Sub-Processor Addendum

1. Purpose

This Sub-Processor Addendum outlines the third-party entities ("Sub-Processors") engaged by Dėžutė, UAB ("impressBox", "we," "us," or "our") to assist in providing the impressBox Content Management System (the "Service"). This document supplements our Privacy Policy and Data Processing Agreement.

2. Engagement of Sub-Processors

To operate and provide the Service, we utilize carefully selected Sub-Processors to host data, process transactions, and support platform operations. We ensure that all Sub-Processors are subject to strict contractual obligations that require them to protect personal data to the same standards as outlined in our primary agreements.

3. Current Sub-Processors

Below is the current list of Sub-Processors authorized to process data on behalf of impressBox:

3.1 Google Cloud Platform (GCP)

We utilize Google Cloud Platform for cloud computing infrastructure, data storage, and analytics. GCP provides industry-leading security and compliance measures.

3.2 DigitalOcean

We use DigitalOcean for managed cloud hosting, deploying application servers, and maintaining high availability for specific components of the impressBox ecosystem.

3.3 Delska (Lithuania)

We utilize Delska for regional data hosting and infrastructure solutions to optimize performance and ensure compliance with local requirements.

• Company Code: 302527488
• VAT Number: LT100005528012
• Address: A. Juozapavičiaus g. 13, LT-09311 Vilnius, Lithuania

4. Security and Compliance

We conduct thorough due diligence on all Sub-Processors before engagement. We verify their security posture, data protection practices, and compliance with regulations such as the GDPR. All Sub-Processors are required to maintain appropriate technical and organizational measures to safeguard the data they process.

5. International Transfers

Whenever data is processed by Sub-Processors located outside the European Economic Area (EEA), we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission, are in place to guarantee a lawful and secure transfer.

6. Updates to Sub-Processors

We may update this list as our business operations evolve. We will notify our customers of any new Sub-Processors or changes to existing Sub-Processors in a timely manner, providing you with the opportunity to review and object to such changes in accordance with our Data Processing Agreement.

7. Contact

If you have any questions, concerns, or requests regarding this Sub-Processor Addendum or our data processing practices, please contact us at: