This page identifies the main service providers that may process personal data when onenakfa is used. It supports section 17.8 of the Terms of Service and sections 6 and 7 of the Privacy Policy.
onenakfa is operated by:
Mustafa NOORHUSSINChemin des Lentillières 13c1023 CrissierSwitzerlandEmail: hello@onenakfa.com
1About this list#
Some providers act as subprocessors on our behalf.
Other providers, particularly payment and authentication providers, may act as independent controllers for parts of their processing.
The exact provider role depends on:
- The Service feature being used
- The provider's agreement
- The type of personal data
- The organization's configuration
- Applicable law
2Current providers#
OVHcloud
- Service
- Server and infrastructure hosting
- Purpose
- Hosting the onenakfa application, database, files, and backups
- Data involved
- Account data
- Organization data
- Member data
- Payment records
- Event and ticket data
- Election data
- Messages
- Files
- Technical and security logs
- Primary processing location
- France, European Union
- Role
- Processor/subprocessor
- Transfer note
- Primary application and database infrastructure is hosted in France.
Amazon Web Services — Amazon Simple Email Service
- Service
- Amazon Simple Email Service, also known as AWS SES
- Purpose
- Delivering transactional and organization-generated email
- AWS region
- US East (N. Virginia),
us-east-1 - Primary processing location
- United States
- Data involved
- Recipient name
- Recipient email address
- Sender information
- Email subject
- Email body
- Message headers
- Delivery metadata
- Bounce information
- Complaint information
- Provider response identifiers
- Role
- Processor/subprocessor
- Transfer safeguards
- Depending on the relevant processing and recipient entity, safeguards may include the Swiss–US Data Privacy Framework, EU–US Data Privacy Framework, AWS Data Processing Addendum, Standard Contractual Clauses, and supplementary contractual measures.
Email content and recipient information may therefore be processed in the United States even though the main onenakfa application is hosted in France.
Stripe
- Service
- Online payment processing, Subscription billing, and connected payment accounts
- Purpose
- Processing onenakfa Subscription payments
- Processing membership dues and event-ticket payments
- Maintaining Customer payment accounts
- Fraud prevention
- Identity and regulatory verification
- Refunds, disputes, and chargebacks
- Data involved
- Name
- Email address
- Billing address
- Customer and organization identifiers
- Payment amount
- Currency
- Payment status
- Transaction identifiers
- Bank or card information submitted directly to Stripe
- Identity-verification information where required by Stripe
- Fraud and device information
- Processing locations
- European Economic Area, United States, and other Stripe processing locations
- Role
- Stripe may act as an independent controller and, for certain functions, as a processor or service provider.
onenakfa does not intentionally receive or store full payment-card numbers or card security codes.
Stripe’s own terms and privacy policy apply to information it processes independently.
- Service
- Sign in with Google
- Purpose
- Optional account authentication
- Data involved
- Name
- Email address
- Profile photograph
- Google authentication identifier
- Authentication and security information
- Processing locations
- European Economic Area, United States, and other Google processing locations
- Role
- Independent controller for Google’s own processing; service provider for the authentication connection
Using Google sign-in is optional. Users may use the available email-and-password authentication method instead.
Cloudflare
- Service
- DNS, network delivery, DDoS protection, and network security
- Purpose
- Directing traffic to the Service
- Protecting the Service from malicious traffic
- Mitigating denial-of-service attacks
- Improving network reliability
- Recording network and security events
- Data involved
- IP address
- Request time
- Requested hostname and URL
- Browser and request headers
- Network information
- Security-event information
- Cookies or technical identifiers used by Cloudflare where applicable
- Processing locations
- Global network, potentially including Switzerland, the European Economic Area, the United States, and other countries where Cloudflare operates
- Role
- Processor/service provider for network services and independent controller for certain security, legal, and operational processing
3Self-hosted Supabase#
onenakfa uses Supabase software for database, authentication, and storage functions.
The Supabase system used by onenakfa is self-hosted on our OVHcloud server.
Supabase is therefore not currently a separate external hosting provider receiving Customer Data merely because its software is used.
If onenakfa later uses Supabase’s managed cloud services, this list and the Privacy Policy will be updated.
4International transfers#
Personal data may be transferred to or processed in countries outside Switzerland or the European Economic Area.
Where legally required, onenakfa uses or requires an appropriate transfer mechanism, including:
- An adequacy decision
- Swiss–US Data Privacy Framework participation
- EU–US Data Privacy Framework participation
- Standard Contractual Clauses
- Swiss adaptations to Standard Contractual Clauses
- Contractual data-protection guarantees
- Supplementary security measures
5Provider changes#
We may add, remove, or replace a provider for reasons including:
- Security
- Reliability
- Performance
- Product functionality
- Geographic availability
- Cost
- Legal compliance
Where applicable law or our contractual commitments require it, we will provide reasonable advance notice of a material new subprocessor.
An organization with a reasonable data-protection objection may contact us during the notice period.
We will attempt to address the concern through a reasonable alternative where one is available.
6Notifications#
Organizations that want to receive notices about material subprocessor changes may email:
Use the subject:
Subprocessor update request
Include the organization name and administrator email address.
7Contact#
Questions about this list or an international transfer may be sent to:
Mustafa NOORHUSSINOperating under the brand onenakfaChemin des Lentillières 13c1023 CrissierSwitzerlandEmail: hello@onenakfa.com