Subprocessors
Last updated:
Draft: these texts are pending legal review and the company details are not filled in yet.
The providers [Razón social] uses to run HolaRoom and that may process personal data on behalf of our customers. Each has a data processing agreement with us. We tell customers before adding or replacing one.
Current list
| Name | Service | Where | When |
|---|---|---|---|
| Vercel Inc. | Hosting of the app and uploaded photos | Runs in Frankfurt (EU); a US company (Data Privacy Framework and Standard Contractual Clauses) | Always |
| Neon Inc. (Databricks) | Database | Frankfurt (EU); a US company (Standard Contractual Clauses) | Always |
| Resend (Plus Five Five, Inc.) | Sending emails (sign-in, orders, order updates to guests) | USA (EU–US Data Privacy Framework and Standard Contractual Clauses) | Always |
| Cloudflare, Inc. (Turnstile) | Bot check at checkout | USA (EU–US Data Privacy Framework and Standard Contractual Clauses) | Only if the hotel turns the bot check on |
| OpenStreetMap Foundation | Map images in the Map block (the guest's browser loads them) | United Kingdom (EU adequacy decision) | Only on pages with a map |
| Apple, Google, Mozilla (push services) | Delivering notifications to phones and browsers; the content is encrypted end to end | Depends on the device's maker | Only if someone turns notifications on |
- Service
- Hosting of the app and uploaded photos
- Where
- Runs in Frankfurt (EU); a US company (Data Privacy Framework and Standard Contractual Clauses)
- When
- Always
- Service
- Database
- Where
- Frankfurt (EU); a US company (Standard Contractual Clauses)
- When
- Always
- Service
- Sending emails (sign-in, orders, order updates to guests)
- Where
- USA (EU–US Data Privacy Framework and Standard Contractual Clauses)
- When
- Always
- Service
- Bot check at checkout
- Where
- USA (EU–US Data Privacy Framework and Standard Contractual Clauses)
- When
- Only if the hotel turns the bot check on
- Service
- Map images in the Map block (the guest's browser loads them)
- Where
- United Kingdom (EU adequacy decision)
- When
- Only on pages with a map
Apple, Google, Mozilla (push services)
- Service
- Delivering notifications to phones and browsers; the content is encrypted end to end
- Where
- Depends on the device's maker
- When
- Only if someone turns notifications on
Not subprocessors
- WhatsApp and SMS: guests send those messages from their own apps to the hotel's phone; HolaRoom doesn't receive or send them.
- Fonts are served by HolaRoom itself, not by an outside font service.
- Payments: HolaRoom doesn't take card payments; guests pay the hotel directly.