Table of Contents

Smappen - Standard License Agreement and Terms of Use

BETWEEN

SMAPPEN, a simplified joint stock company registered in the Toulouse Companies Register with number 843 086 562, with its offices located 85 allée Charles de Fitte, 31300 – Toulouse, hereinafter referred to as “SMAPPEN“;

AND

The natural or legal person subscribing to SMAPPEN services through Registration as defined in Article 1.7 below, hereinafter referred to as the “Licensee“.

SMAPPEN and the Licensee are hereinafter referred to individually as “Party” and collectively as “Parties“.

PREAMBLE

i. SMAPPEN is a company that researches, develops, and markets innovative services in the field of geodata. These services are provided for a fee and partially free of charge. SMAPPEN operates a geomarketing platform integrating said services and bearing its name, Smappen.

ii. As a result of its research and development work, SMAPPEN owns the rights to a proprietary technology in the field of geodata. This technology is implemented by its geomarketing platform. Today, SMAPPEN wishes to license said technology and the related rights.

iii. The Parties have agreed to define the terms and conditions of the license, and the conditions of use of the Smappen software.

THE PARTIES HAVE AGREED AS FOLLOWS

1. DEFINITIONS

In this License, terms used with their first letter in uppercase, whether singular or plural, shall have the respective meanings set forth in this Section 1.

1.1. License

“License” means this standard license agreement and terms of use, its appendices, and any updated version thereof pursuant to Section 6.2 below.

1.2. Licensee Database

“Licensee Database” means the electronic database for which the Licensee is the content producer.

1.3. Documentation

“Documentation” means any documentation provided by SMAPPEN, in electronic format, relating to the use of the SaaS Service.

1.4. Personal Data

“Personal Data” means any information that directly or indirectly identifies a natural person.

1.5. Licensee Data

“Licensee Data” means the content of the Licensee Database intended to be processed by the Software via the SaaS Service.

1.6. Software

“Software” means all the modules and functionalities of SMAPPEN’s proprietary software, resulting from its R&D work, which enable SMAPPEN to provide the SaaS Service. The Software is exclusively accessible remotely, through the Users’ connection to the Platform.

1.7. Registration

“Registration” means access to the SaaS (Software as a Service) Service following an offer issued by SMAPPEN to the Licensee. SMAPPEN offers four types of Registrations:

  • Free Registration” refers to access to free features following online registration from the website.
  • Standard Commercial Registration” refers to access to features covered by a commercial offer, including terms such as fees, defined during online registration directly from the website.
  • Custom Commercial Registration” refers to access to features covered by a commercial offer with conditions, including fees, negotiated by the Parties.
  • Public Contract” refers to the commercial offer relating to the SaaS Service issued by SMAPPEN in the framework of a public contract issued by the Licensee.
1.8. Platform

“Platform” means the web platform through which the Licensee may use the Software and all the services provided by SMAPPEN.

1.9. Data Controller

“Data Controller” means the legal or natural person who determines the purposes and means of a processing operation. In practice it is the legal person embodied by its legal representative.

1.10. SaaS Service

SaaS Service” means all the services provided by SMAPPEN in SaaS mode within the framework of the present Contract and in particular:

  • The grant of a license to use the Software;
  • The right to access the Platform as a means of access to the Software;
  • The hosting and backup of the Licensee Database on the Platform.
1.11. Signature

Signature” or “To Sign” means:

  • The act of affixing one’s signature to the document formalizing the Registration; or
  • During online Registration, the act of checking the box mentioning the License and referring to it via a hyperlink text. In the latter case, proof of this agreement is stored by SMAPPEN and a Registration confirmation is sent to the Licensee.
1.12. GDPR Subcontractor

“GDPR Subcontractor” means any company, person or other organization that processes personal data on the instructions of and on behalf of the Processor.

1.13. Processing of Personal Data

“Processing of Personal Data” means any operation or set of operations, whether carried out using automated processes, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, limitation, erasure, or destruction.

1.14. User

“User” means any natural person authorized by the Licensee to use the SaaS Service pursuant to this Agreement within the contractual limits.

2. PURPOSE

The purpose of this Contract is to define and describe the terms and conditions according to which SMAPPEN makes the SaaS Service available to the Licensee.

3. OPPOSABILITY

The License details all the provisions relating to the SaaS Service ordered by the Licensee from SMAPPEN.

The License is systematically sent and/or made available to the Licensee to enable him to place an order. The Licensee, by Signing the Registration form, acknowledges having received, read, and accepted it, without restriction or reservation, prior to any order or use.

