The following definitions (and additional definitions provided below) will apply to these terms and conditions of Eagl (the “Terms and Conditions”): “Agreement” means these Terms and Conditions together with any Licensing Schedules between Eagl and the Customer; “AI Act” means Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence and all other EU AI legislation in force from time to time; “AI System” means a machine-based system that is designed to operate with varying levels of autonomy and that may exhibit adaptiveness after deployment, and that, for explicit or implicit objectives, infers, from the input it receives, how to generate outputs such as predictions, content, recommendations, or decisions that can influence physical or virtual environments, as defined in the AI Act; “Confidential Information” means any and all information disclosed by the Disclosing Party to the Receiving Party that is (i) marked “confidential” or “proprietary”, including orally conveyed information designated confidential at the time of disclosure provided that it is reduced to a written summary marked “confidential” that is supplied to the Receiving Party within thirty (30) calendar days of the oral disclosure, or (ii) regardless of whether so marked or identified, all information that would reasonably be considered confidential, including, without limitation, pricing, terms, attachments, appendices and all information related to the software associated with this Agreement. Confidential Information of Eagl will be deemed to include the Software Service. Confidential Information of the Customer will be deemed to include the Customer Data; “Customer Data” means data, information or material provided or submitted by Customer or its End Users to Eagl whether through the Software Service or otherwise, including connected Customer data sources and data inputs; “Customer” means every legal entity that concludes an Agreement with Eagl with regard to the Services; “Data Processing Agreement” means the data processing agreement attached hereto as Annex 1; “Data Protection Legislation” means the General Data Protection Regulation (EU) 2016/679) and all other EU data protection legislation in force from time to time, and all applicable laws and regulations relating to processing of Personal Data, including where applicable the guidance and codes issued by a competent supervisory authority; “Disclosing Party” means the Party that discloses Confidential Information under this Agreement; “Documentation” means any documentation provided by Eagl concerning the use of the Software Service; “Eagl” is a private limited liability company established, organized and existing under the laws of Belgium, with registered office at Muishondstraat 2 box 303, 9000 Gent, Belgium, registered in the Crossroads Bank for Enterprises under company number 1022.611.909; “Effective Date” means the first date that is mentioned on the Licensing Schedule, i.e. the indication of the start of the Initial Term; “End User” means such persons as may be invited by the Customer to use the Software Service; “Fee(s)” means the fee paid by the Customer as a consideration for the Software Service as set forth in the relevant Licensing Schedule; “Feedback” has the meaning set forth in article 5.3 of these Terms and Conditions; “Initial Term” has the meaning set forth in article 12.1 of these Terms and Conditions; “Intellectual Property Rights” means any and all now known or hereafter existing (a) rights associated with works of authorship, including copyrights, design rights, mask work rights, and moral rights; (b) trademark or service mark rights; (c) trade secret rights, know-how; (d) patents, patent rights, and industrial property rights; (e) layout design rights, design rights, (f) trade and business names, domain names, database rights and any other industrial or intellectual proprietary rights or similar right (whether registered or unregistered); (g) all registrations, applications for registration, renewals, extensions, divisions, improvements or reissues relating to any of these rights and the right to apply for, maintain and enforce any of the preceding items, in each case in any jurisdiction throughout the world; “Internal Business Purposes” means Customer's use of the Software Service for Customer's own business operations, excluding any use that is prohibited under applicable laws; “Licensing Schedule” means a form of quotation submitted by Eagl to the Customer in which the terms and conditions of this Agreement are or are deemed to be incorporated; “Output” means any data, content, information, responses, analyses, insights, reports, recommendations, or other material generated by the AI System as a result of processing input data from the Customer or Third Party sources; “Party” or “Parties” means Eagl and/or the Customer; “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; “Platform” means the software platform published by Eagl that enables the Customer to upload and connect Customer Data and to develop, customize, and deploy an AI-driven financial controlling solution for anomaly detection, variance analysis, and smart financial workflows; “Receiving Party” means the Party that receives Confidential Information under this Agreement; “Renewal Term” has the meaning set forth in article 12.1 of these Terms and Conditions; “Scheduled Downtime” means (i) planned maintenance downtime (scheduled as necessary, at Eagl’s own discretion, of which Eagl will use commercially reasonable efforts to give timely electronic notice and which Eagl will schedule to the extent practicable between 19:00 and 21:00 CET), (ii) any unavailability caused by circumstances beyond Eagl’s commercially reasonable control, including, for example, act of a government, natural disasters, flood, fire, earthquake, civil unrest, act of terror, strike or other labour problem (other than those involving our employees), electronic communication network operator or internet service provider failure or delay (other than those managed by Eagl as part of the Agreement), or denial of service attack, and (iii) any interruption or unavailability resulting from the misuse, improper use, alteration, or damage of the Software Service; “Services” means the Software Service and/or any other services provided by Eagl to the Customer pursuant to a Licensing Schedule; “Software Service” means Eagl’s SaaS-services