Terms & conditions :
Terms of Use :
These Terms of Use are current as of xxx, 2025.
Please read these Terms of Use carefully.
1. Your acceptance of these Terms of Use 2
2. Definitions 2
3. Description of the Services 5
4. Your ANSWIFY Account 5
5. Duration and Renewal 7
6. Price, payment and billing 7
7. Use of the Tool and Services 7
8. Input Data 8
9. Intellectual Property Rights 9
10. liability 10
11. Maintenance 12
12. Third Partes’ websites and services (External Services) 13
13. Processing of Personal Data 13
14. Changes to Services, Content or Accounts 14
15. Termination and Expiration 14
16. Miscellaneous 15
Appendix 1: Information Notice on the processing of personal data 18
1. Scope of the Information Notice and identification of the controller 18
2. Interpretation 18
3. Categories of personal data 18
4. Legal basis and purposes 18
5. Data recipients 19
6. Data retention 19
7. International data transfers 19
8. Your rights 19
Appendix 2: Data Processing Agreement 20
1. Purpose and scope 20
2. Invariability of the Clauses 21
3. Interpretation 21
4. Hierarchy 21
5. Description of processing 21
6. Obligations of the Parties 21
7. Assistance to the controller 24
8. Notification of personal data breach 24
9. Non-compliance with the Clauses and termination 26
ANNEX I: LIST OF PARTIES 27
ANNEX II: DESCRIPTION OF THE PROCESSING 28
ANNEX III: TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND ORGANISATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA 29
ANNEX IV: LIST OF SUB-PROCESSORS 31
-
1. Your acceptance of these Terms of Use
-
1.1. These Terms of Use, together with our Policies, constitute a binding agreement (the “Agreement”) between
– ANSWIFY, a company with its registered offices at xxxxxxxxx, and
- the party (“User”, “you”, “your”) who is accessing and using the ANSWIFY mobile app (the “App”), or on behalf of whom the App is used.
-
1.2. Our Policies include:
-
-
(i) An Information Notice on the processing of personal data (“Information Notice”) (Appendix 1 to this Agreement);
-
(ii) A Data Processing Agreement (Appendix 2 to this Agreement).
-
-
1.3. The access to the App and use of the Services requires your adherence to the Agreement. By accessing the App and/or using the Services, you agree to be bound by the Agreement.
-
1.4. We may, at our sole discretion, modify or revise the terms of the Agreement at any time. If changes are made to the Agreement, we will notify you by posting an announcement on the App or by sending you an email. Users are bound by any changes when using or otherwise accessing the App after such changes are first notified.
-
2. Definitions
-
2.
-
2.1. Unless the context requires otherwise, the following expressions, when beginning with a capital letter, shall have the following meanings under these Terms of Use:
-
2.1.1. “Account” refers to your ANSWIFY account.
-
2.1.2. “Agreement” means these Terms of Use together with the Policies.
-
2.1.3. “ANSWIFY”, “we”, “our” and “us” refer to ANSWIFY xxx, a company incorporated under the laws of Belgium, with registered office at xxx and registered with the Crossroads Bank of Enterprises under number xxx.
-
2.1.4. “App” refers to the ANSWIFY mobile app.
-
2.1.5. “Application Store” refers to application stores where you can download the App.
-
2.1.6. “Content” means any materials, data, information, functionalities or services displayed, provided or made available by ANSWIFY through the Services, including but not limited to text, software, code, scripts, webpages, photographs, video, graphics, graphical user interface, forms, diagrams or other material contained in the Services.
-
2.1.7. “External Services” means websites, applications and/or platforms which are owned and/or operated by Third Parties (including Linked Services), including the information they make available on the Internet and/or platforms.
-
2.1.8. “Facebook” refers to Facebook and Messenger.
-
-
2.1.9. “Fee” means the applicable fee to be paid by the User to be allowed to use the Services in accordance with the Agreement, as specified in the Application Store.
-
2.1.10. “Force Majeure” refers to any delay, failure to perform, damage, loss or destruction, or malfunction of the Services, or any consequence thereof, caused or occasioned by, or due to, an event of force majeure, fire, earthquake, power failure, explosion, civil disturbance, governmental or regulatory action, lack of equipment or materials, unavailability of transportation, acts or omissions of third parties (except subcontractors), epidemic and lockdown, or any other cause beyond the reasonable control of ANSWIFY and which cannot be overcome by the adoption of reasonable measures.
-
2.1.11. “Indirect Damages” refers to the damages which are not the immediate consequence of a breach of ANSWIFY to its obligations, like for instance any financial or commercial loss, any commercial disturbance, any increase in costs and other overheads, loss of profit, loss of brand image, any postponement or disruption in project or business planning, loss of data and its consequences…
-
2.1.12. “Information Notice” refers to the Information Notice on the processing of personal data (Appendix 1 to this Agreement).
-
2.1.13. “Input Data” means any materials, data, information (i) collected on the Facebook and/or Instagram pages and inbox of the User for the purpose of providing the Services, (ii) provided by the User while using the Services or (iii) resulting from the use of the Services. Input Data includes messages sent and posts published by the User on Facebook and/or Instagram (including through the use of Services), messages and comments received by the User on Facebook and/or Instagram (including those to which the Services apply), information related to the activities and products/services offered by the User (based on the information available on its Facebook and/or Instagram page and inbox and, where applicable, on its website), modifications to reply proposals made by the User, requests for generation of new reply proposals…
-
2.1.14. “Intellectual Property Rights” means all copyright, patents, utility innovations, trademarks and service marks, geographical indications, domain names, (un)registered design rights, sui generis database rights, trade or business names, rights protecting trade secrets and confidential information, rights protecting goodwill and reputation, and all other similar or corresponding proprietary rights and all applications for the same, whether presently existing or created in the future, anywhere in the world, whether registered or not.
-
2.1.15. “Intended Purpose” refers to the automatic generation of reply proposals to messages sent in the User Facebook/Instagram inbox and to comments posted on the User Facebook and/or Instagram page.
-
2.1.16. “Linked Services” means External Services to which Content and/or Input Data can be submitted through the functionalities of the Services (including Facebook and Instagram).
-
2.1.17. “Party” refers to any of the Parties to this Agreement.
-
2.1.18. “Parties” refers to the Parties to this Agreement.
-
2.1.19. “Personal Data” means, in accordance with the General Data Protection Regulation (2016/679), “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
-
2.1.20. “Policies” refer to our Information Notice and to the Data Processing Agreement.
