Legal
Sub-processors
This is an English translation provided for convenience. The Bulgarian version is the legally binding text and prevails in case of any discrepancy.
1. List
These are the providers we use to deliver the BlockBooks application, under section 7 of the Data Processing Agreement.
| Provider | Purpose | Location | Data | Safeguards |
|---|---|---|---|---|
| Ivan Martinov Dimitrov’s own server | Hosting the application and database | Bulgaria | All building data | Own infrastructure, not a third party; Article 32 GDPR measures |
| Cloudflare, Inc. | Content delivery network, secure tunnel, DNS, attack protection; backup storage in Cloudflare R2 | Global network; backups in a bucket with EU jurisdiction | Traffic in transit; encrypted backups of building data | Data processing agreement with standard contractual clauses; EU-U.S. Data Privacy Framework; backups are encrypted before upload |
| Sendinblue SAS (Brevo) | Sending authentication emails (invitations, codes, password recovery) | France (EU) | Recipient email address and name, message content | Data processing agreement; processing in the EU |
| GitLab Inc. | Storing the software’s source code and container images | United States | Receives no customer data | Listed for transparency; does not process building personal data |
2. Website and sales correspondence
For the blockbooks.org website and correspondence with prospective customers we also use Cloudflare (Email Routing) and Google (mailbox). They do not process building data from the application.
3. Changes
We notify building Administrators by email at least 30 days before adding or replacing a sub-processor. The Customer may object within that period.