Data Processing Agreement

Last updated: 27/09/2026

This document governs the processing of personal data that Daniel Tomás Moronta (Tax ID 54049424E), with registered address at Carrer dels Jurats 22, 19, Valencia, España, owner of the DatomWorx platform (https://auth.datomworx.com), carries out on behalf of your driving school when providing the management service you have contracted (Practices, Exams, Training, Vehicles, Routes and the other DatomWorx modules).

1. Parties

Controller: your driving school or organisation, which owns the data of its students, instructors and staff, and decides what it is used for.

Processor: Daniel Tomás Moronta (DatomWorx), which processes that data solely to provide you with the contracted service, following your instructions.

By using DatomWorx as the owner (BOSS) of a driving school, you accept this agreement on behalf of your organisation, as a complement to the platform's Terms and Conditions of Use and Privacy Policy.

2. Subject matter

On behalf of your driving school, DatomWorx processes the personal data of your students, instructors and administrative staff that you enter or that is generated when using the platform: identification data (name, ID number, date of birth, contact details), academic data (practical lessons, exams, training, marks), payment data (amounts and status, without storing card details) and, if you use them, medical check-up data and time-clock records.

3. Duration

This agreement remains in force for as long as your driving school keeps an active account on DatomWorx, and ends automatically when the account is deleted or closed, without prejudice to the legally required retention periods described in the Privacy Policy.

4. Obligations of the Processor (DatomWorx)

• To process the data only on your documented instructions (those resulting from the configuration and normal use of the platform), and not to use it for its own purposes.
• To ensure that the persons authorised to process the data have committed themselves to confidentiality.
• To apply appropriate technical and organisational security measures: encryption in transit, hashed passwords, access control by session and by organisation, backups and an audit log.
• To help you respond to requests from your students and staff exercising their rights of access, rectification, erasure, objection, restriction or portability.
• To notify you without undue delay of any personal data breach it becomes aware of.
• To make available to you the information needed for you to verify compliance with these obligations.
• To obtain your authorisation, general or specific, before engaging another processor (sub-processor).
• At the end of the service, and at your choice, to return or delete the personal data (unless there is a legal obligation to retain it), including data already held in the retention system described in the Privacy Policy.

5. Obligations of the Controller (your driving school)

• To have a legal basis (contract, consent or another) for processing the data of your students, instructors and staff, and to inform them properly.
• To use the platform in accordance with its purpose and not to enter categories of data that do not correspond to the service.
• To configure the permissions of your administrative staff (secretaries) correctly, following the principle of least privilege.
• To periodically review which of your own legal documents (enrolment, terms) you publish to your students and keep them up to date.
• To apply yourself, to the data you decide to keep or delete (for example, when using "Delete completely" from a student's record), the legal retention criteria that apply in your country.

6. Sub-processors

You give DatomWorx a general authorisation to engage the following sub-processors, which are strictly necessary to provide the service and are all subject to their own data protection obligations:

• Hosting and infrastructure (hosting and databases), to store the information securely and with backups.
• Payment gateway (Stripe), solely to process your organisation's subscription payments; DatomWorx does not store card details.
• Email delivery provider (SMTP), for the platform's automatic notifications and communications.
• Google Maps (Google), solely to display the map and calculate routes in the Routes app — it receives location coordinates, never the student's name.
• Google (Sign in with Google), only if you or your students choose to log in with a Google account instead of a username and password — Google knows that a sign-in takes place, but DatomWorx does not send it the rest of your data.
• Google reCAPTCHA, only if the platform administrator enables it as anti-fraud protection on the public registration forms.
• Browser push notification services (Google, Mozilla, Microsoft or Apple, depending on each user's browser), solely to deliver the app's push notifications when you turn them on — they receive the encrypted notification and the technical identifier of your device, never your personal data.

Country of processing of each sub-processor (according to each provider's public documentation at the date of this agreement — it may change; it is advisable to check it periodically in each provider's privacy policy):

• Hosting, database and SMTP email (Hostinger): Hostinger International Ltd., with its physical infrastructure in Francia, con copias de seguridad en Lituania (Unión Europea).
• Stripe (payment gateway): Stripe Payments Europe, Ltd. (Ireland, European Union), with possible transfers to Stripe, Inc. (USA) covered by the European Commission's standard contractual clauses.
• Google (Maps, sign-in, reCAPTCHA): Google Ireland Limited (Ireland, European Union), with possible transfers to Google LLC (USA) covered by standard contractual clauses.
• Browser push notifications: Google Ireland Limited, Mozilla Corporation (USA), Microsoft Ireland Operations Limited (Ireland) or Apple Distribution International (Ireland), depending on each user's browser.

DatomWorx will inform you of any intended change to these sub-processors that involves adding or replacing one, so that you can object on justified grounds.

7. International transfers

If any of the sub-processors above processes data outside your country or region, DatomWorx ensures that appropriate safeguards are in place (standard contractual clauses or another mechanism recognised by the applicable data protection legislation).

8. Applicable legislation

This agreement is drawn up in accordance with Article 28 of Regulation (EU) 2016/679 (GDPR), which applies to driving schools and students within the European Union. If your organisation operates outside the EU, this document equally sets out the allocation of responsibilities between your driving school (Controller) and DatomWorx (Processor), and it is up to you to check whether your local data protection legislation requires any additional or equivalent requirement.

9. Access to the BOSS panel and Passes

Your driving school's BOSS management panel includes a free trial period of 30 days from the moment you become a BOSS, with full access to all its features.

Once that period is over, full access is maintained automatically as long as you meet at least one of these conditions: having your own Pro plan in any DatomWorx app (paid, gifted or via a pass; the free trial does not count); having active Pro passes (assigned to you or to your instructors) with an equivalent monthly value of at least €14.99, calculated with the monthly price of each pass's plan; or having subscribed to the "BOSS Pass", a monthly subscription designed specifically to keep full access to the panel, applicable only to your own account.

If you cancel the BOSS Pass, it remains active until the end of the period already paid. If a renewal payment fails, it is kept for up to 7 days after the end of the paid period while the payment is retried.

If at any time you stop meeting these conditions, you have a grace period of 10 days before switching to the free plan with limited features: you will still have access to your driving school's profile, your instructors, your students, the prices and the passes tab itself (so you can reactivate it whenever you like). The advanced features (administrative staff, training, vehicle fleet, time clock, statistics with export, payment receipts and importing students from Excel) are reserved for full access.

You can regain full access at any time by subscribing to your own Pro plan, buying passes or activating the BOSS Pass: nothing is deleted when you switch to the free plan.

Questions about this agreement: info@datomworx.com.

Versión 1.2 · publicada el 27/09/2026