Part A – Customer Terms
Your Contract with Us
1. Your Customer Contract
‘We’ and ‘Us’ refers to MessageMedia, USA, Inc. of 461 Pacific Avenue, San Francisco, CA 94114 (“MessageMedia”).
- (a) We supply Services to you under your Customer Contract. Your Customer Contract comprises:
- (i) your Application Form;
- (ii) the terms of your Plan;
- (iii) these Customer Terms;
- (iv) if we are supplying Professional Services to you, Part B; and
- (v) if you are a Reseller, Part C.
- (b) The parties to the Customer Contract are the Customer (you) and the Supplier (we, us).
2. The Term of Your Contract
- (a) The Customer Contract will continue until the end of the Minimum Term. Upon expiry of the Minimum Term the Contract will continue thereafter on a month-to-month basis until it is terminated in accordance with this Customer Contract.
- (b) If your Plan or Application Form states that there is no Minimum Term or is described as month-to-month, casual or no contract or similar, either party may terminate it on 30 days’ notice at any time without penalty.
- (c) Your Customer Contract will commence upon our acceptance of your Application Form or when we commence providing the Services to you, whichever happens first.
Provision of Our Services
3. The Services
- (a) We will provide to you a non-exclusive, non-transferable, non-sub-licensable licence for the Services subject to the terms of your Customer Contract.
- (b) We may provide the Services using such facilities and such Carrier as we choose from time to time.
- (c) We may provide the Services using Our Facilities and/or third party facilities. Together, we call those Facilities our Network.
4. Exclusive or Preferred Supplier
If your Application Form states:
- (a) that we are to be your preferred supplier then you must not engage a third party to provide to you more than 10% of your total requirements for the Messaging Services or services substantially similar to the Messaging Services; or
- (b) that we are to be your exclusive supplier then you must not engage a third party to provide to you any Messaging Services or services substantially similar to the Messaging Services.
- (c) Within 14 days of receipt of a written request, you will provide to us assurances (in a form acceptable to us) attesting to your compliance with clause 4.1(a) or clause 4.1(b).
5. Periodic Entitlements
- (a) If your Plan or Application Form states that you are required to pay a Monthly Access Fee you may receive Message Credits equal to the value stated in your Plan or Application Form, which may be redeemed by you against Message Fees incurred during that month. We call these Periodic Entitlements.
- (b) Unused Periodic Entitlements do not carry forward and are not redeemable for cash or other credit.
- (c) If you exceed your Periodic Entitlements, extra Charges may apply or a Service may be limited in some way. Your Plan or Application Form will give details.
6. Compliance with Policies
- (a) You must comply with any applicable Acceptable Use Policy we publish on our website or make available to you. Unused Periodic Entitlements do not carry forward and are not redeemable for cash or other credit.
- (b) You must comply with any policy we publish on our website or make available to you directed to ensuring that the use of a Service complies with all Laws.
7. Operational Directions
- (a) Acting reasonably, we may give Operational Directions about a Service. Operational Directions will be directed to the safety, security or reliability of Facilities, compliance with Laws or dealing with an emergency. We will only give an Operational Direction as and when reasonably necessary.
- (b) You must comply with any applicable Operational Direction.
8. Carrier or carriage service provider
You promise that you are not a Carrier or a carriage service provider.
9. Use of Service by others
- (a) Unless your Application Form states that we have appointed you as a Reseller, you must not share, resell or resupply a Service for remuneration or reward.
- (b) The acts and omissions of your Staff and End Users with respect to a Service are deemed to be your acts and omissions.
- (c) You must ensure that your Staff and End Users do not do (or omit to do) anything that would breach your Customer Contract if done (or not done) by you.
10. Payment for third party services
Using a Service may depend on you having goods or services supplied by third parties. For instance, in order to use an email-to-SMS Service, you must have an internet connection. You are solely responsible for the costs of all third party goods and services you acquire.
11. Using a Service
- (a) When using a Service, you must comply with:
- (i) your Customer Contract (including any applicable Acceptable Use Policy); and
- (ii) any applicable Laws.
