Data processing agreement
The Article 28 GDPR contract between your club and SinfoniaOne — conclude it, download the PDF, keep it on file.
Your club manages personal data in SinfoniaOne: names, addresses, dates of birth, photos, minutes. Under data protection law you are the controller — SinfoniaOne only processes that data on your behalf.
That is exactly what the GDPR requires a separate contract for: the data processing agreement under Article 28 GDPR. You conclude it directly in the app and can download it as a PDF at any time afterwards.
Why you need it
If your data protection authority or a member asks on what basis the club's data sits with a service provider, this PDF is the answer. Without the contract you are missing a record the law requires from you — not from us.
How to conclude the agreement
Open the page
Go to Settings → Data processing.
Complete the club details
The contract names your club as the controller — with its name, address, contact email and the person who represents it. Anything missing is listed at the top of the page, and a button takes you straight to the club form.
There, under “Representation”, fill in:
- Represented by — the name of the person who represents the club
- Role — chairperson, for example
Read the contract
The full wording is on the same page, including the annexes: which data is processed, which safeguards apply and which service providers are involved.
Conclude it
Tap “Conclude agreement”. The version, the time and your name are recorded.
Download the PDF
“Download as PDF” gives you the finished document — both parties in the header and the conclusion note. File it with your club records.
Club leadership only
Only the chairperson and club administrators see this page — reading, downloading and concluding go together. The contract applies to the whole club; no individual member should sign it alone. Anyone who cannot conclude it will not find the entry in the settings at all.
Before you conclude it
You can fetch the PDF beforehand too. It is then clearly marked as a draft and says that the conclusion is still missing. Complete club details are required all the same — a contract with a blank line in its header names only half a party.
When a new version arrives
If the wording changes — because a service provider changes, for instance — the page reports “New version available”. Your existing document stays valid until you accept the new one; any change of service provider is announced in advance.
The document never changes afterwards
The PDF of a concluded agreement carries the club details as of the day it was concluded. If the chairperson changes later, the old document still shows who signed back then — as it should. The new details appear in the next version.
What the contract covers
- Subject matter and duration — what is processed and for how long
- Right to issue instructions — you decide what happens to the data
- Categories of data and data subjects — from the member register to the photos
- Safeguards — encryption, tenant separation, logs, backups
- Service providers — who besides the operator is involved, with location and task
- Deletion — what happens to your data after cancellation
See also: Legal notices and Editing your club.