related to the Platform including the AI System as further described in the Licensing Schedule and applicable Documentation. The Software Service does not include Third Party Services; “Subcontractors” will mean any subcontractors of the Customer; “Term” means each of the Initial Term and the Renewal Term, as applicable; “Terms of Use” means the terms of use applicable to End Users; “Third Party Services” means any web-based, mobile, offline or other services, products, software, data, information or materials that are provided by a third party or are otherwise not proprietary to Customer or Eagl and interoperate or are otherwise provided in connection with the Software Service; “Third Party” means any legal or natural person that is not a Party or an End User; “Unscheduled Downtime” means the total time during which the Software Service is not available to be accessed and used by the Customer or its End Users due to any outage that is unplanned or any emergency that requires taking down the Software Service, i.e. all downtime that is not Scheduled Downtime; “Updates” means all updates, modifications and releases of new versions of the Software Service containing improvements, corrections, minor modifications, bug fixes, patches, or the like that have been publicly announced by Eagl on the Software Service or on its website. “Upgrades” means all modifications, new features, enhancements, releases of new versions of the Software Service and similar developments of it which have not been announced already as Updates. “Virus” means a virus, backdoor, cancelbot, worm, logic bomb, Trojan horse or other malicious component of software or data; and
The terms and conditions set forth in these Terms and Conditions apply to all contracts and Licensing Schedules relating to the use of the Software Services between Eagl and the Customer, except when special written agreements between Eagl and the Customer stipulate otherwise. These Terms and Conditions are deemed to be read, understood and accepted by the Customer when the Customer accepts the Licensing Schedule and/or when Customer or its End Users start using the Software Service. The individuals ordering the Services for Customer represent that they have the authority to bind Customer. These Terms and Conditions are deemed accepted even when they are conflicting with the Customer’s general or special purchasing terms and conditions. The fact that Eagl did not explicitly reject the terms and conditions of the Customer referred to in any contract or Licensing Schedule cannot be interpreted by the Customer as an acceptance by Eagl of such terms and conditions. Eagl reserves the right to make, in its sole discretion, any material or non-material changes to these Terms and Conditions from time to time. Eagl will notify the Customer of any material changes (i.e. changes that materially affect the obligations of a Party) via e-mail or via notification in the Software Service. These changes will enter into force fifteen (15) calendar days after written notice from Eagl to the Customer. In the event the Customer does not accept these material changes, the changes will only be effective from the first Renewal Term (subject to article 12.1). Where the Customer has not notified Eagl of such termination within the aforementioned fifteen (15) calendar days period, Customer irrevocably and unconditionally accepts such changes.
Software service license
License
Subject to these Terms and Conditions and timely payment of the Fees by the Customer, Eagl grants the Customer and its End Users, for the Term, a renewable, worldwide, restricted, personal, non-exclusive, non-transferable, non-assignable, license, without the right to sub-license to access and use the Software Service for the Customer’s Internal Business Purposes. The aforementioned license is granted as of the Effective Date. Customer acknowledges and agrees that Eagl can and will only grant a license and will only deliver access to those End Users that have explicitly accepted the Terms of Use when applicable. Eagl reserves the right to make, in its sole discretion, any material or non-material changes and/or Updates to the functionality of the Software Service from time to time. Eagl will notify the Customer of material changes (i.e. changes that materially affect the core functionalities of the Software Service) via e-mail or via notification in the Software Service. These changes will enter into force fifteen (15) calendar days after written notice from Eagl to the Customer. In the event Eagl materially reduces the core functionalities of the Software Service the Customer has the right to terminate the Agreement in accordance with article 12.2. In the event the Customer has not notified Eagl of such termination within the aforementioned fifteen (15) calendar days period, Customer irrevocably and unconditionally accepts such changes and will no longer be entitled to terminate this Agreement.
Restrictions
The Customer is not allowed to use the Software Service or a component thereof in a manner not authorized by Eagl. Within the limits of the applicable law and unless agreed otherwise, the Customer is not permitted to (i) make the Software Service available or sell or rent the Software Service to any Third Parties, unless explicitly agreed with Eagl; (ii) adapt, alter, translate or modify in any manner the Software Service; (iii) sublicense, lease, rent, loan, distribute, or otherwise transfer the Software Service to any Third Party; (iv) decompile, reverse engineer, disassemble, or otherwise derive or determine or attempt to derive or determine the source code (or the underlying ideas, algorithms, structure or organization) of the Software Service, except and only to the extent that such activity is expressly permitted by applicable law notwithstanding this limitation; (v) alter, remove, or obscure any copyright notice, digital watermarks, proprietary legends or other notice included in the Software Service; (vi) intentionally distribute any Virus, or other items of a destructive or deceptive nature or use the Software Service for any unlawful, invasive, infringing, defamatory or fraudulent purpose; (vii) remove or in any manner circumvent any technical or other protective measures in the Software Service or (viii) use the Software Service in any manner that could damage, disable, overburden, or impair Eagl’s systems or networks.