4. DURATION

4.1. Effective Date

The License takes effect upon Signature of the Registration form by the Licensee.

4.2. Duration

The License is concluded for the initial period provided for in the Registration form. By exception, in the case of Free Registration, the License is concluded for an indefinite duration and may be terminated at any time by requesting the deletion of the Licensee’s account from SMAPPEN.

4.3. Renewal

At the end of the initial term, except for Public Contracts or Free Registration, the Agreement will be tacitly renewed for identical terms, unless terminated by the Licensee before the renewal date.

Notification of License termination shall be made:

  • Through the Platform in case of subscription to a Standard Commercial Registration;
  • By e-mail to [email protected] in case of subscription to a Customized Commercial Registration.

The Parties may mutually agree on an early termination at any time.

5. ACCESS TO THE SAAS SERVICE

5.1. Requirements for access to the SaaS Services

Prior to any access to the SaaS Service, the Licensee shall ensure that it meets the necessary conditions defined below. The Licensee shall be solely responsible if these conditions are not met.

Users must have broadband internet access and a modern, up-to-date browser (e.g., Google Chrome, Mozilla Firefox). It is understood that it is up to the Licensee to subscribe to the necessary telecommunication subscriptions to be able to access the Platform as well as all the services offered by SMAPPEN.

5.2. Accessibility of SaaS Services

The Licensee has a permanent access to the SaaS Service through the Internet network, twentyfour (24) hours a day, seven (7) days a week.

However, access to the SaaS Service may be suspended at any time and without prior notice, including in case of malicious acts, hacking, breakdowns, failures or paralysis of the network, system and/or means of communication, as well as maintenance and correction work required to update and ensure the proper functioning of the SaaS Service.

The Licensee shall be informed, where possible, of the existence and duration of the suspension. Reasonable precautions considering the current state of the art shall be taken to ensure the protection of the SaaS Service and the Licensee Database.

5.3. Management of User IDs
5.3.1. User ID security

Login credentials to the Platform for the Licensee’s Users are personal and confidential. The Licensee undertakes to take all necessary measures to keep Users’ login details secret and not to disclose them in any form whatsoever. The Licensee is solely responsible for the use of the identifiers. In general, the Licensee shall be responsible for the physical and logical security of the terminals used to access the Platform. If the Licensee becomes aware of an access to the Software by an unauthorized person, the Licensee undertakes to inform SMAPPEN without delay.

5.3.2. Change of User

The access rights right of use of a named User cannot be shared, nor used by more than one User, but can be periodically reassigned to new Users who replace the previous Users no longer using the Service.

This is not the case for API keys that allow programmatic access to the Platform, which may be shared between the Licensee’s Users.

5.3.3. Loss – theft – usurpation

In case of loss, theft or usurpation of a User’s identifiers, the Licensee will contact SMAPPEN by email to recover his identifiers or to create new ones. It is specified that SMAPPEN does not have the means to ensure the identity of the Users accessing the SaaS Service. In this respect, the Licensee guarantees SMAPPEN against any claim and SMAPPEN shall not be liable for the actions of the Licensee nor its Users.

5.4. Limits of use of the SaaS Service
5.4.1 General restrictions

The Licensee acknowledges and accepts that restrictions may be placed on the Saas Service, particularly due to an excessive number of connections. The Licensee undertakes not to hinder or disrupt access to and/or use of the SaaS Service, in any way whatsoever, by improper use (e.g., scraping). The Licensee is warned that non-compliant or abusive use of the SaaS Service may render the shared infrastructure incompatible and expose the Licensee to restrictions without prior notice to guarantee an acceptable quality of service to all SMAPPEN Users.

5.4.2 Specific restrictions

The Licensee undertakes to use the SaaS Service only for its intended purpose. In particular, the Licensee shall not:

  • Make available, in any way whatsoever, the SaaS Service, the Software and/or the results produced without the written consent of SMAPPEN;
  • Interfere with or disrupt the integrity or operation of the SaaS Service;
  • Attempt to gain unauthorized access to the SaaS Service or its related systems and networks.
5.4.3 Uploading data

Users are strictly prohibited from uploading or storing on the Platform:

  • Illegal data;
  • Data containing viruses or other harmful machine code, files, scripts, agents, or program.

The Licensee undertakes ton ensure compliance with these provisions by the Users and is responsible for any failure, whether intentional or not.

