1. Scope
In normal use of xMath, expressions, calculations and the notebook stay in the user's browser and ONMAKE does not receive them: for this data ONMAKE does not act as processor on the customer's behalf and no agreement under Article 28 GDPR is required. Account, subscription, security and support data is processed by ONMAKE as controller, under document 03.
The third-party providers of the optional functions (document 07) receive data by the user's decision and are not ONMAKE sub-processors. If in a specific case ONMAKE were to receive personal data from the customer to process on its behalf, the parties would agree in writing instructions, measures, suppliers and retention before processing, and Article 28 GDPR would apply to that processing.
2. Suppliers and locations
ONMAKE's infrastructure suppliers for the account are: Microsoft Azure (hosting, Italy North region), Supabase (database and authentication, EU Frankfurt region), Aruba (website and email, Italy).