SUB-RESPONSABILI

Sub-responsabili del trattamento

Terze parti che trattano dati personali per conto di PersoHR, divulgati ai sensi dell'articolo 28(2) del GDPR.

Ultimo aggiornamento: maggio 2026

PersoHR si avvale dei seguenti sub-responsabili del trattamento per erogare il servizio. Ciascuno è vincolato da un accordo di trattamento dei dati equivalente agli obblighi che PersoHR assume nel proprio DPA. Informiamo il titolare dell'account con almeno 30 giorni di anticipo rispetto a qualsiasi modifica prevista a questo elenco e offriamo il diritto di opposizione.

  • Hetzner Online GmbH (Cloud Database)

    Managed PostgreSQL hosting for all application data

    HR app data
    Sede
    Germany (EU)
    Registered address
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Meccanismo di trasferimento
    EU processing only — no transfer mechanism required
    Categorie di dati personali
    • All personal data stored by the platform

  • Hetzner Online GmbH (Object Storage)

    S3-compatible storage for documents, avatars and exports

    HR app data
    Sede
    Germany (EU)
    Registered address
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Meccanismo di trasferimento
    EU processing only — no transfer mechanism required
    Categorie di dati personali
    • Document files
    • Avatar and cover images
    • GDPR data exports

  • Mistral AI

    AI inference for the in-app HR assistant, onboarding suggestions, document analysis and review drafting

    AI inference
    Sede
    France (EU)
    Registered address
    15 rue des Halles, 75001 Paris, France
    Meccanismo di trasferimento
    EU processing only — no transfer mechanism required
    Categorie di dati personali
    • AI prompts and responses
    • Selected employee data only when explicitly included by the user

  • Brevo (Sendinblue SAS)

    Transactional email delivery (welcome, magic-link, notifications, billing)

    Email delivery
    Sede
    France (EU)
    Registered address
    7 rue de Madrid, 75008 Paris, France
    Meccanismo di trasferimento
    EU processing only — no transfer mechanism required
    Categorie di dati personali
    • Recipient email address
    • Recipient first name
    • Email subject and body content

  • Stripe Payments Europe Limited

    Subscription billing, payment processing, invoicing and tax collection

    Billing data
    Sede
    Ireland (EU) with onward transfer to Stripe Inc., United States
    Registered address
    1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
    Meccanismo di trasferimento
    Standard Contractual Clauses (Decision 2021/914/EU) plus Stripe's additional safeguards
    Categorie di dati personali
    • Account owner name and email
    • Billing address and VAT identifier
    • Payment method tokens (no raw card data on PersoHR systems)

  • Plausible Insights OÜ

    Cookieless web analytics for the marketing site and the public-facing app authentication flow. Logged-in app pages are not tracked.

    Web analytics
    Sede
    Estonia (EU)
    Registered address
    Västriku tn 2, 50403 Tartu, Estonia
    Meccanismo di trasferimento
    EU processing only — no transfer mechanism required
    Categorie di dati personali
    • Anonymised IP address (hashed at edge, never stored in raw form)
    • Page URL and HTTP referrer
    • User agent string
    • No cookies, no persistent identifiers, no personal data

DeepL (deepl.com) is used by PersoHR only for offline / development-time translation of system-seeded content (static localisation data and database migration values). No customer personal data is ever sent to DeepL, so it is intentionally not listed above as a sub-processor. If that ever changes we will add DeepL with the appropriate transfer mechanism and notify account owners 30 days in advance per our usual sub-processor change procedure.

Se desidera ricevere notifiche via email delle modifiche a questo elenco, invii un'email a privacy@persohr.eu.