-
2.1.21. “Services” means the services offered to Users through the App, as described in Section 3.
-
2.1.22. “Subscription Period” refers to the period during which the Agreement is in force. The duration of such a period is specified in Section 5. A new Subscription Period starts each time the Agreement is renewed in accordance with Section 5.
-
2.1.23. “Third Party” means a legal entity, company or person that is not a party to this Agreement.
-
2.1.24. “Tool” refers to the artificial intelligence tool used to provide the Services.
-
2.1.25. “User” means any party who subscribes to the Services, in accordance with the Agreement, and who is therefore granted the right to access and use the Services.
-
2.2. Interpretation – In the Terms of Use: (i) whenever the words “include”, “includes” or “including” are used, they are deemed to be followed by the words “without limitation”; (ii) words importing the singular only shall also include the plural and vice versa where the context so requires and references to persons include incorporated and unincorporated bodies, including partnerships and their successors and assigns; (iii) unless expressly stated otherwise, all references to a number of days mean calendar days, and the words “month” or “monthly” as well as all references to a number of months means calendar months; (iv) clause and paragraph headings are inserted for convenience only and shall not affect the interpretation of the Terms of Use; and (v) references to a statute, law, by-law, regulation, rule, directive, delegated legislation or order also refers to the same as amended, modified or replaced from time and to any by-law, regulation, rule, directive, delegated legislation or order made thereunder.
-
3. Description of the Services
-
3.
-
3.1. The App offers access to the Services which consists in a service that automatically generates reply proposals to messages sent in your Facebook/Instagram inbox and to comments posted on your Facebook and/or Instagram page.
-
3.2. To use the Services, you need to log in to the Facebook and/or Instagram account(s) you want to benefit from this service.
-
3.3. The Services automatically identify new messages sent/comments posted and generates a reply proposal to each of them. You are informed of this in the App’s main menu.
Reply proposals are only visible to you on the App at that stage. They are not automatically sent/posted without your intervention.
-
3.4. When a reply proposal is generated, you have three options: (i) sending/posting it as is, (ii) request generation of a new reply proposal, or (iii) modify the reply proposal before sending/posting.
Please note that new reply proposals can be generated two times.
-
3.5. The App is available in English and in French.
-
4. Your ANSWIFY Account
-
3.
-
4.
-
4.1. The Services are provided in connection with specific Facebook and/or Instagram account(s) you decided to link thereto, which requires you to log in to the Facebook and/or Instagram account(s) you want to link to the Services. The connection to a Facebook and/or Instagram account is necessary since the Services are provided to you in relation to messages sent and comments posted on the linked Facebook and/or Instagram account(s). You therefore acknowledge that you are responsible for complying with the terms of use and any other terms applicable to the use of Facebook and/or Instagram. Your use of the Services is subject to you complying with such terms of use and any other applicable terms.
Once you registered to the App through the relevant Facebook and/or Instagram account(s), your Account is considered created.
-
4.2. The access to the App and related use of the Services is subject to payment of the Fee, in accordance with the terms set out in Section 6.
-
4.3. You can sign up for a free trial of the App. In such a case, you can access the App and use the Services for the indicated trial period. This period cannot be interrupted. At the end of the free trial, you will no longer have access to the App and related Services, unless you pay the applicable Fee, in accordance with the terms set out in Section 6. In case you do not subscribe to the Services beyond the trial period, your data will be deleted within one (1) month of the expiry of the trial period.
-
4.4. You declare and guarantee that you have the legal capacity to contract and, if you represent a company or any other organization with legal personality, that you are authorized to act in the name and on behalf of this company or organization.
-
4.5. You are responsible for the security and confidentiality of your Account access parameters, its terminals, its passwords and its connection.
A user account is strictly personal and cannot be shared with a Third Party.
To ensure the confidentiality and security of the Services, you shall use your identifier and password (related to your Facebook and/or Instagram account(s)) in such a way as to preserve their strict confidentiality. In particular, you shall not disclose your username and/or password to anyone.
Any use of the Services by means of these identifiers and password is deemed to have been made by the User himself. Any action taken under the User’s login is the User’s responsibility, whether or not such activity was authorized by the User.
-
4.6. If your username and/or password is lost or stolen, or if you believe that your Account (including via your Facebook and/or Instagram account(s)) has been accessed by unauthorized Third Parties, you shall notify us directly in writing and change your password at the earliest possible opportunity.
-
4.7. We reserve the right to disallow, cancel, remove or reassign certain usernames or permalinks related to the App in appropriate circumstances, as determined by us at our sole discretion, and may, with or without prior notice, suspend or close your Account and/or access to the Services if activities occur on your Account which would or might constitute a violation of the Agreement, or an infringement or violation of the rights, including the Intellectual Property Rights, of any Third Party, or of any applicable laws or regulations.
-
4.8. You may close your Account at any time, which will be considered as a refusal to renew the Agreement for a new Subscription Period, in accordance with Section 15.1.
-
5. Duration and Renewal
-
5.
-
5.1. This Agreement is initially concluded for a Subscription Period of one (1) month. The Agreement automatically renews for successive additional Subscription Periods of one (1) month unless you close your Account at least seven (7) days before the start of the next Subscription Period.
-
5.2. In case of free trial, the Agreement is concluded for a period of one (1) month, without automatic renewal.
-
6. Price, payment and billing
-
6.
-
6.1. The access to the App and related use of Services is subject to the payment of the Fee, which amount is set in the Application Store. The applicable price is the one displayed in the Application Store at the time of the purchase.
-
6.2. ANSWIFY reserves the right to update its price list and to specify new charges at any time. In such a case, you will be informed of the changes via the App. They will be applicable as from the following Subscription Period.
-
6.3. You shall pay the Fee directly to the provider of the Application Store. In this regard, the terms of use of the relevant Application Store are applicable.
-
-
(i) For the Apple’s App Store: https://www.apple.com/befr/legal/internet-services/itunes/befr/terms.html.
-
(ii) For the Google Play Store: https://play.google.com/intl/fr_be/about/play-terms/index.html.
-
In particular, the security of electronic fund transfers and the proper execution of payment orders in general are the sole responsibility of the financial service provider used by the relevant Application Store.
ANSWIFY cannot be held responsible for any damage whatsoever resulting from an error, omission, breakdown, malfunction, fraud, or unlawful act relating to these payment services which are not under its control.
