On Sitecore Content Hub's Privacy Page you can request and collect all the privacy and GDPR related information that Sitecore Content Hub is providing.
The privacy policy by is a legal document or statement that discloses how Sitecore Content Hub gathers, uses, discloses, and manges their customers' data.
The basis for Sitecore Holding II A/S sharing, adding, uploading, hosting, accessing or sending personal data out of Europe. Vendors can also add a description of their own impact assessment for data transfers.
Subprocessors are companies that provide a service for Sitecore Holding II A/S and who has or potentially will get access to personal data of their customers.