Subprocessor List
As of: May 2026
Overview
This list contains all subprocessors engaged by Tugus in connection with data processing pursuant to Art. 28(4) GDPR. The list includes both subprocessors used for our own business operations and platforms to which Tugus forwards event data at the customer's instruction.
Changes to this list
We will inform our customers of the addition of new subprocessors or the replacement of existing subprocessors by email to the address associated with the account, at least 14 days before the change takes effect. Customers have the right to object to such changes.
Infrastructure & Platform Operations
These subprocessors are necessary for the operation of the Tugus platform itself.
Marketing Platforms (Data Transfers at the Customer's Instruction)
The following platforms are optional subprocessors. They are only activated when the customer enables the respective integration in their Tugus account. Tugus forwards event data to these platforms exclusively at the customer's instruction (Art. 28 GDPR).
The customer is responsible for the lawful use of these integrations, in particular for obtaining valid consent from end users as required under the GDPR and for entering into any separate Data Processing Agreements with these platforms where required.
Data Flows to Marketing Platforms
When integrations are enabled, personal data may be transferred to the respective platforms server-side, depending on the platform. For details, please refer to the Data Flow Description.
No Third-Country Transfers of Platform Operations Data
The data of Tugus customers themselves (account data, billing data, configurations) is processed exclusively within the EU. No transfers to third countries take place in connection with our own platform operations data.
Contact
For questions regarding data processing or individual subprocessors, please contact us.