Sub-processors and Recipients
Motiv · Version 1.0 · Last updated 10 June 2026
Motiv is a service of HiMedia BV (KvK 76941566, Tijnmuiden 59, 1046 AK Amsterdam, the Netherlands). To provide the Motiv platform and to run our own operations, we engage a small number of third parties. This page lists them and is kept up to date.
We store personal data within the European Union where possible. Where a provider processes personal data outside the European Economic Area, we rely on an adequacy decision of the European Commission (the EU-US Data Privacy Framework) and/or the EU Standard Contractual Clauses. Under our Data Processing Agreement, we notify customers in advance of any change to the sub-processors that process personal data on their behalf, as set out in Clause 6 of that agreement.
1. Sub-processors processing customer personal data
These providers process personal data on behalf of our customers as part of delivering the Service. They are engaged as sub-processors under our Data Processing Agreement.
| Sub-processor | Location | Purpose | Safeguards |
|---|---|---|---|
| Hetzner Online GmbH | Germany and Finland (EU) | Hosting and infrastructure (database, cache, queue, object storage) | Processing within the EU only; ISO 27001-certified data centres; encrypted backups |
| Cloudflare, Inc. | United States | DNS, content delivery, TLS and edge security | EU-US Data Privacy Framework and EU SCCs; no access to the application database; edge logging limited to operational and security metadata |
2. Service providers (Motiv as the controller)
These providers process limited personal data for which Motiv is the controller, such as account, billing, communication and website consent data. They do not process the visitor and conversion data that customers track through the Service.
| Provider | Location | Purpose | Safeguards |
|---|---|---|---|
| Stripe | Ireland (EU) and United States | Payment processing and subscription billing | EU-US Data Privacy Framework and EU SCCs; PCI-DSS compliant |
| Resend | United States | Sending transactional and service emails | EU-US Data Privacy Framework and/or EU SCCs |
| Cookiebot (Usercentrics A/S) | Denmark (EU) | Cookie consent management and consent logging on our website | Processing within the EU |
3. Advertising platform recipients
When a customer connects an advertising platform, conversion data is dispatched to that platform on the customer’s instruction and only where the required marketing consent is present. Each platform acts as an independent controller for the data it receives and applies its own terms. These platforms are recipients, not sub-processors of Motiv. Dispatch occurs only to platforms the customer has connected.
| Platform | Location | Transfer basis |
|---|---|---|
| Google LLC (Google Ads) | United States | EU-US Data Privacy Framework; SCCs |
| Google LLC (Display & Video 360) | United States | EU-US Data Privacy Framework; SCCs |
| Meta Platforms, Inc. | United States | EU-US Data Privacy Framework; SCCs |
| TikTok Inc. | United States | Standard Contractual Clauses |
| LinkedIn Ireland Unlimited Company | Ireland / United States | Standard Contractual Clauses |
| Microsoft Corporation | United States | EU-US Data Privacy Framework; SCCs |
| Snap Inc. | United States | Standard Contractual Clauses |
| Pinterest, Inc. | United States | Standard Contractual Clauses |
| Reddit, Inc. | United States | Standard Contractual Clauses |
| Taboola, Inc. | United States | Standard Contractual Clauses |
| Outbrain Inc. | United States | Standard Contractual Clauses |
| X Corp. | United States | Standard Contractual Clauses |
| Amazon.com, Inc. | United States | EU-US Data Privacy Framework; SCCs |
| Criteo SA | France / United States | EU-established; SCCs for US processing |
For more on how we handle personal data, see our Privacy Policy at getmotiv.io/legal/privacy and our Data Processing Agreement at getmotiv.io/legal/dpa.