-
7. Use of the Tool and Services
-
7.
-
7.1. The Services must be used in good faith and in accordance with the acceptable behaviour standards. In particular, as the reply proposals are generated by an artificial intelligence Tool, they shall be subject to human review, for which the User is solely responsible. The Services do not include a compliance check with the applicable laws (including laws regulating artificial intelligence and data protection laws) and accepted standards of behaviour. The User is solely responsible for sending and posting replies. Consequently, ANSWIFY declines all responsibility in the event of improper or unlawful replies which may be posted by the User based on proposals generated by the Services.
-
7.2. You commit to using the Tool in accordance with its Intended Purpose, to the exclusion of any other purpose, and not to modify this Intended Purpose. Additionally, you commit not to change the Tool into a high-risk AI system within the meaning of the AI Act (regulation (EU) 2024/1689).
-
7.3. You may not, without our prior written consent, use the App in such a way that you aggregate Content from the Services into a separate destination (e.g., another mobile application or website) that replicates substantially the offering of the Services, or comprises a content service of which Content from the Services forms a material part.
-
8. Input Data
-
8.
-
8.1. You understand that, in order for us to provide you with the Services, it is necessary that we have sufficient, accurate and appropriate information, in particular about your activities, the products/services you offer and how you communicate with the public and individuals via Facebook and/or Instagram. The quality of the Services depends on that.
You are responsible for providing us with such information in due time to enable a timely delivery of the Services in accordance with the Agreement terms.
-
8.2. The App and the Services are not intended to store Input Data.
-
8.3. You are solely responsible for the accuracy, completeness and appropriateness of the Input Data. ANSWIFY shall not be liable for any dissatisfaction with the Services or damages resulting from incompleteness, inaccuracies, inappropriateness or omissions in the Input Data. In addition, the User consequently agree to indemnify and hold ANSWIFY harmless from any claims, damages, or losses arising from any Third Party’s claims related to the Input Data or its use in the framework of the Services. In the event of any such claims, the User shall bear all costs and expenses, including legal fees, incurred by ANSWIFY in defending against such claims, without prejudice to any other damages for which ANSWIFY reserves the right to claim compensation.
-
8.4. Linked Services: You hereby acknowledge and agree that once Input Data is distributed to a Linked Service, it is no longer under ANSWIFY control. The User shall therefore solely responsible to deal with any request to remove or correct Input Data from any servers or systems operated by the operators of any Linked Service, or to require that any user of the Linked Service deletes any item of Input Data from the Linked Service.
-
8.5. The User grants ANSWIFY a worldwide, non-exclusive, royalty-free, sub-licensable and transferable license to use the Input Data for the purposes of improving the quality of the Services. This license applies for the entire duration of Intellectual Property Rights.
You also grant us the worldwide, non-exclusive, royalty-free, sublicensable, and transferable right to use, distribute, reproduce, copy, and display your trademarks, service marks, slogans, logos or similar proprietary rights (collectively, the “Trademarks”) solely in connection with the Services or in the marketing, promotion or advertising of the Services, including in all forms of marketing, promotion, and advertising materials now known or hereafter created. This license applies for the entire duration of Intellectual Property Rights.
-
8.6. Input Data may not:
-
-
(i) be unlawful, abusive, libelous, defamatory, pornographic or obscene, and you shall not promote or incite harassment, violence, terrorism, illegal acts, or hatred on the grounds of race, ethnicity, cultural identity, religious belief, disability, gender, identity or sexual orientation;
-
(ii) be contrary to the Agreement; and/or
-
(iii) contrary to applicable local, national, and international laws and regulations.
-
-
9. Intellectual Property Rights
-
9.
-
9.1. The Services, as well as the reply proposals resulting from the provision of the Services, are our property and shall not be used other than in strict compliance with this Agreement. When you enter into this Agreement, we grant you a personal, limited, non-exclusive, non-transferable, non-sublicensable right to use the Services and the generated reply proposals.
This license is granted with a worldwide scope, and is subject to the payment of the applicable Fee. The license on the generated replies is granted for the duration of the Intellectual Property Rights thereon, while the license on the Services and in particular the right to use the Tool, the App and the Services is limited to the term of the Agreement and shall automatically be terminated at the date of expiry of the Agreement.
You may not, under any circumstances:
-
-
(i) copy, sell, resell, assign, license, distribute, transmit, publicly display, rent, lease, lend, export, offer on a “pay-per-use” basis, publish or otherwise reproduce the Services or any part thereof in any form by any means;
-
(ii) adapt, modify, decompile, disassemble, localize, port and/or reverse engineer the Services or any part thereof;
-
(iii) remove, obscure or destroy any copyright, trade secret, proprietary or confidential legends or marking placed upon or contained within the Services;
-
(iv) use the Services and the reply proposals for any purpose other than those permitted under this Agreement; or
-
(v) remove, extract, download or copy any software, firmware, program and/or any code of any kind which have been embedded and/or incorporated into the hardware, devices and/or equipment comprised in any device used to access the Services.
-
-
9.2. This license is subject to your compliance with the Agreement, and the payment of the applicable Fee. This license does not imply any transfer of rights to you, and does not allow the transfer of the granted rights to a Third-Party.
Any breach of the foregoing restrictions shall result in immediate and automatic termination of all rights and license granted hereunder. The use restrictions set out herein shall survive the termination of this Agreement.
Any breach of these obligations shall also automatically entail, and without prior notice, a fixed indemnity equivalent to 5.000 euros, without prejudice to the right of ANSWIFY to claim a higher indemnity that it can justify and without prejudice to the right of any injured third parties to institute proceedings independently of ANSWIFY.
-
10. Liability
-
10.
-
10.1. Except expressly otherwise specified in the Agreement, ANSWIFY obligations are, as a general rule, obligations of means.
-
10.2. Unless otherwise agreed, the information provided by ANSWIFY is general and informative.
-
10.3. ANSWIFY uses its best efforts to ensure the proper and continuous operation of the Services.
However, the Services may be temporarily, in whole or in part, unavailable for technical reasons, including updates or maintenance.
The Services are provided on a best efforts basis, without warranty of any kind regarding technical bugs, deficiencies or lack of performance.
