Sub-processors

FloraPass engages the three sub-processors below to process personal data on behalf of its customers, each limited to what its service needs. This page is the current list referred to in the Data processing agreement and the Privacy notice.

Hosting and infrastructure

Hetzner Online GmbH — Germany (European Union).
Supplies the compute, database, encrypted off-site backups, operational logs and monitoring for the production service. This supplier holds the full contents of a customer's tenant, because it hosts the database the application runs on. All processing and storage takes place in the European Union; no transfer outside the EU or EEA is involved.

Transactional email delivery

Resend — United States.
Delivers account and service email: address confirmation, password reset, security notices and service announcements. Receives the recipient's email address, display name and the message content — never plant-passport records, supplier lists or credentials. Because the supplier is established outside the EU, this transfer relies on the European Commission's standard contractual clauses.

Payments and subscription billing

Stripe — Ireland (European Union), with onward transfer to the United States.
Runs hosted checkout, stores the payment method, charges the subscription and issues invoices. Receives the billing contact's name and email address, the company name and VAT identification number, and the card or payment-method details entered directly into Stripe's own hosted pages. FloraPass never receives or stores a card number. Onward transfer to the United States relies on the European Commission's standard contractual clauses. Stripe became a sub-processor on 12 August 2026, when live payment processing was enabled.

Optional analytics and advertising measurement

Google Ireland Limited — Ireland (European Union).
Provides optional website analytics and advertising conversion measurement. Google describes its European measurement role as an independent controller under the Google Measurement Controller-Controller Data Protection Terms, rather than a sub-processor of customer plant-passport data. It is listed here for transparency, but is not one of the three sub-processors above.

Only after a visitor has consented, the integration can receive limited browsing and conversion-measurement data, such as page paths without query strings and event names. It is designed not to send email addresses, account names, plant-passport content, supplier or recipient data, payment data or confirmation-link parameters.

Changes to this list

FloraPass will announce an intended new or replacement sub-processor by email to the account address at least 30 days before it begins processing customer data. A customer may object on reasonable data-protection grounds within that period; if the objection cannot be resolved, the customer may terminate the affected subscription and, in that specific case, receive a refund of the unused remainder of the current month. That refund is the one exception to the no-proration rule in the Terms of service.

Questions about this list can be sent to support@florapass.eu.