baningo GmbH / last updated 10.2025
| Sub-processors | Purpose of Processing | Legal Basis for Data Transfer (Art. 44 et seq. GDPR) | Location / Legal Entity | Status | Notes |
|
Hetzner Online GmbH Industriestr. 25, 91710 Gunzenhausen, Germany HRB 6089 Ansbach |
Data center operator for baningo's hosting and infrastructure services. | Processing within the EU / EEA - no data transfer. | Germany (EU) | Active | Primary hosting provider. EU-only storage (DE/FI); DPA signed. |
|
Twilio Ireland Limited 25-28 North Wall Quay, Dublin 1, Ireland Registration No. IE557454 |
Sending system-relevant transactional emails to customers and their users. | Active EU-U.S. Data Privacy Framework. | Ireland (EU)/USA | Active | EU entity of Twilio Inc.; DPA signed. |
|
Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland |
reCAPTCHA - activated only after multiple login or form attempts to prevent brute-force attacks. | Active EU-U.S. Data Privacy Framework. | Ireland (EU) | Active | Privacy-by-design implemented (Recital 78); limited processing; DPA signed. |
|
Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland |
Google Maps - displaying address sections on digital business cards. | Active EU-U.S. Data Privacy Framework. | Ireland (EU) | Stopped | Processing activity discontinued. No further data transfers take place. |
|
Functional Software, Inc. d/b/a Sentry 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA |
Error and performance monitoring. | Active EU-U.S. Data Privacy Framework. | USA | Planned | EU entity selected; DPA signed; rollout planned for Q4 2025. |
|
Raintank Inc. d/b/a Grafana Labs 165 Broadway, 23rd Floor, New York, NY 10006, USA |
Visualization and monitoring of system metrics. | Active EU-U.S. Data Privacy Framework. | USA | Planned | Used for technical system metrics only; DPA signed. |
|
Peakford Ltd (BorgBase) 86, “The Office”, Leli Falzon Street, Naxxar NXR 2609, Malta |
Encrypted off-site backups of production data. | Processing within the EU / EEA - no data transfer. | Malta (EU) | Planned | EU-region only; end-to-end encryption; DPA signed. |
| Recipients of data transfer | Purpose of Processing | Legal Basis for Data Transfer (Art. 44 et seq. GDPR) | Location / Legal Entity | Status | Notes |
|
Stripe Europe Ltd c/o A&L Goodbody, IFSC, North Wall Quay, Dublin 1, Ireland Registration No. IE513174 |
Payment processing and invoicing. | - | Ireland (EU) | Active | - |
Harald and Max founded baningo in 2015 with the goal of building an innovative company that provides real value to both clients and employees.
Meet the team