These terms of service describe the rights and obligations of the User and the Supplier in connection with the Service and form an essential part of a binding contract between them (capitalised words used in this introduction, including the words "User", "Supplier" and "Service", are defined below in section 1.1). If you are reading this text, there is a good chance that you may be about to become, or perhaps already are, a User. So please do consider these terms carefully as they are likely to affect your rights and obligations.
If you wish to enjoy the Service as a consumer, i.e., an individual (a natural person) acting for purposes outside his or her trade, business, craft or profession, then please pay particular attention to section 3.1 and parts 4 and 20 of these Terms. Also, before proceeding to create an account, please be so kind as to study the documentation pertaining to the Service (links to which are provided below under the definition of "Documentation") and consider carefully whether the Service is likely to meet your requirements, for a consumer's right to withdraw from this contract and the right to withdraw from subscriptions are excluded under part 4 of the Terms.
Whether a consumer or not, you should bear in mind that, even though certain subscriptions may be available free of charge, the more feature-rich Service Plans are always paid. This means that placing an order for a Service Plan often entails an obligation to pay. Please consult the Documentation prior to ordering anything and, when you do place an order, pay attention to the information displayed upon each step of the procedure to be certain that what you are ordering is indeed what you desire and that the terms presented are acceptable.
If you are not of legal age (which is likely to be the case if you are under 18) or otherwise do not possess full active legal capacity, then the Service is not for you (see section 3.2).
If you are associated with a patent assertion entity (also known as a patent troll), please see section 3.3.
Should you find anything in these Terms that you do not agree with, please do not use any of the Features, close your User Account and remove all Software and other items forming part of the Service from your systems, devices, storage media and repositories.
The following words and phrases, when capitalised herein, have the meanings ascribed to them below:
"Customer" -- anyone other than the Supplier that has a User Account. Each Customer is also a User (i.e., a particular type of User) and, unless the context otherwise requires, should interpret the term "Customer" as referring specifically to him;
"Data Protection Policy" -- the Supplier's data protection policy, available at https://toggl.com/plan/data-protection;
"Data Subject" -- any natural person (individual) to whom any of the Relevant Data relate;
"Documentation" -- the meaning of this term is twofold: (a) where Service usage is concerned (i.e., in the technical and operational context), it means the current technical documentation and user guidance pertaining to the Software, as published and periodically updated on the Supplier's Software website or as the Supplier may otherwise from time to time provide, including particularly Software support and knowledge base articles (https://support.plan.toggl.com) and notes on integrations (https://support.plan.toggl.com/article/110-integrations); (b) in the commercial context (i.e., where prices, billing or payment are concerned) it means the current information on the prices of Service Plans and the methods of their calculation and payment, as published and periodically updated here: https://support.plan.toggl.com/article/121-how-much-does-toggl-plan-cost, or as the Supplier may otherwise from time to time provide;
"DPA" -- the data processing annex at the end of these Terms;
"Feature" -- a component, property or an aspect of the Service;
"GDPR" -- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
"Guest User" -- anyone besides the Customer and the Supplier that accesses the Customer's User Account, including particularly anyone whose respective access has been authorised or caused (whether knowingly or not) by the Customer;
"Intellectual Property" -- any and all trademarks, service marks, domain names and business names, brands, rights pertaining to inventions, designs, databases and proprietary information (including, without limitation, trade secrets and know-how), patents, copyrights (including both economic and moral rights) as well as any and all other items treated as intellectual property or rights thereof under applicable law;
"Party" -- each of the User and the Supplier (collectively, "the Parties");
"Personal Data" -- any information relating to an identified or identifiable natural person (individual). This term has the same meaning as 'personal data' under the GDPR;
"Relevant Data" -- Personal Data that form part of Workspace Data;
"Representative" -- anyone who represents the User upon his entry into the Agreement or in any transaction related hereto (e.g., ordering or terminating a Service Plan or amending or terminating the Agreement);
"Service" -- depending on the context, either: (a) the Supplier's providing (i) the Software and/or (ii) one or more resources or other benefits for use in conjunction with the Software and/or (iii) technical support services concerning the foregoing; or (b) the above items collectively, any of them separately or any combination of any of them, notwithstanding that the item(s) in question may not consist in a service (as, e.g., in the case of locally installable Software);
"Service Plan" -- a subscription, on the terms hereof, to a particular set of Features offered by the Supplier. A Service Plan may but need not have a specific name, such as, for example, "Free", "Premium" or "Enterprise". The significance of such names, if any, is explained in the Documentation, as are other differences between Service Plans (such as which Features a given Service Plan includes, what are the main characteristics of these Features, the prices of Service Plans and, if relevant, the technical aspects in which Service Plans vary, e.g., in terms of their compatibility with third-party items). A Service Plan is required for each Workspace and each Workspace does come with a Service Plan. It is possible to switch from one Service Plan to another, thereby adding or removing Features in relation to the Workspace;
"Software" -- the Supplier's team calendar and task management software (currently branded Toggl Plan) and such other Supplier-developed computer programs as the Supplier may make available in conjunction therewith, including such patches, updates, upgrades, other modifications and replacements thereof as the Supplier may from time to time provide. Each of the foregoing may take the form of an on-demand service, a local installation or a combination thereof;
"Sub-processor" -- a third party engaged by the Supplier to process Relevant Data in connection with the Service;
"Sub-processor List" -- a list of third parties (sub-processors) who, under their arrangements with the Supplier, may process Relevant Data in connection with the Service. This list is periodically updated and is currently available here: https://toggl.com/plan/subprocessor-list;
"Subscriber" -- in relation to each Service Plan, the Customer to whom the Service Plan belongs (which usually means the Customer who ordered the Service Plan unless the same has transferred to another Customer, if permitted hereunder);
"Supplier" -- Toggl Technology Limited, an Irish private company limited by shares, registered number 540521, established and doing business at 302 The Capel Building, Mary's Abbey, Dublin 7, D07C62X, Ireland, email firstname.lastname@example.org, telephone +353 1 574 0090;
"Terms" -- these terms of service, including the DPA;
"User" -- anyone other than the Supplier that downloads, saves, installs, uses, accesses, interacts with, or is the recipient of the Service or possesses or controls, directly or indirectly, any item that forms part of the Service, including, without limitation: (a) the Customer; (b) anyone who performs any of the above acts on the Customer's behalf or through his User Account, whether authorised to do so or not; (c) anyone who accesses a resource (e.g., visits a web page or retrieves a file, information or some other object) that is located on the Service or forms a part thereof; (d) anyone with a copy of any Software. Each User should interpret this term as referring specifically to him unless the context otherwise requires;
"User Account" -- a Service user account whose purpose is to allow its holder to use one or more Features (i.e., enjoy the end-user benefits thereof);
"User Data" -- any data, including Personal Data, that a User processes (e.g., collects, enters, records, stores, alters, arranges, deletes, uses, transmits, discloses or makes available) through a User Account or otherwise by means of the Service;
"Workspace" -- a logical space in the Service user environment where one or more Customers may use the Features available to them, as further described in the Documentation;
"Workspace Data" -- the data stored or otherwise processed in, through or by means of a given Workspace, including all such User Data;
"Workspace Owner" -- the Customer having ultimate responsibility for a given Workspace, its contents and all activities (including all data processing) performed in, through or by means of that Workspace. Workspace Owner is also referred to as the "Owner" in these Terms.
In these Terms: (a) the words "herein", "hereto", "hereof", "hereunder", "hereby" and "herewith" refer to the Agreement; (b) words denoting a gender or genders are to be construed as referring to all genders appropriate in the context; and (c) save where the context clearly otherwise determines, the word "item" means any legal object, i.e., anything tangible or intangible (including any electronic object and any right or other benefit) that is capable of being the object of a right, duty or a capacity.