Customer responsibility
Customer will (i) ensure that its affiliates and its End Users comply with the Agreement, (ii) use commercially reasonable efforts to prevent unauthorized access to or use of the Software Service, and notify Eagl immediately of any such unauthorized access and/or use of which Customer becomes aware, and (iii) use the Software Service only in accordance with the Agreement and all applicable laws and government regulations, including the AI Act where applicable.
Third Party Services
The Services may contain features designed to interoperate with Third Party Services. To use such features, Customer may be required to obtain access to such Third Party Services from their providers and may be required to grant Eagl access to Customer’s account for such Third Party Services. If Customer installs or enables Third Party Services for use with the Software Service, Customer grants Eagl permission to allow the provider of that Third Party Service to access and use Customer Data as required for interoperation of that Third Party Service and the Software Service. Eagl cannot guarantee the continued availability of such Third Party Service features and may cease providing them without entitling Customer to any refund, credit, or other compensation, if for example and without limitation, the provider of a Third Party Service ceases to make the Third Party Service available for interoperation with the corresponding Services features in a manner acceptable to Eagl. Customer acknowledges that (i) Third Party Service providers are not Eagl's agent, subcontractor or sub-processor, (ii) Eagl makes no representations or warranties regarding Third Party Services, (iii) a Third Party Service's terms and conditions, including their data protection terms, and not this Agreement, will apply to Customer and govern Customer's use of that Third Party Service, (iv) Eagl is not responsible for the content and operation of any Third Party Services, or for the acts or omissions of any Third Party Service provider, (v) Eagl has no liability whatsoever to Customer arising out of or related to Third Party Services, and (vi) Eagl has no control over Customer Data provided to any Third Party Service, and Eagl is not liable for any disclosure, modification, deletion of or failure to delete Customer Data resulting from access by a Third Party Service.
Customer data and output
The Customer grants Eagl, for the Term, a non-exclusive, royalty-free, transferable, assignable, sublicensable license to use, copy, store, transmit and display the Customer Data to the extent necessary to perform its obligations under this Agreement, in particular to provide and maintain the Services, and for no other purposes. Eagl may copy, execute and backup such Customer Data, as necessary, to perform its duties under this Agreement. For the avoidance of doubt, Eagl will not use Customer Data to further train the underlying models of the AI System unless explicitly agreed otherwise. Unless expressly agreed otherwise in writing by the Customer, Eagl will not have any right, title or interest in relation to such Customer Data other than as set forth in these Terms and Conditions. Subject to the terms and conditions of this Agreement, Eagl grants to Customer a worldwide, irrevocable, fully paid up, non-exclusive, transferable license to use, reproduce, modify, create derivative works of, distribute, display, and otherwise exploit all Output generated by the Software Service for any Customer’s Internal Business Purposes. This license expressly prohibits (i) using Output to compete with Eagl; or (ii) reselling or redistributing Output as a standalone product. Customer shall own all derivative works created from Output, subject to Eagl's underlying Intellectual Property Rights in the Software Service and generation methodologies.
Intelectual property
Software Service.
Customer acknowledges and agrees that these Terms and Conditions are not a sale of the Software Service or any rights therein, and that Eagl and its licensors will at all times retain all Intellectual Property Rights in and to the Software Service and any related Eagl content. All rights in and to the Services and Eagl content not expressly granted to the Customer in these Terms and Conditions are reserved by Eagl. No license is granted to the Customer except to use the Software Service as expressly stated herein. Eagl’s name, Eagl’s logo, and the product names associated with the Software Service are trademarks of Eagl or Third Parties, and they may not be used without Eagl’s prior written consent. Customer acknowledges and agrees in particular that the source code of the Software Service is and remains Confidential Information and forms a proprietary trade secret of Eagl.
Customer Data.
Customer (or its licensors if applicable) will be the sole and exclusive owner of all (rights relating to the) Customer Data including (i) any modification of such Customer Data or (ii) any materials resulting from the processing of the Customer Data.
Feedback.
Eagl is free (but in no way obligated) to use and incorporate any ideas, suggestions or recommendations provided by the Customer or its End Users (“Feedback”) in the Software Service, without payment of royalties or other consideration to the Customer, provided however, the foregoing will not be construed as granting Eagl any right or license to the Customer’s patents, copyrights or trademark rights or other intellectual property right in the Feedback.