-
10.4. ANSWIFY shall not bear any liability in case of issue or damage caused in whole or in part by Third Parties such as, but not limited to:
-
-
(i) an interruption, disconnection, slowdown of electronic communication services and/or an issue with the cloud hosting infrastructure used to operate the Services;
-
(ii) an unauthorized intrusion on the hosting infrastructure or the consequences of viruses or malwares, or fraud attempt, or malicious action ;
-
-
10.5. The Services and the Content are provided on a standard basis. ANSWIFY makes therefore no representations or warranties of any kind, implied, express or statutory, including the warranties of non-infringement of Third Party’s rights, title, merchantability, satisfactory quality or fitness for a particular purpose, and freedom from computer virus or other malicious code in connection with the Services. Without prejudice to the generality of the foregoing, we do not warrant:
-
-
(i) the accuracy, timeliness, adequacy, commercial value or completeness of the Services, and expressly disclaim any liability for errors, delays or omissions in the reply proposals, or liability for any action taken based on the Content or the Services;
-
(ii) that your use of and/or access to Services will be uninterrupted, timely, secure or free from errors or that any defects will be corrected;
-
-
-
(iii) that any information, instructions or communications posted or transmitted by you through the Services is secure and cannot be accessed by unauthorized Third Parties;
-
(iv) that your use of the Services is lawful in any particular jurisdiction;
-
(v) that the hardware and software you are using to connect to the Services is compatible with the Services. We decline all responsibility in the event of inadequacy between your computer/mobile installation (hardware, software, connection, etc.) and the Services. The User is responsible for obtaining adequate information regarding hardware and software compatibility before subscribing to the Services.
-
-
10.6. Limitation of Liability: ANSWIFY shall not be liable to you for any loss, damages or expenses (including any direct, Indirect Damages, incidental, special, consequential or punitive damages or economic loss or any claims for loss of profits or loss of use) arising directly or indirectly in connection with:
-
-
(i) any changes that we may make to the Services during the term of the Agreement, or
-
(ii) any temporary or permanent suspension of access to the Services or any Content in or from any or all territories;
-
(iii) any action taken against you by Third Parties with respect to any alleged infringement of such Third Party’s rights related to your Content or your access to and/or use of the Services and/or the Content;
-
(iv) any action taken as part of an investigation by us or any relevant law enforcement authority regarding your use of the Services and/or Content;
-
(v) your failure to provide us with accurate or complete information, or your failure to keep your username and/or password suitably confidential;
-
(vi) any misconduct by other Users using the Services, especially in breach of the Agreement;
-
(vii) any loss or damage to any computer hardware or software, any loss of data (including Input Data), or any loss or damage resulting from any security breach;
-
-
-
(viii) any non-performance, error, interruption or delay in the performance of the Agreement (or any part thereof) if this is due, in whole or in part, directly or indirectly to an event of Force Majeure.
-
-
10.7. Indemnity: Save for losses arising directly from our fraud or willful default, you hereby agree to defend, indemnify and hold harmless the ANSWIFY from and against any claims (actual and threatened), settlement sums, liability, losses, damages, costs (including solicitor and client costs and expenses (legal or otherwise), charges, expenses, actions, proceedings, whether foreseeable or not, which ANSWIFY may sustain, suffer or incur, directly or indirectly out of or in the course of or in connection with any of the following:
-
-
(i) your access to and/or use of the Services or any part thereof;
-
(ii) any enforcement of our rights under the Agreement;
-
(iii) any violation by you of any terms of the Agreement, however arising;
-
(iv) any claims for violation of any Third Party’s rights, including, without limitation any Intellectual Property Right or privacy right, arising from or in relation to your access to and/or use of the Services and/or Input Data;
-
(v) any claims or damages arising from the provision of Input Data on the Services;
-
(vi) any damages caused by activities related to your Account, be it by you or by any other person accessing your Account with or without your consent.
-
-
10.8. Nothing in this Agreement limits or excludes the liability of ANSWIFY for (i) any death or personal injury caused by its or their negligence, or (ii) any losses arising directly from its or their fraud or willful default.
-
10.9. In general, except for personal injury or death of the User due to an action or omission of ANSWIFY, the liability of ANSWIFY is limited to the amount of the Fee paid by the User during the last twelve (12) months.
-
11. Maintenance
-
11.
-
11.1. To the extent possible and desirable in light of the state of the art, ANSWIFY may adapt and improve the Services. Therefore, the User understands and accepts that the Services and, in general, all the functionalities offered by the Services may be subject to modification. Therefore, some features may be removed and others added, without the User being able to assert any right over any of them.
-
11.2. Whenever possible, ANSWIFY shall inform the User of the most important changes by email or on the App., and shall do its best efforts to limit the possible interruption of Services due to such maintenance actions.
-
11.3. ANSWIFY does not, however, make any commitment with respect to upgrade maintenance and does not undertake to carry out such upgrade maintenance, nor to carry out such maintenance with a view to customizing and/or adapting the Services to the User’s specific needs.
-
12. Third Partes’ websites and services (External Services)
-
12.
-
12.1. The Services shall be used by you in connection with External Services, , and in particular with the Linked Services.
-
12.2. ANSWIFY does not have or maintain any control over External Services, and that is not responsible for their content, operation or use, or the consequences of accessing any such External Services. By linking or otherwise providing access to any External Services, we do not give any representation, warranty or endorsement, express or implied, with respect to the legal compliance, accuracy, quality or authenticity of content, or information provided by such External Services.
-
12.3. External Services are governed by their own terms of use. You are solely responsible for reviewing any terms of use or other terms governing your use of the External Services, which is made at your own risk.
-
13. Processing of Personal Data
-
13.
-
13.1. Processing of Users’ Personal Data by ANSWIFY: ANSWIFY is concerned with the protection of Personal Data relating to its Users. Our Information Notice is intended to provide you information on why and how we process Personal Data relating to you. It may be updated and/or amended from time to time.
-
13.2. Processing of Third Parties’ Personal Data by ANSWIFY on behalf of Users: ANSWIFY may process personal data relating to Third Parties on your behalf (Processor) as necessary to provide the Services, in accordance with the Data Processing Agreement (Appendix 2 to this Agreement). These Third Parties are, in particular, natural persons who send you messages on Facebook/Instagram and/or who post comments on your Facebook and/or Instagram page.
You warrant that you process Third Parties’ Personal Data in accordance with applicable data protection laws, including in such a way as to enable ANSWIFY to process such Personal Data lawfully on your behalf. In particular, you warrant that you have provided appropriate information to such Third Parties on ANSWIFY’s intervention in the processing of their Personal Data, as required by applicable data protection laws.
-
14.