6. TERMS AND CONDITIONS FOR THE PROVISION OF THE SAAS SERVICE

6.1. Hosting of the Software and the Licensed Database

The hosting of the Software is subcontracted to the following companies on behalf of SMAPPEN:

  • Google Cloud (https://cloud.google.com/?hl=fr)
  • OVH (https://www.ovhcloud.com/fr/)
  • Scaleway (https://www.scaleway.com/fr/)

The Software is provided only in SaaS mode.

The data that the Users transfer and process through the Software must be in direct relation with the SaaS Services. Licensee acknowledges that any other data may be deleted without notice. The hosting of Licensee Data on the Software is carried out in compliance with the technical constraints and limits provided by the said subcontractors.

In the event of termination of this License, the Licensee may obtain the return of the Licensed Data free of charge upon request by registered letter with acknowledgement of receipt. If the Licensee does not request the return of the Licensee Data within two (2) months from the date of termination of the License and/or deactivation of its account, the Licensee’s Data may be destroyed.

SMAPPEN’s obligations to back up the Licensee’s Data are limited to the commitment to make at least one back-up every twenty-four (24) hours with a conservation of the back-up over a period of seven (7) days.

In all cases, the Licensee is solely responsible for the data it transfers and processes, directly or through the Users, who are responsible for taking all useful precautions in this regard, and for the results produced from such data.

6.2. Maintenance and updates

As this is a SaaS Service, the Licensee and its Users shall automatically benefit from corrective maintenance and any updates or upgrades to the SaaS Service.

In addition, to maintain an optimal level of service, the Licensee and its Users may be asked at any time to update their browsers in order to comply with changes in technical requirements. Failing this, the Licensee and its Users will be solely responsible for any interruptions and/or degradation of the SaaS Service that may result.

SMAPPEN reserves the right to modify all or part of the appearance of the Service and its access mode. Likewise, the Licensee accepts that said maintenance and updates may give rise to a temporary suspension of the SaaS Service. This suspension of the SaaS Service may not give rise to any compensation.

SMAPPEN may decide to subject the use of new functionalities to an additional subscription.

SMAPPEN may also decide to delete functionalities of the Commercial Offer. If necessary, the Licensee will be free to terminate the License.

7. SUPPORT

SMAPPEN puts various means of information at the disposal of the Licensee through the Documentation. In this regard, the Licensee undertakes to consult these means of information prior to any request for the support service.

Furthermore, SMAPPEN offers the Licensee a support service reserved for Users.

The Licensee will notify SMAPPEN of the detected anomaly at the email address dedicated to the Licensee’s support ([email protected]), specifying the detailed description of the encountered problem and the reproduction procedure. As of this notification, SMAPPEN will then initiate a reproduction and analysis procedure that may lead to requests for additional information from the Licensee.

For all the services which would be not covered by the support, the intervention of SMAPPEN can be subject to an additional invoice.

8. INTELLECTUAL PROPERTY

8.1. Extent of the License

The access and the use of the SaaS Service are reserved to the Licensee and to its Users. The license to use the Software granted to the Licensee is temporary, non-exclusive, personal, nonassignable and non-transferable.

This right is granted to the Licensee for the use of the SaaS Service exclusively for the duration of the License, for the agreed number of authorized Users as defined during the Registration.

All the elements related to the Software are and remain the exclusive property of SMAPPEN. The Licensee and/or its Users do not acquire any other right on the Software than those which are expressly granted under the terms of the License. The rights of use granted to the Licensee are strictly limited to the access, to the display, to the printing, to the reproduction on all supports and to the use of the results of the Software, for its own use. Any other use by the Licensee is forbidden without express authorization.

The Licensee is prohibited from commercially exploiting and/or distributing in any way whatsoever the SaaS Services, the pages of the Platform website, or the computer codes of the elements comprising the Platform and/or the Software.

8.2. Protection of the Intellectual Property of SMAPPEN

It is formally forbidden to the Licensee to analyze, to visualize or to modify the configuration of the Platform, as well as its structure and the files constituting it, or to try performing such operations.

Any extraction and/or reproduction of a substantial part of the data and/or information published on the Platform is strictly prohibited. The Licensee may extract its own data in the formats offered. However, the extraction and reproduction of texts from the Platform on paper is authorized for the exclusive internal and personal use of the Licensee and/or its Users, provided that the source is clearly and precisely mentioned.

The Licensee is prohibited from using the specifications of the SaaS Service to create or allow the creation of an application with the same purpose.

