PuntjesWhere your data is processed
The EU Data Act asks a cloud provider to say which country's law its infrastructure answers to, and what it does about an authority outside the European Union asking for data. This page is that statement, and the terms of service point at it.
Which country the infrastructure answers to
Puntjes runs on infrastructure in Germany, in the region Frankfurt, so the law of that country applies to it.
What we do about access from outside the EU
- We have no company or branch outside the European Union, so no authority outside it can reach your data through another part of us.
- Most of our suppliers process your data inside the European Union. Four of them are based outside it: Apple Wallet and Google Wallet, which your customers use for their cards; GitHub, which receives the support requests you send us; and Google Maps Platform, which turns your addresses into map coordinates. The list below says what reaches each of them and what makes that lawful.
- We hand over nothing without a legally binding order that applies to us. We check whether it really does, and we refuse or fight an order that is too wide or that clashes with European law.
- If we ever have to hand something over, we tell you first. If the law forbids us to warn you, we tell you as soon as we may.
Who else processes your data
Running Puntjes takes a handful of other companies: one to run the servers, one to hold the database, one to send the mail. Each of them sees a part of what you keep here. This is all of them, what each one gets and where each one runs.
Laravel Cloud
- What it gets
- Runs the application, its cache and its background work, so it can reach everything Puntjes holds for you.
- Where it runs:
- Germany, Frankfurt
Neon
- What it gets
- Holds the database. Every customer, card and point you keep lives there.
- Where it runs:
- Germany, Frankfurt
Laravel Nightwatch
- What it gets
- Collects the details of a request that went wrong, so we can fix it. An email address can end up in one of those.
- Where it runs:
- Germany, Frankfurt
Mailgun
- What it gets
- Sends the mail that leaves Puntjes, so it sees who it goes to and what it says.
- Where it runs:
- Germany, Frankfurt
Mollie
- What it gets
- Takes your subscription payment and issues your invoice, so it sees your business name, your invoice address, your VAT number and your contact email address.
- Where it runs:
- Netherlands
Google Maps Platform
- What it gets
- Turns the address of your shop and your branches into map coordinates.
- Where it runs:
- United States
- What makes sending data there lawful:
- The EU-US Data Privacy Framework, which the European Commission decided gives your data the same protection there as here.
Apple
- What it gets
- Builds the card your customer keeps in Apple Wallet and pushes an update to their phone.
- Where it runs:
- United States
- What makes sending data there lawful:
- The EU-US Data Privacy Framework, which the European Commission decided gives your data the same protection there as here.
Google Wallet
- What it gets
- Builds the card your customer keeps in Google Wallet.
- Where it runs:
- United States
- What makes sending data there lawful:
- The EU-US Data Privacy Framework, which the European Commission decided gives your data the same protection there as here.
GitHub
- What it gets
- Receives a support request you send us: the subject and the text you typed, the name of your business, your plan and the state of your subscription, and the page you were on.
- Where it runs:
- United States
- What makes sending data there lawful:
- The EU-US Data Privacy Framework, which the European Commission decided gives your data the same protection there as here.
We tell you at least 30 days before we add a party to this list or swap one out, and you can tell us you object. If you do and we cannot resolve it, you can end the agreement before the change takes effect.