data processing agreement to be concluded, and the right of objection described above does not apply to them. We list them here so that it is transparent which self-operated systems process data from the applications and where they are located.

System Purpose of the processing Location and region Data protection Stalwart Mail Server Sending e-mails of the applications, for example notifications and sign-in PINs. Instance operated by us on rented infrastructure in Germany (EU); no external provider. Privacy information Matomo Analytics Cookieless audience measurement of the public pages without disclosure to third parties. Instance operated by us on rented infrastructure in Germany (EU); no external provider. Privacy information GitLab Recording technical error reports to resolve faults. They may contain personal data from the affected request. Instance operated by us on rented infrastructure in Germany (EU); no external provider. Privacy information Jitsi Meet Video conferences in the applications: name, e-mail address and profile picture of the participants as well as audio and video during the session. Instance operated by us on rented infrastructure in Germany (EU); no external provider. Privacy information

These systems run on the infrastructure of the hosting provider listed above and are covered by its entry to that extent.
Privacy policy Imprint Accessibility Terms and conditions © 2026 Erseni Ltd