Unless agreed upon in writing by SMAPPEN, it is forbidden to the Licensee and to its Users:

  • To sell, resell, rent, license, sub-license, lend, assign, pledge, reproduce, modify, adapt or transfer in any way whatsoever all or part of its rights to use the Software and the SaaS Service, and the Documentation;
  • To distribute or exploit for commercial purposes, or otherwise make available to a third party the Software and/or the SaaS Service in any way;
  • To reproduce all or part of the Software and/or the SaaS Service or the Documentation;
  • To exceed the number of Users of the SaaS Service;
  • To disassemble, decompile or translate the Software into a form understandable by humans, insofar as the information necessary for the interoperability of the Software with independently created software is made available to them by SMAPPEN and provided that, by this means, they do not harm the legitimate interests of SMAPPEN;
  • To extract all or part of the Software;
  • To use the Software and/or the SaaS Service for purposes other than the Licensee’s own internal needs;
  • Or to reverse engineer or to access the SaaS Service to create a competing product or service, create a product using ideas, features, functions, or graphics identical to the SaaS Service, or copy the ideas, features, functions, or graphics of the SaaS Service.

9. CONFIDENTIALITY

The following shall be considered confidential: (i) information relating to the Registration and the stipulations contained therein, (ii) the Licensee’s Data processed by the SaaS Service, as well as (iii) in general and without this list being exhaustive, information relating to the Parties’ business plans and their present and future activities, their personnel, their know-how, whether this information is obtained directly or indirectly from the other Party, its employees or those of its group companies, subcontractors, agents.

Each Party undertakes (i) not to use the confidential information for any purpose whatsoever, except in execution of the rights and obligations arising from the General Terms of Use, (ii) not to disclose the confidential information to anyone, by any means whatsoever, except to those of their employees, subcontractors or agents to whom this information is necessary for the execution of this Agreement, for the entire duration of the contractual relationship and for five (5) years after the effective end of use of the SaaS Service.

For the protection of the other Party’s confidential information, each Party undertakes to take the protective measures that it would take to protect its own confidential information, and undertakes (i) to ensure that its employees, subcontractors and agents who may have access to the confidential information have signed, prior to any disclosure to them, a confidentiality agreement whose obligations are equivalent to those set out in this article and (ii) to justify this in writing and without delay at the first request of the other Party.

10. PROTECTION OF PERSONAL DATA

The conditions of collection and processing by SMAPPEN of the personal data of Users of the Licensee are set out specifically in Appendix I “GDPR”.

11. SOFTWARE LICENSE FEES

The financial terms of the License are stipulated in the document formalizing the Registration.

The Licensee makes a firm and definitive commitment to the duration of this License and to the payment of the fees at the milestones associated with this duration.

The fees are exclusive of tax and do not include the cost of telecommunications and Internet access enabling access to and use of the SaaS Service, which shall be borne by the Licensee.

When the Agreement is renewed, the fees may be revised at the end of the commitment period specified in the Registration in accordance with the terms and conditions agreed between the Parties. Failure to pay by the due date will result in the payment of interests on arrears equal to the semi-annual key rate of the European Central Bank plus ten (10) percentage points. Moreover, SMAPPEN will have the right to claim a fixed compensation for recovery expenses equal to forty (40) euros by unpaid invoice.

Furthermore, as of the fifth (5th) day of late payment, SMAPPEN shall be entitled to suspend the execution of the License until full payment of the outstanding amount(s), without this suspension being considered as a termination of the present Contract on the part of SMAPPEN and notwithstanding any damages and interest that SMAPPEN may claim because of the non-payment in question and subsequent prejudices.

12. SUSPENSION AND TERMINATION

12.1. Immediate suspension

Access to and use of the SaaS Service may be restricted, limited, or suspended, ipso jure and without formalities, in the event of any breach of the contractual provisions by the Licensee and/or its Users. The reinstatement of the SaaS Service may be subject to the effective implementation of appropriate measures designed to protect against any risk of perpetuation or reiteration of the breaches that led to the suspension.

12.2. Termination without notice

In case of serious or renewed breach of the contractual provisions on the part of the Licensee, the present Contract may be terminated as of right and without formalities by SMAPPEN.

12.3. Termination with notice

In the event of non-payment and non-regularization and after suspension of access to the SaaS Service, SMAPPEN may proceed, without formalities, to terminate the present Contract after a formal notice sent by electronic means and/or registered letter with acknowledgement of receipt which has remained without effect for eight (8) days.

