Data Processing Agreement & Subprocessors
Last updated: 16 May 2026
Overview
This page lists the third parties (subprocessors) that process personal data on behalf of tamam.be (Erbas Ramazan (PROBEX)), in accordance with Art. 28 GDPR. For customers requiring a signed Data Processing Agreement, please contact dpa@tamam.be.
Current subprocessors
All subprocessors are bound by written contracts with appropriate technical and organizational safeguards equivalent to those we apply ourselves.
| Provider | Purpose | Location | Data processed |
|---|---|---|---|
| Hetzner Online GmbH | Application hosting | Germany (EU/EEA) | All application data, logs |
| Stripe Payments Europe Ltd | Payment processing | Ireland (EU/EEA) | Email, transaction metadata (no card data ever passes through tamam.be) |
| Self-hosted mail server (Probex) | Transactional email delivery | Belgium (EU/EEA) | Email address, recipient name, transactional content |
| OpenRouter | AI lead classification and DIY guidance | USA (SCCs in place) | Lead title and description, sanitized before submission |
| OpenAI | Text-to-speech for the voice assistant | USA (SCCs in place) | The text to be spoken aloud |
| OpenStreetMap Foundation | Geocoding of addresses and map tiles | United Kingdom (adequacy decision) | Address or postcode to resolve; IP address when tiles are loaded |
| Google LLC | Optional Google Sign-In (OAuth) | USA (SCCs in place) | Email, given name, family name, Google account ID |
Hetzner Online GmbH
- Purpose
- Application hosting
- Location
- Germany (EU/EEA)
- Data processed
- All application data, logs
Stripe Payments Europe Ltd
- Purpose
- Payment processing
- Location
- Ireland (EU/EEA)
- Data processed
- Email, transaction metadata (no card data ever passes through tamam.be)
Self-hosted mail server (Probex)
- Purpose
- Transactional email delivery
- Location
- Belgium (EU/EEA)
- Data processed
- Email address, recipient name, transactional content
OpenRouter
- Purpose
- AI lead classification and DIY guidance
- Location
- USA (SCCs in place)
- Data processed
- Lead title and description, sanitized before submission
OpenAI
- Purpose
- Text-to-speech for the voice assistant
- Location
- USA (SCCs in place)
- Data processed
- The text to be spoken aloud
OpenStreetMap Foundation
- Purpose
- Geocoding of addresses and map tiles
- Location
- United Kingdom (adequacy decision)
- Data processed
- Address or postcode to resolve; IP address when tiles are loaded
Google LLC
- Purpose
- Optional Google Sign-In (OAuth)
- Location
- USA (SCCs in place)
- Data processed
- Email, given name, family name, Google account ID
Material changes to this list are communicated at least 30 days before they take effect. You may object to a new subprocessor by emailing dpa@tamam.be within that window.
International transfers
Where data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs) and apply supplementary measures (encryption in transit and at rest, access controls).
Request a signed DPA
Enterprise customers can request a signed Data Processing Agreement at dpa@tamam.be.