-
14. Changes to Services, Content or Accounts
-
14.1. We may, from time to time and without giving any reason or prior notice, upgrade or modify the Services or any part thereof, temporarily or permanently, and in its entirety or with respect to certain territories only.
-
14.2. We may change the features of an Account, may withdraw or introduce new features, products or types of Account at any time and for any reason, and may change the prices charged for any aspect of the Services from time to time.
-
14.3. In the event of any material reduction in the features of any aspect of the Services, you will be informed of such change(s) and its effective date. In case the Services reduction raises an issue for you, you are allowed to cancel your ongoing Subscription Period and will be reimbursed of the applicable Fee, prorate temporis.
-
14.4. You have no right of continued access to any particular item of Content. You agree that you do not rely on us to keep a copy of or make available any Content that is or was available on or through the Services. We shall have no liability in the event that you are unable to access an item of Content due to its removal from the Services.
-
14.5. For the avoidance of doubt, we are under no obligation to provide any adaptations, enhancements and/or modifications to the Services, including any updates, patches, bug-fixes and/or upgrades to the Services or any new versions and/or releases of the Services which incorporate new features or functions.
-
15. Termination and Expiration
-
15.
-
15.1. Expiration of the Agreement: Upon expiration of the ongoing Subscription Period and except in case of free trial, this Agreement shall be automatically renewed for successive additional Subscription Periods unless you close your Account at least seven (7) days before the start of the next Subscription Period.
-
15.2. Termination by us: We may, with immediate effect upon giving you notice, terminate the Agreement in case of breach of any provision of the Agreement, or if, in our opinion or the opinion of any regulatory authority, tribunal or court of law, it is not suitable to continue providing any aspect of the Services.
We may also terminate this Agreement at any time, for any reason, by providing you with seven (7) days prior written notice via the App.
-
15.3. Consequences of expiration or termination of the Agreement: Upon expiration or termination of the Agreement, your Account will be disabled, and you will no longer have access to the App and associated Services, and all rights and/or licenses granted to you under this Agreement shall immediately cease and terminate. The license on the already generated Content (at the time of termination of the Agreement) shall however remain valid despite the termination of the Agreement, subject to the complete and prior payment of the applicable Fee.
In the event of termination due to a breach of the Agreement on your part, you will not be entitled to claim any refund of the price paid for the ongoing Subscription Period.
-
15.4. Input Data upon expiration or termination of the Agreement: Once your Account has been terminated, all Input Data residing in your Account or pertaining to activity from your Account, will, within a commercially reasonable and practicable time, be irretrievably deleted from our servers, except to the extent that we are obliged or permitted to retain such Input Data, data or information for a certain period of time in accordance with applicable laws and regulations and/or to protect our legitimate business interests. We assume no liability for any Input Data, data or information that is irretrievably deleted following any termination of your Account.
-
15.5. Survival of terms: All provisions of this Agreement which, by their nature, should survive termination shall survive termination, including Sections 2, 8.5, 9.2, 10 and 16.
-
16. Miscellaneous
-
16.
-
16.1. Binding and conclusive: The Parties expressly agree to accept electronic documents and electronic notifications via the App as written evidence mean.
You acknowledge and agree that any records maintained by us or our service providers relating to or in connection with the Services shall be binding and conclusive on you for all purposes whatsoever and shall be conclusive evidence of any information and/or data transmitted between us and you.
-
16.2. Sub-contracting and delegation: We reserve the right to delegate or sub-contract the performance of any of our functions in connection with the Services and reserve the right to use any service providers, subcontractors and/or agents on such terms as we deem appropriate.
The User understands that ANSWIFY cannot provide more guarantees than it receives from its own subcontractors. ANSWIFY uses reputable contractors and subcontractors to perform various services.
-
16.3. Assignment: You may not assign your rights or obligations under this Agreement in whole or in part, to any Third Party without our prior written consent. We may assign our rights and (to the extent permitted by law) obligations under this Agreement, in whole or in part, to any Third Party at any time without notice, including without limitation, to any person or entity acquiring all or substantially all of the assets or business of ANSWIFY.
-
16.4. Severability: The invalidity or unenforceability of any of the provisions in the Agreement shall not adversely affect or impair the validity or enforceability of the remaining provisions of the Agreement.
Each Party shall use its best efforts to immediately negotiate in good faith a valid replacement provision that retains, to the extent possible, the economic balance and intent of the Parties as reflected in the initial provision, within the limits permitted by the applicable law.
-
16.5. Waiver: In any event, our failure to enforce the Agreement shall not constitute a waiver of any terms of the Agreement, and such failure shall not affect the right later to enforce the Agreement. We would still be entitled to use our rights and remedies in any other situation including where you breach the Agreement.
-
16.6. Entire Agreement: This Agreement constitute the entire agreement between you and us with respect to your use of and access to the Services, and supersedes any prior agreement or representation, whether oral or written, between you and us. Any modifications to the Agreement must be made in writing.
-
16.7. Rights of Third Parties: A person or entity who is not a party to the Agreement shall have no right under laws to enforce any terms of the Agreement, regardless of whether such person or entity has been identified by name, as a member of a class or as answering a particular description. For the avoidance of doubt, nothing in this clause shall affect the rights of any permitted assignee or transferee of the Agreement.
-
16.8. The Agreement is written in English. Only the English version of the Agreement is authoritative.
-
16.9. Insofar as applicable, since the Agreement is principle concluded remotely and in view of the nature of the Services, you acknowledge that you expressly request access to the Services immediately and that you therefore waive your right of withdrawal in accordance with articles VI.45, 11°, and VI.53, 1°, of the Belgian Code of Economic Law.
-
16.10. By express derogation from Article 8.20 of the Belgian Civil Code, the Agreement is executed by the User acceptance of the applicable terms, as organised by the relevant Application Store during the completion of the subscription process.
-
16.11. Governing Law: The Agreement, including its conclusion, interpretation, performance, termination and all disputes relating thereto, shall be governed by and construed in accordance with the laws of Belgium.
-
16.12. Dispute Resolution: The Parties agree to make every reasonable effort to resolve any dispute arising out of or relating to the validity, interpretation, or performance of this Agreement through amicable negotiations in good faith.
Any dispute arising out of or in connection with this Agreement that cannot be resolved amicably by the Parties, shall be subject to the exclusive jurisdiction of the courts of Liège, Belgium.
