I'm creating a new privacy document based on the GDPR.
I have a site which collects some personal data (first name, last name, location, etc). My site (including database) is hosted by a hosting company, they undoubtedly have access to my server.
Now I need to document whom I'm sharing the personal information with. I'd like to market my site as "We don't share your information with third parties.".
Although I'm now not entirely sure anymore. Is this hosting company, legally speaking, a 'third party'?