Warranties
The Customer and Eagl represent and warrant to each other that they have the authority to enter into these binding Terms and Conditions. Customer represents and warrants that: (i) it either owns the Customer Data or is otherwise permitted to grant the license set forth in article 4; (ii) Customer owns or otherwise has and will have the necessary rights and consents so that the use of Customer Data on or through the Software Service does not and will not violate the privacy rights, publicity rights, Intellectual Property Rights, or any other rights of any person or Third Party; and (iii) the upload or connection of Customer Data on the Software Service does not and will not result in a breach of contract between Customer and any Third Party. Customer further warrants that the Customer Data provided will be accurate and truthful and will not (i) misappropriate any trade secret; (ii) be misleading, defamatory, obscene, discriminatory or unlawful; or (iii) contain Viruses, whether or not intended to damage the Software Service. Any use of the Software Service in violation of these representations and warranties by Customer will constitute an unauthorized and improper use of the Software Service. Eagl will implement reasonable and proportionate technical and organizational security measures that contribute to the careful storage and adequate security of the Software Service, along with the Customer Data, including including safeguards designed to prevent unauthorized access by Third Parties. These measures may include adherence to recognized industry standards, such as ISO/IEC 27001 certification or equivalent information security frameworks, where applicable. The Customer assumes the risk of damage to, or loss of data and information stored by Eagl if such damage or loss is a result of errors, intentional misconduct, and/or gross negligence on the part of the Customer or its End Users. The Software Service will be provided by Eagl under these Terms and Conditions on an “as-is” basis. Except as expressly provided in these Terms and Conditions and to the extent permitted under applicable law, Eagl expressly disclaims all warranties, express or implied, including but not limited to any warranties of merchantability, non-infringement, satisfactory quality and fitness for a particular purpose of the Services, other than that Eagl warrants that the Software Service will, to its best knowledge, not contain any Viruses or infringe any Intellectual Property Rights of Third Parties. In particular, Eagl does not warrant that the Software Service is error-free or that the use and/or operation of the Software Service will be secure or uninterrupted, that Eagl will detect any or every defect in Customer’s systems or that any or all problems with respect to the Software Service can be solved and hereby disclaims any and all liability on account thereof.
Liability
The AI System made available via the Software Service are connected to the Customer’s own data sources. While Eagl strives to ensure the quality of the AI System by implementing internal processes aimed at monitoring and improving the Output, the AI System remains subject to inherent limitations. The accuracy, completeness, and reliability of the Output depend significantly on the quality and structure of the Customer’s Data. Consequently, the Software Service may produce incomplete, incorrect, or offensive Output that does not reflect the views or opinions of Eagl. All Output is provided for informational purposes only. Customers are solely responsible for evaluating and verifying the Output before relying on it. To the extent permitted under applicable law, Eagl will not be held liable for any damages or additional costs resulting from reliance upon the Output, except where such damages are due to Eagl’s gross negligence or wilful misconduct. The Customer retains full responsibility for any use of the Output and assumes all related risks and liabilities, including but not limited to any claims, damages, or disputes arising from Output. Under no circumstances will Eagl be held liable for any such claims or damages, regardless of their nature, except where such claims are directly attributable to Eagl’s gross negligence or wilful misconduct. To the maximum extent permitted under applicable law, the maximum liability of each Party to the other Party arising out of these Terms and Conditions will not in any event exceed the Fees paid or payable by the Customer to Eagl during the preceding twelve (12) month period. The aforesaid restrictions do not apply to a Party’s liability resulting from (i) fraud or deceit, and/or (ii) intentional misconduct. For the avoidance of doubt, it is specified that except for Customer’s breach of article 3.2 of these Terms and Conditions or Eagl’s liability for an infringement claim, neither Party will in any event be liable for any indirect, consequential or other similar damages (including but not limited to damages for loss of profit, revenue, business, contracts or clients, loss of or corruption of data, loss of goodwill, damages to equipment and reputational damages, opportunity loss, loss of anticipated savings, and costs of procuring replacement goods or services), even if such Party has been advised or notified of the possibility of such costs or damages.
Indemnities
Price and payment conditions
Support - Maintenance – Professional services
Eagl will during the Term provide support and maintenance services relating to the Software Service on a best-efforts basis. Support will be delivered via various channels such as calls, chats, or emails and will be available in Dutch or English. Any request for support or complaint should be promptly reported to Eagl following the issue that gave rise to the request or complaint. The Customer must provide all relevant information regarding the issue to facilitate a comprehensive investigation by Eagl and ensure an appropriate response. Any detrimental effects arising from delays in reporting the issue will be borne solely by the Customer. Eagl will use all reasonable efforts to minimize the Scheduled and Unscheduled Downtime of the Software Service.
