Appendix 3: List of Sub-processors

This document constitutes Appendix 1 to the Data Processing Agreement (DPA) between Hoopit AS (“Processor”) and the Customer (“Controller”). This overview also serves as information for registered users in accordance with our Privacy Policy.

To deliver our services securely and efficiently, Hoopit utilizes selected sub-processors. We have entered into necessary data processing agreements with all providers to ensure that personal data is processed in accordance with applicable data protection legislation (GDPR).

Company (Legal Entity & HQ)ServiceProcessing Location
Amazon Web Services, Inc. (USA)Hosting and cloud storageEU (Sweden)
Dintero AS (Norway)Payment service providerEU (Ireland and Germany)
Stripe Payments Europe Ltd (Ireland)Payment service providerEU (Ireland)
OnlineCity.io ApS (Denmark)SMS gateway services (GatewayAPI)USA
Startdeliver AB (Sweden)Usage analysis and analyticsEU (Germany)
Google Cloud EMEA Limited (Ireland)Push notification services (Firebase)EU (Ireland)

Transfer of Data Outside the EU/EEA
For providers located outside the EU/EEA (e.g., in the USA), Hoopit ensures that processing is conducted in compliance with GDPR. This is achieved either through the use of the EU Commission’s Standard Contractual Clauses (SCCs) or because the provider is certified under the EU-U.S. Data Privacy Framework.

Changes and Notification
Hoopit reserves the right to replace or add sub-processors to ensure optimal operation and development of the service. In the event of changes to the list of approved sub-processors, the Controller (the Club) will be notified in accordance with the provisions of the Data Processing Agreement.

Last Updated: 19.05.2026