Sub-processors

Last updated: 3 May 2026.

This page lists the third-party data processors NorDok engages to operate the service. They process personal data on our instructions under data-processing agreements (Art. 28 GDPR).

Sub-processors

• Stripe Payments Europe Ltd. — payment processing for Premium subscriptions. Location: Ireland. Data: company name, billing address, e-mail, payment-card metadata (the card itself never touches our servers).
• Mailgun (Sinch) — transactional e-mail delivery (account verification, invoices, password reset). Location: EU region. Data: e-mail address, message content.
• Hostinger International Ltd. — hosting and infrastructure (KVM virtual private server, Docker host). Location: EU. Data: all data stored on our servers.
• Cloudflare Inc. — Turnstile anti-bot challenge on public forms (signup, contact). Location: USA, with EU data-residency safeguards. Data: IP address, browser fingerprint hash.
• cvrapi.dk / Erhvervsstyrelsen (Virk) — public CVR lookup during marina-admin signup. Location: Denmark. Data: CVR number queried; result used to pre-fill company info.
• Open-Meteo (Bremen, Germany) — weather forecast data per marina. Location: EU. Data: only marina coordinates (no user data).
• OpenStreetMap / CartoDB — map tiles, served via our backend proxy. Location: international. Data: only the requested tile coordinates (proxied from our backend, the tile server does not see end users).

Hosting

All services run in EU data centres. We do not transfer personal data to countries outside the EU/EEA without appropriate safeguards (Standard Contractual Clauses + Transfer Impact Assessment).

Changes

We update this list when sub-processors change. Premium customers are notified by e-mail of material additions.