- (b) You must not use a Service, and you must Ensure that your End Users do not use a Service:
- (i) to send Restricted Content;
- (ii) for publishing, reproducing or advertising any message, information, symbol or other communication which is offensive or abusive or of an indecent, obscene or menacing character or for the purpose of causing annoyance, inconvenience or needless anxiety to any person, or for any unlawful purpose;
- (iii) to defame any person;
- (iv) to breach the rights of any person;
- (v) to infringe copyright;
- (vi) to create, transmit or communicate communications which are defamatory, obscene, pornographic, discriminatory, offensive, in breach of confidence, illegal or which bring us or any of our Providers into disrepute;
- (vii) to host or transmit Content which contains viruses or other harmful code or data designed to interrupt, damage, destroy or limit the functionality of any software, hardware or computer or communications equipment;
- (viii) to send, allow to be sent, or assist in the sending of spam, to use or distribute email harvesting software, or otherwise breach any Privacy Law;
- (ix) in a way that is misleading or deceptive, where that is contrary to Law;
- (x) in a way that results, or is likely to result, in damage to property or injury to any person; or
- (xi) in any way that damages or interferes with our Services to other customers, our Providers or any Facilities or exposes us to liability.
- (c) As between you and us, you are solely responsible for all acts or omissions that occur under your Account including any password provided to you by us, and the Content of any Messages transmitted through the Service. You acknowledge and agree that any Messages sent using your Account are deemed to have been sent and/or authorised by you.
Confidentiality, Intellectual Property and Privacy
- (a) Each party (Recipient) agrees that, in respect of Confidential Information disclosed to the Recipient by the other party (Disclosing Party), it will not disclose Confidential Information except:
- (i) for the purpose for which the Confidential Information was disclosed to the Recipient under the terms of the Customer Contract;
- (ii) to those employees, officers and agents of the Recipient who need to know the information for the purposes of the Customer Contract, if that person undertakes to keep confidential the Confidential Information;
- (iii) to professional advisers and consultants of the Recipient whose duties in relation to the Recipient require that the Confidential Information be disclosed to them;
- (iv) with the prior written approval of the Disclosing Party; or
- (v) as otherwise required by law to disclose such information.
- (b) The parties acknowledge that monetary damages alone would not be adequate compensation for a breach of the obligations of confidentiality under this Customer Contract, and a Disclosing Party is entitled to seek an injunction from a Court of competent jurisdiction on a breach or threatened breach of this clause.
- (c) Despite anything else contained in this Customer Contract and in particular in this clause 12, we retain the unconditional and irrevocable right to disclose your identity and address and those of any of your Staff or End Users in the event of any complaint received from any regulatory or Government body or Carrier, in connection with this Customer Contract. In such circumstances, we will use all reasonable efforts to limit such disclosure and to provide notice of such request to you as soon as reasonably practicable.
- (d) If either party becomes aware of any actual or perceived breach of or unauthorized access to the other party’s Confidential Information, the party possessing such knowledge shall promptly notify the other party and provide all reasonably requested assistance in addressing such event.
- (e) Nothing in this clause 12 prevents us from naming you as a customer and user of our Services in our marketing materials.
13. Intellectual Property
- (a) The parties agree that other than as provided in this clause 13, nothing in the Customer Contract transfers ownership in, or otherwise grants any rights in, any Intellectual Property Rights of a party.
- (b) If a party provides any material to the other party that contains any Intellectual Property Rights which were developed by or on behalf of, or licensed to, the first party independently of the Customer Contract (Pre-Existing Material), then the first party grants to the other party a non-transferable, non-exclusive, royalty-free licence to use, during the term of the Customer Contract, the Pre-Existing Material solely for the purpose of using or supplying the Services under the Customer Contract.
- (b) You acknowledge and agree that where you authorise or require us to collect or otherwise deal with Personal Information in your name or on your behalf in connection with providing the Services, that we do so as your agent.
- (c) You acknowledge and agree that except as may be required by this Agreement, we are not required to take steps to ensure that any Personal Information collected by you has been collected in accordance with the Privacy Laws. Further, you indemnify us for any Claim by a third party that it has suffered Loss as a result of a breach of a Privacy Law.
- (d) If the Services or the performance of our respective obligations under this Customer Contract involve any processing of any personal data (as defined in the GDPR) of, or sending Messages to, any individuals in the European Union, then we each agree that we shall comply with the additional terms set out in Parts D and E.
Prices, Billing and Payment Terms
15. Charges & payment: Prices
- (a) You agree to pay our Charges in accordance with the terms of your Contract.
