Subprocessors.
This page lists the companies that process personal data on behalf of Lumeton Oy when we provide the Snowetic products and services to our customers. The page is part of Lumeton's Data Protection and Data Annex and of the subscription and delivery terms, and the same list is available at lumeton.fi/alikasittelijat. We notify our customers in writing of a new or replaced subprocessor at least 30 days before the change takes effect. Updated September 16, 2026.
This English translation is provided for convenience. If the versions differ, the Finnish version prevails.
Subprocessors that process personal data on behalf of Lumeton
| Subprocessor | Purpose | Processing location | Basis for transfers outside the EU | Supplier's own information |
|---|---|---|---|---|
| Google Cloud EMEA Limited, Ireland | Data layer (BigQuery) where the customer's reporting data is stored and from which reports are produced. Computation, state stores, secrets, logs and files for Snowetic Feed and Snowetic Measure (Cloud Run, Firestore, Secret Manager, Cloud Logging, Cloud Storage). AI models at Google Cloud's EU endpoint. Backups. Email and files (Google Workspace). | Data layer in Google's EU multi-region (data centers in Belgium or the Netherlands). Snowetic Feed in the regions europe-west1 (Belgium) and eur3 (Belgium and the Netherlands). Snowetic Measure server-side measurement, verification runs and backups in the region europe-north1 (Finland). Other processing in Google's data centers, primarily in the EU. | EU-US Data Privacy Framework (Google LLC) and the European Commission's standard contractual clauses (SCC) | Cloud DPA, Cloud subprocessors, Workspace subprocessors |
| Anthropic Ireland, Limited, Ireland | Producing report summary texts and analyses from aggregated reporting data. No event-level data. | United States | European Commission's standard contractual clauses (SCC) | DPA, subprocessors |
| Supermetrics Oy, Finland | Data transfer for reporting from advertising and analytics platforms to reports. Being phased out as our own data layer is taken into use. | EU (AWS and Google Cloud). According to the supplier's own subprocessor list, partly also the United States. | European Commission's standard contractual clauses (SCC) | Terms and DPA, subprocessors |
| Visma Solutions Oy, Finland | Project management and customer account records (Visma Severa): contact persons, hours, activities. | EU (Ireland and the Netherlands, Microsoft Azure) | No transfers outside the EU according to the supplier | Trust Centre |
| Slack Technologies Limited, Ireland | Internal communication in customer account management. | United States (AWS) | EU-US Data Privacy Framework (Salesforce) and the European Commission's standard contractual clauses (SCC) | DPA, subprocessors |
Platforms we use on the customer's own accounts
These are not Lumeton's subprocessors. The customer has its own agreement with them, and Lumeton uses them in the customer's own accounts on the customer's behalf. Reporting data from these platforms is copied to Lumeton's data layer for reporting, and Snowetic Measure passes measurement data to them according to the customer's settings and consent state.
| Platform | Use | Platform's own privacy information |
|---|---|---|
| Google Ads, Google Analytics, Google Tag Manager, Search Console, Merchant Center | Advertising, analytics, measurement, search visibility and product feeds in the customer's own accounts | Google Ads Data Processing Terms, transfer bases |
| Meta (Facebook and Instagram) | Advertising, its measurement and product catalogs on the customer's ad account | Meta Platform Terms |
| Adform A/S, Denmark | Programmatic advertising and its reporting on the customer's account | Adform Privacy Compliance Agreement, subprocessors |
| Other advertising, marketplace and online store channels used by the customer (for example TikTok, LinkedIn, Pinterest, Snapchat, Microsoft Advertising, online store platforms) | Measurement and product data in the customer's own accounts in the Snowetic Measure and Snowetic Feed services | The channel's own terms |
Tools that do not process personal data on the customer's behalf
| Tool | Use |
|---|---|
| Ahrefs Pte. Ltd., Singapore | Monitoring of search engine and AI visibility: the website's public data, keywords, links and monitoring of AI answers. No personal data. |
Change history
16.9.2026: purposes and processing locations on the Google Cloud row updated (Snowetic Feed in the regions europe-west1 and eur3, Snowetic Measure server-side measurement and backups in the region europe-north1, AI models at the EU endpoint). Anthropic row clarified. Google Tag Manager and other channels used by the customer added to the platform table.
9.9.2026: processing location of the data layer clarified (EU, Google's EU location; previously incorrectly Finland, europe-north1).
4.9.2026: page published at lumeton.fi/alikasittelijat.