This Agreement constitutes the entire contract between the Parties relating to the subject matter hereof, superseding all prior agreements and understandings of the Parties concerning that matter. If any provision of the Agreement conflicts with any Service-related information provided elsewhere, the provision in the Agreement shall prevail.
A separate Agreement shall form between the Parties as to each of the following aspects of their relations:
the Agreement in so far as it does not concern any Service Plan specifically or the User acting as a Workspace Owner;
the Agreement in relation to each Service Plan specifically, i.e., the Parties' relationship in the context of a particular Service Plan; and
the Agreement in so far as it concerns the rights and obligations of the User as a Workspace Owner and the Supplier's corresponding rights and obligations (including their respective rights and obligations under the DPA), i.e., the Parties' relationship in the context of the User acting as a Workspace Owner.
Most Users will thus have more than one Agreement with the Supplier, each governing a different aspect of the Parties' relations and comprising those terms hereof that are relevant to that aspect. Specifically:
each User shall have an Agreement with the Supplier under subsection 2.1(a), and that Agreement: (α) shall be effective upon the earlier of (i) the party to be identified as the User consenting to the Terms, whether explicitly or impliedly, with implied consent being deemed to have been given by the performance of any of the acts mentioned in the definition of "User", and (ii) the said party becoming identifiable by any of the characteristics used in these Terms to define a User or a Customer (except the attribute "other than the Supplier"); (β) is for an indefinite term, continuing in force until terminated pursuant to its terms or on statutory grounds, except that certain of its provisions (as identified herein) will survive any termination hereof;
the Subscriber and any User who enjoys any of the benefits of a Service Plan in relation to which he is not the Subscriber shall, as respects the given Service Plan, have an Agreement with the Supplier under subsection 2.1(b). That Agreement: (α) between the Supplier and the Subscriber shall be effective upon the Supplier's acceptance of the order for the Service Plan, whether explicitly or impliedly, with implied acceptance being deemed to have been given by making the relevant Features available; (β) between the Supplier and a User other than the Subscriber shall be effective upon any of the Service Plan's benefits becoming available to the User; and, in either case (γ) shall terminate upon (i) a new Agreement being made between the Supplier and a Subscriber under subsection 2.1(b) in relation to the Workspace concerned, i.e., where the Service Plan attaching to the Workspace is replaced by another, (ii) the expiry of the Service Plan, (iii) the User ceasing to be a member of the Workspace (in which event the Agreement in question will only terminate in respect of the particular User), or (iv) the Workspace being closed;
the Workspace Owner has an Agreement with the Supplier under subsection 2.1(c) for as long as he is the Owner of the given Workspace.
A separate contract is always formed between the Supplier and each User. No User is party to, or a third-party beneficiary or a protected or otherwise interested third party under, another User's contract with the Supplier or can raise any claim based on or in connection with that contract.
The Supplier's undertakings with regard to the Service are to the Customer only and no one but the Customer may demand or rely on the Supplier's performance of its respective obligations (or any other obligation that the Supplier may have under its Agreement with the Customer).
The Service is for business users, to be enjoyed as a workplace tool. It is not intended for personal or household use or any other consumer application. Any natural person (individual) wishing to use any of the Features for a purpose unrelated to his trade, business, craft or profession must, before obtaining a Service Plan for the respective Feature(s), notify the Supplier that he wishes to use the Service as a consumer. The User's failure to provide such notice will, to the maximum extent permitted by law, result in the following: (a) the User not being able to rely on being a consumer, i.e., he shall be deemed to have waived the respective right; (b) no consumer law applying to the Parties' relations; and (c) the User forfeiting any and all consumer rights hereunder, including particularly, if applicable, the right to withdraw from the Agreement and the Service Plan in question.
As far as natural persons are concerned, the Service is only intended for those with full active legal capacity. Such capacity is usually attained by becoming of legal age (the age of majority), which commonly occurs at the age of 18. Individuals whose active legal capacity is restricted are also restricted from being Users and must not perform any of the acts mentioned in the definition of "User". The Customer must ensure that any natural person whom he causes to become a User (e.g., by causing the person to access the Customer's User Account or a resource that is located on or forms a part of the Service) has full active legal capacity. Also, each natural-person User and Representative shall, by having assumed the respective role (explicitly or impliedly), be deemed to have represented to the Supplier that he is, and, in the Representative's case, that both he and the User are, at least 18 years old and capable of entering into contracts. The above representation is deemed to be made every time that the person causes himself (and, in the Representative's case, when he causes the User) to be exposed to the Service.
Patent assertion entities (also referred to as non-practicing entities or patent trolls), meaning persons or entities that derive or seek to derive a substantial part of their revenue from the offensive assertion of patent or other intellectual property rights, are generally restricted from being Users and shall not enjoy any of the rights that a Customer is intended to have hereunder, except as otherwise provided in the following part of this section. A patent assertion entity and anyone acting on behalf, on the instructions, or for the benefit of, or directly or indirectly controlling, being controlled by, or under common control with, such an entity is prohibited from being a User and must not perform any of the acts mentioned in the definition of "User", save upon the Supplier's prior, explicit and informed consent and the respective person or entity having given such undertakings and assurances as the Supplier reasonably may request.
The User hereby requests that the Supplier's performance of the Agreement commence immediately and that the benefits to which the User is entitled hereunder, including, where applicable, the Features authorised under his Service Plan(s), be made available to him immediately. The User acknowledges and agrees that by making the above requests he loses the right (if any) to withdraw from the Agreement and, where applicable, the right to withdraw from the Service Plan(s) in question.
The User further requests that the Features to be authorised under any future Service Plan he may obtain be made available to him immediately upon the Service Plan's commencement. The User acknowledges and agrees that by requesting this (and the respective Features becoming available to him) he loses the right, if any, to withdraw from the Service Plan.
Subject to the terms set forth herein, the Supplier grants to the below Party, and the latter accepts, the following limited, non-exclusive and restrictedly-transferable right:
to the Subscriber -- the right use, during the term of his Service Plan, the Features available under that Service Plan;
to the Customer -- the right to access and use his User Account during the term hereof in a manner and by means consistent with the Service Plans whose benefits he is entitled to enjoy;
to the User having a complete end user copy of a Software product -- the right to install, store and use the respective Software copy during the term hereof on a device for which it is intended.
Each of the above rights shall be exercised solely for the respective Party's own internal legitimate purposes and none of these rights shall be sublicensed, assigned, encumbered or otherwise disposed of, save if and to the extent otherwise permitted under section 22.1.
A User who enjoys the benefits of a Service Plan in relation to which he is not the Subscriber shall, in the context of that Service Plan, be deemed to be a sub-licensee of the Subscriber. For the avoidance of doubt, the benefits of a Service Plan do not include the rights of a Workspace Owner. The rights and obligations attaching to the Owner's role cannot be sublicensed or delegated (but they can be transferred as per section 22.1).
The Service is intended for normal end use, respecting the rights, freedoms and legitimate interests of others, and may only be accessed through the interfaces that the Supplier has provided or authorised therefor.
Where Documentation is available concerning a particular Feature, the Feature should be used in accordance with that Documentation.
Reproduction of the Software by persons other than the Supplier is only allowed for the purposes of Software installation and backup, and only to the extent that such reproduction is necessary for using the Software in accordance with this Agreement.
As between the Parties, all Service-related Intellectual Property shall vest in, and is retained by, the Supplier. The User shall not acquire any right thereto or otherwise in connection with the Service, except for the limited rights of use expressly set forth in this Agreement.
The Supplier will use commercially reasonable efforts to provide the Subscriber with the benefit of all Features authorised under his Service Plan.