- (b) If the price for a service is not listed in your Application Form, for example the price for international SMS, we may charge you a fee equal to the cost to us of providing that service plus a reasonable margin.
- (c) You warrant that you will use the Messaging Services exclusively for the sending of Standard Rate Messages containing Unrestricted Content to End Users and, where the Service supports it, receiving Messages from End Users. We may make an extra Charge if you send any Messages that are not Standard Rate Messages, equal to the amount charged to us by the Carrier plus a reasonable margin.
- (d) Unless otherwise agreed by you and us, you must pay for every Message dispatched using the Messaging Services irrespective of receipt by the intended recipient, provided that we deliver the Message to the relevant Carrier or Provider.
- (e) On written request received within 30 days of the Message being dispatched, we will provide evidence that the Message was delivered to the relevant Carrier or Provider.
- (f) Any failure by a Carrier to deliver a Message to the intended recipient is beyond our control and you will not hold us liable in respect of any such failure.
16. Calculation of number of SMS
Information point: The SMS system allows a maximum message size of 160 characters (or 70 characters if you include any Unicode characters and send via a Unicode supported service). If a user sends a longer message, the system splits it to two or more separate SMS that may be reassembled on delivery so that they appear to be a single message (or, on some handsets, may be delivered as a series of separate SMS). When a longer message is split in this way, the components are no more than 153 characters long (or 67 characters long if you include any Unicode characters and send via a Unicode supported service), because seven characters are used to facilitate re-joining on delivery. For messages sent to End Users in Canada, the maximum message size is 140 characters. When a message longer than 140 characters is sent to an End User in Canada, the system splits the message into two or more components, each of which are no more than 133 characters long (or 67 characters long if you include any Unicode characters and send via a Unicode supported service). As a result, a longer message will result in more than one SMS being transmitted, and charges apply accordingly, as described in this clause.
Charges for an SMS Service will be based on the number of SMS you send, calculated in accordance with the following rules:
- (a) If you include any Unicode characters and send via a Unicode supported service, content that contains no more than 70 characters counts as one SMS. In all other cases, content that contains no more than 160 characters (or no more than 140 characters if you send to End Users in Canada) counts as one SMS.
- (b) If you include any Unicode characters and send via a Unicode supported service, content that contains more than 70 characters counts as one SMS for each block of 67 characters or part thereof. In all other cases, content that contains more than 160 characters (or more than 140 characters if you send to End Users in Canada) counts as one SMS for each block of 153 characters or part thereof (or each block of 133 characters or part thereof if sending to End Users in Canada).
- (c) A ‘character’ includes each individual letter, digit, punctuation and other symbol in the Content.
- (d) Each press of a ‘spacebar’ generates a separate character.
- (e) Some special symbols and non-English letters may comprise more than one character and you will be charged accordingly.
- (f) Where an SMS is sent to multiple End Users, each one is counted separately.
17. Calculation of the size of an MMS
Charges for an MMS Service will be based on the size and number of MMS you send, calculated in accordance with the following rules:
- (a) Content that contains no more than 215kB is charged at the Standard Rate (as defined in your Plan or Application Form).
- (b) Content that contains between 216kB and 350kB is charged at the First Tier Premium Rate (as defined in your Plan or Application Form).
- (c) Content that contains more than 351kB up to 2000kB is charged at the Second Tier Premium Rate (as defined in your Plan or Application Form).
- (d) Where an MMS is sent to multiple End Users, each one is counted separately.
18. When we can bill
- (a) Your ‘Billing Period’ is the period between bills. Unless your Application Form states otherwise, our standard Billing Period is monthly.
- (b) We can bill a part-period eg to align your Billing Period with the first day of each month.
19. Extra Charges for bills and information
- (a) We may charge you an extra Charge if:
- (i) you request non-standard information about your bill or Charges; or
- (ii) you ask us to deliver a bill by a method that is not the standard method for a Plan.
- (b) If you request a paper bill when that is not the standard method for a Plan, the extra Charge is $5 per bill, or as otherwise notified by us to you.
20. Late billing
- (a) We may late bill.
- (b) Some Charges in a Bill may relate to a previous Billing Period.
21. When you must pay
- (a) Where a Direct Debit or credit card arrangement applies, we may debit payment for Charges:
- (i) 14 days after they are billed (if we issue a Bill for the Service); or
- (ii) 14 days after the end of the current Billing Period (if we do not issue a Bill for the Service).
