( GDPR · Art. 28 )
Subprocessors
Technical partners · Hosting · Analytics tools
In accordance with Article 28 GDPR, EIRES Real Estate maintains an up-to-date list of subprocessors that have — even partial — access to the personal data you entrust to us. Each has signed a Data Processing Agreement (DPA) binding them to the same obligations as ours.
Any addition or replacement of a subprocessor is published on this page at least fifteen days before taking effect. To object to a new subprocessor, write to contact@eires.lu.
Supabase Inc. (AWS Frankfurt)
- Purpose
- Database hosting, authentication, edge functions, file storage.
- Data categories
- Prospect contact details, valuation requests, DSR records, consent logs.
- Hosting
- Frankfurt (DE) · UE
- International transfers
- No transfer outside the EU.
Strapi Cloud
- Purpose
- Editorial CMS powering published content (articles, properties, neighborhoods).
- Data categories
- Public editorial content. No prospect personal data.
- Hosting
- Paris (FR) · UE
- International transfers
- No transfer outside the EU.
Resend
- Purpose
- Sending transactional emails (valuation reports, acknowledgements, DSR verifications).
- Data categories
- Email address, first/last name, subject and body of transactional messages.
- Hosting
- États-Unis
- International transfers
- Transfer outside the EU — Standard Contractual Clauses (SCC) 2021 + DPF.
Cal.com
- Purpose
- Appointment booking (property viewings, phone calls with Michael Eires).
- Data categories
- First/last name, email, chosen slot, optional notes.
- Hosting
- Allemagne · UE
- International transfers
- No transfer outside the EU on the EU Cloud plan.
PostHog
- Purpose
- Product analytics (valuation funnel, conversion rates), only if you accept cookies.
- Data categories
- Pseudonymous identifier, navigation events, truncated IP.
- Hosting
- Union européenne (hébergement EU)
- International transfers
- EU hosting. No transfer outside the EU.
Google Ireland Ltd. (Google Analytics 4 / Tag Manager)
- Purpose
- Audience measurement (page views, referral source, device). The GA4 script loads as soon as you arrive on the site (Google Consent Mode, denied by default); the Tag Manager container only loads if you accept cookies.
- Data categories
- Before consent: anonymised measurement requests, no cookie or persistent identifier. After consent: first-party client cookie, navigation events, IP anonymised by default.
- Hosting
- Irlande · UE (traitement), infrastructure globale Google
- International transfers
- EU processing. Any transfer outside the EU governed by the 2021 SCC.
Plausible Analytics
- Purpose
- Anonymous audience measurement (no cookies, no persistent identifier).
- Data categories
- No personal data. Anonymous per-page aggregates.
- Hosting
- Allemagne · UE
- International transfers
- No transfer outside the EU.
Cloudflare
- Purpose
- CDN, DDoS protection, static asset caching.
- Data categories
- IP address, HTTP headers, request logs (24 h).
- Hosting
- Mondial (edge), siège États-Unis
- International transfers
- EU edge prioritized. Transfers governed by SCC 2021 + DPF.
Sentry
- Purpose
- JavaScript error monitoring and front-end performance (production).
- Data categories
- Stack traces, page URL, browser agent. No deliberate PII.
- Hosting
- Union européenne (région EU Sentry)
- International transfers
- EU hosting. No transfer outside the EU.
Last updated : 13 August 2026
← Back to privacy policy