The level of Service to which the Customer is entitled (including the nature, scope, availability, means of provision and accessing, and other particulars of the Supplier's Software-related technical support services) may depend on the Service Plan chosen. The Documentation explains in more detail the effects that the selection of a Service Plan can have on the Service.
Unless otherwise provided in the Documentation or specifically agreed between the Customer and the Supplier: (a) the Customer may contact the Supplier for technical support at the email address specified in the definition of "Supplier" or by using such error reporting or customer feedback features as may be available via the Service; (b) the Supplier aims to respond to support requests within 24 business hours and endeavours to resolve Software errors and Service defects within reasonable time, but makes no commitment as to how quickly support will be provided or such matters will be resolved.
The User acknowledges and agrees that:
the Service (i) has not been designed to meet his specific requirements, (ii) may from time to time suffer interruptions and be occasionally unavailable, (iii) has and will continue to have certain bugs and vulnerabilities, and (iv) should not be relied upon in inherently dangerous circumstances;
the Software, the Service and anything offered or delivered as a part of, in conjunction with, or by means of any Feature is provided on an "as is" and "as available" basis;
his selection of a Service Plan and use of any of the Features are at his own risk, as are his exposure to, down- and uploading of, as well as transmission, receipt, storage, possession, disclosure and other handling of data, computer programs, software code or other items through or due to the Service.
The Service may provide links, references or access to third-party websites, resources or services and the latter may provide the same in relation to the Service. The Supplier is not responsible for the existence, absence or qualities (including the availability, reliability and security) of such external sites, resources or services, does not endorse them and shall not be liable for any loss, damage, expenses or other undesirable consequences attributable thereto.
The Supplier has no obligation to enhance, modify or replace any part of the Service, or continue developing or releasing new versions thereof.
The Supplier may: (a) discontinue the Service or cease providing the same to any Customer on a month's notice; (b) cease providing the Service to any User other than a Customer without notice; (c) suspend or restrict access to the Service for anyone whose payment hereunder is overdue more than 6 days or whose use of the Service conflicts with the Agreement; (d) suspend, limit or terminate the availability of Features in relation to a Workspace which does not conform to the Service Plan attaching it (e.g., if there are more members in the Workspace than the Service Plan allows) or replace that Service Plan with one to which the Workspace conforms; and (e) suspend performance under the Agreement in whole or in part with immediate effect if legally required to do so.
Anyone who orders a Service Plan or permits or causes one to be ordered on his behalf is deemed to have agreed to and accepted liability for the payment of all fees and charges associated with the Service Plan, and consented to the same being calculated, billed, revised and adjusted according to the rules that the Supplier has established therefor (as described in this Agreement and the Documentation). The same applies to anyone who permits or causes himself to be designated as a payer for a Service Plan (e.g., by allowing another User to specify him as such upon ordering a Service Plan) or otherwise assumes responsibility for incurring Service Plan related fees and charges.
Unless otherwise specifically agreed: (a) Service Plan subscription fees for any billing period will be determined on a per Workspace per month basis, with each Service Plan covering a single Workspace and the monthly subscription fee depending on the number of User Accounts the Workspace is allowed to attach (i.e., how many Customers may participate in the Workspace), as further described in the Documentation; (b) the billing cycle in relation to a Service Plan is either monthly or annual (as chosen upon subscription), starting on the day the Service Plan commences or, if a free trial period applies, on the day immediately following the trial; (c) payment for the Service Plan is due in advance by the first day of the relevant billing period.
Payments for a Service Plan shall be in the agreed currency, using a payment method acceptable to the Suppler (which, unless otherwise specified in the Documentation, includes credit card and wire transfer).
The Supplier may vary the fees, rates and the billing cycle applicable to the Customer's Service Plan upon a month's notice. If the Customer does not agree with the respective change(s), his sole remedy shall be to cancel the Agreement or the Service Plan in question, with failure to do so signifying his agreement to the change(s).
The Supplier's fees are non-refundable. For instance: (a) if the Agreement or a Service Plan is terminated or varied mid-billing period, the Customer will not be entitled to any refund (including any partial refund) as concerns that billing period; (b) payments attributable to future billing periods will not be refunded unless otherwise explicitly agreed.
Upon upgrading or downgrading from one paid Service Plan to another the amounts prepaid for the original Service Plan (i.e., the credit remaining on the relevant subscription) will be applied against the amounts payable for the new Service Plan. The Documentation may specify further rules as to the treatment of any credits and/or other benefits that may accrue to a User in connection with a Service Plan. In any event, however, where a User is eligible for, or has obtained, any Service-related credit, bonus or similar benefit, the same will expire at some point (after three months of accrual if not otherwise specified in the Documentation or other terms pertaining to the benefit), shall be forfeited upon Agreement termination or closure of the Workspace most closely related to the benefit (whichever occurs first), and will have no currency or exchange value.
The Supplier's fees and rates are exclusive of value added and sales taxes and other public dues (except for those based on the Supplier's income), save where the Supplier has otherwise explicitly stated. The User shall be solely responsible for all public dues that may be levied on his purchase, receipt, import, export, use or enjoyment of anything provided hereunder.
All sums owed to the Supplier must be paid in full, without deducting any currency conversion or payment-related charges.
The User acknowledges that: (a) his payments are handled by third-party service providers; (b) the Supplier is not responsible for these parties or their services and has no liability as concerns payment processing; (c) late payment may result in the suspension of Service, restriction of access to certain or all of the Features, or Agreement or Service Plan termination.
The Supplier may, in its absolute discretion, charge interest on overdue amounts at either 18% per annum or the relevant statutory rate, whichever it elects.
The Customer must be a person (natural or legal) or an entity with legal capacity.
Upon opening a User Account, ordering a Service Plan, becoming a Workspace Owner, and otherwise when transacting with the Supplier, the User shall use his true legal name and provide such true and accurate contact and other information as the Supplier reasonably may request.
The User must comply, and the Customer shall cause each Guest User to comply, with all legal requirements applicable to his use of the Service, handling of Workspace Data and other activities hereunder (including export control provisions and requirements as to the processing of Personal Data).
The User warrants that his User Data, and, in the Customer's case, the User Data of Guest Users, are lawful and acquired properly and that his data processing activities, and, in the Customer's case, those of Guest Users, are legal.
The User further warrants that he will not use the Service for sending unsolicited communications or for uploading, transmitting, delivering, running, controlling or storing harmful code, malware or illegal content, and, in the Customer's case, that no Guest User will do so.
If the Supplier reasonably believes that User Data or the User's data processing activities violate the law or otherwise conflict with the Agreement, it may, in its absolute discretion: (a) ask the User to take such action as the Supplier considers is necessary to remedy the matter (which, where feasible and legally permitted, will be the preferred option); or (b) remove, disable, restrict access to, or delete the data concerned without being liable (neither to the User nor anyone else) for any loss, damage or other undesirable consequences resulting therefrom.
Without prejudice to any of his statutory obligations the User undertakes that he will not, and the Customer further undertakes that no Guest User will: (a) interfere with the proper functioning of the Service; (b) impose an unreasonable load on the Service or its infrastructure; (c) consume any resource or otherwise use any item hereunder such as to prejudice another User's enjoyment of the Service; (d) reproduce the Software, except as expressly permitted herein; (e) translate, adapt, arrange or otherwise alter the Software or reproduce the results of any such activity; (f) distribute or redistribute, including sell, rent, lease, lend or otherwise make available, the Software (neither the original Software nor any copy thereof) or any other part of the Service; (g) decompile, disassemble or otherwise reverse engineer the Software; (h) remove, alter, hide or obscure any copyright notice, trademark or other proprietary rights notice embedded in, appearing on or otherwise pertaining to any part of the Service; (i) create or attempt to create any product or service that is substantially similar to, or performs the same or substantially similar functions as, or otherwise competes with any part of the Service, or purports to be created, provided or approved by the Supplier or its licensors; or (j) cause anyone else to do any of the foregoing.
