SUB-PROĊESSURI

Sub-proċessuri

Partijiet terzi li jipproċessaw data personali f'isem PersoHR, iddivulgati skont l-Artikolu 28(2) tal-GDPR.

Aġġornat l-aħħar: Mejju 2026

PersoHR juża s-sub-proċessuri li ġejjin biex jipprovdi s-servizz. Kull wieħed huwa marbut b'ftehim ta' pproċessar tad-data ekwivalenti għall-obbligi li PersoHR jimpenja ruħu fihom fid-DPA tiegħu stess. Ninnotifikaw lis-sid tal-kont mill-inqas 30 jum minn qabel ta' kwalunkwe bidla maħsuba f'din il-lista u noffru d-dritt li joġġezzjona.

  • Hetzner Online GmbH (Cloud Database)

    Managed PostgreSQL hosting for all application data

    HR app data
    Post
    Germany (EU)
    Registered address
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Mekkaniżmu ta' trasferiment
    EU processing only — no transfer mechanism required
    Kategoriji ta' data personali
    • All personal data stored by the platform

  • Hetzner Online GmbH (Object Storage)

    S3-compatible storage for documents, avatars and exports

    HR app data
    Post
    Germany (EU)
    Registered address
    Industriestr. 25, 91710 Gunzenhausen, Germany
    Mekkaniżmu ta' trasferiment
    EU processing only — no transfer mechanism required
    Kategoriji ta' data personali
    • Document files
    • Avatar and cover images
    • GDPR data exports

  • Mistral AI

    AI inference for the in-app HR assistant, onboarding suggestions, document analysis and review drafting

    AI inference
    Post
    France (EU)
    Registered address
    15 rue des Halles, 75001 Paris, France
    Mekkaniżmu ta' trasferiment
    EU processing only — no transfer mechanism required
    Kategoriji ta' data personali
    • AI prompts and responses
    • Selected employee data only when explicitly included by the user

  • Brevo (Sendinblue SAS)

    Transactional email delivery (welcome, magic-link, notifications, billing)

    Email delivery
    Post
    France (EU)
    Registered address
    7 rue de Madrid, 75008 Paris, France
    Mekkaniżmu ta' trasferiment
    EU processing only — no transfer mechanism required
    Kategoriji ta' data personali
    • Recipient email address
    • Recipient first name
    • Email subject and body content

  • Stripe Payments Europe Limited

    Subscription billing, payment processing, invoicing and tax collection

    Billing data
    Post
    Ireland (EU) with onward transfer to Stripe Inc., United States
    Registered address
    1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
    Mekkaniżmu ta' trasferiment
    Standard Contractual Clauses (Decision 2021/914/EU) plus Stripe's additional safeguards
    Kategoriji ta' data personali
    • Account owner name and email
    • Billing address and VAT identifier
    • Payment method tokens (no raw card data on PersoHR systems)

  • Plausible Insights OÜ

    Cookieless web analytics for the marketing site and the public-facing app authentication flow. Logged-in app pages are not tracked.

    Web analytics
    Post
    Estonia (EU)
    Registered address
    Västriku tn 2, 50403 Tartu, Estonia
    Mekkaniżmu ta' trasferiment
    EU processing only — no transfer mechanism required
    Kategoriji ta' data personali
    • Anonymised IP address (hashed at edge, never stored in raw form)
    • Page URL and HTTP referrer
    • User agent string
    • No cookies, no persistent identifiers, no personal data

DeepL (deepl.com) is used by PersoHR only for offline / development-time translation of system-seeded content (static localisation data and database migration values). No customer personal data is ever sent to DeepL, so it is intentionally not listed above as a sub-processor. If that ever changes we will add DeepL with the appropriate transfer mechanism and notify account owners 30 days in advance per our usual sub-processor change procedure.

Jekk tixtieq tiġi nnotifikat b'email dwar bidliet f'din il-lista, jekk jogħġbok ibgħat email lil privacy@persohr.eu.