Sub-processors

When a property uses Galaxy Hotel Cloud, it is the controller of the data it enters into the PMS and we process that data on its behalf as processor (Terms of service, section “Processing of data on your behalf”). For some activities we rely on other providers, the sub-processors: they are listed here.

Each of them is bound by a data processing agreement with obligations equivalent to ours. We notify you by e-mail at least 30 days before adding a sub-processor, and you can object by terminating the contract.

•Amazon Web Services EMEA SARL — hosting of the application, database, backups, sending e-mails to guests from our sending service and receiving e-mails at the portal. All the data of the PMS. European Union: the Milan region; incoming e-mails are received in Ireland.

•Anthropic PBC — the artificial intelligence tools our staff use for support and maintenance. Names of guests and companies, reservations and folios needed to answer, and what the property sends us with feedback; never identity documents, dates of birth, contact details, tax codes or passwords. United States, under the standard contractual clauses; the data is not used to train the models.

•Google Ireland Ltd (Google Workspace) — the team's e-mail mailboxes: the messages the property sends us for support, with any guest data they contain. European Union and United States, under the standard contractual clauses and the Data Privacy Framework.

•Komoot GmbH (Photon) — address completion while typing, unless the property switches it off in Settings. Only the text of the address, never the name. Germany.

•Channex — the channel manager with the Galaxy Hotel Cloud account: availability, rates and the reservations of the portals with the customer's data.

•Madeep — the channel manager: availability, rates and the reservations of the portals with the customer's data.

•Aruba and Openapi — sending electronic invoices to the Sistema di Interscambio and, with Openapi, legally compliant archiving and company data from the VAT number. The data of the invoices.

•The e-invoicing platforms accredited in France chosen by the property — the data of the invoices.

PassportScan Cloud, for reading identity documents and synchronising reservations with guest data, is a service of PassportScan LTD, the same company that provides Galaxy Hotel Cloud: the data it receives remains within our processing as processor.

•The authorities and bodies to which the property sends data by law (Alloggiati Web, regional statistics systems, SES Hospedajes, SIBA, Sistema di Interscambio): they are recipients decided by the property.

•The products of the Marketplace partners and the AI agent running on the property's own key: they are suppliers of the property, which governs that relationship.

•The property's mail server, when the e-mails to guests are sent from there.

•Stripe and Cloudflare: they process the data of our customers and of the website, not the data entered into the PMS; they are described in the Privacy policy.

For questions about this list or to receive the data processing agreement and the description of the security measures, write to info@galaxy-hotel.net.