The Representative personally warrants to the Supplier that: (a) his principal, upon becoming and while being a Customer, conforms to the description provided in section 8.1; (b) he is authorised to act on the User's behalf; and (c) the transactions he makes on the User's behalf, including, if applicable, this Agreement, are binding on the User.
The Representative agrees that if he opens a User Account for a principal not conforming to the description provided under section 8.1 or if any transaction he makes on the User's behalf proves to be void due to his lack of authority, he shall, if the Supplier in its absolute discretion so elects and respectively informs the Representative, be deemed to have opened the User Account or, as applicable, entered into the transaction on his own behalf (i.e., in place of the principal whom he represented or purported to represent).
The Customer shall be responsible for the activity that occurs under his User Account, including all data processing and other acts performed through or by means thereof, and must notify the Supplier promptly upon learning of any security breach relating to, or unauthorised use of, his User Account.
The User shall maintain his usernames, passwords, access tokens and similar credentials in confidence.
The Supplier has no obligation to monitor or access any User Account but may do so where reasonably warranted (e.g., to provide technical support, prevent illegal or harmful activity, perform its duties hereunder or comply with a legal obligation).
The Supplier may, in its sole discretion, temporarily or permanently disable, close or restrict access to any User Account that is used for infringing on anyone's Intellectual Property or proprietary or personal rights or to perform any of the acts mentioned in section 8.7, and shall not be liable for any undesirable consequences, including any loss or damage, resulting therefrom.
Each Workspace must have an Owner, i.e., there must always be a Customer (Workspace Owner) who is ultimately responsible for the Workspace, and it is for the Customers participating in the Workspace (the members thereof) to ensure that an Owner is designated and accepts the responsibilities pertaining to the Owner's role. Workspace members are jointly and severally liable for their Workspace having an Owner and the Owner being a real person (natural or legal) who can be reached at the email and physical addresses specified in the Workspace as the Owner's details. In the case of sole-member Workspaces, i.e., where there is only one Customer to whose User Account the Workspace attaches, the responsibilities and liability described in this section fall to the respective Customer.
The default Workspace Owner is the Customer who created the Workspace or on whose behalf the Workspace was created, but the identity of the Owner can be changed in Workspace settings, provided that the Customer to whom the role is to be assigned agrees to assume the same and the requirements of section 22.1 are complied with.
Should there be any doubt or dispute as to who created a given Workspace, on whose behalf it was created or who the Workspace Owner is, the Supplier is authorised to determine the same, with its respective determination binding on all parties concerned. For the avoidance of doubt, it is not the Supplier's duty to allocate responsibility or resolve disputes between Workspace members and the Supplier will use the above authority only as an ultimate measure in situations where the rights, freedoms, assets or legitimate interests of the Supplier or other parties (such as, e.g., Users, data subjects or Intellectual Property owners) are at risk or need to be defended, or where the exercise of such authority is necessary for the performance of the Agreement or to comply with a legal obligation to which the Supplier is subject.
The Owner shall ensure that Workspace Data are lawful and acquired properly and that all data processing and other activities performed in, through or by means of the Workspace are legal.
The User acknowledges that the rights he has and the control he can exercise in relation to Workspace Data, including the ability to access, process and dispose of the same, are commensurate with his role in the Workspace. There may be other Users in the Workspace, including but not limited to the Workspace Owner, whose status or privileges permit them to enable, disable, limit, suspend or terminate, or whose decisions may otherwise affect, the User's access to and his rights concerning Workspace Data. The same applies in relation to the Workspace itself, its sub-environments and the Features available in connection therewith. In case another User exercises any of the powers described in this section (or any similar power) or there is a disagreement concerning anyone's permissions or privileges in a Workspace or rights with respect to Workspace Data, it is a matter to be resolved between Users. The Supplier has no obligation to intervene, and usually does not intervene, in such disputes and, in any event, is not responsible for any User's acts or decisions in relation to, or which affect, another User.
As between the Parties, Workspace Data belong to the Workspace Owner and his instructions as to Workspace Data override those of any other User. The User acknowledges this and shall not hold the Supplier responsible for any undesirable consequences that he or anyone else may suffer due to the Supplier's disposal or processing of User Data pursuant to the instructions of an Owner other than the User where those User Data form part of that Owner's Workspace Data.
The User, whether an Owner or not, acknowledges and agrees that if a Workspace is closed (whomever by), then the Supplier has no obligation to maintain or provide Workspace Data and may, unless legally prohibited, delete the same.
Note on interpretation: the terms 'controller' and 'processor' have the meanings assigned to them in the GDPR.
The allocation of roles and responsibilities in connection with the processing of Relevant Data is as follows: (a) the Workspace Owner is the 'controller' of these data; (b) the Supplier is the 'processor' thereof; (c) a Sub-processor is also a 'processor' of Relevant Data but one who acts under the Supplier's responsibility (and thus enjoys the protection mentioned in section 16.5); (d) any enquiry, request, objection, complaint or demand that the User as a Data Subject may have in connection with such processing (i.e., where the information processed relates to the User) should be addressed to, and resolved by, the Workspace Owner (with such assistance from the Supplier as may be necessary and appropriate in light of its role as the 'processor' of the respective information).
The DPA sets out further rights and obligations of the Workspace Owner and the Supplier in relation to the processing mentioned in section 13.2.
With respect to any product of intellectual activity, including any object of Intellectual Property, that is submitted, contributed or otherwise knowingly made available for inclusion in the Software or any other part of the Service, the Supplier shall be deemed to have been granted a non-exclusive, royalty-free, worldwide, perpetual (save as limited by law), irrevocable, freely transferable and fully sublicensable right to use, distribute, reproduce, modify, adapt, publish, translate, transmit, publicly perform, display and make available the same (in whole or in part) and to incorporate it into other items, including works and inventions, in any form or medium now known or hereafter developed. Anyone making such a contribution warrants to the Supplier that he is authorised to do so and that neither he nor any author of any item embedded in his contribution will seek any compensation or reimbursement in connection therewith.
Any warranty of the Supplier not expressly stated herein shall be deemed withheld. The Supplier disclaims, to the extent permitted by applicable law, all statutory and implied warranties and course of performance, course of dealing and usage related expectations with respect to the Service.
Without prejudice to the generality of the foregoing, the Supplier makes no representation and gives no warranty or guarantee: (a) that the Service is fit for any particular purpose or accurate, timely, of satisfactory quality, enjoyable, available regardless of, or in any specific, jurisdiction, or non-infringing of third-party rights; (b) that access to or the operation or use of the Service will be uninterrupted, secure or error-free; (c) that any error or defect in the Service will be corrected; (d) that the Service or any means by which it is accessed or used is free of undesirable objects, such as malware or other harmful or annoying components; (e) with respect to any third-party item; or (f) to anyone who is not a Customer.
The Supplier's disclaimers in connection with the Service apply both to the Service as a whole and each component thereof.
