UNDERDATABEHANDLERE

Underdatabehandlere

Tjenesteudbydere og deres roller i behandlingen, herunder underdatabehandlere, der bruges til kunders HR-data.

Sidst opdateret: september 2026

Disse udbydere understøtter tjenesten i de roller, der er beskrevet nedenfor. Hvor en udbyder behandler kunders personoplysninger på vores vegne, kræver artikel 28 i GDPR en databehandleraftale. Vores databehandleraftale fastlægger vores forpligtelser i forbindelse med brug af udbydere, underretning af kontoejere om påtænkte ændringer og håndtering af indsigelser. Nogle udbydere er også dataansvarlige for deres egen nærmere angivne behandling.

  • Hetzner Online GmbH (Cloud Database)

    Cloud infrastructure hosting the application PostgreSQL database

    HR-appdata
    Placering
    Germany (EU)
    Registreret adresse
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Overførselsmekanisme
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategorier af personoplysninger
    • All personal data stored by the platform
    Leverandørens databehandleraftale
    https://www.hetzner.com/legal/order-processing

  • Hetzner Online GmbH (Object Storage)

    S3-compatible storage for documents, avatars and exports

    HR-appdata
    Placering
    Germany (EU)
    Registreret adresse
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Overførselsmekanisme
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategorier af personoplysninger
    • Document files
    • Avatar and cover images
    • GDPR data exports
    Leverandørens databehandleraftale
    https://www.hetzner.com/legal/order-processing

  • Mistral AI

    AI inference for the HR assistant, setup-wizard content generation, onboarding suggestions, document analysis, review and employment-reference drafting, and requested text translations

    AI-inferens
    Placering
    EU and EFTA data centres
    Registreret adresse
    15 rue des Halles, 75001 Paris, France
    Overførselsmekanisme
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategorier af personoplysninger
    • AI prompts and responses
    • Employee and review context assembled by AI features, submitted document content and text supplied for translation
    • Setup-wizard owner name and company description

  • ONLINECITY.IO ApS (GatewayAPI)

    Transactional SMS delivery for account recovery: backup-number verification codes and two-factor reset alerts.

    Levering af sms'er
    Placering
    Denmark (EU)
    Registreret adresse
    Buchwaldsgade 50, 5000 Odense C, Denmark
    Overførselsmekanisme
    GatewayAPI EU service arrangement; see the EU DPA for processing and routing terms
    Kategorier af personoplysninger
    • Recipient phone number
    • SMS message content (verification codes, security alerts)

  • Brevo (Sendinblue SAS)

    Transactional email delivery (welcome, magic-link, notifications, billing, contact and support)

    Levering af e-mails
    Placering
    France (EU)
    Registreret adresse
    7 rue de Madrid, 75008 Paris, France
    Overførselsmekanisme
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategorier af personoplysninger
    • Recipient email address
    • Recipient first name
    • Email subject and body content

  • Stripe Payments Europe Limited

    Subscription billing, payment processing, invoicing and tax collection

    Faktureringsdata
    Placering
    Ireland (EU), with international processing including the United States
    Registreret adresse
    1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
    Overførselsmekanisme
    Stripe Data Transfers Addendum: applicable adequacy arrangements and/or Standard Contractual Clauses, with required safeguards
    Kategorier af personoplysninger
    • Account owner name and email
    • Billing address and VAT identifier
    • Payment method tokens (no raw card data on PersoHR systems)
    • Payment, transaction, device and IP information collected directly by Stripe
    Leverandørens databehandleraftale
    https://stripe.com/legal/dpa

  • Plausible Insights OÜ

    Cookieless analytics for public website, app authentication and legal pages, plus server-side checkout and payment events. Authenticated workspace pageviews are not sent.

    Webanalyse
    Placering
    Provider in Estonia; analytics hosting in the EU
    Registreret adresse
    Västriku tn 2, 50403 Tartu, Estonia
    Overførselsmekanisme
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategorier af personoplysninger
    • Transient IP processing to generate daily identifiers; raw IP addresses are not stored
    • Page URL and HTTP referrer
    • User agent string
    • Daily visitor identifiers without analytics cookies or cross-day identifiers
    • Subscription events: plan, billing cycle, amount and checkout company country; no names, email addresses or tenant identifiers in these event payloads
    Leverandørens databehandleraftale
    https://plausible.io/dpa

Integrationer, som kunden selv vælger, er adskilt fra de udbydere, PersoHR benytter. Gennemgå de data, en integration modtager, dens behandlingsvilkår og eventuelle internationale overførsler, før du aktiverer den. Anmodninger om tekstoversættelse under kørsel bruger den AI-udbyder, der er anført ovenfor.

De varsler om påtænkte tilføjelser eller udskiftninger af underdatabehandlere, som databehandleraftalen kræver, sendes til kontoejerne; de afhænger ikke af, at man abonnerer på denne side. Andre interesserede kan anmode om opdateringer via privacy@persohr.eu.