Data protection
Each Party will and will ensure that its personnel and (sub)contractors will at all times comply with its/their respective obligations under all applicable Data Protection Legislation and the DPA agreed between the Parties in respect of all Personal Data processed under this Agreement. In connection with and for the purpose of providing the Software Service under this Agreement, Eagl will process Personal Data in accordance with the provisions of the DPA.
Term and termination
Term
The Agreement will enter into force and be effective as of the Effective Date and will remain in effect for the subscription period described in the Licensing Schedule (the “Initial Term”). The Agreement will automatically renew for successive periods equal in length to the expiring subscription term (each a “Renewal Term”) beginning at the end of the Initial Term (or the then current Renewal Term), unless a Party files a notice of termination at the latest thirty (30) days prior to the end of the Initial Term or the then current Renewal Term, as applicable.
Termination
Eagl may immediately terminate this Agreement (or alternatively, in its sole discretion, suspend the access to the Software Service) due to material breach on giving written notice in the event the Customer breaches the terms of use of the Software Service as set out in article 3 or infringes Eagl’s Intellectual Property Rights. Eagl may also suspend the access to the Software Service if the Customer fails to pay to Eagl any amount due hereunder and fails to cure such failure to pay within thirty (30) calendar days from the date of a written payment default notice from Eagl. Either Party may terminate this Agreement by written notice to the other Party if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) calendar days from receipt of a default notice. Either Party may terminate this Agreement by written notice to the other Party, effective as of the date of delivery of such notice, if the other Party becomes the subject of a voluntary or involuntary bankruptcy, insolvency or similar proceeding or otherwise liquidates or ceases to do business. Upon termination of this Agreement for whatever reason (i) the Customer will promptly pay Eagl all Fees and other amounts earned by or due to Eagl pursuant to this Agreement, up to and including the date of termination, (ii) all user rights granted to the Customer and the End Users pursuant to this Agreement, including the rights to use the Software Service as per article 3, will automatically terminate. Termination of this Agreement on whatever ground will be without prejudice to any right or remedy that has accrued prior to the actual termination. At Customer’s request, Eagl will provide a one-time, supplementary service for the transfer of the Customer Data from the Software Service towards the Customer free of additional charge in JSON format, within thirty (30) days after termination of the Agreement. Customer may procure additional exports which can be delivered by Eagl at an additional cost. Following transfer, Customer has a period of fifteen (15) days to provide a written notice confirming that the transfer was successful or to notify issues in the transfer and if further steps are required. Eagl will delete all Customer Data upon the earlier of (i) written confirmation by Customer of a successful transfer of Customer Data or (ii) expiry of the fifteen (15) day period without notice from the Customer relating to the transfer of the Customer Data. Under no circumstances will Eagl be liable for any financial or other damages due to loss or damage of Customer Data caused by the transfer of Customer Data. Any live connections with Customer Data or Customer Third Party data sources will be terminated on the termination date. The provisions of these Terms and Conditions that are expressly or implicitly intended to survive termination will survive any expiration or termination of this Agreement.
Confidentiality
The Receiving Party will use the same degree of care to protect the Disclosing Party’s Confidential Information that it uses to protect the confidentiality of its own Confidential Information of like kind (but in no event less than reasonable care). The Receiving Party agrees (i) not to use any Confidential Information of the Disclosing Party for any purpose outside the scope of the Agreement, and (ii) except as otherwise authorized by the Disclosing Party in writing, to limit access to Confidential Information of the Disclosing Party to those of its and its affiliates’ employees, contractors and agents who need such access for purposes consistent with this Agreement and who are subject to confidentiality obligations with the Receiving Party substantially similar to those herein (collectively, “Representatives”). The Receiving Party shall be liable for any breach of this article 13 by its Representatives as if such Representatives were a party hereto. Without prejudice to the above, the Parties agree that if a confidentiality agreement is concluded between them, the provisions thereof will prevail if there is a conflict with the provisions of this article. The Receiving Party’s obligations with regard to the Confidential Information will remain in force for a period of five (5) years after the termination of the Agreement unless a confidentiality agreement between the Parties stipulates otherwise. For the avoidance of doubt, Confidential Information that qualifies as trade secrets under applicable law will be kept confidential in accordance with applicable law. Upon termination of the Agreement, for whatever reason, the Receiving Party will return all Confidential Information of the Disclosing Party and all copies thereof to the Disclosing Party or, at the Disclosing Party's option, erase or destroy all Confidential Information.
Trial
Eagl offers trial periods to new Customers registering for the Software Service for the first time. The following terms specifically apply to the trial period. All other aspects remain subject to the Terms and Conditions.
Eligibility.