To the extent not prohibited by applicable mandatory law, and subject to section 16.2:
the Service is provided "as is" and "as available", with all faults and defects; and, in any event
the Supplier shall not be liable (under any theory of liability), neither to the User nor anyone else, for any undesirable consequences, including any loss or damage of whatever nature, whether foreseeable or not and even if advised of the danger thereof, that result from (i) any installation, implementation, upgrade, downgrade, modification or customisation of the Software not carried out by the Supplier, (ii) failure to use a Feature in accordance with the Documentation, the Agreement or applicable law, (iii) using a Feature in conjunction with an item not provided or approved by the Supplier, (iv) using a third-party item in conjunction with a Feature not in accordance with the relevant third-party documentation or instructions, (v) not applying an available fix, patch, update, service pack or upgrade that would have avoided the harmful event, (vi) inherently dangerous use of any Feature or anything else provided hereunder, (vii) any unauthorised accessing or use of a Customer's User Account or any Workspace, (viii) any unauthorised use of a User's credentials, (ix) any communication received or transaction entered into through or by means of the Service, (x) anyone's statements or conduct on any site, page or other medium forming part of the Service, or (xi) anything attributable to anyone other than the Supplier;
where subsection (b) does not apply, the Supplier shall not be liable (under any theory of liability), neither to the User nor anyone else, for any loss of profit, business or opportunity, or any special, consequential, incidental, indirect, punitive or non-patrimonial loss or damages, whether foreseeable or not and even if advised of the danger thereof. The Supplier may only be held liable for the User's direct financial loss;
the Supplier's total cumulative liability arising out of, related to, or in connection with this Agreement, the Service, the Documentation, the processing of Personal Data, or anything else, shall not exceed (i) the total financial consideration (exclusive of value added and sales taxes and other public dues) that the User paid to the Supplier in connection with the Service during the 12 months immediately preceding the month in which the liability event (i.e., the event/s or circumstance/s underlying the Supplier's liability) occurred, or (ii) if the User had no obligation to make such payments during the period mentioned, then EUR 50 (fifty euros);
this section is without prejudice to the exclusions and limitations of liability that apply by operation of other provisions hereof.
Subsections 16.1(a) -- 16.1(d) shall neither exclude nor limit mandatory liability for any: (a) wilful breach by the Supplier of any of its obligations; or (b) death or personal injury caused by a defective item produced by the Supplier (mandatory product liability).
Neither Party shall be liable for breaching his obligations due to a circumstance that is beyond his control and which he reasonably could not have foreseen or avoided and which, or whose consequences, he reasonably cannot be expected to overcome, such as, for example, a force of nature, conduct of public authorities, war, civil unrest, act of terror, nontrivial cyberattack, failure of a third-party hosting, internet or utility service or any other circumstance qualifying as force majeure under applicable law -- to the extent that the respective circumstance prevented or hindered the Party's performance. For the avoidance of doubt, this section shall not limit the amount of, or excuse the User from paying, any fee or other sum that the User owes hereunder.
Nothing herein shall prevent the Supplier from invoking, or otherwise prejudice the Supplier's recourse to, any statutory defence, remedy or exclusion or limitation of liability.
The protection afforded to the Supplier hereunder, and any statutory protection that the Supplier may enjoy, extends to anyone who acts on the Supplier's behalf, exercises its rights or performs its duties or assists the Supplier in doing the same.
The User shall defend, indemnify and hold harmless the Supplier, its officers, directors, employees, contractors, agents and representatives from and against all claims made by and all damages, liabilities, penalties, fines, costs and expenses payable to any third party that arise from the User's, or, if the User is a Customer, then his own or any Guest User's: (a) breach of any obligation, representation or warranty hereunder; (b) misuse of any Feature; or (c) infringement of anyone's Intellectual Property or proprietary or personal rights.
The User acknowledges that from time to time circumstances may arise that make it necessary or desirable to vary certain provisions of this Agreement. Such circumstances include: (a) the Supplier's launch of a new service or a modification to the Service; (b) a significant change in the Supplier's operating environment; (c) an order or a judgment being entered against or in favour of the Supplier; (d) a significant corporate event, such as, e.g., the Supplier's merger, acquisition or transformation; (e) the Supplier's transfer of the enterprise or a part of the enterprise to which the Agreement pertains; (f) the ambiguity, invalidity, voidability or unenforceability of a provision herein; (g) any other event whose occurrence or expected occurrence in the Supplier's reasonable opinion necessitates an amendment hereto.
The User agrees that: (a) upon any of the circumstances referenced in the preceding section the Supplier may make such changes to the Agreement as it reasonably deems appropriate; (b) the Supplier may amend the Agreement as follows: (i) if the User is a Customer, then by providing him with the revised text of the Agreement or the revised part thereof or with a URL specifying a location where the same is available on the internet, or (ii) if the User is not a Customer, then by any of the means described in point (i) or by posting the revised text of the Agreement or the revised part thereof on such page of the Supplier's website as then used for publishing materials such as the Terms; (c) if he is a Customer and the revised version of the Agreement substantially reduces his rights or increases his responsibilities, the Supplier will give him reasonable notice of such new version's entry into force.
Notwithstanding anything herein to the contrary, the Supplier may modify the Service or any part thereof at any time and for any reason, with or without notice. Unless otherwise expressly agreed, the use of any new features, versions, releases, updates or other modifications that the Supplier may make available in connection with the Service shall be subject to the Agreement. The User's continued use of the Service after any such modification shall constitute his consent to the respective modification(s).
If the User does not agree with the Supplier's changes (whether to the Agreement or the Service), his sole remedy shall be to terminate the Agreement and stop using all Features.
In this part 19, the term "Agreement" means the Agreement referenced in subsection 2.1(a) and words such as "herein", "hereto", "hereof" and "hereunder" refer to that Agreement, unless otherwise specified.
The Agreement between the Supplier and a Customer can only be terminated by closing the Customer's User Account. For the avoidance of doubt, where the Customer has more than one User Account, closing an account will only terminate the Agreement relating to that account.
The Agreement between the Supplier and a User other than a Customer can be terminated by notice to the other Party or, if giving notice to the User is impracticable or would result in unreasonable delay or expense, then by the Supplier's ceasing all activities hereunder, except those which are necessary for providing the Service to another User, the protection or enforcement of the Supplier's or other parties' rights, freedoms or legitimate interests, the exercise of the Supplier's statutory rights or freedoms, or to comply with a legal obligation.
To close his User Account, the Customer should first log in to the account and then proceed as follows: go to "options" > "settings" > "my profile", press "delete my account" (on the bottom right) and confirm that he wishes the account to be closed. The Customer will, however, appreciate that Features (including the appearance, titles and location of menus, tabs, fields, buttons, icons and other objects displayed on the Service) are subject to change, meaning that the steps required of the Customer to close his User Account may vary from time to time. The Supplier will endeavour to keep this procedure as straightforward as possible and will update the Documentation where appropriate. If the Customer has difficulties closing his User Account, he should contact the Supplier and follow its instructions.
Either Party may close the Customer's User Account and shall by so doing be deemed to have cancelled the Agreement, effective upon the closure of the account, provided that: (a) if the User Account is closed by the Supplier, the Customer must be given at least a month's notice thereof (unless section 19.6 or 20.5 applies or the User Account is closed at the Customer's request); and (b) where the User Account is closed by a Party entitled to withdraw from the Agreement, such Party has failed to notify the other that by closing the User Account he is exercising his right to withdraw (which notice must be served prior to or concurrently with closing the User Account and shall result in the Agreement being deemed to have been terminated by withdrawal).
Upon a Party's material breach of Agreement the other Party may terminate the Agreement forthwith. Without prejudice to any statutory provision as to what constitutes a material breach, such a breach hereof shall be deemed to have occurred if a Party, having breached any of his principal obligations hereunder or under the Agreement referenced in subsection 2.1(b), fails to discontinue or remedy such breach within 14 days (or, where exceptional circumstances render this period unreasonably short, such longer time as reasonably required) after notice from the other Party specifying the breach and requiring it to be discontinued or remedied.
