Data processing details
Who besides us technically processes data on zastranke.si, for what and where. Written for businesses entering the data processing agreement and for anyone who wants the detail.
Last updated:
1. Providers
The external providers involved in running the platform. All of them process data in the European Union.
| Recipient | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting the application, database and backups | Germany, EU |
| Avant.Si d.o.o. (neoserv.si) | Email delivery | Slovenia, EU |
| Revolut Bank UAB | Card payments for the subscription | Lithuania, EU |
| Hyperknot Software Kft. (OpenFreeMap) | The map on a business's public page | Hungary, EU |
| komoot GmbH (Photon) | Finding the coordinates of an address a business types | Germany, EU |
The application, database and backups run at Hetzner in Germany. Email is delivered by neoserv.si in Slovenia. Card payments for the subscription are taken by Revolut Bank UAB.
The map on a public page is fetched by the visitor's browser from OpenFreeMap, and an address's coordinates are looked up with Photon when you start that search in your page settings.
2. What data is covered
The infrastructure holds account and business data, enquiries, client contacts and appointment history. Email carries appointment and invoice notices and support messages, so it contains recipients' names and addresses. We use no advertising analytics.
3. Subscription payments
The business pays us the subscription by card through a payment service provider. We never see or store card details; we receive only the payment confirmation and the data needed to issue the invoice.
The payment service provider is not our sub-processor under the data processing agreement: it handles the business's payment, not its clients' data. For that processing it is an independent controller under its own privacy policy.
4. Provider obligations
Sub-processors must meet equivalent data protection obligations, and we answer to the business for their work. Processing client data requires the business's prior written permission; before adding or replacing a sub-processor we notify the business at least 30 days in advance and allow an objection. The full terms are in section eleven of the Privacy policy.
5. Further information
Write to support@zastranke.si. We provide the information about providers and processing needed to conclude the agreement or to verify data protection.