01Purpose of this page
Article 16.4 of our General Terms and Annex 3 section 3.5 grant Rare Studio OÜ a general authorisation to engage sub-processors for the personal data we process on a client's behalf. This page is the register referred to in those provisions.
We notify every addition or replacement at least 15 days in advance, by e-mail. A client may object on reasoned grounds within 10 business days of that notice.
02Categories of sub-processor
The categories below reflect the processing described in Annex 3 to the General Terms.
| Category | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Advertising and analytics platforms | Campaign delivery, audience management, measurement | EU / US | Adequacy decision or standard contractual clauses |
| E-commerce platform and connected applications | Store operation, order and product data | EU / US | Standard contractual clauses |
| E-mail and SMS delivery provider | Delivery of the Client's marketing and lifecycle communications | EU / US | Standard contractual clauses |
| Cloud infrastructure provider | Hosting, compute, storage of working data | EU | Not applicable |
| Artificial intelligence model provider | Analysis, content generation, classification | EU / US | Adequacy decision or standard contractual clauses |
| Collaboration and project management tools | Communication, documentation, shared workspace | EU / US | Standard contractual clauses |
| Monitoring and logging service | Availability, error tracking, security | EU | Not applicable |
03Named sub-processors
The named entity for each category, together with its address and the applicable transfer mechanism, is provided on request at hello@rarestudio.org and is issued within two business days.
Where a named sub-processor changes, existing clients receive the advance notice described in section 01 before the change takes effect.
04Transfers outside the European Economic Area
Transfers outside the European Economic Area are made exclusively on the basis of a European Commission adequacy decision, the standard contractual clauses adopted by the Commission, or another mechanism provided for in Article 46 of Regulation (EU) 2016/679, accompanied where necessary by a transfer impact assessment and supplementary measures.
05Contact
Questions about this register, about a specific sub-processor, or about the exercise of data subject rights: hello@rarestudio.org.