Any termination hereof will terminate all Agreements that the User may have under subsection 2.1(b), except that, if the User is a Customer with more than one User Account, the termination will not affect his Agreements under subsection 2.1(b) in relation to Service Plans whose benefits he is entitled to enjoy by reason of a User Account other than the one being closed.
The termination of a Service Plan terminates the related Agreement under subsection 2.1(b).
The Agreement under subsection 2.1(c) will only terminate upon the closure of the Workspace to which it relates, and is incapable of being terminated otherwise. Instructions on how to close a Workspace are provided in the Documentation.
Notes on the application of this part of the Terms: (a) the provisions of this part only apply if and to the extent that the forfeiture of the right of withdrawal under part 4 (i.e., the consumer's forfeiture of his right to withdraw from the Agreement and Service Plans) proves to be void; (b) insofar as permitted by law, the application of this part is subject to the Subscriber having notified the Supplier as per section 3.1 that he wishes to use the Service as a consumer; (c) if a provision of this part applies and conflicts with another provision elsewhere in the Agreement, it prevails over that other provision.
If the Subscriber is a consumer and acted as such when acquiring a Service Plan, he may withdraw from the Service Plan within 14 days without giving any reason. The withdrawal period will expire after 14 days from the commencement of the Service Plan (which, if the Service Plan is subject to a free trial period, coincides with the commencement of the trial). To meet the withdrawal deadline, it is sufficient for the Subscriber to send his communication concerning his exercise of the right of withdrawal before the withdrawal period has expired.
To exercise the right of withdrawal, the Subscriber must inform the Supplier of his decision to withdraw from the Service Plan by an unequivocal statement (e.g., a letter sent by post or email to the address specified under the definition of "Supplier"). The Subscriber may (but is not obliged to) use the following model withdrawal form:
[or, if by post, then]
To: Toggl Technology Limited, 302 The Capel Building, Mary's Abbey, Dublin 7, D07C62X, Ireland
[choose the appropriate addressee and delete the brackets along with their contents]
I hereby give notice that I withdraw from my contract for the provision of the following service: my Service Plan titled "[replace these brackets and their contents with the name of the Service Plan]", ordered on [replace these brackets and their contents with the date of the order].
Name of consumer: [replace these brackets and their contents with the Subscriber's name]
Address of consumer: [replace these brackets and their contents with the Subscriber's postal address if the withdrawal notice is sent by post or the Subscriber's email address if the notice is sent by email]
Signature of consumer (only if this notice is on paper): [if the withdrawal notice is on paper, the Subscriber's signature must be placed here; regardless of whether the notice is sent by post or email, delete these brackets along with their contents]
Date: [replace these brackets and their contents with the date of the withdrawal notice]
If the Subscriber's withdrawal from a Service Plan would result in the relevant Workspace having no Service Plan at all, the Workspace must be closed. In such a case, the Subscriber's statement under section 20.2 shall be accompanied by his closing the respective Workspace (the Documentation explains how to close a Workspace). If the Subscriber fails to close the Workspace as required under this section, it may be closed by the Supplier (in its absolute discretion and without any notice), and the Supplier shall not be liable (neither to the Subscriber nor anyone else) for any undesirable consequences, including any loss or damage, resulting therefrom.
If the Subscriber's withdrawal from a Service Plan would result in there being no Service Plan associated with the Subscriber's User Account, the statement under section 20.2 shall be accompanied by the Subscriber's closing his User Account as described in section 19.4. In such a case, the Agreement referenced in subsection 2.1(a) will terminate along with the Service Plan.
Where section 20.4 applies and the Subscriber fails to close his User Account as required under that section, the Supplier may, in its absolute discretion, close the Subscriber's User Account for him and shall by so doing be deemed to have terminated the Agreement referenced in subsection 2.1(a). No notice of User Account closure or Agreement termination shall be required in such a case and the Supplier shall not be liable (neither to the Subscriber nor anyone else) for any loss, damage or other undesirable consequences that may result from such closure or termination.
If the Subscriber withdraws from a Service Plan, the Supplier shall reimburse to him all payments received from the Subscriber for that Service Plan (less the amount referenced in section 20.7), including, if applicable, the costs of delivery (with the exception of such supplementary costs as may have resulted from the Subscriber's choice of a type of delivery other than the least expensive type of standard delivery offered by the Supplier), without undue delay and in any event no later than 14 days of the day on which the Supplier is informed of the Subscriber's decision to withdraw from the Service Plan. The reimbursement will be effected by the same means of payment as the Subscriber used for the initial transaction, unless the Subscriber has expressly agreed otherwise. In any event, the Subscriber will not incur any fees as a result of such reimbursement.
The Subscriber acknowledges and agrees that by reason of his requests under part 4 of the Terms (which have the effect of the Supplier's performance of the Agreement commencing immediately and the benefits of Service Plans becoming available during the withdrawal period) the reimbursement under section 20.6 will be reduced by an amount proportionate to the benefits provided under the Service Plan until the Subscriber's withdrawal (as compared to the full coverage of the Service Plan). The amount of the reduction shall be determined based on the total price of the Service Plan, i.e., the price charged for the whole billing period concerned.
The User understands and agrees that upon any termination of this Agreement: (a) all his rights hereunder will terminate and he must cease all activities authorised by the Agreement; (b) all amounts that the Supplier is entitled to be paid hereunder become due, except amounts due already; (c) if the Agreement being terminated is the one referenced in subsection 2.1(a), all his User Data and other information associated with his User Account and the Workspaces pertaining to, or in which he participates through, that account may be deleted or become unavailable to him; (d) insofar as relevant hereto, he will receive no refund or other compensation for any unused time or credit on a subscription, for any licence or subscription fee, any data associated with any User Account or Workspace, or for anything else; (e) all his Software-related obligations hereunder will survive until he fully and permanently removes all Software from his systems, devices, storage media and repositories; (f) the preceding subsection applies respectively in relation to any item that forms part of the Service and which the User retains after the termination hereof.
Those provisions of the Agreement that either by express language or reasonable construction are intended to survive its termination (such as, e.g., provisions concerning Service-related Intellectual Property, contributions to the Service, disclaimers, limitation of liability, indemnities, choice of law and jurisdiction) shall so survive and will be enforceable notwithstanding any termination hereof.
With regard to assignment, sublicensing and other disposals, the Parties have agreed that:
The User shall not, without the Supplier's prior explicit consent, sublicense, assign, encumber or otherwise dispose of any of his rights or obligations hereunder, except that the User may, without seeking the Supplier's consent: (a) dispose of his financial claims, i.e., claims whose sole object is the payment of money to the User; (b) assign this Agreement, i.e., all his rights and obligations hereunder, or cause the same to be transferred, as part of the User's general succession (including merger, acquisition and transformation), division, transfer of the enterprise (or a substantial, coherent part of the enterprise) to which the Agreement pertains or divestiture of all or substantially all of his assets as a whole, provided, however, that where the User is a Customer (i) his Agreement under subsection 2.1(a) cannot be transferred without the User Account it governs (that Agreement and the related User Account are inseparable) and (ii) his Agreements under subsections 2.1(b) and 2.1(c) are only transferable to another Customer participating in the Workspace concerned with user privileges permitting that other Customer to assume the relevant role (Subscriber, Owner or the transferor's peer); (c) where the User is a Subscriber, permit other Users to enjoy the Features available under his Service Plan as sub-licensees, but only such of these Features and solely in such manner and to such extent as necessary for the exercise of those other Users' rights hereunder; and (d) where the User is a Workspace Owner, assign that role, i.e., his Agreement under subsection 2.1(c), to another Customer participating in the Workspace concerned with user privileges permitting that other Customer to assume the Owner's role;
The Supplier may: (a) sublicense, assign, encumber and otherwise dispose of any and all of its rights hereunder; and (b) assign this Agreement, i.e., all its rights and obligations hereunder, or cause the same to be transferred: (i) to its parent, any of its wholly- or majority-owned subsidiaries or a wholly- or majority-owned subsidiary of its parent; or (ii) as part of the Supplier's general succession (including merger, acquisition and transformation), division, transfer of the enterprise (or a substantial, coherent part of the enterprise) to which the Agreement pertains or divestiture of all or substantially all of its assets as a whole; or (iii) due to the Supplier ceasing to hold rights in the Software or the Service;
Where a Party's consent is required, it shall not be unreasonably withheld or delayed.
