GDPR Subprocessor List
To deliver high-availability network infrastructure, mission-critical digital connectivity, and seamless commercial billing operations, Baltic Broadband Limited partners with third-party infrastructure and service vendors. These corporate entities act as Subprocessors under the UK GDPR and the Data (Use and Access) Act, processing limited categories of personal or corporate data on our behalf.
Before onboarding any infrastructure partner or cloud data system, our compliance desk executes a thorough technical and security risk assessment. Each third party listed below is contractually bound by a robust Data Processing Agreement (DPA) incorporating strict security parameters, service uptime guarantees, and explicit data isolation protocols.
| Subprocessor Legal Entity | Corporate & Data Location | Purpose of Processing | Transfer Safeguard |
|---|---|---|---|
| Equinix (UK) Limited Data Centre Partner | London / Manchester, United Kingdom | Physical secure colocation infrastructure, core network routing nodes, and hardware switching facility storage. No logical access to transit payloads. | Local UK Hosting (No International Transfer) |
| Telehouse International Corporation of Europe Ltd Data Centre Partner | London, United Kingdom | Tier-3 high-availability network interconnection, dark fibre routing nodes, and physical colocation frame operations. | Local UK Hosting (No International Transfer) |
| GoCardless Limited Billing Engine | London, United Kingdom | Secure processing of institutional B2B Direct Debit mandates, transactional clearing, and rolling service invoice execution. | Local UK Processing (UK GDPR Compliant DPA) |
| Amazon Web Services (AWS) EMEA SARL Cloud Infrastructure | UK South Region (London, UK) | Encrypted staging environments, automated daily configuration backups, and cloud storage of internal account metadata. | Data Localisation (UK-Sovereign Infrastructure) |
| HubSpot Europe Limited CRM Platform | Dublin, Ireland (EEA) | Secure management of client communication trails, account onboarding records, technical survey results, and sales coordination logs. | UK-EEA Adequacy Regulations |
| Atlassian Pty Ltd Operations & Ticketing | Frankfurt, Germany (EEA Data Residency) | Operational provisioning logs, live network engineering notes, and SLA incident tracking through Jira Service Management. | UK-EEA Adequacy & Standard Contractual Clauses (SCCs) |
Network Infrastructure Transit Exemption Note
In accordance with statutory data protection definitions and ICO guidance, the raw automated routing of encrypted data packets across our dark fibre or wireless transit network does not constitute data processing. When Baltic acts purely as a network carrier transmitting data between two distinct end points, we operate strictly as a data conduit. This list exclusively registers entities that store or logically interact with administrative account data, telemetry logs, or operational metadata.
📢 Notification Policy for Subprocessor Updates
Under Article 28 of the UK GDPR, corporate clients have the right to receive alerts regarding planned additions or modifications to our third-party subprocessor roster. If you are a designated Data Protection Officer (DPO) or compliance manager and wish to receive direct email alerts at least thirty (30) days prior to the onboarding of a new data partner, please register your company address via our technical updates portal.
Contact Compliance Desk for Alerts →