GM-CTRL Booking sub-processors
GM-CTRL Booking, the booking service for escape rooms, processes personal data on behalf of each customer company, which is the controller. To provide the service it uses the sub-processors on this list, which is Annex C of the data processing agreement.
Which sub-processors does GM-CTRL Booking use?
| Sub-processor | What for | When |
|---|---|---|
| Cloudflare | Service hosting, database in the EU, edge network and logs. | Always. |
| Brevo | Email delivery. | Always. |
| Google Ireland | Google Calendar. | Only when the company turns on Google Calendar sync. |
Planned: FacturaDirecta, once invoicing is introduced.
Where is the data stored?
GM-CTRL Booking's database is in the European Union jurisdiction. No international transfers are planned; Cloudflare's standard contractual clauses apply to the edge network and the logs.
Who is not a sub-processor?
The acquiring bank and RedSys are not sub-processors: they act as independent controllers. The company's own GM-CTRL systems are the controller's systems.
How are changes announced?
Any new or changed sub-processor is announced to the customer company 30 days in advance. The company may object, and objecting gives it the right to terminate the contract.
Contact
Questions about data protection in GM-CTRL Booking: privacy@gmctrl.com.
Courtesy translation: in case of discrepancy the Spanish version prevails.