The Supplier may give notice to the User: (a) through a Feature, e.g., by posting the notice on a web page that forms part of the Service or using a Software application's messaging feature; (b) by email to the address associated with his User Account; or (c) by mail or courier to the address provided for that User under Workspace Owner's details.
All notices, requests, enquiries, complaints and other communications to the Supplier should be sent to the email or postal address specified under the definition of "Supplier".
A notice shall be deemed to have been received: (a) the same day if given through a Feature; (b) the next day if given by email; or (c) in the case of a notice sent by mail or courier, and providing that delivery charges have been paid, five days after posting or the courier taking charge of the notice.
The Agreement, the Parties' relations and all matters concerning the Service shall be governed by Estonian law, without the United Nations Convention on Contracts for the International Sale of Goods applying to any of the foregoing.
All disputes arising from or otherwise concerning the Agreement or the Service (including disputes concerning the formation or validity hereof) shall be resolved by arbitration as follows: (i) the matter shall be arbitrated by the Arbitration Court of the Estonian Chamber of Commerce and Industry (ACECCI); (ii) the proceedings shall be conducted in accordance with the ACECCI's then-current arbitration rules; (iii) the seat of arbitration shall be Tallinn, Estonia; and (iv) any decision (order, judgment or other) that the ACECCI may deliver in such a dispute shall be enforceable in all jurisdictions. Each Party hereby irrevocably submits to the ACECCI's jurisdiction and waives any and all objections he may have thereto.
If the above agreement as respects arbitration proves to be void or unenforceable, all disputes to which it was intended to apply shall be subject to the exclusive jurisdiction of Estonian courts, with Harju County Court in Tallinn as the court of first instance (save where the relevant rules of procedure provide for the mandatory jurisdiction of another Estonian court, in which event the latter shall apply).
The above provisions notwithstanding, the Supplier may, in its absolute discretion, assert and seek protection of its intellectual property and rights concerning confidential information or data processing in any forum anywhere in the world (including by way of injunction and other preventive measures).
If any provision of the Agreement proves to be void by reason of it violating mandatory law, and unless the Supplier in its absolute discretion otherwise elects (in which event the following shall not apply), such provision shall be deemed to have been amended to one which is valid, achieves the purpose of the original provision as nearly as possible and maximally preserves the balance of obligations between those affected (i.e., the balance originally intended). The amendment shall be effective as of the moment when the original provision became void.
This DPA is between the Supplier and the Workspace Owner and forms part of the Agreement referenced in subsections 2.1(c) and 2.2(c) of the Terms.
The purpose of the DPA is to supplement the Terms as respects the processing of Relevant Data. The DPA does not concern any other data or the processing thereof. The Supplier's obligations under this DPA must be viewed accordingly, i.e., as only relating to the processing of Relevant Data and not applying in any other context.
The purposes of processing Relevant Data are determined by the Workspace Owner or by the Owner jointly with other members of the Workspace (or jointly with certain of such members or a particular member). As between the Parties, these purposes are determined by the Owner.
Consequently, and in line with the role allocation specified under section 13.2 of the Terms, the Parties acknowledge and agree that with regard to the processing of Relevant Data: (a) the Workspace Owner is the 'controller' and the Supplier is the 'processor'; (b) the Supplier will, pursuant to part 6 below, authorise third parties identified in the Sub-processor List to perform certain processing operations under its responsibility (such parties being 'processors', too); (c) the Supplier and Sub-processors process these data on the Workspace Owner's behalf and on his instructions.
As part of his obligations under section 11.4 of the Terms, the Owner shall be responsible for the accuracy, quality and legality of Relevant Data, the means by which the same are acquired and the instructions he provides as to the processing thereof.
The Supplier will process Relevant Data only as necessary to carry out the Owner's instructions or as required by law to which the Supplier or the processing is subject (which includes any judicial, arbitral, administrative or otherwise mandatory order or judgment made, recognised or enforceable under that law).
The Workspace Owner hereby instructs the Supplier to process Relevant Data: (a) as necessary in connection with the Service, which, particularly but without limitation, includes any processing that is (i) requested or initiated by Users in their use of the relevant Workspace or Features in connection with that Workspace, or (ii) otherwise required for the Supplier's performance of its obligations in relation to the Workspace or its users; and (b) for as long as the purposes described in subsection (a) warrant such processing.
For the avoidance of doubt, section 3.2: (a) sets out the Owner's current instructions as to the processing of Relevant Data; (b) does not prevent the Owner from giving further instructions (which shall be reasonable, lawful and documented) or the Supplier from processing Relevant Data as may be necessary in light of such further instructions; (c) does not restrict the Supplier from processing Relevant Data for as long as legally required (e.g., to comply with the GDPR or legal acts concerning taxation, accounting, financial reporting or counter-terrorism or -money laundering measures) and, if so required (but only to the extent required), exceeding the duration of processing warranted by the Owner's instructions. The Owner thus acknowledges and agrees that each operation that the Supplier performs on Relevant Data will continue until the Supplier is no longer legally obliged to perform the same.
The operations that the Supplier performs on Relevant Data will include storage and such other operations as shall be appropriate in light of this part 3 of the DPA (e.g., retrieval, transmission, erasure, restriction and disclosure pursuant to the Owner's instructions or as required by law).
Personal Data whose processing is permitted
The types of Personal Data that a User (including the Owner) is allowed to process as part of Workspace Data are limited to those which the User is legally permitted to process. The Owner undertakes that Workspace Data will not include, and neither he nor any other User who accesses the Workspace (including any such Guest User) will use the Service for the processing of, Personal Data whose processing is legally prohibited.
Personal Data whose processing is restricted
The Owner acknowledges that the processing of certain types of Personal Data is restricted or limited under the GDPR and that non-compliance with the relevant restrictions or limitations may result in substantial penalties, including fines, being imposed on, or other punitive, remedial or compensatory measures being taken against, the Owner, the Supplier and the User involved in the processing (if different from the Owner).
Consequently, the Owner undertakes that, absent the Supplier's prior explicit consent, Workspace Data will not include, and neither he nor any other User who accesses the Workspace (including any such Guest User) will use the Service for the processing of, Personal Data that fall within either of the following categories: (a) 'special categories of personal data' (also known as 'sensitive information') as described for the time being in Article 9 of the GDPR, including particularly but without limitation genetic data, biometric data and data concerning health; (b) 'personal data relating to criminal convictions and offences or related security measures' as described for the time being in Article 10 of the GDPR.
The Owner will determine who the Data Subjects are, or he may determine this jointly with other members of the Workspace (or jointly with certain members or a particular member thereof). As between the Parties, the Owner shall be deemed to have determined the same.
The categories of Data Subjects include but may not be limited to: (a) Users having access to the Workspace, including such Guest Users; (b) Users who interact with the Features applied via the Workspace; (c) employees, contractors, consultants, associates and agents of (i) the Owner, (ii) the Subscriber of, or payer for, the Service Plan attaching to the Workspace, or (iii) the Users mentioned in the preceding subsections; and (d) parties with whom the Owner or the above Subscriber, payer or User does business or otherwise deals.
