Who besides us processes your data, what for, where — and whether you are asked first. One entry per service.