Subcontractors

Azure OpenAI - Microsoft: Interface access (so-called "API") to AI-based services designed to understand and generate natural language and related inputs and data, analyze information, and make predictions ("AI," i.e., "Artificial Intelligence," is to be understood in the applicable legal sense of the term); Service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland; Website: https://azure.microsoft.com/ , https://www.microsoft.com/; Privacy policy: https://azure.microsoft.com/de-de/support/legal/ / https://privacy.microsoft.com/de-de/privacystatement; Data processing agreement: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA; List of sub-processors used by Microsoft: https://aka.ms/Online_Serv_Subcontractor_List. Basis for third-country transfers: EU-US Data Privacy Framework (DPF), supplemented by standard contractual clauses (part of the data processing agreement); processing in the EU within the scope of the Microsoft EU Data Boundary. AWS Bedrock: Interface access (so-called "API") to AI models from various providers, which are provided via Amazon Bedrock and are designed to understand and generate natural language and related inputs and data, analyze information, and make predictions ("AI," i.e., "Artificial Intelligence," is to be understood in the applicable legal sense of the term). Processing is carried out to respond to the respective request; Service provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg; Server location: EU/EEA; Website: https://aws.amazon.com/bedrock/; Privacy policy: https://aws.amazon.com/privacy/; Data processing agreement: https://d1.awsstatic.com/legal/aws-dpa/aws-dpa.pdf; Basis for third-country transfers: EU-US Data Privacy Framework (DPF), supplemented by standard contractual clauses (part of the data processing agreement); List of sub-processors used by AWS: https://aws.amazon.com/compliance/sub-processors/.

Brave Search API: Interface access (API - application programming interface) to an AI-powered search function. Processing includes providing search results for queries, analyzing data to optimize search algorithms, and assisting in filtering and sorting information based on user preferences. The Zero-Data-Retention policy is activated, which, to the extent permitted by law, completely excludes the storage of search query logs; Service provider: Brave Software Inc., 580 Howard St. Unit 402, 9410 San Francisco, USA; Website: https://brave.com/search/api/; Privacy policy: https://search.brave.com/help/privacy-policy; Data processing agreement: Provided by the service provider; Third-country transfers: EU/EEA - Standard contractual clauses: Provided by the service provider.

OpenAI: Interface access (so-called "API") to AI-based services designed to understand and generate natural language and related inputs and data, analyze information, and make predictions ("AI," i.e., "Artificial Intelligence," is to be understood in the applicable legal sense of the term); Service provider: OpenAI Ireland Ltd, 117-126 Sheriff Street Upper, D01 YC43 Dublin 1, Ireland; Website: https://openai.com/product; Privacy policy: https://openai.com/de/policies/eu-privacy-policy; Data processing agreement: https://openai.com/policies/data-processing-addendum; Standard contractual clauses (guaranteeing data protection level for processing in third countries): https://openai.com/policies/data-processing-addendum; Right to object (opt-out): https://docs.google.com/forms/d/e/1FAIpQLSevgtKyiSWIOj6CV6XWBHl1daPZSOcIWzcUYUXQ1xttjBgDpA/viewform; List of sub-processors used by OpenAI: https://platform.openai.com/subprocessors.

Anthropic: Interface access (so-called "API") to AI-based services designed to understand and generate natural language and related inputs and data, analyze information, and make predictions ("AI," i.e., "Artificial Intelligence," is to be understood in the applicable legal sense of the term); Service provider: Anthropic PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA; Website: https://www.anthropic.com/; Privacy policy: https://www.anthropic.com/legal/privacy; Data processing agreement: https://www.anthropic.com/legal/commercial-terms; Basis for third-country transfers: EU/EEA - Standard contractual clauses https://www.anthropic.com/legal/commercial-terms.

Google Gemini: Interface access (so-called "API") to AI-based services designed to understand and generate natural language and related inputs and data, analyze information, and make predictions ("AI," i.e., "Artificial Intelligence," is to be understood in the applicable legal sense of the term); Service provider: Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland; Website: https://cloud.google.com/; Privacy policy: https://policies.google.com/privacy; Data processing agreement: https://business.safety.google/processorterms/?hl=de; Basis for third-country transfers: EU-US Data Privacy Framework (DPF); List of sub-processors used by Google: https://business.safety.google/subprocessors/.