In the event of a breach of contractual provisions other than those referred to above on the part of the Licensee or SMAPPEN, a formal notice shall be sent by electronic means, for regularization by the other Party. In the absence of regularization within fifteen (15) days, the present contract may be terminated by registered letter with acknowledgement of receipt after giving an additional fifteen (15) days’ notice.

12.4. Consequences of termination

Upon termination of this License, access to the SaaS Service by the Licensee and its Users will be terminated, without right to any compensation.

The termination of the License for any reason whatsoever does not exempt the Licensee from its obligation to pay the entirety of the fees due until the expiration of the present Contract, without prejudice to any damages that may be claimed by SMAPPEN. In the event of termination of this Agreement for any reason other than the Licensee’s breach, SMAPPEN may make available to the Licensee a file containing the Licensee Data at the time of termination. SMAPPEN reserves the right to retain, remove and/or dispose of the Licensee Data for legal reasons without prior notice in the event of a breach of the License, including, without limitation, default by Licensee.

In the event of termination for default, the right to access the Licensee Data shall immediately cease, and SMAPPEN shall not be obligated to retain any Licensee Data.

13. FORCE MAJEURE

Neither Party may be held liable for the non-performance of any of its contractual obligations due to the occurrence of a case of force majeure as defined by Article 1218 of the French Civil Code.

The Party affected by this impediment, subject to sending the other Party a registered letter with acknowledgement of receipt within five (5) days of its occurrence, will be exempted from the performance of its obligations within the limit of this impediment. The other Party shall then, in the same manner, be exempted from the performance of its own obligations, always within the limit of the impediment. The performance of the obligations of the Parties shall then be suspended for a period at least equal to that of the impediment.

If the impediment lasts for more than thirty (30) calendar days from the date of receipt of the notification of the occurrence of the force majeure event, it shall be deemed to be definitive, and each Party may choose to terminate by operation of law and without judicial formality all or part of this Contract affected by the force majeure.

14. ASSIGNMENT AND SUBCONTRACTING

Under no circumstances may the licensee assign, transfer, delegate, or license all or part of the rights and obligations arising from this Contract, in any form whatsoever, to any third party without SMAPPEN’s prior authorization.

This Contract may be transferred at any time by SMAPPEN to any third party of its choice. The Licensee will be informed of any such transfer. In addition, the Licensee is hereby informed that all or part of the services referred to in this Contract may be subcontracted.

15. SUBCONTRACTOR

As part of the SaaS Service, SMAPPEN subcontracts part of the service to subcontractors, which the Licensee acknowledges and accepts. Public transit isochrones are powered by TravelTime.

16. RESPONSIBILITY OF SMAPPEN

16.1. Limits of responsibility

The responsibility of SMAPPEN could not be committed for in particular:

  • The temporary malfunctioning, whatever the cause, of the solution making it totally or partially inoperative;
  • The non-observance or the bad execution by the Licensee of any of the contractual provisions;
  • The difficulties or time of access to the Platform due to the total or partial non-fulfilment of an obligation, a failure and/or saturation at certain periods of the SMAPPEN servers, telecommunication network operators and/or Internet access providers;
  • The content of the Licensed Data;
  • Errors in handling and/or interpretation;
  • Virus contamination of the Licensee Data and/or the Licensee’s and/or Users’ software, the protection of which is the responsibility of the latter;
  • Possible misappropriation of identifiers and, more generally, of any information of a sensitive nature for the Licensee and/or its Users;
  • The adequacy of the Service to the specific needs of the Licensee and/or its Users;
  • The use of the results produced by the SaaS Service from the Licensee’s Data;
  • The possible loss and/or destruction of Licensee Data and/or information, despite the reasonable security measures put in place by SMAPPEN.

SMAPPEN may only be held liable for immediate, direct, and foreseeable damage caused by a partial or total failure to perform the Agreement on the part of SMAPPEN as proven by the Licensee. Compensation for indirect damages is excluded. Consequently, SMAPPEN shall in no way be liable for any indirect or unforeseeable loss or damage suffered by the Licensee or third parties, including in particular any lost profit, loss, inaccuracy or corruption of files or data, commercial loss, loss of turnover or profit, loss of clientele, loss of opportunity, cost of obtaining a substitute product, service or technology, in relation to or arising from the non-performance or faulty performance of the services in part or in full.

16.2. Maximum liability

If SMAPPEN’s liability is incurred, the amount of damages that SMAPPEN may be ordered to pay is expressly limited to the cumulative amount of the price (excluding VAT) of the service, effectively paid by the Licensee, during the last twelve (12) months of effective use of the SaaS Service.

