Subprocessors
Last updated:
Subprocessors in use
| Company | Service | Place of processing | Third-country transfer |
|---|---|---|---|
| Hetzner Online GmbH, Gunzenhausen, Germany | Servers for the platform and database | Nuremberg, Germany | none |
| Amazon Web Services EMEA SARL, Luxembourg | File storage, sending system emails, AI features | Frankfurt am Main; AI requests exclusively in data centres within the EU | EU-US Data Privacy Framework where certified; standard contractual clauses in addition |
| PostHog, Inc., San Francisco, USA | Error monitoring | Frankfurt am Main | EU-US Data Privacy Framework where certified; standard contractual clauses in addition |
| 650 Industries, Inc. (Expo), Palo Alto, USA | Delivering push notifications to the mobile apps | USA | EU-US Data Privacy Framework where certified; standard contractual clauses in addition |
| Microsoft Ireland Operations Ltd., Dublin, Ireland | Email and office software, for example for support requests | EU | EU-US Data Privacy Framework where certified; standard contractual clauses in addition |
Any access by parent companies based in the USA relies on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR) where the recipient is certified under it, and in addition on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
Not subprocessors
Apple, Google and Microsoft process data as independent controllers when users sign in with their account at these providers, add a pass to Apple Wallet or Google Wallet, or receive push notifications on their smartphone. For address and place search and for drive times, we send the address entered to Google, which also processes it as an independent controller.
Systems the customer uses itself and to which EVENTRA transfers data on its instructions, such as payroll (DATEV, StoTax) or GET for access, cashless and time tracking, are not subprocessors of EVENTRA.
Changes
We notify our customers by email at least 14 days in advance of any intended addition or replacement of a subprocessor (§ 5(2) DPA) and update this page. Customers can request earlier versions at datenschutz@eventra.app.