The trial is available only to new Customers who have not previously subscribed to the Software Service.
Duration.
The trial period is valid for three (3) months (unless stated otherwise), commencing upon the Customer's registration completion, after which access to the Software Service is granted.
Termination.
Unless the Customer gives notice of cancellation before the trial period ends, the Customer will be bound by a paid annual license under the terms of the Agreement.
Service Access.
During the trial, you will have access to all features and functions of the Services as a paid Customer would, unless stated otherwise.
Limitations.
Eagl reserves the right to limit eligibility for the trial to prevent any misuse. If Eagl detects that an email address or payment method has been used for a previous trial, Eagl may exclude that Customer from receiving a new trial.
Use of Personal Data.
Personal Data collected during the trial will be used in accordance with Article 11 of the Terms and Conditions.
Miscellaneous
Annex 1 - Data processing agreement
This Data Processing Agreement (“DPA”) forms an integral part of the Eagl Terms and Conditions. The provisions of the Terms and Conditions therefore apply to this DPA. Capitalized terms will have the same meaning as in the Terms and Conditions, except for the following words and expressions which will have the following meaning in this DPA. In the event of a conflict between the Terms and Conditions and any provision of this DPA, the latter will govern. In case of any doubt or differences with the terms defined in the Data Protection Legislation, the definitions stipulated in the relevant Data Protection Legislation will prevail.
DEFINITIONS
“Contact Person” means the individual(s) assigned by a Party and communicated to the other Party as point of contact and representing the Party for (a part of) the Services.
“Data Controller” means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the Processing of Personal Data.
“Data Processor” means a natural or legal person, public authority, agency or any other body which processes Personal Data on behalf of the Data Controller.
“Data Subject”, “Personal Data”, “Personal Data Breach”, and “Processing” will have the same meanings as in the Data Protection Legislation. “Processed” and “Process” will be construed in accordance with the definition of “Processing”.
“Data Protection Legislation” means the EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“General Data Protection Regulation” or “GDPR”), together with the codes of practice, codes of conduct, regulatory guidelines and standard clauses and other related legislation arising from such Directive or Regulation, as updated from time to time;
“Third Party” means any person or entity which is not a party to the Terms and Conditions, including any contractors (including Sub-Contractors).
“Services” means the services, functions, responsibilities and outputs to be provided and fulfilled by the Data Processor under the Terms and Conditions.
“Sub-Contractor” means a Third Party engaged by the Data Processor as sub-contractor to provide the Services or any part of them.
SCOPE AND PURPOSE
The Data Controller requests the Services of the Data Processor, by which the Data Processor will Process Personal Data on behalf of the Data Controller. The Data Controller determines the purposes and means of the Processing and expressly acknowledges and warrants that it has all necessary rights to provide the Personal Data to the Data Processor, and that one or more lawful bases set forth in the Data Protection Legislation supports the lawfulness of the processing. The Data Controller will take all reasonable steps to keep Personal Data up to date to ensure the data are not inaccurate or incomplete regarding the purposes for which they are collected. The Data Processor will without undue delay inform the Data Controller if, in its opinion, an instruction infringes this DPA, Data Protection Legislation or other EU or Member State data protection provisions.
DATA PROCESSOR OBLIGATIONS
Where Personal Data is Processed by Data Processor, its agents, Sub-Contractors or employees under or in connection with the Agreement, Data Processor will, and will procure that its agents, Sub-Contractors and employees will:
only Process the Personal Data or disclose or permit the disclosure of the Personal Data to any Third Party:
in accordance with the instructions of the Data Controller as stated in this DPA; or
where required by EU or Member State law to which Data Processor is subject, in which case Data Processor will inform Data Controller of that legal requirement before Processing that Personal Data, unless that law prohibits such information being provided on important grounds of public interest;
take reasonable steps to ensure that all employees, agents and Sub-Contractors who may have access to the Personal Data:
are informed of the confidential nature of the Personal Data; and
are subject to confidentiality undertakings or professional or statutory obligations of confidentiality that apply with respect to (the Processing of) such Personal Data;
except where statutory guidance indicates that a Personal Data Breach is not required to be notified by a Data Processor to a Data Controller, notify Data Controller without undue delay and at the latest within forty-eight (48) hours after having become aware of a Personal Data Breach, and otherwise assist Data Controller taking into account the nature of Processing and the information available to Data Processor, in meeting its obligations regarding the notification, investigation, mitigation and remediation of a Personal Data Breach under the Data Protection Legislation, without prejudice to Data Processors right to charge Data Controller any reasonable costs for such assistance. A party’s obligation to report or respond to a Personal Data Breach is not and will not be construed as an acknowledgement by that Party of any fault or liability with respect to the Personal Data Breach;
with regard to the protection of Data Subjects’ rights pursuant to the applicable Data Protection Legislation, facilitate the exercise of Data Subject rights and ensure that adequate information is provided to Data Subjects about the Processing in a concise, transparent, intelligible and easily accessible form, using clear and plain language;
co-operate as reasonably requested by Data Controller, to the extent necessary to enable Data Controller to comply with any exercise of rights by a Data Subject under the Data Protection Legislation in respect of Personal Data Processed by Data Processor under the Agreement or comply with any assessment, enquiry, notice or investigation under the Data Protection Legislation, including by any regulator, subject to reasonable advance notice and without prejudice to Data Processor’s right to charge Customer any reasonable costs for such assistance;
inform the Data Controller of requests, should a Data Subject directly contact Data Processor wanting to exercise his individual rights, within five (5) business days and provide the Data Controller with full details thereof, together with a copy of the Personal Data held by it in relation to the Data Subject where relevant. Data Processor will promptly direct such Data Subject to the Customer.