- (b) If any Bill is overdue for payment, you must pay that Bill and any other Bill immediately.
- (c) You must pay a Bill within 14 days after the date of the Bill, unless your Application Form or Plan states otherwise.
22. How you can Pay
- (a) If your Plan or Application Form specifies ‘Direct Debit only’ (or similar) then:
- (i) Direct Debit payment is a precondition to supply of Service to you.
- (ii) We may suspend Service if Direct Debit arrangements are not maintained.
- (iii) You must not cause to be reversed any Direct Debit payment to us, unless you have our prior written approval. Otherwise, you must pay our reasonable costs (including legal fees if necessary) of reinstating the transaction.
- (b) In any other case:
- (i) Direct Debit is our preferred payment method and incurs no surcharges.
- (ii) You may pay by MasterCard or Visa (or any other card we notify you that we accept) or direct deposit.
- (iii) Payments made using credit cards may be subject to a surcharge. Unless your Application Form states otherwise, non-Direct Debit payments attract a monthly surcharge of $5 and, in addition to our usual credit card processing fee, Amex or Diners Club will attract an extra 2% surcharge.
- (c) If any payment you make is dishonoured, we may charge you a reasonable payment dishonour fee and recover from you any fees charged by our bank which result from the dishonoured payment.
23. Late payment
If a Bill is not paid on time:
- (a) you are in breach of your Contract, and
- (b) we may also charge:
- (i) a reasonable late fee; and
- (ii) any collection fees and expenses that we incur.
- (a) Our records of what you owe us are deemed to be right unless you show them to be wrong.
- (b) If you dispute a bill, you must pay it on time and without set off. We shall credit you if it is later determined that you are entitled to a credit.
- (c) You may not raise a billing dispute more than 12 months after a bill is issued, and we will not pay a refund or give a credit in respect of a period prior to that.
Each party shall be responsible for its own tax obligations arising out of its performance under this Agreement.
26. Representations and Warranties
- (a) Mutual Representations and Warranties. Each party represents and warrants to the other that (i) this Agreement constitutes a legal, valid and binding obligation, enforceable against it in accordance with its terms; (ii) the party’s obligations under this Agreement do not violate any law or breach any other agreement to which such party is bound; (iii) it has all necessary right, power and ability to execute this Agreement and to perform its obligations therein; and (iv) no authorization or approval from any third party is required in connection with such party’s execution, delivery or performance of this Agreement.
- (b) Your Representations and Warranties. You represent and warrant that you are engaged in a lawful business and are duly licensed to conduct such business under the laws of all jurisdictions in which you conduct business. You further represent and warrant that all statements made by you in this Agreement, or in any other document relating hereto by you or on your behalf, are to the best of your knowledge true, accurate and complete. To the extent applicable to you, you will comply with all Applicable Laws, regulations, rules, ordinances and orders of governmental authorities having jurisdiction over you and your business.
- (c) Our Representations and Warranties. We represent and warrant that we will provide the Services in a professional manner consistent with the level of care, skill, practice and judgment exercised by other professionals in performing Services of a similar nature under similar circumstances by personnel with requisite skills, qualifications and licenses needed to carry out such work, and in compliance with all applicable laws, regulations, rules, ordinances and orders of governmental authorities having jurisdiction over us and our business, and in a timely and commercially reasonable manner.
27. Indemnities and Limitation of Liability
- (a) You shall indemnify and hold us, our affiliates, and our respective officers, directors and employees harmless from and against any and all costs (including reasonable attorneys’ fees), expenses, loss, liabilities, suits, actions, damages or claims or proceedings arising or in any other way connected with (a) any wilful or negligent act or omission by you, your employees, agents or contractors; (b) any Messages sent by you whether or not the claim is brought or made by one of our customers, a recipient, or another party; (c) your non-compliance with any terms of this Agreement; or (d) your use of your Account or the Messaging Services, or any other person using you username and password.
- (b) We will indemnify and hold you and your affiliates, and your respective officers, directors and employees harmless from and against any and all costs (including reasonable attorneys’ fees), expenses, loss, liabilities, suits, actions, damages or claims or proceedings arising or in any other way connected with (a) any wilful or negligent act or omission by us, our employees, agents or contractors; or (b) any knowing infringement of any other party’s patent or trademark.
