Subprocessor Transparency
Last updated: January 2026
TheScanBadge
Last updated: January 2026
1. Introduction
This page provides transparency regarding third-party service providers (“Subprocessors”) engaged by TheScanBadge for the delivery of its Services.
In accordance with Article 28 GDPR, TheScanBadge ensures that all subprocessors:
- Are contractually bound to data protection obligations
- Provide adequate technical and organizational measures
- Process personal data only under documented instructions
- Operate in compliance with applicable EU data protection laws
2. Core Hosting & Infrastructure
Hetzner Online GmbH
Role: Infrastructure & Cloud Hosting Provider
Location: Germany (EU)
Purpose:
- Secure hosting of platform infrastructure
- Data storage
- Network operations
Data processed:
- Account data
- Digital profile data
- Reservation data
- Technical logs
Legal safeguards:
- GDPR-compliant data processing agreement
- EU-based data centers
- Standard Contractual Clauses (if applicable)
3. Payment Processing
Mollie B.V.
Role: Payment Service Provider
Location: Netherlands (EU)
Purpose:
- Processing payments
- Transaction handling
- Fraud monitoring
Important: TheScanBadge does not store or process full payment card details. Payment data is processed directly by Mollie under its own privacy policy.
Legal safeguards:
- Licensed EU payment provider
- GDPR-compliant processing
4. API & External Service Providers
Google Maps Platform
Role: Address lookup functionality
Purpose:
- Business and address auto-complete
- Location search during onboarding
Usage characteristics:
- Triggered only by user input
- Transactional usage (no background tracking)
- No profiling or marketing usage by TheScanBadge
Data processed:
- IP address (technical necessity)
- Address search queries
Safeguards:
- Google EU data protection terms
- Standard Contractual Clauses where applicable
5. Wallet Integrations
Apple Wallet (Apple Inc.)
Purpose: Provisioning of digital wallet passes
Processing:
- Pass generation only
- No access to Apple ID or payment data
Google Wallet
Purpose: Provisioning of digital wallet passes
Processing:
- One-time pass generation
- No access to payment or wallet transactions
Wallet integrations are initiated only upon explicit user request.
6. Data Center Locations (Infrastructure)
Primary infrastructure is located within the European Economic Area (EEA), including:
- Rotterdam, Netherlands
- Heerlen, Netherlands
- Falkenstein, Germany
- Eindhoven, Netherlands
Data is not intentionally transferred outside the EEA unless legally required and protected by appropriate safeguards.
7. Subprocessor Updates
TheScanBadge may update this list as infrastructure evolves.
Material changes affecting personal data processing will be:
- Reflected on this page
- Communicated to business customers where required
8. Controller vs Processor Clarification
For B2C users, TheScanBadge acts as Data Controller.
For B2B customers, TheScanBadge acts as Data Processor in accordance with the applicable Data Processing Agreement.
9. Contact
For questions regarding subprocessors: