SUB-PROĊESSURI

Sub-proċessuri

Il-fornituri tas-servizzi u r-rwoli tagħhom fl-ipproċessar, inklużi s-sub-proċessuri użati għad-data tal-HR tal-klijenti.

Aġġornat l-aħħar: Settembru 2026

Dawn il-fornituri jappoġġjaw is-servizz fir-rwoli deskritti hawn taħt. Meta fornitur jipproċessa data personali tal-klijenti f'isimna, l-Artikolu 28 tal-GDPR jeħtieġ ftehim mal-proċessur. Id-DPA jistabbilixxi l-obbligi tagħna għall-inkarigu tal-fornituri, għan-notifika lis-sidien tal-kontijiet dwar bidliet intenzjonati u għall-ġestjoni tal-oġġezzjonijiet. Xi fornituri jaġixxu wkoll bħala kontrolluri għall-ipproċessar speċifikat tagħhom stess.

  • Hetzner Online GmbH (Cloud Database)

    Cloud infrastructure hosting the application PostgreSQL database

    Data tal-app tal-HR
    Post
    Germany (EU)
    Indirizz reġistrat
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Mekkaniżmu ta' trasferiment
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategoriji ta' data personali
    • All personal data stored by the platform

  • Hetzner Online GmbH (Object Storage)

    S3-compatible storage for documents, avatars and exports

    Data tal-app tal-HR
    Post
    Germany (EU)
    Indirizz reġistrat
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Mekkaniżmu ta' trasferiment
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategoriji ta' data personali
    • Document files
    • Avatar and cover images
    • GDPR data exports

  • Mistral AI

    AI inference for the HR assistant, setup-wizard content generation, onboarding suggestions, document analysis, review and employment-reference drafting, and requested text translations

    Inferenza tal-AI
    Post
    EU and EFTA data centres
    Indirizz reġistrat
    15 rue des Halles, 75001 Paris, France
    Mekkaniżmu ta' trasferiment
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategoriji ta' data personali
    • AI prompts and responses
    • Employee and review context assembled by AI features, submitted document content and text supplied for translation
    • Setup-wizard owner name and company description

  • ONLINECITY.IO ApS (GatewayAPI)

    Transactional SMS delivery for account recovery: backup-number verification codes and two-factor reset alerts.

    Kunsinna tal-SMS
    Post
    Denmark (EU)
    Indirizz reġistrat
    Buchwaldsgade 50, 5000 Odense C, Denmark
    Mekkaniżmu ta' trasferiment
    GatewayAPI EU service arrangement; see the EU DPA for processing and routing terms
    Kategoriji ta' data personali
    • Recipient phone number
    • SMS message content (verification codes, security alerts)

  • Brevo (Sendinblue SAS)

    Transactional email delivery (welcome, magic-link, notifications, billing, contact and support)

    Kunsinna tal-email
    Post
    France (EU)
    Indirizz reġistrat
    7 rue de Madrid, 75008 Paris, France
    Mekkaniżmu ta' trasferiment
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategoriji ta' data personali
    • Recipient email address
    • Recipient first name
    • Email subject and body content

  • Stripe Payments Europe Limited

    Subscription billing, payment processing, invoicing and tax collection

    Data tal-fatturazzjoni
    Post
    Ireland (EU), with international processing including the United States
    Indirizz reġistrat
    1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
    Mekkaniżmu ta' trasferiment
    Stripe Data Transfers Addendum: applicable adequacy arrangements and/or Standard Contractual Clauses, with required safeguards
    Kategoriji ta' data personali
    • Account owner name and email
    • Billing address and VAT identifier
    • Payment method tokens (no raw card data on PersoHR systems)
    • Payment, transaction, device and IP information collected directly by Stripe

  • Plausible Insights OÜ

    Cookieless analytics for public website, app authentication and legal pages, plus server-side checkout and payment events. Authenticated workspace pageviews are not sent.

    Analitika tal-web
    Post
    Provider in Estonia; analytics hosting in the EU
    Indirizz reġistrat
    Västriku tn 2, 50403 Tartu, Estonia
    Mekkaniżmu ta' trasferiment
    EU service arrangement; onward processing is subject to the provider DPA and applicable Chapter V safeguards
    Kategoriji ta' data personali
    • Transient IP processing to generate daily identifiers; raw IP addresses are not stored
    • Page URL and HTTP referrer
    • User agent string
    • Daily visitor identifiers without analytics cookies or cross-day identifiers
    • Subscription events: plan, billing cycle, amount and checkout company country; no names, email addresses or tenant identifiers in these event payloads
    DPA tal-fornitur
    https://plausible.io/dpa

L-integrazzjonijiet magħżula mill-klijent huma distinti mill-fornituri inkarigati minn PersoHR. Qabel ma tattiva integrazzjoni, irrevedi d-data li tirċievi, it-termini tal-ipproċessar tagħha u kwalunkwe trasferiment internazzjonali. It-talbiet għat-traduzzjoni tat-test waqt it-tħaddim jużaw il-fornitur tal-AI elenkat hawn fuq.

L-avviżi meħtieġa mid-DPA dwar żidiet jew sostituzzjonijiet intenzjonati ta' sub-proċessuri jintbagħtu lis-sidien tal-kontijiet; ma jiddependux mill-abbonament għal din il-paġna. Persuni interessati oħra jistgħu jitolbu aġġornamenti fuq privacy@persohr.eu.