Appendix 1: Information Notice on the processing of personal data
-
1. Scope of the Information Notice and identification of the controller
1.1. This Information Notice applies to the processing of personal data related, as the case may be, to the User (if the User is a natural person) or to the User’s representative (who uses the App on behalf of the User).
1.2. The controller is ANSWIFY xxx, a company incorporated under the laws of Belgium, with registered office at xxx and registered with the Crossroads Bank of Enterprises under number xxx.
The controller may be contacted by post at the above-mentioned address or by email at the following address: xxx.
-
2. Interpretation
2.1. Where this Appendix 1 uses the terms defined in the General Data Protection Regulation (EU) 2016/679 (hereinafter the “GDPR”), those terms shall have the same meaning as in that Regulation.
2.2. Where this Appendix 1 uses terms beginning with a capital letter, those terms shall have the same meaning as under the Terms of Use.
-
3. Categories of personal data
The categories of personal data processed are:
-
-
• identification data (surname, first name…);
-
• contact data (address, email address, phone number…);
-
• data related to Facebook and/or Instagram account (profile picture, name on the account…);
-
• activity on Facebook and/or Instagram;
-
• financial/billing data (bank account number, VAT number…).
-
-
4. Legal basis and purposes
4.1. The aforementioned data is processed to provide the User with the Services:
-
-
• to ensure the proper provision of the Services by the ANSWIFY;
-
• to enable payment for the Services provided;
-
• to enable ANSWIFY and the User (or, as the case may be, the User’s representative) to communicate with each other.
-
This processing is necessary for the performance of the contract concluded between the Parties (Article 6.1.b) of the GDPR), the terms of which are detailed in the Terms of Use.
4.2. The aforementioned data is processed for accounting and tax management purposes.
This processing is necessary to comply with ANSWIFY’s legal accounting and tax obligations (Article 6.1.c) of the GDPR).
4.3. The aforementioned data may be processed by ANSWIFY to defend its legal interests in the event of a dispute. This processing is based on ANSWIFY’s legitimate interest in defending its interests (article 6.1.f) of the GDPR).
-
5. Data recipients
To the extent necessary to achieve the aforementioned purposes, personal data may be communicated to the following third parties:
-
-
• IT service providers;
-
• lawyers/attorneys-at-law;
-
• bailiffs;
-
• postal service providers;
-
• tax and social security authorities;
-
• social secretariat;
-
• accountants.
-
-
6. Data retention
The data is kept for a period of ten (10) years after the end of the Agreement.
In the event of a dispute, the data will be kept by ANSWIFY for as long as necessary to defend its interests in court.
-
7. International data transfers
Data may be transferred to recipients outside the European Economic Area for which the European Commission has issued an adequacy decision. In certain cases, data may also be transferred to countries outside the European Economic Area for which no adequacy decision has been issued, subject to appropriate safeguards. These appropriate safeguards consist of the conclusion of standard contractual clauses with the recipient of the data, as published by the European Commission, with the application of additional measures where necessary.
-
8. Your rights
Under the conditions set out in the GDPR, the User (or, as the case may be, the User’s representative) has the right to access its personal data and to request the transfer of such data to a third party (portability), the right to request the rectification or deletion of such data and the right to object to the processing.
The User (or, as the case may be, the User’s representative) has the right to lodge a complaint concerning the exercise of its rights with the Data Protection Authority (rue de la Presse, 35 - 1000 BRUSSELS; Tel. + 32 2 274 48 00; contact@apd-gba.be; https://www.autoriteprotectiondonnees.be/citoyen/agir/introduire-une-plainte).
Appendix 2: Data Processing Agreement
This Data Processing Agreement is an Appendix to the Terms of Use concluded between ANSWIFY xxx, a company incorporated under the laws of Belgium, with registered office at xxx and registered with the Crossroads Bank of Enterprises under number xxx (hereinafter the “processor” or “ANSWIFY”) and the User (within the meaning of the Terms of Use) (hereinafter the “controller” or the “User”).
The controller and the processor may be referred to individually as a “Party” and collectively as the “Parties”.
WHEREAS:
-
-
• The processor provides certain services to the controller pursuant to the Terms of Use.
-
-
-
• These services involve the processing of personal data by the controller within the meaning of the Belgian law of 30 July 2018 on the protection of individuals with regard to the processing of personal data (hereinafter the “LPPPD”) and the General Data Protection Regulation (EU) 2016/679 (hereinafter the “GDPR”).
-
Within the meaning of these laws, the User is therefore the (data) controller and ANSWIFY is the (data) processor.
-
-
• The processor processes personal data only on the instructions of the controller and not for its own purposes, in accordance with the LPPPD and the RGDP.
-
-
-
• By means of this Appendix 2 to the Terms of Use, the Parties wish to establish their agreements concerning the processing of personal data. This incorporates the standard contractual clauses for controllers and processors in the EU/EEA drafted by the European Commission in Commission Implementing Decision (EU) 2021/915 of 4 June 2021 on standard contractual clauses between controllers and processors under Article 28(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council.
-
IT IS AGREED AS FOLLOWS:
-
1. Purpose and scope
-
-
(a) The purpose of these Standard Contractual Clauses (the Clauses) is to ensure compliance with Article 28(3) and (4) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
-
(b) The controllers and processors listed in Annex I have agreed to these Clauses in order to ensure compliance with Article 28(3) and (4) of Regulation (EU) 2016/679.
-
(c) These Clauses apply to the processing of personal data as specified in Annex II.
-
(d) Annexes I to IV are an integral part of the Clauses.
-
(e) These Clauses are without prejudice to obligations to which the controller is subject by virtue of Regulation (EU) 2016/679.
-
(f) These Clauses do not by themselves ensure compliance with obligations related to international transfers in accordance with Chapter V of Regulation (EU) 2016/679.
-
-
2. Invariability of the Clauses
-
(a) The Parties undertake not to modify the Clauses, except for adding information to the Annexes or updating information in them.
-
(b) This does not prevent the Parties from including the standard contractual clauses laid down in these Clauses in a broader contract, or from adding other clauses or additional safeguards provided that they do not directly or indirectly contradict the Clauses or detract from the fundamental rights or freedoms of data subjects.
-
3. Interpretation
-
(a) Where these Clauses use the terms defined in Regulation (EU) 2016/679, those terms shall have the same meaning as in that Regulation.
-
(b) These Clauses shall be read and interpreted in the light of the provisions of Regulation (EU) 2016/679.
