RODO · ART. 28(2)
Rejestr podprocesorów
Podmioty, którym powierzamy przetwarzanie danych, żeby Owlly działał. Ta strona jest generowana z tego samego rejestru, na którym pracuje produkt, nie z osobnej kopii, którą trzeba pamiętać, żeby zaktualizować.
Sub-processors engaged to deliver the Owlly service. Every change to this list is published here, and the register version (a date) changes with it, per GDPR Art. 28(2).
Przetwarzają dane osobowe
| Podprocesor | Rola | Lokalizacja | Podstawa transferu |
|---|---|---|---|
| Anthropic (Claude) | Extracts and categorises line items from supplier invoices; generates business insights; powers the AI assistant on the website and inside the product. Kategorie danych: Supplier name and address; Invoice line items; Prices and VAT rates; Tax identifiers (NIP) appearing on invoices; Assistant conversation content; Contact details a prospect or user types into a conversation (name, e-mail, phone) | United States | Standard Contractual Clauses (DPA signed) |
| OpenAI | Fallback model for the same invoice canonisation and insight generation when Claude is unavailable. Kategorie danych: Supplier name and address; Invoice line items; Prices and VAT rates | United States | Standard Contractual Clauses (verify in vendor DPA) |
| DigitalOcean | Hosting: the server that runs the Owlly application and its MySQL database. Kategorie danych: All data held in the Owlly database (invoices, sales, stock, staff records including pay, guest bookings and contact details); Server and access logs, including IP addresses | To be confirmed (the server region is not recorded in the register yet) | To be confirmed with the server region (verify in vendor DPA). |
| Google Cloud — Document AI | OCR and field extraction from uploaded invoice PDFs and scans. Kategorie danych: Full invoice document images; Supplier details; Bank account numbers printed on invoices | European Union | Processed in the EU — processor pinned to the `eu` region (DOCAI_LOCATION=eu), no third-country transfer. |
| Google Cloud Storage | Stores invoice documents and encrypted database backups. Kategorie danych: Invoice documents; Database backups containing all customer personal data | European Union (bucket region) | Processed in the EU. |
| Google Business Profile | Source of the reviews shown in Owlly, where a customer connects their Google Business Profile. Also the destination for a reply the customer writes and sends. Kategorie danych: Reviewer display name and profile photo; Review text, star rating and timestamps; Reply text written by the customer; The Google account e-mail that authorised the connection | European Union / United States | Standard Contractual Clauses (Google Cloud DPA). |
| Stripe | Subscription billing and payment processing. Kategorie danych: Billing contact name and email; Company name; Billing address; VAT identifier | European Union / United States | Stripe Data Processing Agreement with SCCs. |
| Dotykacka | POS integration: imports sales, employees and attendance for customers who use Dotykacka tills. Kategorie danych: Employee names and emails; Attendance records; Sales transactions | European Union (Czech Republic) | EU-based processor. |
| ChoiceQR | Online ordering, QR table ordering and payment, and table bookings, for customers who connect a ChoiceQR venue. Orders and bookings come into Owlly; the menu, dish availability, table bills and order and booking status go back to ChoiceQR. Kategorie danych: Guest name, phone number and e-mail on bookings and orders; Delivery address on delivery orders; Tax identifier (NIP) a guest gives for an invoice; Order contents, amounts and payments; Booking time, party size and guest note | To be confirmed | To be confirmed (verify in vendor DPA). |
| Sentry (Functional Software Inc.) | Application error monitoring and performance tracing. Kategorie danych: Error stack traces; Request paths and metadata; Masked session replays | European Union (de.sentry.io) | EU region selected; data stays in the EU. |
| Brevo (Sendinblue) | Transactional email: invitations, password resets, alerts. Kategorie danych: Recipient name and email address; Email message content | European Union (France) | EU-based processor. |
Nie otrzymują danych osobowych
| Podprocesor | Rola | Lokalizacja | Podstawa transferu |
|---|---|---|---|
| Open-Meteo | Weather history and forecasts used as demand-forecast inputs. Kategorie danych: Branch latitude and longitude | European Union (Germany) | No personal data transferred. |
| OpenHolidays API | School and public holiday calendars as demand-forecast inputs. Kategorie danych: Country and region code | European Union | No personal data transferred. |
Uwagi
- Anthropic (Claude): Receives invoice content. Supplier contact details on an invoice are personal data of that supplier. Assistant conversations are sent as they are typed, including anything the person chooses to put in the message box.
- DigitalOcean: Holds the live database. The customer company's bank accounts and tax identifier, staff pay and the till's guest register are encrypted in the database (AES-256-GCM); the disks and the rest of the database are not.
- Google Cloud — Document AI: Region is enforced in config.py; do not change it to `us`.
- Google Business Profile: Two-way and unlike the other entries here. Reviews are authored on Google by members of the public and read into Owlly; Google is an independent controller of that platform, not merely our processor. What we send back is the reply text the customer wrote, published under their own listing. Access is granted per company by OAuth and revoked by Disconnect; no data flows before a customer connects.
- Stripe: Card details never reach Owlly; they are entered directly into Stripe Checkout.
- Dotykacka: Only engaged for customers who connect a Dotykacka account.
- ChoiceQR: Only engaged for customers who connect a ChoiceQR venue. Two-way: guests enter their details on ChoiceQR, which sends them to Owlly with the order or booking.
- Sentry (Functional Software Inc.): send_default_pii is disabled and session replay masks all text and media, so invoice and payroll content is not captured.
- Open-Meteo: Receives a restaurant location, never a person.
Umowy powierzenia (DPA)
DPA to umowa akceptowana w panelu dostawcy albo podpisywana na papierze, nie da się jej „wdrożyć” w kodzie. W rejestrze prowadzimy jawny status każdej z nich.
10 umów nie zostało jeszcze potwierdzonych przez nas i pozostają zadaniem operacyjnym.
Powiadomienia o zmianach
Każdą zmianę listy publikujemy na tej stronie. Data w polu „Wersja rejestru” poniżej zmienia się przy każdym dodaniu lub usunięciu podprocesora i przy każdej zmianie kategorii danych. Art. 28(2) RODO daje prawo do sprzeciwu wobec nowego podprocesora; zgłoś go na info@owlly.eu.
Wersja rejestru: 2026-10-09 · 13Źródło: GET /api/public/subprocessors