Subprocessors
Version 2026-09-30
For customers who accepted an earlier version, this version applies from 30 October 2026.
Este documento solo está disponible en inglés. La versión en inglés es la que se aplica.
Amiqa uses the six subprocessors below to process personal data on behalf of hotels under the Data Processing Agreement. Our own databases and servers run in the EU, in Stockholm and Frankfurt. We give account owners at least 30 days' email notice before adding or replacing a subprocessor, and they can object as set out in section 7 of the DPA.
| Subprocessor | What it does | Personal data it receives | Location and transfer safeguard | Product |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) | Hosting, databases, file storage and emails sent to guests and staff | All personal data in the Services | EU: Stockholm (eu-north-1) and Frankfurt (eu-central-1) | All |
| CHANNEX.IO LTD (United Kingdom, company no. 09250795) | Channel manager: exchanges rates, availability, bookings, guest messages and reviews with online travel agencies | Guest names and contact details, booking details, guest messages and reviews | United Kingdom, EU adequacy decision | Property management system |
| Tilopay Soluciones Comerciales Limitada (Costa Rica, legal ID 3-102-833000) | Card payments for direct bookings | Guest name, email and payment card details | Costa Rica, Standard Contractual Clauses; PCI DSS certified | Booking engine |
| Apify Technologies s.r.o. (Czech Republic) | One-off import of the hotel's past public Booking.com and Expedia reviews, run by Amiqa when the hotel joins | Reviewer display name, review text, score and date | Czech Republic (EU); processing may take place in the United States: Standard Contractual Clauses. Apify's copy is deleted after each run | Property management system |
| Vercel Inc. | Hosts the revenue-management web application | Data displayed in the application as it passes through | EU (Stockholm). Vercel Inc. is a US company: certified under the EU–US Data Privacy Framework, plus Standard Contractual Clauses | Revenue management |
| Anthropic PBC | Reads the column layout of an uploaded booking export when automatic reading fails | Up to 15 sample rows, with name, contact, identity document, payment and note columns removed before sending | United States, Standard Contractual Clauses; Anthropic does not train on this data | Revenue management |
Services that receive no guest or staff data, and are therefore not subprocessors: OpenAI (matches room-type names against Booking.com), ExchangeRate-API (exchange rates) and Google Maps (the hotel's location on a map).
Services the hotel connects itself, such as online travel agencies or its own property management system, are the hotel's own providers, not Amiqa's subprocessors.
For processing where Amiqa is the controller, for example account emails and subscription billing, see the Privacy Policy.
Amiqa Tech AB · Fatburs Kvarngata 24, 118 64 Stockholm, Sweden · support@amiqa.io