Data processing & sub-processors
Last updated: 14 June 2026
This page summarises how MeteoFeed (operated by AW ICT) processes data under the GDPR. It complements our Privacy & Cookie Policy.
1. Roles
MeteoFeed is the data controller for the limited personal data of its own account holders (name, email, usage and billing records — see the Privacy Policy). The weather data the API returns is aggregated from public sources and is not personal data.
2. The API does not require your end-users’ personal data
API requests are weather queries — coordinates, postcodes or place names and the parameters you choose. You do not need to send us your own customers’ or end-users’ personal data to use MeteoFeed, and we do not ask for it. Because we do not process personal data on your behalf through normal API use, a classic controller-to-processor relationship generally does not arise. If you choose to send personal data (for example in a support message), we handle it under our Privacy Policy.
3. Sub-processors
We keep our processing footprint small. Personal data of account holders is handled by:
- Hosting — our own servers located in the European Union.
- Email delivery — an SMTP relay used to send transactional email (verification, invoices, alerts).
We do not sell personal data. Geocoding of place names uses OpenStreetMap/Nominatim server-side, without placing cookies on your device. If you accept it, the contact-page map loads Google Maps (a transfer to the United States).
4. Security
- All traffic is served over HTTPS/TLS; the API uses bearer-token authentication.
- API keys are stored hashed; passwords are hashed; access to systems is restricted and network-segmented.
- Abuse and brute-force protections, rate limiting and quota enforcement are in place.
5. International transfers
Account data is processed within the EU. The only routine transfer outside the EU is to Google (United States) when you opt in to load the contact-page map; you can decline it and use the address text instead.
6. A signed DPA
If your organisation requires a signed Data Processing Agreement or a list of sub-processors for your records, contact us at info@awict.nl and we will provide one.