-
(c) These Clauses shall not be interpreted in a way that runs counter to the rights and obligations provided for in Regulation (EU) 2016/679 or in a way that prejudices the fundamental rights or freedoms of the data subjects.
-
4. Hierarchy
In the event of a contradiction between these Clauses and the provisions of related agreements between the Parties existing at the time when these Clauses are agreed or entered into thereafter, these Clauses shall prevail.
-
5. Description of processing
The details of the processing operations, in particular the categories of personal data and the purposes of processing for which the personal data is processed on behalf of the controller, are specified in Annex II.
-
6. Obligations of the Parties
6.1. Instructions
-
(a) The processor shall process personal data only on documented instructions from the controller, unless required to do so by Union or Member State law to which the processor is subject. In this case, the processor shall inform the controller of that legal requirement before processing, unless the law prohibits this on important grounds of public interest. Subsequent instructions may also be given by the controller throughout the duration of the processing of personal data. These instructions shall always be documented.
-
(b) The processor shall immediately inform the controller if, in the processor’s opinion, instructions given by the controller infringe Regulation (EU) 2016/679 or the applicable Union or Member State data protection provisions.
6.2. Purpose limitation
The processor shall process the personal data only for the specific purpose(s) of the processing, as set out in Annex II, unless it receives further instructions from the controller.
6.3. Duration of the processing of personal data
Processing by the processor shall only take place for the duration specified in Annex II.
6.4. Security of processing
-
(a) The processor shall at least implement the technical and organisational measures specified in Annex III to ensure the security of the personal data. This includes protecting the data against a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access to the data (personal data breach). In assessing the appropriate level of security, the Parties shall take due account of the state of the art, the costs of implementation, the nature, scope, context and purposes of processing and the risks involved for the data subjects.
-
(b) The processor shall grant access to the personal data undergoing processing to members of its personnel only to the extent strictly necessary for implementing, managing and monitoring of the contract. The processor shall ensure that persons authorised to process the personal data received have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
6.5. Sensitive data
If the processing involves personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data or biometric data for the purpose of uniquely identifying a natural person, data concerning health or a person’s sex life or sexual orientation, or data relating to criminal convictions and offences (“sensitive data”), the processor shall apply specific restrictions and/or additional safeguards.
6.6 Documentation and compliance
-
(a) The Parties shall be able to demonstrate compliance with these Clauses.
-
(b) The processor shall deal promptly and adequately with inquiries from the controller about the processing of data in accordance with these Clauses.
-
(c) The processor shall make available to the controller all information necessary to demonstrate compliance with the obligations that are set out in these Clauses and stem directly from Regulation (EU) 2016/679. At the controller’s request, the processor shall also permit and contribute to audits of the processing activities covered by these Clauses, at reasonable intervals or if there are indications of non-compliance. In deciding on a review or an audit, the controller may take into account relevant certifications held by the processor.
-
(d) The controller may choose to conduct the audit by itself or mandate an independent auditor. Audits may also include inspections at the premises or physical facilities of the processor and shall, where appropriate, be carried out with reasonable notice.
-
(e) The Parties shall make the information referred to in this Clause, including the results of any audits, available to the competent supervisory authority/ies on request.
6.7. Use of sub-processors
-
(a) GENERAL WRITTEN AUTHORISATION: The processor has the controller’s general authorisation for the engagement of sub-processors from an agreed list (see Annex IV). This list can be updated by the processor at any time. The updated list will be available on the App. In case of objection, the controller can terminate the Agreement and will be reimbursed of the Fee applicable to the ongoing Subscription Period, prorate temporis. .
-
(b) Where the processor engages a sub-processor for carrying out specific processing activities (on behalf of the controller), it shall do so by way of a contract which imposes on the sub-processor, in substance, the same data protection obligations as the ones imposed on the data processor in accordance with these Clauses. The processor shall ensure that the sub-processor complies with the obligations to which the processor is subject pursuant to these Clauses and to Regulation (EU) 2016/679.
-
(c) At the controller’s request, the processor shall provide a copy of such a sub-processor agreement and any subsequent amendments to the controller. To the extent necessary to protect business secret or other confidential information, including personal data, the processor may redact the text of the agreement prior to sharing the copy.
-
(d) The processor shall remain fully responsible to the controller for the performance of the sub-processor’s obligations in accordance with its contract with the processor. The processor shall notify the controller of any failure by the sub-processor to fulfil its contractual obligations.
-
(e) The processor shall agree a third-party beneficiary clause with the sub-processor whereby - in the event the processor has factually disappeared, ceased to exist in law or has become insolvent - the controller shall have the right to terminate the sub-processor contract and to instruct the sub-processor to erase or return the personal data.
6.8. International transfers
-
(a) Any transfer of data to a third country or an international organisation by the processor shall be done in accordance with Chapter V of Regulation (EU) 2016/679.
-
(b) The controller agrees that where the processor engages a sub-processor in accordance with Clause 6.7. for carrying out specific processing activities (on behalf of the controller) and those processing activities involve a transfer of personal data within the meaning of Chapter V of Regulation (EU) 2016/679, the processor and the sub-processor can ensure compliance with Chapter V of Regulation (EU) 2016/679 by using standard contractual clauses adopted by the Commission in accordance with of Article 46(2) of Regulation (EU) 2016/679, provided the conditions for the use of those standard contractual clauses are met.
-
7. Assistance to the controller
-
(a) The processor shall promptly notify the controller of any request it has received from the data subject. It shall not respond to the request itself, unless authorised to do so by the controller.
-
(b) The processor shall assist the controller in fulfilling its obligations to respond to data subjects’ requests to exercise their rights, taking into account the nature of the processing. In fulfilling its obligations in accordance with (a) and (b), the processor shall comply with the controller’s instructions
-
(c) In addition to the processor’s obligation to assist the controller pursuant to Clause 7(b), the processor shall furthermore assist the controller in ensuring compliance with the following obligations, taking into account the nature of the data processing and the information available to the processor:
-
-
-
(1) the obligation to carry out an assessment of the impact of the envisaged processing operations on the protection of personal data (a ‘data protection impact assessment’) where a type of processing is likely to result in a high risk to the rights and freedoms of natural persons;
-
(2) the obligation to consult the competent supervisory authority/ies prior to processing where a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk;
-
(3) the obligation to ensure that personal data is accurate and up to date, by informing the controller without delay if the processor becomes aware that the personal data it is processing is inaccurate or has become outdated;
-
(4) the obligations in Article 32 Regulation (EU) 2016/679.
