Sub-processors
The service providers Tablorix uses to run the product, what each one does, and where it is.
- Version
- 0.1
- In effect since
This page is Annex 3 to the Data Processing Agreement. It lists the providers we use to run Tablorix.
It is a separate page on purpose: under Article 28(2) GDPR you are entitled to be told before we add or change one, and watching one short page is easier than diffing a privacy policy.
How changes work. We give at least 30 days’ notice by email to your account’s administrative contact before a new sub-processor starts processing your data. If you reasonably object on data protection grounds, DPA clause 6 sets out what happens next.
Sub-processors
Each of these processes personal data on our instructions, under a contract meeting Article 28 GDPR, and may not use it for its own purposes.
| Provider | What it does | Data it touches | Location |
|---|---|---|---|
| Scaleway SAS (France) | Hosting — application servers, managed PostgreSQL, object storage, CDN, and the secret store | All service data | Paris, France 🇪🇺 |
| Scaleway Transactional Email (France) | Sends the emails the product generates — booking confirmations, reminders, review invitations, account email | Recipient name and address, and the content of that message | Paris, France 🇪🇺 |
| Functional Software, Inc. (Sentry) | Application error and performance monitoring | Diagnostic reports. Personal data is filtered out before sending; see the Privacy Policy | EU data region 🇪🇺 |
Scaleway is a French company and our infrastructure is in its Paris region. Your guests’ data does not leave the European Union in the ordinary course of running the service.
Others who receive data, but are not our sub-processors
These are listed for completeness. They decide their own purposes for the data they receive, so they are not processing on our behalf and DPA clause 6 does not apply to them.
Mollie B.V. (Netherlands 🇪🇺) — takes payment for Tablorix subscriptions. Mollie receives the billing details of the account holder, never a guest’s. Card and bank details go straight to Mollie and never reach us. Mollie is an independent controller for payment data under its own privacy policy.
Google Ireland Ltd. — in two places, both optional:
- Sign in with Google, if a member of your team chooses it instead of a password. Google receives the fact that they signed in; we receive their name and email address.
- Reserve with Google, if you switch it on. Your availability is published to Google and bookings your guests make there flow back to us. Google is a separate controller for what happens on its own surfaces. Switching it off stops the exchange.
We use no analytics, no advertising and no tracking services — there is nothing else to list.
What is deliberately not here
The platform you are migrating from. When you import your bookings from another booking platform, that platform is your provider under your contract with them, not our sub-processor. We relay the request you initiate; where you give us an access token for it, the token travels with each request and we never store it.
Font and script CDNs. There are none. Everything the site and the apps load comes from our own domain, which is why no third party sees your visitors’ IP addresses.
Questions about anything on this page: privacy@tablorix.be.