FixingLog – Sub-processors and external providers
Archived document. Current version: 2026-10-20-v25
1. Roles and scope
Subscribers control workspace customer information and FixingLog processes it on their behalf. Flowmind Kft. controls its own accounts, subscriptions and invoicing. Provider roles therefore vary by operation; not every listed partner is a subscriber subprocessor. Contracting entities, actual regions and transfer safeguards depend on the applicable contract and settings, not the brand name alone. Contact [email protected] for details.
2. Hosting and backups – Hetzner
Hetzner Online GmbH; Industriestr. 25, 91710 Gunzenhausen, Germany; [email protected]. Infrastructure for the application, databases and storage according to actual deployment. The stated operating location is Germany; backups are also at Hetzner. Data may include account/workspace databases, images, PDFs and logs. The backup-retention cycle remains to be finalised. Provider details: https://www.hetzner.com/de/legal/legal-notice/ .
3. Transactional email – Brevo
Brevo / Sendinblue SAS, France. Delivery of sign-in, confirmation, customer communication and subscription emails. Information may include recipient/sender email, name, message content, delivery data, time-limited links and attached PDFs. The actual contracting entity, subprocessors and international safeguards require verification for the subscribed service. Terms: https://www.brevo.com/legal/termsofuse/ .
4. Network protection and bot checks – Cloudflare
Cloudflare, Inc., United States, or the relevant contracted affiliate. The reverse proxy processes network/request information and configuration-dependent content to serve and protect traffic. Separately enabled Turnstile processes browser/network information for bot checks. Global infrastructure means exclusively German processing is not promised. Processing terms and international safeguards: https://www.cloudflare.com/cloudflare-customer-dpa/ ; privacy notice: https://www.cloudflare.com/privacypolicy/ .
5. Payments and invoices – Stripe and Billingo
Stripe handles subscription payments, payment status, billing name/address and tax identifiers supplied at checkout. Entity and role depend on service and location; Stripe may also act as controller for its own legal and fraud-prevention purposes. FixingLog does not hold full card numbers. Terms: https://stripe.com/legal/dpa and https://stripe.com/ie/legal/privacy-center . Billingo Technologies Zrt., 1133 Budapest, Árbóc utca 6. I. emelet, Hungary, issues FixingLog subscription invoices using name, address, tax identifiers and invoice information. Account erasure does not override mandatory accounting retention. Notice: https://www.billingo.hu/adatkezelesi-tajekoztato .
6. Optional sign-in, analytics and address search
Google/Apple participate only in selected enabled external sign-in, handling provider IDs, verified email, name and supplied profile information. The entity and international processing depend on the chosen account and contract. Google Analytics operates only with renewed explicit consent and a configured server-side connection, limited to fixed categories and IP-based geolocation by Google as described in the Cookie Notice; business content is not forwarded. Address search sends entered terms to the configured geocoder (default: https://photon.komoot.io). OpenStreetMap may supply underlying data without operating the API. The actual geocoder contract and retention require separate verification; manual address entry is available.
7. Self-hosted components
MinIO and n8n names identify software. Self-hosting does not by itself make the software developer a data recipient. Actual hosting, operator access, external workflows and logging determine the processing chain. External n8n hosting or new workflow providers must be recorded separately.
8. Changes and objections
New or replacement workspace subprocessors require advance notice and an opportunity for reasoned privacy objections to [email protected]. Updating this page alone does not replace required notification. Where no solution or suitable alternative exists the affected service must be ended in an orderly manner. The provider remains responsible for demonstrating executed contracts and actual international safeguards.
Map view of jobs
Geographic coordinates associated with a selected address are stored with the job to display work locations and help organise visits, subject to the same access and retention rules as the job. This does not track a professional’s live location. The map loads only when Map view is opened. The browser requests map tiles from the OpenStreetMap Foundation tile service, which may receive the IP address, browser information, referring website origin and identifiers of the viewed map tiles. Customer names, job descriptions and job marker data are not sent to the tile service by the application. List view remains available without loading the map. Provider privacy notice: https://osmfoundation.org/wiki/Privacy_Policy.
Google Analytics measurement limits
Optional analytics operates only with explicit consent to IP-based measurement and a configured GA4 connection. General categories are home page, HVAC landing page, portal and report-form views. The browser does not load Google measurement scripts. The FixingLog server forwards the public visitor IP supplied by the trusted Cloudflare tunnel/proxy to Google Analytics as ip_override so Google can determine an approximate network location, such as country and city. IP addresses are personal data. This does not measure GPS position or a work address. No separate country, city or coordinates are sent. Measurement includes a fixed category and generic title, a random browser identifier and technical session information. The browser identifier is not an account identifier and is not derived from names, emails or other business data. Company or customer records, private URLs, URL parameters, company path segments, tokens, job identifiers, work content, job locations, form fields, attachments and raw browser headers are not forwarded. Analytics forwarding creates no dedicated IP log and does not store the IP in the application database. Diagnostics hide the IP. No event is sent without a usable trusted visitor IP; server and proxy addresses are not used as substitutes. Measurement does not establish form submission or work completion. Google processes the IP and other technical information under its service terms; international transfers may occur. The nine language versions of the public home and HVAC pages can be measured separately using allowlisted canonical paths and language codes; no URL parameters or company paths are included. Portal and report-form categories remain aggregated across languages and companies.
Version: 2026-10-20-v24.1