- (c) An Indemnified Party shall promptly provide the Indemnifying Party with written notice upon learning of any Claims or complaints that may reasonably result in the indemnification of the Indemnified Party, provided, however, that failure by the Indemnified Party to provide prompt notice to the Indemnifying Party shall not relieve the Indemnifying Party of its obligations under this clause 27, unless the Indemnifying Party’s ability to defend the Claim has been materially disadvantaged or compromised.
- (d) Any indemnity in this Agreement is a continuing obligation, independent of other obligations under this Agreement and continues after this Agreement ends.
28. Recipient Information and Disclaimers
- (a) You, on your own behalf and on behalf of your recipients, hereby grants to us the non-exclusive right to access and use certain recipient information as is necessary for us to provide the Messaging Services. You represent and warrant that you possess all rights, consents and permissions necessary to use and disclose recipient information in connection with the Messaging Services and this Customer Contract and that you have authority to grant us the rights set forth in this clause.
- (b) You acknowledge that we exercise no control over, and will have no liability for, any recipient information. You will be responsible at all times for maintaining the accuracy, timeliness and security of your and your recipient’s information, and we bear no liability for the accuracy, loss or damage in part or whole, of such information or failure to store any such information.
- (c) EXCEPT AS OTHERWISE SPECIFICALLY PROVIDED HEREIN AND TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DO NOT MAKE ANY REPRESENTATIONS, WARRANTIES, CONDITIONS OR GUARANTIES WITH RESPECT TO THIS CUSTOMER CONTRACT OR THE MESSAGING SERVICES, INCLUDING WITH RESPECT TO THE RESULTS THAT MAY BE OBTAINED FROM YOUR USE OF THE MESSAGING SERVICES OR THE RELIABILITY, TIMELINESS, QUALITY, SUITABILITY, AVAILABILITY, ACCURACY OR COMPLETENESS OF THE MESSAGING SERVICES. WE EXPRESSLY DISCLAIM ANY AND ALL WARRANTIES, CONDITIONS, REPRESENTATIONS, AND GUARANTEES WITH RESPECT TO THIS CUSTOMER CONTRACT AND THE MESSAGING SERVICES, WHETHER EXPRESS OR IMPLIED, ARISING BY LAW, CUSTOM, PRIOR ORAL OR WRITTEN STATEMENTS, OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, OR ANY IMPLIED WARRANTIES ARISING OUT OF COURSE OF PERFORMANCE, COURSE OF DEALING OR USAGE OF TRADE. THE SMS MESSAGING SERVICE IS PROVIDED ON AN “AS-IS” BASIS. NO REPRESENTATION OR OTHER AFFIRMATION OF FACT, INCLUDING, WITHOUT LIMITATION, STATEMENTS REGARDING CAPACITY, SUITABILITY FOR USE OR PERFORMANCE OF THE MESSAGING SERVICES, WHETHER OR NOT CONTAINED IN THIS CUSTOMER CONTRACT SHALL BE DEEMED TO BE A WARRANTY BY US.
- (d) IN NO EVENT SHALL WE HAVE ANY LIABILITY TO YOU FOR ANY LOST PROFITS OR FOR ANY INDIRECT, INCIDENTAL, PUNITIVE, CONSEQUENTIAL OR SPECIAL DAMAGES OF ANY KIND OR NATURE HOWEVER CAUSED AND, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, WHETHER OR NOT WE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN ADDITION, IN NO EVENT SHALL OUR AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS CUSTOMER CONTRACT, WHETHER IN CONTRACT, TORT, OR UNDER ANY THEORY OF LIABILITY EXCEED THE FEES ACTUALLY PAID BY YOU TO US IN THE SIX (6) MONTHS PRECEDING THE INCIDENT GIVING RISE TO THE CLAIM.
