As at 03.09.2026. This page is also Annex 3 to the Data Processing Agreement.
1. Subprocessors engaged
| Provider | Purpose | Registered office and place of processing | Basis where a third country is involved |
|---|---|---|---|
| DigitalOcean LLC | Operation of servers and databases | Processing in the Frankfurt am Main (FRA1), Germany data centre; parent company in the USA | European Commission Standard Contractual Clauses; the provider does not access customer data in normal operation |
| OpenAI Ireland Ltd. | Operation of the optional AI assistant | Dublin, Ireland; processing by OpenAI, L.L.C. in the USA | Data processing agreement with OpenAI Ireland Ltd.; transfers on the basis of the EU Standard Contractual Clauses |
On the AI assistant: it is an add-on module and is off by default. Data is transmitted to OpenAI only once the school switches it on. Under the OpenAI API terms, content submitted through the API is not used to train models. If the module is not used, no transfer takes place.
2. Services operated by the customer
The following are not subprocessors of Dance Master Pro. The school connects its own account, the data resides in the school’s own environment, and we hold no administrative access there.
| Service | Used for | What the school must do |
|---|---|---|
| Google Drive, Dropbox or Microsoft OneDrive | Storage of invoice PDFs, medical certificates, photos and videos | conclude its own data processing agreement with the provider; a private consumer account is not sufficient, a business account is required |
| Stripe | Online payments by families, using the school’s own credentials | its own Stripe account and contract |
| Zoom | Online classes, using the school’s own credentials | its own Zoom account and DPA |
| Own SMTP server | Emails to pupils and families sent from the school’s own address | responsibility for its own mail provider |
| Electronic invoicing provider | Transmission of electronic invoices, using the school’s own credentials | its own contract with the provider |
This separation is not a formality. It is the reason your school’s documents sit with you rather than with us.
3. Changes
We inform customers at least 30 days before engaging a new subprocessor or replacing an existing one, by email to the address held in the customer account. You may object within 30 days on data protection grounds; if no mutually acceptable solution is found, you may terminate the affected service extraordinarily (clause 5 of the DPA).
To subscribe to change notifications, write to privacy@dancemasterpro.com with the subject “Subprocessors”.
4. Questions
privacy@dancemasterpro.com