Draft — pending legal review, not yet in effect
This document is a working draft published for review. It has not been approved by legal counsel, does not bind either party, and will change before it takes effect. Bracketed items such as [PLACEHOLDER] and [CONFIRM] are still to be completed.
Sub-processors
Draft version — effective date: [PLACEHOLDER: effective date]
SkylineDOOH uses the third parties below to host and deliver the Service. Each processes personal data only as needed for the purpose shown and under a written agreement with data-protection terms. We will give agencies at least [PLACEHOLDER: 30] days' notice before adding or replacing a sub-processor, as set out in the Data Processing Agreement.
| Sub-processor | Purpose | Personal data | Location |
|---|---|---|---|
| Amazon Web Services (AWS) [CONFIRM contracting entity] | Cloud hosting: the virtual server that runs the application, the PostgreSQL database and backups. | All Agency Data stored in the Service. | European Union — Frankfurt, Germany (eu-central-1) [CONFIRM] |
| Cloudflare, Inc. — R2 | Object storage for uploaded files: billboard images, logos and attachments. | Files the Agency uploads, which may contain personal data. | Per the bucket's location setting [CONFIRM], served through Cloudflare's global network |
| Cloudflare, Inc. — Turnstile | Bot protection on sign-up, password-reset and contact forms. | IP address, browser and device signals of the person submitting the form. | Global network (United States headquarters) |
| Resend, Inc. | Transactional email: sign-in codes, verification and password-reset links, booking and other notifications. | Recipient name and email address, message content. | United States |
| PostHog, Inc. (US Cloud) | Product analytics and error tracking, proxied through v.skylinedooh.com. | Pseudonymous user ID, organization ID, pages and actions, browser and device data, IP address, error details. | United States |
| OpenStreetMap Foundation — Nominatim and tile servers | Geocoding of billboard addresses entered by agency staff, and map tiles displayed in the browser. | Address text of billboard locations (not normally personal data); the viewer's IP address when map tiles load. | United Kingdom / European Union [CONFIRM] |
| Google LLC — Google Fonts | Web fonts loaded by the web applications. | IP address and browser user agent of the person viewing the page. | United States / global [CONFIRM — consider self-hosting fonts] |
Notifications of changes
Agency account owners receive change notices by email. To add another address, write to [PLACEHOLDER: privacy contact email].