16.3. Insurance

SMAPPEN declares that it holds, with a solvent insurance company, an insurance covering the consequences of its operational and professional civil liability that may be incumbent upon it due to the execution of the present License.

17. RESPONSIBILITY OF THE LICENSEE

The Licensee undertakes to collaborate actively with SMAPPEN in the execution of the License. Thus, the Licensee undertakes to communicate to SMAPPEN all documents, information, and data necessary or requested by SMAPPEN to enable the latter to ensure the supply of the products and services ordered by the Licensee under the conditions provided for in the License.

In its capacity as Data Processor with respect to the Personal Data in its possession, the Licensee undertakes to comply with all its applicable obligations under the data protection regulation, “GDPR” EU n°2016/679 of April 27, 2016, and ensures that the persons concerned by said Personal Data are informed of the Processing of their Personal Data carried out through the use of the Platform.

The Licensee is solely responsible for its use of the Platform and for the antivirus security of files uploaded via the Platform.

The Licensee is responsible for compliance with the conditions and limits of use of the SaaS Service, in accordance with its Documentation and the obligations of this Agreement, by itself and by its Users.

The Licensee guarantees SMAPPEN against any damage, of any nature whatsoever, any claim or legal action from third parties relating to its use of the SaaS Service or that of the Users. In this respect, the Licensee undertakes to compensate SMAPPEN for any condemnation of any nature, as well as for compensation, damages and legal fees and court costs.

18. MISCELLANEOUS PROVISIONS

18.1. Non-transferability
18.1.1. Principle of non-transferability

This Agreement may be transferred at any time by SMAPPEN to any third party of its choice.

The Licensee will be informed of this transfer. Furthermore, the Licensee is informed that all or part of the services referred to in this Agreement may be subcontracted. The Licensee may not, under any circumstances, assign, transfer, delegate, or license all or part of the rights and obligations arising from this Agreement, in any form whatsoever, to any third party without the prior authorization of SMAPPEN.

18.1.2. Conditions of transferability

Notwithstanding the intuitu personae nature of the present contract, the Licensee shall remain free to negotiate the absorption, acquisition, merger, takeover, universal transmission of assets, or comparable operation aimed at the takeover of the Licensee’s assets for the benefit of or with a company other than a purely financial group, provided that it obtains SMAPPEN’s prior agreement.

If SMAPPEN does not object within forty-five (45) days of receipt of the notification by the Licensee, the continuation of the Agreement within the framework of the proposed transaction shall be deemed to have been approved.

18.1.3. Effect of an authorized assignment

Being understood that the License binds the Parties, their successors, and assignees, it is hereby agreed that any company to which the Licensee’s rights and obligations are assigned shall be subject to the same obligations as those imposed on the Licensee under this Agreement, unless the new parties jointly agree otherwise.

In any case, an amendment to the document formalizing the Registration between SMAPPEN and said company shall be drawn up pursuant to the operation carried out with the Licensee, which shall stipulate the change of licensee and confirm the respective obligations of each of the Parties involved in accordance with the preceding paragraphs.

18.2. Nullity – invalidity

If one or more provisions of the License are held to be invalid or declared as such pursuant to a law, a regulation – and in particular European Union law – or following a final decision by a competent court, the other provisions shall retain all their force and scope and the Parties shall proceed without delay to make the necessary amendments, respecting as far as possible the agreement of will existing at the time of signing the Registration.

18.3. Waiver

If, in the event of a breach by either Party of its obligations under the License, the non-breaching Party does not exercise its rights arising from such breach, the non-exercise of such rights shall not be construed as a waiver of such rights in the future or upon a similar breach by the breaching Party of its obligations under this Contract.

18.4. Commercial References

SMAPPEN authorizes the Licensee to use its name and any other distinctive sign belonging to it solely as a commercial reference on all types of media.

19. LANGUAGE – APPLICABLE LAW- JURISDICTION

If the License is made available in more than one language, the French version will be used for its interpretation. This License is subject to French law. Any dispute arising between the parties from the interpretation, performance, or termination of this Agreement shall be submitted, in the absence of amicable resolution, to the Tribunal Judiciaire de Toulouse.

APPENDIX I

GDPR

In accordance with the requirements of the EU Regulation n°2016/679 “GDPR”, SMAPPEN informs the Licensee that the latter is the Data Controller of the Personal Data of the Licensee’s employees, managers, or representatives (name, first name, fixed and mobile telephone numbers, postal and e-mail address, Twitter / LinkedIn / etc., title and professional functions) used in the framework of the SaaS Service.

