List of Sub-Processors

Last Updated: 6th March 2024

Attraction Technology Ltd ('Supplier') uses sub-processors to assist it in the provision of its services. The Supplier therefore requires general authorisation to engage third-parties to process personal data. The current sub-processors used by the Supplier are outlined in the table below. New or replacement sub-processors will be added to the below table prior to them processing personal data, and customers given an opportunity to object to such changes.

Name of sub-processor

Google LLC

Categories of data subjects

Authorised Users, End Users

Categories of personal data

In respect of Authorised Users:
Online identifiers, including cookie identifiers, internet protocol addresses, device identifiers and client identifiers.In respect of End Users: Number of users and sessions, session duration, operating systems, device models, geography, first launches, app opens, app updates, in-app purchases and app interaction events

Processing operations

Application maps, Authorised User analytics and End User analytics

Location of processing

Any of Google Cloud Platform Locations

Adequacy measure in place for processing outside the EEA

Standard contractual clauses

Name of sub-processor

Amazon Web Services, Inc.

Categories of data subjects

Authorised Users, End Users

Categories of personal data

In respect of Authorised Users: IP address, email address, first name, last name.
‍In respect of End Users: First name, last name, email address, location, Facebook ID, IP address, each visit to the attraction (including date/time first seen and last seen), purchase history (including product details and transaction dates), ticket and membership information (including barcodes, booking references and membership photos) and accommodation booking information (including room numbers and booking references).

Processing operations

Hosting and cloud infrastructure for the SaaS Platform

Location of processing

Ireland

Adequacy measure in place for processing outside the EEA

N/A

Name of sub-processor

Functional Software, Inc. (dba Sentry)

Categories of data subjects

Authorised Users

Categories of personal data

IP address, email address, user ID, browser agents and browser and operating system identifiers.

Processing operations

SaaS Platform error logging and reporting

Location of processing

USA

Adequacy measure in place for processing outside the EEA

Standard contractual clauses

Name of sub-processor

Bugsnag Inc.

Categories of data subjects

End Users

Categories of personal data

Crash data, configuration data, browser data, device identification and build data.

Processing operations

Application error logging and reporting

Location of processing

USA

Adequacy measure in place for processing outside the EEA

Standard contractual clauses

Name of sub-processor

Facebook, Inc.

Categories of data subjects

Authorised Users

Categories of personal data

Mobile advertiser ID (unique user ID for advertisers), IP address.

Processing operations

To allow End Users to access "Login with Facebook" functionality in the Application

Location of processing

USA

Adequacy measure in place for processing outside the EEA

Standard contractual clauses

Name of sub-processor

Atlassian, Inc.

Categories of data subjects

Authorised Users

Categories of personal data

First name, last name, email address and IP address

Processing operations

Customer service support management

Location of processing

Germany, Ireland

Adequacy measure in place for processing outside the EEA

N/A

Name of sub-processor

Hotjar Limited

Categories of data subjects

Authorised Users

Categories of personal data

Unique device identifier, IP address

Processing operations

Authorised User analytics, feedback, surveys and polls

Location of processing

EEA

Adequacy measure in place for processing outside the EEA

N/A

Name of sub-processor

Stonly SAS

Categories of data subjects

Authorised Users

Categories of personal data

Unique device identifier, IP address

Processing operations

Authorised User analytics, feedback, surveys and polls

Location of processing

EEA

Adequacy measure in place for processing outside the EEA

N/A

Name of sub-processor

Twilio Inc.

Categories of data subjects

Authorised Users

Categories of personal data

Voice Recording, Email Address

Processing operations

Authorised User analytics, feedback, surveys and polls

Location of processing

USA

Adequacy measure in place for processing outside the EEA

Standard contractual clauses

Name of sub-processor

MixPanel

Categories of data subjects

Authorised Users

Categories of personal data

Browser data, device data, location and venue

Processing operations

Authorised User analytics

Location of processing

EEA

Adequacy measure in place for processing outside the EEA

N/A