Termination and Suspension
29. Termination by us
We may, by written notice to you, terminate your Contract:
- (a) at any time (except during the period of the Minimum Term), on 30 days’ written notice to you;
- (b) immediately if you are in material breach of your Contract (including but not limited to a failure to pay us on time, a breach of the Acceptable Use Policy or a breach of the Privacy Laws) and you fail to remedy such breach within 7 days of being served notice to do so;
- (c) immediately if you breach clause 4.1(a) (preferred supplier) or 4.1(b) (exclusive supplier) and you fail to remedy such breach within 14 days of being served notice to do so;
- (d) immediately if you suffer an Insolvency Event;
- (e) immediately if we become entitled to suspend the Service, and the suspension continues for more than a month;
- (f) immediately if we reasonably suspect that you, your Staff or your End User has infringed or attempted to infringe our Intellectual Property Rights;
- (g) immediately if you cause to be reversed any Direct Debit or credit card payment to us (except with our prior written agreement);
- (h) immediately if it is necessary to do so in order to comply with a warrant or other court order, or as otherwise required or authorised by law;
- (i) immediately if we reasonably suspect fraud or attempted fraud involving the Service;
- (j) immediately if you are, or become, a carrier or carriage service provider under applicable telecommunications laws; or
- (k) in any other circumstances stated elsewhere in your Contract.
30. Termination by you
You may terminate your Contract:
- (a) at any time (except during the period of the Minimum Term) on 30 days’ written notice to us;
- (b) immediately, by giving us written notice, if we are in material breach of your Contract and we fail to remedy that breach within 14 days of being served notice to do so;
- (c) immediately, by giving us written notice, if we suffer an Insolvency Event;
- (d) by giving us 14 days’ written notice, if an Intervening Event occurs and you are unable to use the Service for more than 30 days;
- (e) by giving us 14 days’ written notice, if you reasonably suspect that we have infringed or attempted to infringe your Intellectual Property Rights; or
- (f) in any other circumstances stated elsewhere in your Contract.
31. Consequences of Termination
If your Contract ends:
- (a) during the period of the Minimum Term then you will be required to immediately pay us the Early Termination Fee (other than if you terminate the Contract pursuant to clauses 30.1(b), 30.1(c), 30.1(d), 30.1(e) or 30.1(f)). You acknowledge and agree that any liability to pay us an Early Termination Fee does not prejudice any other right we may have to claim damages as a result of the termination;
- (b) our obligations to you under your Contract are at an end;
- (c) you must immediately cease use of any of our Services supplied under that Contract;
- (d) we may bill you for any Services we have not yet invoiced and all other amounts we are entitled to under the Contract;
- (e) all bills are payable immediately;
- (f) you authorise us to recover any outstanding Charges and Early Termination Fees from any overpayment you have made, or Direct Debit them from your credit card or bank account if you normally pay by Direct Debit;
- (g) it does not affect the accrued rights or liabilities of either party; and
- (h) it does not affect the provisions which expressly or by implication are intended to operate after termination including, without limitation clauses 12, 13 and 14 and the limitations of liability and rights of indemnity.
32. Suspension of Service
We may suspend Service at any time, without liability and immediately by reasonable notice to you (except in the case of an emergency), if:
- (a) there are problems with the Network, or we or our Providers need to suspend the Services to conduct operational and maintenance work on the Network;
- (b) you fail to pay any amount owing to us in respect of the Service under your Customer Contract (which is not the subject of a bona fide dispute) by the due date, and you fail to pay that amount within the period specified in any subsequent notice we send you;
- (c) you breach your Customer Contract or we reasonably believe you are in breach of your Customer Contract, including terms relating to your use of the Service or any Acceptable Use Policy;
- (d) there is an emergency;
- (e) there is a threat or risk to the security of the Service or integrity of the Network;
- (f) the Service may cause death, personal injury or damage to property;
- (g) we are required to do so to comply with any Law or direction of any Regulator;
- (h) an Intervening Event occurs; or
- (i) we are otherwise entitled to do so under your Customer Contract.
Upon written request, we will provide a written explanation of the circumstances surrounding the suspension.
33. Charges during a period of suspension
If we suspend Service:
- (a) because of your fault or breach of your Contract – you remain liable for all Charges payable under your Contract during the period of suspension;
- (b) otherwise – you are entitled to a pro rata reduction in Charges in respect of the period of suspension.
34. General power to vary your Contract
Subject to clause 35,
- (a) we may vary your Contract from time to time on 14 days’ written notice to you; and
- (b) any variations that have been deemed to be accepted pursuant to clause 35 will take effect 15 days after the date of any notice.
