1. Principe
To provide the service, Gestiway SAS (à compléter) engages the providers listed below («subsequent subcontractors»). Each is bound by a contract imposing data protection obligations equivalent to those in our data processing agreement.
We inform our clients of any addition or replacement of subcontractors at least 30 days in advance, by email and on this page; they may object within this period.
2. List of subsequent subcontractors
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Hébergeur UE à compléter (ex. Scaleway, Paris) | Hosting of the application and PostgreSQL database | All data of the service | European Union |
| Hébergeur UE à compléter (ex. Scaleway, Paris) | Encrypted database backups | All data of the service | European Union |
| Transactional email service provider (to be completed by the operator), European Union | Sending emails (quotes, invoices, follow-ups, signature codes, notifications) | Email address, name, message content | European Union |
| Stripe Payments Europe, Ltd. | Subscription payments; client payments to service providers (Stripe Connect) | Identity, email, amounts, payment data (processed by Stripe, never stored by Gestiway) | Ireland (EU); potential transfers governed by standard contractual clauses and Data Privacy Framework |
Electronic invoice transmission: the reform requires passing through an authorized platform. When the connector is activated, the selected platform will be added to this list with a 30-day advance notice.
3. Contact
Pour toute question relative à nos sous-traitants : dpo@gestiway.example.