About this page
When Yzyflow SRL provides its services to event organisers (ticketing, access control, staff management, cashless), it acts as a processor within the meaning of Article 28 of the General Data Protection Regulation (GDPR), on behalf of the organiser, who is the data controller.
To provide these services, Yzyflow uses the subprocessors listed below. Each of them is bound to Yzyflow by a contract imposing data protection obligations at least equivalent to those set out in our Data Processing Agreement (DPA).
In line with our commitment to European digital sovereignty, we favour providers whose headquarters and storage infrastructure are located in the European Economic Area (EEA).
List of subprocessors
| Provider | Headquarters | Service provided | Data concerned | Place of processing | Safeguards for transfers outside the EEA |
|---|---|---|---|---|---|
| Hetzner Online GmbH | Gunzenhausen, Germany | Hosting of servers and databases | All data processed on the platform | European Union (Germany, Finland) | Not applicable (processing within the EU) |
| Odoo S.A. | Belgium | Customer relationship management, technical support and assistance | Identity and contact data, content of support requests | European Union | Not applicable (processing within the EU) |
| Vivabank S.A. (Viva Wallet) | Athens, Greece | Payment processing (tickets, cashless top-ups) and fraud detection | Transaction and payment data. Yzyflow does not store any bank data. | European Union | Not applicable (processing within the EU) |
| Google Ireland Ltd (Firebase) | Dublin, Ireland | App performance monitoring, bug detection, push notifications | Device identifier, technical logs, notification tokens | European Union and United States | EU-U.S. Data Privacy Framework and standard contractual clauses of the European Commission |
| OneSignal, Inc. | San Mateo, United States | Sending push notifications | Device identifier, notification token, user identifier | United States | EU-U.S. Data Privacy Framework |
| Postmark (ActiveCampaign, LLC) | Chicago, United States | Sending transactional emails | Last name, first name, email address | United States | EU-U.S. Data Privacy Framework |
Change history
| Date | Change |
|---|---|
| 12 November 2026 | Initial publication of the list |
Contact
For any question about this list or the processing of your data: [email protected]
See also: Privacy policy