Sub-processors
The four providers that process personal data on behalf of the companies using Puntavia, with their purpose, location and transfer safeguard.
1. About this list
Golova Europe SL (Tax ID B70717004, Calle l’Hospital 95, Planta 1, Puerta 2, 08001 Barcelona, Spain) uses a small number of external providers (“sub-processors”) to process personal data on behalf of the companies that use Puntavia.
Each sub-processor acts under a written contract pursuant to Article 28 of Regulation (EU) 2016/679 (GDPR) and provides sufficient guarantees of appropriate technical and organisational measures.
This list forms Annex I to the Data Processing Agreement, which is accepted together with the terms of service published at https://puntavia.com/terms, and is kept up to date.
2. Current sub-processors
Anthropic PBC — United States.
- Purpose: AI analysis of application names, window titles and, if the customer enables them, screenshots.
- Data location: United States.
- Safeguard: the European Commission’s standard contractual clauses included in Anthropic’s data processing addendum.
- Customer data is not used to train models. If the customer turns AI analysis off, nothing is sent to this sub-processor.
Hetzner Online GmbH — Germany.
- Purpose: hosting the service.
- Data location: the servers used are in Finland (European Union).
- Safeguard: no transfer outside the EEA.
Stripe Payments Europe, Limited — Ireland.
- Purpose: payments and invoices.
- Data processed: the customer’s billing data, not employee data.
- Safeguard: no transfer outside the EEA.
Resend — email delivery, sending region European Union (on Amazon SES).
- Purpose: delivery of reports, confirmation codes and password resets.
- Data processed: the recipient’s email address and the message body.
- Safeguard: no transfer outside the EEA.
3. Changes to sub-processors
Before engaging a new sub-processor or replacing an existing one, we publish the change at https://puntavia.com/subprocessors at least thirty (30) days in advance and notify the customer.
The customer may object to the change on reasonable and demonstrable data protection grounds and, if we find no solution, terminate the service, in accordance with section 6 of the Data Processing Agreement.
Questions about this list can be sent to privacy@puntavia.com.