List of Sub-Processors
Last updated: 13 August 2026
Attraction Technology Ltd ('Supplier') uses sub-processors to assist it in the provision of its services. The Supplier therefore requires general authorisation to engage third-parties to process personal data. The current sub-processors used by the Supplier are outlined in the table below. New or replacement sub-processors will be added to the below table prior to them processing personal data, and customers given an opportunity to object to such changes.
| Name of sub-processor | Google LLC |
|---|---|
| Categories of data subjects | Authorised Users, End Users |
| Categories of personal data | In respect of Authorised Users: Online identifiers, including cookie identifiers, internet protocol addresses, device identifiers and client identifiers.In respect of End Users: Number of users and sessions, session duration, operating systems, device models, geography, first launches, app opens, app updates, in-app purchases and app interaction events |
| Processing operations | Application maps, Authorised User analytics and End User analytics |
| Location of processing | Any of Google Cloud Platform Locations |
| Adequacy measure in place for processing outside the EEA | Standard contractual clauses |
| Name of sub-processor | Amazon Web Services, Inc. |
|---|---|
| Categories of data subjects | Authorised Users, End Users |
| Categories of personal data | In respect of Authorised Users: IP address, email address, first name, last name. In respect of End Users: First name, last name, email address, location, Facebook ID, IP address, each visit to the attraction (including date/time first seen and last seen), purchase history (including product details and transaction dates), ticket and membership information (including barcodes, booking references and membership photos) and accommodation booking information (including room numbers and booking references). |
| Processing operations | Hosting and cloud infrastructure for the SaaS Platform |
| Location of processing | Ireland |
| Adequacy measure in place for processing outside the EEA | N/A |
| Name of sub-processor | Functional Software, Inc. (dba Sentry) |
|---|---|
| Categories of data subjects | Authorised Users |
| Categories of personal data | IP address, email address, user ID, browser agents and browser and operating system identifiers. |
| Processing operations | SaaS Platform error logging and reporting |
| Location of processing | USA |
| Adequacy measure in place for processing outside the EEA | Standard contractual clauses |
| Name of sub-processor | Bugsnag Inc. |
|---|---|
| Categories of data subjects | End Users |
| Categories of personal data | Crash data, configuration data, browser data, device identification and build data. |
| Processing operations | Application error logging and reporting |
| Location of processing | USA |
| Adequacy measure in place for processing outside the EEA | Standard contractual clauses |
| Name of sub-processor | Facebook, Inc. |
|---|---|
| Categories of data subjects | Authorised Users |
| Categories of personal data | Mobile advertiser ID (unique user ID for advertisers), IP address. |
| Processing operations | To allow End Users to access "Login with Facebook" functionality in the Application |
| Location of processing | USA |
| Adequacy measure in place for processing outside the EEA | Standard contractual clauses |
| Name of sub-processor | Intercom |
|---|---|
| Categories of data subjects | Authorised Users |
| Categories of personal data | First name, last name, email address and IP address |
| Processing operations | Customer service support management |
| Location of processing | Ireland |
| Adequacy measure in place for processing outside the EEA | N/A |
| Name of sub-processor | Twilio Inc. |
|---|---|
| Categories of data subjects | Authorised Users |
| Categories of personal data | Voice Recording, Email Address |
| Processing operations | Authorised User analytics, feedback, surveys and polls |
| Location of processing | USA |
| Adequacy measure in place for processing outside the EEA | Standard contractual clauses |
| Name of sub-processor | MixPanel |
|---|---|
| Categories of data subjects | Authorised Users |
| Categories of personal data | Browser data, device data, location and venue |
| Processing operations | Authorised User analytics |
| Location of processing | EEA |
| Adequacy measure in place for processing outside the EEA | N/A |