Sub-processors
Sub-processors pursuant to Art. 28(2) GDPR — Last updated: April 2026
CyberCitizen UG (haftungsbeschränkt) engages the following sub-processors to deliver the Sielum SaaS service. Changes are announced to customers with at least 30 days' notice by email. Customers may raise a reasoned objection.
| Sub-processor | Purpose | Location | Legal basis |
|---|---|---|---|
Hetzner Cloud GmbH Industriestr. 25, 91710 Gunzenhausen, Germany | Server infrastructure (production + staging) | Falkenstein + Nuremberg, DE | DPA pursuant to Art. 28 GDPR |
Data Location
All personal data is processed and stored exclusively on infrastructure within the European Union. Sielum is not subject to the US CLOUD Act. No data transfers to third countries outside the EU/EEA occur.
Change Notifications
Customers are notified of changes to this list by email to the address registered in their account. For questions contact legal@sielum.io.
Back to the Data Processing Agreement (DPA)