only authorise Sub-Contractors to Process the Personal Data (“Sub-Processor”) not objected to by Data Controller, subject to:
informing Data Controller of the identity of the proposed Sub-Processor. Data Processor informs the Data Controller of all intended changes with regard to the addition or replacement of other Sub-Contractors. The Data Controller has the right to object to such changes; and
including terms in the contract between Data Processor and the Sub-Processor which are mutatis mutandis as those set out in this DPA; and
Data Processor remaining liable to Data Controller in accordance with the terms of the Agreement relating to liability, for any failure by a Sub-Processor to fulfil its obligations in relation to the Processing of any Personal Data;
cease Processing the Personal Data upon the termination or expiry of the Agreement or, if sooner, the Service to which it relates and, at Data Controller’s option, either (if technically possible) return or delete the Personal Data and any copies of it or of the information it contains, without prejudice to any EU or Member State legal obligations for Data Processor to store or archive such Personal Data.
CONSULTATION AND CORRECTION OF PERSONAL DATA
Data Processor will provide Data Controller with access to Personal Data Processed under the Terms and Conditions, in order to allow Data Controller to consult and correct such Personal Data.
DETAILS OF PROCESSING OF PERSONAL DATA
The nature and purpose of the Processing, type of personal data and categories of Personal Data to be Processed are further detailed hereunder:
The nature and purpose of the Processing of Personal Data: Processing of structured business data for the purpose of generating analytical insights and recommendations via an AI System within the Platform.
The categories of Personal Data to whom Personal Data relates: employees.
The Personal Data concern the following categories of Personal Data: name, job title, wage, or any other identifying information contained in the datasets provided or made accessible by the Customer.
Storage location: All data processed and stored by Eagl is hosted within the EEA (Dublin - Ireland).
Storage period: for the duration of the Agreement plus 30 days after termination (unless explicitly agreed otherwise).
Transfer of Personal Data (outside the EEA): No.
USE OF SUB-PROCESSORS.
Data Controller authorizes the use of Third Party Sub-Processors to process personal data on its behalf. Data Processor hereby provides Data Controller with a list of its currently appointed Sub-Processors. This list includes the identities of the Sub-processors and their country of location. Upon execution of this Agreement, Data Controller explicitly gives its written authorization to engage these Sub-Processors to Process personal data on Data Controller’s behalf.
AWS – EU (Dublin)
Google Cloud Platform – (EU (Belgium)
Sinch Mailgun – EU
Posthog – EU
Data Controller will enter into written agreements with any Sub-processor which contain obligations no less protective than those contained under this DPA, including the obligations imposed by the Standard Contractual Clauses, as applicable.
Data Processor will notify Data Controller by email of any intended changes concerning the addition or replacement of its current Sub-Processors prior to any such changes. Data Controller will be allowed to object to such addition or replacement on reasonable grounds relating to the protection of personal data within thirty (30) days after the notification by submitting an email to dpo@geteagl.com. The Data Controller’s failure to object within this timeframe will be deemed to have waived its right to object and to have authorized Data Processor to engage such Sub-Processor.
If Data Controller does notify Data Processor of such an objection, Parties will discuss Data Controller's concerns with a view to achieving a reasonable resolution. If no such resolution can be reached, Data Processor will, at its sole discretion, either not appoint the new Sub-Processor, or permit Data Controller to suspend or terminate the affected Service in accordance with the termination provisions without liability to either Party (but without prejudice to any fees incurred by Data Controller prior to suspension or termination of the Terms and Conditions).
LIABILITY
Data Processor can only be held liable for an infringement of this DPA that is directly attributable to them, or the provisions that apply directly to Data Processor on the basis of the applicable Data Protection Legislation insofar as Data Controller has complied with its own obligations as set out in this DPA and the applicable Data Protection Legislation. The liability provision set out in the Terms and Conditions is fully applicable to breaches of this DPA and Data Protection Legislation.
