Data Processing Agreement
Data Processing Agreement in accordance with applicable privacy regulations
We process your customer data solely on your behalf. Your data is encrypted and stored in Europe and never sold or shared with third parties for other purposes. For travel times and addresses we use Google Maps (see 3.4).
Versie: 1.1
This Data Processing Agreement is an integral part of the General Terms and Conditions of PianoPlanner and governs the processing of personal data by Edward Meijer (Edan Creative), hereinafter referred to as ‘Processor’, on behalf of the user of the software, hereinafter referred to as ‘Controller’.
1. Subject of Processing
1.1. The Processor commits, under the conditions of this agreement, to process personal data on behalf of the Controller.
1.2. The processing exclusively concerns the data of the Controller’s customers (such as name, address, instrument details and appointment history) entered into the PianoPlanner software for planning and administration purposes.
2. Obligations of the Processor
2.1. The Processor shall process personal data solely based on written instructions from the Controller, including those instructions arising from the normal use of the software.
2.2. The Processor shall not use the data for its own purposes or share it with third parties, unless required by law or as described in article 3 (calendar connections activated by the Controller and map, address and travel time services).
2.3. The Processor guarantees that persons authorized to process personal data have committed to confidentiality.
3. Security and Synchronization
3.1. The Processor shall take appropriate technical and organizational measures to protect personal data against loss or any form of unlawful processing.
3.2. These measures include, among others, SSL encryption, secure cloud storage and monitoring of system integrity.
3.3. The Controller acknowledges that when two-way synchronization is activated (such as with Google or iCloud), data is transferred outside the direct control of the Processor. The Processor is not responsible for processing by these external parties.
3.4. The Controller acknowledges that the Processor uses Google Maps Platform for travel times, distances, address recognition and maps. Only address and location data is passed on to Google, no names, email addresses or phone numbers. Google acts as an independent controller and not as a sub-processor of the Processor. Transfers outside the European Economic Area are covered by the European Commission's standard contractual clauses.
4. Sub-processors
4.1. The Controller hereby grants permission to the Processor to use sub-processors (such as hosting providers and payment processors) for the processing.
4.2. The Processor ensures that these sub-processors are bound by at least equivalent obligations as set out in this agreement.
5. Rights of Data Subjects
5.1. If an end customer of the Controller submits a request for access, correction or deletion of their personal data, the Processor shall forward this request to the Controller.
5.2. The Processor shall, insofar as reasonably possible, assist the Controller in fulfilling obligations regarding the rights of data subjects.
6. Duration and Termination
6.1. This agreement remains in force while the account is active and during the subsequent 30-calendar-day read-only Archive period.
6.2. After your trial or paid subscription ends, your account remains available in read-only mode for 30 calendar days for viewing, export, and reactivation. After that, the operational account data becomes eligible for controlled deletion, subject to statutory retention obligations.
Last updated: October 4, 2026