Subprocessor register
GDA TRUST Ltd. uses the following providers to process personal data required for LiveFeed API. This list covers the website, portal and customer services. Sports-content providers are separate and do not receive customer personal data unless stated otherwise.
| Provider | Service and data | Location | Safeguards |
|---|---|---|---|
| Aruba S.p.A. | Cloud VPS, network, domain/DNS and transactional email. Account data, minimum technical message content, IP addresses and service logs. | European Union, mainly Italy, according to the active Aruba service and contract. | Processor/subprocessor appointment in applicable terms; safeguards and further providers under Aruba documentation. |
| Stripe Payments Europe, Limited and applicable affiliates | Checkout, subscriptions, billing, fraud prevention and payment portal. Billing contacts, customer and transaction identifiers, payment-method data. | Ireland and other locations identified by Stripe and its subprocessors. | Stripe DPA and Data Transfers Addendum; adequacy decisions, Data Privacy Framework or Standard Contractual Clauses as applicable. |
Services not in the active register
Resend is not used to deliver LiveFeed API email and Cloudflare is not active as the service proxy/CDN on the effective date. They do not receive personal data for those functions and are not active subprocessors. Self-hosted components such as databases, queues and reverse proxies are not third-party providers.
Changes and objections
GDA TRUST Ltd. publishes updates here and informs affected customers at least 30 days before adding or replacing a subprocessor, except urgent security or continuity changes. A Customer may object on documented data-protection grounds by writing to marketing@gda-trust.com during the notice period.
History
| Date | Change |
|---|---|
| 26 August 2026 | First version checked against the operating configuration: Aruba and Stripe active; Resend and Cloudflare removed from the active register. |