The data collected by SMAPPEN is processed for the following purposes:

  • Processing without consent necessary for the execution, verification, billing, and collection of the SaaS Service between SMAPPEN and the Licensee;
  • Processing with the User’s consent.

SMAPPEN keeps the Personal Data of the employees, managers, or representatives of the Licensee for the duration of the contractual relationship and beyond in case of legal actions.

Each employee, manager or representative of the Licensee has a right of access, rectification, opposition on legitimate grounds, limitation, and deletion in relation to all the data concerning him/her under the conditions provided for by the RGPD.

Requests relating to Personal Data must be sent by e-mail to the following address:

DPO – SMAPPEN

[email protected]

1. PURPOSE

The purpose of this appendix is to define the conditions under which SMAPPEN, in its capacity as subcontractor, undertakes to carry out the Personal Data processing operations described below on behalf of the Licensee.

2. DESCRIPTION OF THE PROCESSING

SMAPPEN is authorized to process on behalf of the Licensee the Personal Data necessary for the provision of the SaaS Service and for the hosting of the data provided by the Licensee or the Users, and the maintenance operations related to the provision of the Platform.

In the context of the use of the SaaS Service, the following data may be collected:

  • Identification data of the Licensee and its Users: surname, first name, photo, contact details, position held;
  • Connection data to the Platform;
  • Data collected via the free text zones of the Platform;
  • Browser version;
  • List of contacts contained in the tools of Users connected to the Platform (e.g., use of the integration function of the Licensee’s CRM).

The categories of persons concerned by the processing of Personal Data are:

  • The Users;
  • SMAPPEN’s contacts at the Licensee’s premises;
  • Customers and prospects of the Licensee that the latter wishes to manage through the Platform.

3. OBLIGATION OF SMAPPEN AS A SUBCONTRACTOR

3.1. General provisions

SMAPPEN acts as a “subcontractor” (art.28 RGPD) of the processing of Licensee Data. Consequently, SMAPPEN undertakes (i) not to process the Licensee’s Data other than in accordance with the terms of the contract and (ii) not to carry out any other processing of the Licensee Data that is not provided for in the contract, except on the Licensee’s prior written, documented, and legitimate instructions.

SMAPPEN reminds the Licensee that, pursuant to Article 28.3.2 of the GDPR, any instruction from the Licensee to SMAPPEN that could lead to non-compliance with the GDPR or the French law on the protection of personal data shall result in SMAPPEN’s obligation to immediately inform the Licensee thereof.

SMAPPEN reserves the right to refuse the Licensee’s instructions which would appear to be illicit in the sense of art.82.2 GDPR. In this case, a written and documented refusal by SMAPPEN shall not allow the Licensee to terminate the contract, except for the Licensee to incur liability towards SMAPPEN for termination deemed “without legitimate cause” of the contract. SMAPPEN undertakes to technically process the Licensee’s Data only for the purpose of rendering the SaaS Service, to the exclusion of any other use, for the benefit of SMAPPEN or third parties.

3.2. Security of Personal Data

SMAPPEN undertakes to implement all the technical and organizational measures necessary to protect the Licensee Data and against any disclosure, loss, unwanted modification, unauthorized access, etc.

SMAPPEN shall implement the appropriate security measures considering the state of knowledge, the costs of implementation and the nature, scope, context, and purposes of the processing as well as the risks, which vary in probability and severity, to the rights and freedoms of individuals.

However, the Licensee recognizes and accepts that the Internet is an open and informal network, constituted by the interconnection on an international scale of independent computer networks using the TCP/IP technical protocol, without there being any obligation of supply or quality of supply between operators of these networks. Consequently, SMAPPEN shall in no way be liable for any violation of the Licensee’s Personal Data that occurs outside the scope of this Agreement or that results from the Licensee’s failure to comply with the security measures and instructions put in place by SMAPPEN.

4. SUBCONTRACTING

SMAPPEN’s obligations under this Agreement may be partially subcontracted by a SERVICE SUPPLIER of SMAPPEN (hereinafter “Subsequent Subcontractor”) after the Licensee has been informed in advance in writing of the identity of the Subsequent Subcontractor.

In order to enable the Licensee to form an opinion on the subcontracting project, SMAPPEN undertakes to provide the Licensee with all useful information on its subsequent subcontracting project, specifying in particular the identity of the prospective Subsequent Subcontractor, the nature and volume of the subcontracted services, the duration of the subcontract as well as the potential impact of said subsequent subcontracting with respect to this Agreement.