35. Customer Right to terminate on Receipt of Notice of Variation
If you do not accept the variation set out in a notice from us pursuant to clause 34 you must notify us in writing within 14 days. If you fail to do so, you will be deemed to have accepted the variation. If you notify us that you do not agree to the variation, then we must discuss the proposed variation in good faith. If no agreement on the variation is achieved within 10 Business Days either party may terminate this Customer Contract by providing 30 days’ written notice to the other party.
You acknowledge that:
- (a) there has been no reliance by you on our skill or judgement or written or oral representations in deciding whether our Service is fit for a particular purpose or meets particular criteria;
- (b) the internet is not an inherently secure system and you undertake responsibility for the protection of your information and data;
- (c) the internet may contain viruses (including other destructive programs), which may, if not eliminated, destroy parts or all of the data contained within your system, and that we have no control over these viruses; and
- (d) we do not provide any filtering or checking of data to eliminate these viruses, and you agree to provide you own mechanism for checking your system for viruses, and to indemnify us against any damage caused by viruses obtained through the Service.
- (a) We may assign all or part of our rights and obligations under your Contract without your consent.
- (b) You cannot assign all or part of your rights and obligations under your Contract unless we agree in writing.
38. Governing law
This Agreement shall be governed and interpreted according to the laws of the State of California, except for its conflict of laws principles and any dispute arising out of or relating to this Agreement shall be brought and heard in a state or federal court located in the City and County of San Francisco, California. To the extent permitted by law, each party also waives any right to jury trial in connection with any action or litigation related to this Agreement.
39. Entire agreement
Your Contract is the entire agreement between you and us regarding its subject matter, and you acknowledge that:
- (a) your Contract does not include any term, condition, warranty, representation or guarantee that is not expressly set out in it; and
- (b) you have not relied on any representation that is not expressly set out in your Contract.
- (a) Time is not of the essence in the performance of our obligations, including the provision of Services, under your Contract.
- (b) We are not liable to you for any delay in the provision of any Service.
- (c) You may not cancel or amend an order for a service on the grounds of any delay in providing it.
41. No waiver
A failure, delay, relaxation or indulgence by us in exercising any power or right conferred under your Contract (such as a right that we have due to your breach of your Contract) does not operate as a waiver of the power or right.
Interpretation and Definitions
42. Interpreting your Contract
- (a) If an expression is defined in clause 43, that is what it means.
- (b) If an expression is defined in clause 43, grammatical derivatives of that expression have a corresponding meaning. (For instance, if ‘to colour’ means ‘to paint blue’, then ‘coloured’ means ‘painted blue’.)
- (c) Expressions like ‘includes’, ‘including’, ‘eg’ and ‘such as’ are not words of limitation. Any examples that follow them are not to be taken as an exhaustive list.
- (d) Headings are only for convenience. They are to be ignored when interpreting our Customer Terms.
- (e) A schedule to a document is part of that document.
- (f) A reference to the singular includes the plural and vice versa.
- (g) There is no significance in the use of gender-specific language.
- (h) A ‘person’ includes any entity which can sue and be sued.
- (i) A ‘person’ includes any legal successor to or representative of that person.
- (j) A reference to a law includes any amendment or replacement of that law.
- (k) Anything that is unenforceable must be read down, to the point of severance if necessary.
- (l) Anything we can do, we may do through an appropriately authorised representative.
- (m) Any matter in our discretion is in our absolute and unfettered discretion.
- (n) A reference to a document includes the document as modified from time to time and any document replacing it.
- (o) The word ‘month’ means calendar month and ‘year’ means 12 months.
- (p) The words ‘in writing’ include any communication sent by letter or email or any other form of communication capable of being read by the recipient.
- (q) A reference to all or any part of a statute, rule, regulation or ordinance (statute) includes that statute as amended, consolidated, re-enacted or replaced from time to time.
- (r) Money amounts are stated in US currency unless otherwise specified.
