Sub-processors

Who is responsible

Everything.Goes.Luxury is operated by Sebastian Ax, Egen Firma (sole proprietorship), Org.nr 900503-0136. I am the data controller for the information collected and processed in connection with the website.

For questions about sub-processors or data processing, contact info@everythinggoesluxury.com.

What is a sub-processor

A sub-processor is an external supplier that processes data on our behalf and according to our instructions. Sub-processors may not use the data for their own purposes and are bound by agreements or terms of service that govern security and confidentiality.

Sub-processors we engage

To operate the website we engage the following categories of sub-processors. Each category is listed with its purpose and the type of data that may technically be processed.

• Web platform and hosting: Lovable. Provides publishing tools, hosting, CDN and server infrastructure. May technically process connection data such as IP address, browser and requested URL in server logs.
• Database and backend: Lovable Cloud (Supabase). Stores the anonymous visit counter, newsletter subscriptions (email address and confirmation status) and sign-in accounts for The Vault concierge.
• Email provider: Standard commercial email provider. Handles incoming and outgoing email, including newsletters and private acquisition enquiries, when you choose to contact us, submit an enquiry or subscribe.
• Domain registration and DNS: Domain registration provider. Manages ownership and DNS configuration for everythinggoesluxury.com, .eu and .se, including their www variants.
• AI assistant (The Vault): OpenAI, L.L.C. (USA). Processes the text of questions you type into The Vault chat in order to generate an answer. We do not store the conversation, and no name, email or account is required. Under OpenAI's API terms, data sent via the API is not used to train their models. Please do not enter personal or sensitive information in the chat.

Where the data is located

Where a sub-processor processes data outside the EU/EEA, the transfer relies on an adequacy decision such as the EU–US Data Privacy Framework or the EU Commission's standard contractual clauses, together with technical security measures.

OpenAI processes The Vault questions in the United States. The transfer relies on the EU–US Data Privacy Framework and/or the EU Commission's standard contractual clauses included in OpenAI's data processing terms.

Security and confidentiality

Sub-processors may only process data for the purposes and in the manner we specify. They are required to take appropriate technical and organisational security measures to protect data against unauthorised access, loss or manipulation.

Your rights

You have the right to request information about which sub-processors process your personal data, and to receive a copy of the agreements or terms governing the processing. Contact info@everythinggoesluxury.com for such requests.

Updates

If we change or add sub-processors, this page will be updated. The date above indicates the latest version.