In this document
Overview
This overview lists NFCeez's service providers with contracting company, task, location and basis for any transfer to third countries. For data NFCeez processes on behalf of a business, it corresponds to Annex IV of the data processing agreement (/avv). NFCeez announces changes to businesses at least 14 days in advance. As of 11 October 2026.
Supabase
Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Database, authentication, file storage and server functions for all NFCeez features. Storage in Amazon Web Services data centres in Ireland (eu-west-1); database and files are encrypted with AES-256. Access from third countries for operations and support is based on the EU standard contractual clauses in Supabase's data processing agreement: https://supabase.com/legal/dpa. Supabase is ISO 27001 certified and audited to SOC 2 Type 2.
Official privacy notice: https://supabase.com/privacy
Cloudflare
Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Delivery of nfceez.de including Smart Pages, menus, booking, loyalty card and these legal pages; connection data such as IP address and browser details is processed. Global network. Transfer to the USA based on certification under the EU-US Data Privacy Framework, supplemented by the EU standard contractual clauses: https://www.cloudflare.com/cloudflare-customer-dpa/.
Official privacy notice: https://www.cloudflare.com/privacypolicy/
Resend
Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA. Sending emails: verification codes, booking and programme messages and messages to account owners. Recipient address, content and delivery status are processed. Processing in the USA based on the EU-US Data Privacy Framework and the EU standard contractual clauses: https://resend.com/legal/dpa. Advertising emails are not sent via Resend.
Official privacy notice: https://resend.com/legal/privacy-policy
OpenAI
OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Only when a business chooses it: reading, translating and completing uploaded menus (photos, PDFs, texts). No guest data is transferred. Transfers to affiliates outside the EEA are based on the EU standard contractual clauses in OpenAI's data processing agreement: https://openai.com/policies/data-processing-addendum/.
Official privacy notice: https://openai.com/policies/privacy-policy/
OpenRegister
Descartes Technologies GmbH, Gutsmuthsstraße 14, 12163 Berlin, Germany (commercial register HRB 267645, Berlin-Charlottenburg local court). Commercial register search when an owner verifies their business. Only the search term entered, usually the business name, is sent; public register data such as company name, legal form, register number and registered address comes back. No guest data. OpenRegister runs its own database of public register data and processes our search requests on its own responsibility. According to its privacy notice, OpenRegister uses Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg) and Vercel; transfers to the USA are possible on the basis of the EU standard contractual clauses.
Official privacy notice: https://openregister.de/privacy
Apple
Sign in with Apple, App Store with subscriptions and Apple Wallet. For sign-in, purchases and saving a loyalty card to Apple Wallet, Apple acts under its own terms and its own responsibility. When a guest saves their card to Apple Wallet, NFCeez sends the card content and updates via the Apple Push Notification service. Through the same service, Apple delivers NFCeez Business app notifications to businesses’ devices (device token, title and short text of the notification). Face ID and Touch ID are checked solely on the device; neither Apple nor NFCeez receives biometric data.
Official privacy notice: https://www.apple.com/legal/privacy/
Google Wallet
When a guest saves their loyalty card to Google Wallet, NFCeez sends the card content, member and QR identifier and the programme status via the Google Wallet API. Google acts under its own terms and its own responsibility. Google Wallet is currently in test operation and not yet available to all businesses.
Official privacy notice: https://policies.google.com/privacy
Hostinger
NFCeez's email mailbox at Hostinger, including privacy@nfceez.de, legal@nfceez.de and support@nfceez.de. Sender and recipient addresses, messages and attachments you send to NFCeez are processed. Hostinger processes this data on NFCeez's behalf under its data processing agreement: https://www.hostinger.com/legal/dpa.
Official privacy notice: https://www.hostinger.com/legal/privacy-policy
Linked services
Social networks, map, review and messaging services linked by a business are opened by you; they are not NFCeez service providers and process data under their own notices. NFCeez uses no payment provider other than Apple.