COMPLIANCE
Upon request, Data Processor will make available to Data Controller all information necessary to demonstrate compliance with its obligations under Article 32 to 36 of the GDPR and allow for and contribute to audits conducted by Data Controller or another auditor mandated by Data Controller (which may be refused by Data Processor if this is a competitor of Data Processor or if there is a conflict of interest with this mandated auditor) for the purpose of verifying the compliance with its obligations under this DPA without prejudice to Data Processor’s right to charge Data Controller any reasonable costs for such assistance. An audit may not take place more than once per contract year, except in the event that (i) the Data Controller is legally required to do so, (ii) Data Controller has experienced a material Personal Data Breach in the preceding twelve (12) months that has affected the Data Processor's Personal Data or (iii) in the event of a mutual agreement, and must be notified at least thirty (30) days in advance. All audit costs are exclusively borne by the Data Controller. Data Processor may limit the access of Data Controller to the premises of Data Processor to a space provided by Data Processor and the auditor may not copy or delete documents from Data Processor without the prior approval and consent of Data Processor. Data Controller will guarantee that the audit is carried out in such a way that the inconvenience for Data Processor is kept to a minimum. Data Controller will impose sufficient confidentiality obligations on its auditors. In addition, Data Processor has the right to require the auditors to sign a non-disclosure agreement before the start of the audit. In all cases, it is essential to protect the confidential information of Data Processor. Data Controller must, or will request that its external auditors, send a draft version of the audit report to Data Processor. Data Processor has the right to submit its comments within a timeframe as agreed between the Parties. The auditor will take the comments of Data Processor into account.
TECHNICAL AND ORGANIZATIONAL MEASURES
Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of Processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, each Party will implement the measures stated in article 32 of the GDPR and ensure that its agents, Sub-Contractors and employees implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, taking into account in particular the risk of accidental or unlawful destruction, loss, alteration or unauthorised disclosure of or access to the Personal Data. The Data Controller and Data Processor will take steps to ensure that any natural person acting under the authority of the Data Controller or the Data Processor who has access to personal data does not process them except on instructions from the Data Controller, unless he or she is required to do so by EU or Member State law.
TERM AND TERMINATION
This DPA enters into force on the Effective Date and remains in force until Processing of Personal Data by Data Processor is no longer required in the framework of or pursuant to the Agreement.
Any terms and conditions which are intended by their nature to survive any termination, cancellation or expiration of the Agreement, will remain in full force and effect.
Upon expiration or termination of the Agreement, Data Processor will at the Data Controller’s request either delete or return any Personal Data. If such Personal Data are to be returned, The Data Processor will return the Personal Data in a structured, machine-readable and commonly used format and, if applicable, the costs in relation thereto. If Data Controller requests to delete such Personal Data, such Personal Data will be deleted upon expiry of the backup retention period, without prejudice to any EU or Member State legal obligations for Data Processor to store or archive such Personal Data after termination.
REGULATORY CHANGES
If there is new guidance or a change in the Data Protection Legislation or case law that renders all or part of the Services illegal, Data Processor may terminate the Terms and Conditions unless the Parties reach agreement to change the Services whereby the Services are no longer illegal.
SEVERABILITY
If a provision of this DPA is proven to be invalid or unenforceable in whole or in part, it will be regarded as severable (insofar as it is invalid or unenforceable) and the validity of the other provisions of this DPA and the remainder of the provisions in question will remain unaffected. If the invalid provision is of fundamental importance for achieving the goal of this DPA, the Parties will negotiate in good faith to remedy the invalidity, illegality or unenforceability of the provision or otherwise change this DPA to achieve its purpose.
NOTIFICATIONS
Unless legally prohibited from doing so, Data Processor will notify the Data Controller as soon as reasonably possible, and at the latest within five (5) business days of becoming aware of the relevant circumstances, if it or any of its Sub-processors:
(i) receives an inquiry, a subpoena or a request for inspection or audit from a competent public authority relating to the Processing;
(ii) intends to disclose Personal Data to any competent public authority outside the scope of the Services of the Agreement.
(iii) receives an instruction that infringes the Data Protection Legislation or the obligations of this Data Processing Agreement;
Any notification under this DPA, including a Personal Data Breach notification, will be delivered to the Data Controller’s Contact Person at dpo@geteagl.com possibly supplemented by any other means Data Processor selects. Upon request of the Data Controller, Data Processor will provide the Data Controller with the contact information of the registered Data Controller’s Contact Person. It is Customer’s sole responsibility to timely report any changes in contact information and to ensure the Customer’s Contact Persons maintain accurate contact information.