FixingLog – Sub-processors and external providers
1. Roles and scope
Subscribers control workspace customer information and FixingLog processes it on their behalf. Flowmind Kft. controls its own accounts, subscriptions and invoicing. Provider roles therefore vary by operation; not every listed partner is a subscriber subprocessor. Contracting entities, actual regions and transfer safeguards depend on the applicable contract and settings, not the brand name alone. Contact [email protected] for details.
2. Hosting and backups – Hetzner
Hetzner Online GmbH; Industriestr. 25, 91710 Gunzenhausen, Germany; [email protected]. Infrastructure for the application, databases and storage according to actual deployment. The stated operating location is Germany; backups are also at Hetzner. Data may include account/workspace databases, images, PDFs and logs. The backup-retention cycle remains to be finalised. Provider details: https://www.hetzner.com/de/legal/legal-notice/ .
3. Transactional email – Brevo
Brevo / Sendinblue SAS, France. Delivery of sign-in, confirmation, customer communication and subscription emails. Information may include recipient/sender email, name, message content, delivery data, time-limited links and attached PDFs. The actual contracting entity, subprocessors and international safeguards require verification for the subscribed service. Terms: https://www.brevo.com/legal/termsofuse/ .
4. Network protection and bot checks – Cloudflare
Cloudflare, Inc., United States, or the relevant contracted affiliate. The reverse proxy processes network/request information and configuration-dependent content to serve and protect traffic. Separately enabled Turnstile processes browser/network information for bot checks. Global infrastructure means exclusively German processing is not promised. Processing terms and international safeguards: https://www.cloudflare.com/cloudflare-customer-dpa/ ; privacy notice: https://www.cloudflare.com/privacypolicy/ .
5. Payments and invoices – Stripe and Billingo
Stripe handles subscription payments, payment status, billing name/address and tax identifiers supplied at checkout. Entity and role depend on service and location; Stripe may also act as controller for its own legal and fraud-prevention purposes. FixingLog does not hold full card numbers. Terms: https://stripe.com/legal/dpa and https://stripe.com/ie/legal/privacy-center . Billingo Technologies Zrt., 1133 Budapest, Árbóc utca 6. I. emelet, Hungary, issues FixingLog subscription invoices using name, address, tax identifiers and invoice information. Account erasure does not override mandatory accounting retention. Notice: https://www.billingo.hu/adatkezelesi-tajekoztato .
6. Optional sign-in, analytics and address search
Google/Apple participate only in selected enabled external sign-in, handling provider IDs, verified email, name and supplied profile information. The entity and international processing depend on the chosen account and contract. Google Analytics operates only with renewed explicit consent and a configured browser connection, limited to fixed categories and IP-based geolocation by Google as described in the Cookie Notice; business content is not forwarded. Address search sends entered terms to the configured geocoder (default: https://photon.komoot.io). OpenStreetMap may supply underlying data without operating the API. The actual geocoder contract and retention require separate verification; manual address entry is available.
7. Self-hosted components
MinIO and n8n names identify software. Self-hosting does not by itself make the software developer a data recipient. Actual hosting, operator access, external workflows and logging determine the processing chain. External n8n hosting or new workflow providers must be recorded separately.
8. Changes and objections
New or replacement workspace subprocessors require advance notice and an opportunity for reasoned privacy objections to [email protected]. Updating this page alone does not replace required notification. Where no solution or suitable alternative exists the affected service must be ended in an orderly manner. The provider remains responsible for demonstrating executed contracts and actual international safeguards.
Map view of jobs
Geographic coordinates associated with a selected address are stored with the job to display work locations and help organise visits, subject to the same access and retention rules as the job. This does not track a professional’s live location. The map loads only when Map view is opened. The browser requests map tiles from the OpenStreetMap Foundation tile service, which may receive the IP address, browser information, referring website origin and identifiers of the viewed map tiles. Customer names, job descriptions and job marker data are not sent to the tile service by the application. List view remains available without loading the map. Provider privacy notice: https://osmfoundation.org/wiki/Privacy_Policy.
Google Analytics measurement limits
Optional Google Analytics runs only after explicit cookie permission, using the Google browser tag. Categories are home and HVAC by language, login page, portal and report form. The tag runs in an empty same-origin measurement frame; this is not a separate security origin or technical isolation. The application supplies only allowlisted categories, generic titles and public language paths. It does not supply business/customer records, job content, form values, private URLs, tokens or attachments as analytics events. The operator disables automatic Enhanced measurement. The direct browser connection lets Google process network and device information and derive an approximate location from the IP address. We do not measure GPS position or work addresses. Google _ga and _ga_* cookies provide random browser and session identification; configured expiry is up to 180 days and may renew with usage. These are not account identifiers. Returning-visitor recognition is limited across devices, cookie deletion and blocking. Permission can be withdrawn in Cookie settings. Measurement does not prove successful sign-in, form submission or job completion. International transfers may occur under Google’s service terms.
Version: 2026-10-20-v25