-
-
-
-
(d) The Parties shall set out in Annex III the appropriate technical and organisational measures by which the processor is required to assist the controller in the application of this Clause as well as the scope and the extent of the assistance required.
-
-
8. Notification of personal data breach
In the event of a personal data breach, the processor shall cooperate with and assist the controller for the controller to comply with its obligations under Articles 33 and 34 Regulation (EU) 2016/679, where applicable, taking into account the nature of processing and the information available to the processor.
8.1 Data breach concerning data processed by the controller
In the event of a personal data breach concerning data processed by the controller, the processor shall assist the controller:
-
-
(a) in notifying the personal data breach to the competent supervisory authority/ies, without undue delay after the controller has become aware of it, where relevant/(unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons);
-
(b) in obtaining the following information which, pursuant to Article 33(3) Regulation (EU) 2016/679, shall be stated in the controller’s notification, and must at least include:
-
-
-
-
(1) the nature of the personal data including where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of personal data records concerned;
-
(2) the likely consequences of the personal data breach;
-
(3) the measures taken or proposed to be taken by the controller to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.
-
-
Where, and insofar as, it is not possible to provide all this information at the same time, the initial notification shall contain the information then available and further information shall, as it becomes available, subsequently be provided without undue delay.
-
-
(c) in complying, pursuant to Article 34 Regulation (EU) 2016/679, with the obligation to communicate without undue delay the personal data breach to the data subject, when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons.
-
8.2 Data breach concerning data processed by the processor
In the event of a personal data breach concerning data processed by the processor, the processor shall notify the controller without undue delay after the processor having become aware of the breach. Such notification shall contain, at least:
-
-
(a) a description of the nature of the breach (including, where possible, the categories and approximate number of data subjects and data records concerned);
-
(b) the details of a contact point where more information concerning the personal data breach can be obtained;
-
(c) its likely consequences and the measures taken or proposed to be taken to address the breach, including to mitigate its possible adverse effects.
-
Where, and insofar as, it is not possible to provide all this information at the same time, the initial notification shall contain the information then available and further information shall, as it becomes available, subsequently be provided without undue delay.
The Parties shall set out in Annex III all other elements to be provided by the processor when assisting the controller in the compliance with the controller’s obligations under Articles 33 and 34 of Regulation (EU) 2016/679.
-
9. Non-compliance with the Clauses and termination
-
-
(a) Without prejudice to any provisions of Regulation (EU) 2016/679, in the event that the processor is in breach of its obligations under these Clauses, the controller may instruct the processor to suspend the processing of personal data until the latter complies with these Clauses or the contract is terminated. The processor shall promptly inform the controller in case it is unable to comply with these Clauses, for whatever reason.
-
(b) The controller shall be entitled to terminate the contract insofar as it concerns processing of personal data in accordance with these Clauses if:
-
-
-
-
(1) the processing of personal data by the processor has been suspended by the controller pursuant to point (a) and if compliance with these Clauses is not restored within a reasonable time and in any event within one month following suspension;
-
(2) the processor is in substantial or persistent breach of these Clauses or its obligations under Regulation (EU) 2016/679;
-
(3) the processor fails to comply with a binding decision of a competent court or the competent supervisory authority/ies regarding its obligations pursuant to these Clauses or to Regulation (EU) 2016/679.
-
-
-
-
(c) The processor shall be entitled to terminate the contract insofar as it concerns processing of personal data under these Clauses where, after having informed the controller that its instructions infringe applicable legal requirements in accordance with Clause 6.1(b), the controller insists on compliance with the instructions.
-
(d) Following termination of the contract, the processor shall, at the choice of the controller, delete all personal data processed on behalf of the controller and certify to the controller that it has done so, or, return all the personal data to the controller and delete existing copies unless Union or Member State law requires storage of the personal data. Until the data is deleted or returned, the processor shall continue to ensure compliance with these Clauses.
-
ANNEX I: LIST OF PARTIES
Controller: the User
Processor(s): [Identity and contact details of the processor(s) and, where applicable, of the processor’s data protection officer]
Name: …
Address: …
Contact person’s name, position and contact details: …
Signature and accession date: …
ANNEX II: DESCRIPTION OF THE PROCESSING
Categories of data subjects whose personal data is processed: persons interacting with the User on Facebook and/or Instagram
Categories of personal data processed: identification data (name, surname…), Facebook/Instagram profile picture, questions and opinions (depending on the content of the message or post), data relating to the message or post (date of publication, reactions to this message/post…)
Nature of the processing: provisions of services linked to a mobile application
Purpose for which the personal data is processed on behalf of the controller: providing the User (controller) with the Services (within the meaning of the Terms of Use)
Duration of the processing: duration of the Agreement (within the meaning of the Terms of Use)
Regarding processing by sub-processors:
-
-
• subject matter and nature of the processing: IT services (in particular, development, maintenance and hosting)
-
• duration of the processing: duration of the Agreement (within the meaning of the Terms of Use)
-
ANNEX III: TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND ORGANISATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA
Description of the technical and organisational security measures implemented by the processor(s) (including any relevant certifications) to ensure an appropriate level of security, taking into account the nature, scope, context and purpose of the processing, as well as the risks for the rights and freedoms of natural persons:
Examples of possible measures:
Measures of pseudonymisation and encryption of personal data
Measures for ensuring ongoing confidentiality, integrity, availability and resilience of processing systems and services
Measures for ensuring the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
Processes for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures in order to ensure the security of the processing
Measures for user identification and authorisation
Measures for the protection of data during transmission
Measures for the protection of data during storage
Measures for ensuring physical security of locations at which personal data are processed
Measures for ensuring events logging
Measures for ensuring system configuration, including default configuration
Measures for internal IT and IT security governance and management
Measures for certification/assurance of processes and products
Measures for ensuring data minimisation
Measures for ensuring data quality
Measures for ensuring limited data retention
Measures for ensuring accountability
Measures for allowing data portability and ensuring erasure]
For transfers to sub-processors, the specific technical and organisational measures to be taken by the sub-processor to be able to provide assistance to the controller are the following:
xxx
Description of the specific technical and organisational measures to be taken by the processor to be able to provide assistance to the controller:
xxx
ANNEX IV: LIST OF SUB-PROCESSORS
The controller has authorised the use of the following sub-processors in accordance with Clause 6.7(a):
1. Name: …
Address: …
Contact person’s name, position and contact details: …
Description of the processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): …
2. …