Data Processing Agreement
Last updated: September 11, 2025
Between [Dojo Name] ("Controller") and FlowTech Group / BudoFlow ("Processor").
1. Subject Matter
Processor provides dojo management software (BudoFlow) and processes personal data on behalf of Controller.
2. Categories of Data
- Member personal details (name, contact info)
- Attendance records
- Payment records
3. Processor Obligations
- Process personal data only on Controller's documented instructions.
- Implement appropriate technical and organizational security measures.
- Ensure confidentiality of persons authorized to process the data.
- Assist Controller in fulfilling data subject rights (access, rectification, deletion, export).
- Notify Controller of any data breach without undue delay.
- Delete or return all personal data upon termination (within 90 days).
4. Subprocessors
Processor may use subprocessors (e.g., hosting providers). A list will be made available to Controller upon request. Processor remains fully responsible for their performance.
5. Controller Obligations
- Ensure lawful collection of member data (e.g., consent, contract).
- Provide Processor with clear instructions.
6. Duration
This DPA is valid for the duration of Controller's use of BudoFlow.