Microsoft Azure: Services in the field of providing IT infrastructure and related services (e.g., storage space and/or computing capacity) for the purpose of hosting customer data; Service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland; Website: https://azure.microsoft.com/; Privacy policy: https://www.microsoft.com/de-de/privacy/privacystatement; Data processing agreement: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA. Basis for third-country transfers: EU-US Data Privacy Framework (DPF), supplemented by standard contractual clauses (part of the data processing agreement); processing in the EU within the scope of the Microsoft EU Data Boundary.

Mistral AI: Interface access (so-called "API") to AI-based services designed to understand and generate natural language and related inputs and data, analyze information, and make predictions ("AI," i.e., "Artificial Intelligence," is to be understood in the applicable legal sense of the term); Service provider: Mistral AI, 15 rue des Halles, 75001 Paris, France; Website: https://mistral.ai/; Privacy policy: https://legal.mistral.ai/terms/privacy-policy; Data processing agreement: https://legal.mistral.ai/terms/data-processing-addendum; List of sub-processors used by Mistral AI: https://trust.mistral.ai/.

Scaleway Generative APIs: Interface access (so-called "API") to AI-based services designed to understand and generate natural language and related inputs and data, analyze information, and make predictions ("AI," i.e., "Artificial Intelligence," is to be understood in the applicable legal sense of the term); Service provider: Scaleway S.A.S., 8 rue de la Ville l'Evêque, 75008 Paris, France; Website: https://www.scaleway.com/; Privacy policy: https://www.scaleway.com/en/privacy-policy/; Data processing agreement: https://www.scaleway.com/en/contracts/; List of sub-processors used by Scaleway: https://www.scaleway.com/en/subprocessorlist/.

Hetzner: Services in the field of providing IT infrastructure and related services (e.g., storage space and/or computing capacity); Service provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; Website: https://www.hetzner.com; Privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz; Data processing agreement: https://docs.hetzner.com/de/general/general-terms-and-conditions/data-privacy-faq/.

bunny.net: Content Delivery Network (CDN) and video hosting service used to deliver content of an online service, particularly large media files such as graphics, videos, or program scripts, more quickly and securely using regionally distributed servers connected via the Internet. This also includes the storage (hosting) and delivery of videos, e.g., training videos, including their playback via an embedded video player; Service provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia; Website: https://bunny.net; Privacy policy: https://bunny.net/privacy/; Data processing agreement: Provided by the service provider.

Exoscale: Cloud infrastructure service offering compute instances (virtual servers), object storage, block storage, managed Kubernetes, databases (DBaaS), and GPU servers, as well as services for providing IT infrastructure and related services (e.g., storage space and/or computing capacity). The service is operated exclusively in data centers in the EU and Switzerland; Service provider: Akenes SA, Boulevard de Grancy 19A, 1006 Lausanne, Switzerland; Website: https://www.exoscale.com/; Privacy policy: https://www.exoscale.com/privacy/; Data processing agreement: Provided by the service provider.

Brevo: Email delivery and automation services; Service provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany; Website: https://www.brevo.com/; Privacy policy: https://www.brevo.com/legal/privacypolicy/; Data processing agreement: Provided by the service provider.

For the operation of the marketing website www.nele.ai:

Webflow: Creation, management, and hosting of websites, online forms, and other web elements; Service provider: Webflow, Inc. 208 Utah, Suite 210, San Francisco, CA 94103, USA; Website: https://www.webflow.com; Privacy policy: https://webflow.com/legal/euprivacy-policy; Data processing agreement & standard contractual clauses: https://webflow.com/legal/signdpa.

ElevenLabs API: The ElevenLabs API (application programming interface for using ElevenLabs features) enables AI-powered speech synthesis (text-to-speech), including realistic voices, adjustment of voice parameters, creation of custom voice profiles, and voice cloning; Service provider: Eleven Labs Inc., 169 Madison Ave #2484, 10016 New York, USA; Website: https://elevenlabs.io; Privacy policy: https://elevenlabs.io/privacy-policy; Data processing agreement: https://elevenlabs.io/de/dpa; Basis for third-country transfers: Standard contractual clauses https://elevenlabs.io/de/dpa.
New 04/16/2026