The Licensee shall have thirty (30) working days from the date of the subsequent subcontractor’s information formulated in advance and in writing by SMAPPEN to formulate its objections. Where applicable, the Licensee and SMAPPEN undertake to cooperate in good faith with a view to removing such objections.

On the day of the signature of the License, the list of SMAPPEN’s Subcontractors is as follows:

  • Hosting: Google Cloud, Scaleway, OVH;
  • Emailing: Mailjet, Hubspot, Gmail;
  • Payment: Stripe.

The right of partial subcontracting conferred to SMAPPEN by the present article does not release it from its contractual and regulatory obligations. If the Subsequent Subcontractor does not fulfill its obligations in terms of protection of Personal Data, SMAPPEN shall remain fully liable to the Licensee.

5. RIGHTS OF INDIVIDUALS

It is the Licensee’s responsibility to inform users of the rights they have and how they can exercise them. Moreover, it is up to the Licensee to follow up on the requests for exercising the rights of the persons concerned. SMAPPEN shall assist the Licensee to the best of its ability to fulfil its obligation to comply with requests to exercise rights.

In the event that a data subject makes a request to SMAPPEN for the exercise of rights, SMAPPEN shall forward such requests to the Licensee as soon as possible after receipt of the request.

6. NOTIFICATION OF VIOLATIONS OF PERSONAL DATA

SMAPPEN undertakes to inform the Licensee by e-mail, without delay after becoming aware of any violation of the Licensee’s Personal Data.

It is the Licensee’s responsibility to inform, if necessary, the supervisory authority on which it depends (art. 33 GDPR) and the persons concerned (art. 34 GDPR), when this violation of Personal Data is reported to it by SMAPPEN. However, SMAPPEN undertakes, if necessary, to assist the Licensee in this task. Such notification shall be accompanied by any useful documentation in order to allow the Data Controller, if necessary, to notify such breach to the competent supervisory authority

7. REVERSIBILITY AND RETURN OF LICENSEE’S PERSONAL DATA

In the event of termination of the License, the Licensee, if he/she so requests by registered letter with acknowledgement of receipt, may obtain the return of the Licensee Data free of charge. If the Licensee does not request the return of the Licensee Data within two (2) months from the date of termination of the License and/or deactivation of his or her account, said data will be destroyed.

8. OBLIGATION OF THE LICENSEE TOWARDS SMAPPEN

The Licensee is solely responsible for the processing of Personal Data collected and processed via the SaaS Service. In accordance with European and French legislation on the protection of personal data, in particular the EU “GDPR” Regulation n°2016/679 of April 27, 2016, the Licensee guarantees SMAPPEN that it alone determines (i) the purposes and means of the processing (art.4.7 GDPR) that it carries out on the Personal Data processed via the SaaS Service and (ii) the use that it makes of this Personal Data.

Prior to any use of the Software or the SaaS Service by the Licensee and throughout the duration of their use, the Licensee warrants to SMAPPEN that in its capacity as Controller (within the meaning of the GDPR) of the Personal Data:

(i) The Licensee has collected and processes the Personal Data in a lawful, fair, and transparent manner, for specified, explicit and legitimate purposes which the Licensee alone determines and which SMAPPEN could not know about.

(ii) The Licensee has informed in advance (art.12 GDPR) the persons whose Personal Data it processes of all its obligations towards them (in particular the determination of the legal basis of its processing and its precise purposes).

(iii) The Licensee has informed the data subjects that their rights (Articles 15 to 22 GDPR: access, rectification, omission, opposition, etc.) must be exercised directly with the Licensee and not with SMAPPEN. SMAPPEN undertakes to comply with any written and lawful instruction from the Licensee in this respect.

(iv) The Licensee has made all prior declarations to its supervisory authority (art. 51 GDPR) relating to the processing of personal data in the Licensee’s database, in particular by SMAPPEN as an GDPR subcontractor for the SaaS service.

(v) The Licensee undertakes to comply with all legal and regulatory obligations incumbent upon it under the applicable regulations, including the GDPR.

The guarantees given by the Licensee to SMAPPEN under the present article are as many explicit essential qualities of the service to be provided by the Licensee so that SMAPPEN cannot be held responsible for them, on any grounds whatsoever. On the contrary, the Licensee commits to relieve SMAPPEN of and guarantees SMAPPEN against any consequence in particular pecuniary put of this fact at the charge of SMAPPEN without restriction nor reserve.