Subprocessors
picsme uses these categories of providers (recipients, GDPR Art. 13(1)(e)) to run the service. The list changes only when the service changes; changes are noted in What’s new.
The full list of subprocessors by name is available on request (GDPR Art. 28). We will notify photographers in advance of any new subprocessor.
In use
Section titled “In use”| Category | What for | Data | Location |
|---|---|---|---|
| Data centre | The server that runs the service and stores photos and the database; encryption in transit (TLS) ends there; network protection against attacks | All service data | EU (France) |
| DNS | Points the service’s addresses to the server; no traffic passes through it | None beyond the address being looked up | Global network |
| Encrypted backups | Encrypted daily backups of the database (no photos), kept up to 30 days | Photographer accounts, galleries, settings | EU |
| Sign-in with Google, only if the photographer chooses it | Google account ID and email | Global | |
| Email for service messages | Sending service emails to photographers (notifications) | Photographer’s email and the text of the email | EU (France) |
Not used
Section titled “Not used”No analytics, advertising or tracking services. Gallery clients’ data is not shared with any of the providers above beyond what running the service requires.