Sub-processors and recipients — kex.dk
1. About this list
This list shows who receives personal data when kex.dk is provided. It is part of our privacy policy and Annex B to the data processing agreement and is updated continuously without the policy being reissued. The list is dated, and previous editions are on the change log page.
2. Sub-processors
Suppliers that process personal data on our behalf and under our instructions.
| Name | Purpose | Location | Transfer basis |
|---|---|---|---|
| netcup GmbH | Servers and hosting (service and database) | Germany (EU) | EU/EEA |
| team.blue Denmark A/S (Curanet), CVR 29412006 | Web hosting, email, servers and domain registration (wholesale supplier) | Denmark (EU) | EU/EEA |
| cvrapi.dk | Company look-up by CVR number (only the CVR number is sent) | Denmark (EU) | EU/EEA |
| Cloudflare, Inc. (Turnstile) | Protecting forms against bots (strictly necessary) (if enabled) | USA and global network | EU-US Data Privacy Framework and EU standard contractual clauses |
3. Recipients that are independent controllers
Recipients that process data for their own purposes under their own terms and privacy policy.
| Name | Purpose | Location | Transfer basis |
|---|---|---|---|
| Punktum dk A/S (DK Hostmaster) | Registration and administration of .dk domain names; independent controller for the registrant and publication under its own rules | Denmark (EU) | EU/EEA |
| Registre og registrarer for øvrige domæner (fx .com, .eu) | Registration of domains other than .dk under the registry's and ICANN's rules; independent controllers | Depends on the domain; may be outside the EU | Necessary for performing the contract (GDPR Art. 49(1)(b)) or the registry's safeguards |
| Stripe Payments Europe, Limited / Stripe Technology Europe, Limited | Payments and subscriptions. Stripe is an independent controller for its own fraud, anti-money-laundering and accounting checks (when card payment is enabled) | Ireland (EU); Stripe, LLC in the USA | EU-US Data Privacy Framework and EU standard contractual clauses |
| Erhvervsstyrelsen (CVR, distribution.virk.dk) | Company look-up in the public Danish CVR register | Denmark (EU) | EU/EEA |
4. Notice of changes
Customers with a data processing agreement are notified by email and in the service at least 30 days before a new sub-processor is engaged or an existing one is replaced, and may object under the data processing agreement. Planned changes are shown here before they take effect. If you would like to be notified of changes, write to info@lynbro.dk.
LynBro ApS · CVR 46321499 · Rødovre Parkvej 276, 2610 Rødovre · info@lynbro.dk