The Owner agrees that persons and entities on the Sub-processor List may be retained as Sub-processors and authorises the Supplier to engage them, provided that each Sub-processor, insofar as relevant considering the processing operations it performs, assumes or is made subject to data protection obligations substantially similar to those set forth in this DPA (but in any event no less protective of Relevant Data than the DPA). These obligations may be either contractual or apply by operation of law. In the former case, the respective contract shall be in writing (which includes electronic form) or at least in a form that identifies the parties to the transaction and allows repeated reproduction of the terms agreed.
The Owner instructs that if sub-processing of Relevant Data is to be carried out by an international organisation or in a country not participating in the European Economic Area (EEA) and not being the Swiss Confederation, then the sub-processing be performed: (a) by an organisation or in a jurisdiction (respectively) that ensures an adequate level of protection for the Relevant Data concerned, i.e., that the transfer of these data from the EEA be based on an 'adequacy decision' as per the GDPR; or, absent an adequacy decision (b) subject to such safeguards and other conditions as required under the GDPR; save if and to the extent that the requirement for an adequacy decision or safeguards has been legally derogated from. The transfer of Relevant Data from the EEA in compliance with the above instructions to a party identified in the Sub-processor List requires no further instruction by the Owner.
At least 10 days before authorising a third party not mentioned in the Sub-processor List to act as a Sub-processor the Supplier shall inform the Owner of the new engagement by: (a) updating the Sub-processor List accordingly, i.e., at least 10 days before the engagement takes effect; and (b) if the Owner has subscribed to receive notice of such updates (which he can do by emailing the Supplier either at the address specified under the definition of "Supplier" or such other address as may be provided for this purpose in the Sub-processor List), then notifying him by email to the address specified upon subscription or the address submitted to the Supplier as part of Workspace Owner's details. For the avoidance of doubt, where the Owner has not subscribed to receive notice of the above updates, the Supplier's obligation to inform the Owner of a new Sub-processor engagement shall be deemed to have been duly performed if carried out solely as per subsection (a).
The Owner may reasonably object to the new sub-processor engagement by providing the Supplier notice to that effect (setting out his grounds for the objection) within 10 days of having been informed as per section 6.3. In case the Owner does so object, the Supplier will endeavour to provide him a commercially reasonable alternative not involving the processing the Owner objected to. Such an alternative may, e.g., consist in a modification to the Service or a change of Service Plan. If the Supplier is unable to provide the Owner with an alternative acceptable to him or (in its sole discretion) concludes that no alternative is feasible and respectively informs the Owner, and the objection is not withdrawn, the relevant Workspace shall be closed.
If the Owner does not object to the new sub-processor engagement in accordance with section 6.4, he shall be deemed to have authorised the engagement.
The Supplier shall be liable to the Owner for the acts and omissions of Sub-processors to the same extent that the Supplier would itself be liable under the Agreement were it to commit those acts or omissions.
The Supplier will maintain adequate technical and organisational measures to ensure such level of security in its processing of Relevant Data as appropriate in the given circumstances. Certain of these measures have been described in the Data Protection Policy.
The purpose of the above measures is to address in an appropriate manner: (a) the protection of Relevant Data against unauthorised or unlawful processing and against accidental loss, alteration or destruction; (b) the integrity and confidentiality of Relevant Data; (c) the availability and resilience of the Features pertinent to the processing of Relevant Data (to the extent such Features are authorised under the Service Plan the Owner enjoys); (d) the ability to restore the availability and access to Relevant Data in a timely manner after a Service failure; (e) the effectiveness of the means employed by the Supplier for ensuring the required level of security in its processing of Relevant Data.
The Supplier further undertakes to: (a) ensure that the persons it authorises to process Relevant Data commit themselves to confidentiality (or will be under an appropriate statutory obligation of confidentiality) with respect to these data; and (b) notify the Owner without undue delay upon learning of any Personal Data breach that involves Relevant Data and may need to be communicated to the competent supervisory authority or the Data Subject(s) concerned.
Data Subjects' requests
The Owner acknowledges that it is his duty, not the Supplier's, to accept, respond to, and resolve Data Subjects' requests for exercising their rights and freedoms as data subjects in connection with Relevant Data ('data subject rights') and to facilitate the exercise of these rights and freedoms. If any such request is addressed directly to the Supplier, it will, to the extent legally permitted, redirect the request to the Owner without undue delay.
Upon the Workspace Owner's request, and considering the nature of the Supplier's processing operations hereunder, the Supplier will, insofar as possible, take appropriate technical and organisational measures to reasonably assist the Owner in complying with his obligation to respond to Data Subjects' requests for exercising the following of their data subject rights under the GDPR: the right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object, and the right not to be subject to automated individual decision-making.
Considering the nature of the Supplier's processing operations and the information available to it, the Supplier will, on the Owner's request, reasonably assist the Owner in complying with the following of his controller obligations regarding the processing of Relevant Data (as arising under the GDPR), provided, and to the extent, these obligations apply to the Owner and the information he requires is not otherwise available to him: (a) using the Service in a manner compatible with the Owner's obligation to ensure an appropriate level of security in his processing of Relevant Data; (b) notifying breaches of Relevant Data to the appropriate supervisory authority and the Data Subjects concerned and documenting these breaches; (c) conducting a data protection impact assessment concerning the processing of Relevant Data by means of the Service, and, where necessary, carrying out a review to assess whether processing is performed in accordance with the impact assessment; and (d) consulting with the relevant supervisory authority on matters related to the above data protection impact assessment or its subject.
Costs of assistance
To the extent legally permitted, the Owner shall incur all costs and expenses that may arise in connection with the assistance described in this part 8, including any fees associated with the provision of additional Features.
After the completion of services relating to the processing of Workspace Data (i.e., upon permanent cessation of all Service in relation to the Workspace), the Supplier will: (a) at the Owner's choice, either delete or return to him all Relevant Data then stored by the Supplier; and (b) delete copies of these Relevant Data, save if and to the extent the law requires that the data concerned be retained; provided that: (α) if the Owner elects to have the data returned, his respective request is made reasonably prior to the Workspace being closed (see section 12.3 of the Terms); and (β) if Relevant Data reasonably cannot be deleted, returned or retained separately from other Workspace Data (as is likely to be the case with at least some Relevant Data), the Supplier will, as applicable, delete or return, and, if required, retain, the entire body of Workspace Data then stored by the Supplier, with no obligation to organise, structure or otherwise process the same to separate Relevant Data therefrom or distinguish between Relevant Data and other Workspace Data.
The Supplier shall maintain records sufficient to demonstrate its compliance with the DPA and will retain these records as long as legally required.
Upon the Workspace Owner's request and subject to such confidentiality and non-use commitments as the Supplier reasonably may suggest, the Supplier shall, no more than once a year: (a) make available to the Owner such of the above records as necessary and any other information that reasonably may be required to demonstrate the Supplier's compliance with its obligations under the DPA; and (b) if the provision of records and other information as per the preceding subsection is not sufficient for demonstrating the Supplier's compliance, allow the Owner (or his independent third-party auditor), upon reasonable notice and at a mutually agreeable time, to conduct an audit or inspection of the Supplier's practices in processing Relevant Data.
Any audit or inspection under subsection 10.2(b) shall be limited to what is necessary for verifying the Supplier's compliance with its obligations under this DPA, is to be conducted in a manner not unreasonably disruptive to the Supplier's and Sub-processors' business, and shall be at the Owner's expense (including as to reasonable costs and expenses of the Supplier and Sub-processors, which the Owner undertakes to reimburse).
Terms effective as of 25 May 2018