Search Events
Legal & Policies

External Data Processors

Last Updated: November 21st, 2024


As your service provider and data processor, TicketKart uses a number of external service providers (sub-processors) to help us deliver and manage your event ticket shop and to process ticket buyer and event attendee data. We have GDPR-compliant data processing agreements in place with all our sub-processors. Below is a list of the sub-processors we use and the services they provide:


Service and Purpose

ServiceWhat We Use Them ForInternational Transfers & Safeguards
Amazon Web Services EMEA SARL (AWS Europe)Hosting, database, and backup infrastructure. We only use AWS infrastructure located in Dublin, Ireland (eu-west-1). Data is encrypted at rest and in transit.EEA/UK: Transfers are covered by adequacy decisions.
US: Transfers to AWS in the US are covered by EU SCCs or the UK Addendum (as applicable). Encryption is applied both at rest and in transit.
Brevo
Email sending infrastructure. When emails are sent out from TicketKart (such as a ticket email or a contact form message), we use Brevo to send them. We only use Brevo infrastructure located physically within the EU.EEA: Transfers outside of the EEA are undertaken pursuant to the EU 2021 SCCs. 
UK: Transfers outside of the UK are undertaken pursuant to the ICO issued international data transfer agreement. All personal data is encrypted in transit and at rest.

Amazon CloudWatch

Monitoring and logging service for tracking application performance, availability, and infrastructure health, with real-time metrics and insights. Data is encrypted

International Transfers: Data within CloudWatch follows AWS’s compliance and security standards, including encryption and protection for cross-border data transfers. Transfers outside of the EEA are covered by EU SCCs and UK Addendum to EU SCCs.

OdooChat and support service for ticket buyers and event organisers.International Transfers: Transfers outside the EEA and Switzerland are undertaken pursuant to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework. UK: Transfers to and from the UK are covered under the UK-U.S. Data Privacy Framework.​
Stripe (if selected as payment processor)Payment processing for your products. Stripe processes personal data as both a controller and processor. Stripe infrastructure is within the EU, but personal data may be transferred outside the EU. See Stripe Privacy Statement.EEA/UK: Transfers are covered by EU 2021 SCCs. Stripe encrypts data at rest and in transit and uses supplementary measures to protect data.
PayPal (if selected as payment processor)Payment processing for your products. PayPal processes personal data as a controller.US: PayPal’s infrastructure is located in the United States. Refer to PayPal Privacy Statement for details.