|Acceptable Use Policy||a policy so titled and issued under clause 6|
|Account||the Customer’s entitlement to Messaging Services subject to the Customer Contract and, where relevant, includes any Service features, associated usernames or passwords|
|Application or Application Form||your application to us to access Messaging Services, in a form we specify from time to time which may also contain features, entitlements, Charges and special conditions in connection with a Service|
|Automatic Direct Debit||a periodic payment that is automatically deducted by us from your nominated financial institution account|
|Bill||an invoice from us which advises you of the total of each Charge that is due for payment|
|Billing Period||see clause 18.1(a)|
|Carrier||a telecommunications carrier|
|Charges||fees and/or charges applicable under your Customer Contract|
|Claim||any claim, demand, action, proceeding or legal process (including by way of set off, cross-claim or counterclaim)|
in relation to each party (for the purposes of this definition, the Discloser’s
|Content||the content of a Message you send or receive|
|Contract||same as Customer Contract|
|Customer||the customer named in the Application Form|
|Customer Contract||see clause 1|
|Customer Terms||the terms and conditions set out in Part A of this document|
|Direct Debit||a payment that is deducted by us from your nominated financial institution account, including an Automatic Direct Debit|
|Early Termination Fee||is calculated as follows – (45% of the average amount we have invoiced you from the commencement of the Contract until the date of termination) multiplied by (the number of remaining months (or any part thereof) of the Minimum Term|
|End User||a person who receives a Message you send using your Account, and a person who sends you a Message via your Account|
|Equipment||a handset, modem, router or other hardware|
|Facilities||systems, software, computers, equipment and network infrastructure of all kinds used to provide or in connection with the provision of a Service|
|GDPR||the General Data Protection Regulation (Regulation (EU) 2016/6790)|
|Insolvency Event||includes an event where a receiver or receiver and manager is appointed over a party’s property or assets, an administrator, liquidator or provisional liquidator is appointed to the party, the party enters into any arrangement with its creditors, the party becomes unable to pay its debts when they are due, the party is wound up or becomes bankrupt, or any other analogous event or circumstance occurs under the laws of any jurisdiction|
|Intellectual Property Rights||
Includes all right, title and interest wherever subsisting (now or in the future) throughout the world, and whether registered or not, in and to:
and includes the right to apply for registration, grant or other issuance of the rights described in paragraphs (a), (b) and (c) above and any other rights generally falling within this term
|Intervening Event||an event beyond our reasonable control which interferes with and prevents us from providing the Services to you. Such events include any act or omission of our Providers, any disruption to our or our Providers’ networks, infrastructure and equipment, failure of any electrical power supply, changes to any laws or regulations, industrial action and acts of God including but not limited to lightning strikes, earthquakes, floods or other natural disaster|
|Law||laws, Acts of Congress, regulations, mandatory standards and industry codes and including the requirements or directions of any regulatory body|
|Message||an SMS, MMS or OTT Message|
|Message Credits||a credit equal to your Monthly Access Fee that may be applied to your Messaging Fees for that month, provided that any unused balance in each month (a) is not carried over to any later month and (b) is not refundable|
|Messaging Fee||a Charge per Message sent or received on your Account|
|Messaging Service||a telecommunications service for sending and/or receiving and/or processing Messages|
|Minimum Term||the period specified in your Plan or Application Form, or if your Plan or Application Form does not so specify, means 12 months|
|MMS||a message including text and/or multimedia content carried by the multimedia messaging service developed by the Open Mobile Alliance, whether it originates or terminates on a mobile phone or another kind of computer|
|MMS Service||a Messaging Service for MMS|
|Model Clauses||the standard contractual clauses for transfers from data controllers in the EEA to data processors outside the EEA set out in the Commission Decision 2010/87/EU, dated 5th February 2010, entered into between you and us, as set out in Part E of this Customer Contract|
|Monthly Access Fee||the charge identified as such in a Plan or Application Form|
|Network||see clause 3.1(c)|
|Operational Directions||Any direction we give you in relation to the Services or your Account in accordance with clause 7|
|OTT Message||is an instant message that uses the internet for transmission|
|Our Facilities||Facilities we own and/or operate|
|Personal Information||as defined in Privacy Laws from time to time|
|Periodic Entitlements||see clause 5|
|Plan||a particular set of features, entitlements, term of contract, Charges and special conditions in connection with a Service. Many of our Services are available under different Plans, each with its own features, entitlements, contract period, Charges and special conditions. The terms of your Plan form part of your Customer Contract|
|Privacy Laws||the Telephone Consumer Protection Act (TCPA) and applicable Federal Communications Commission (FCC) regulations; the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (CAN SPAM) and applicable FCC and Federal Trade Commission (FTC) regulations; as such may be amended from time to time|
|Professional Services||advisory services which may include the design and creation of text and/or images used in an SMS and/or MMS and includes, without limitation, concepts, ideas, innovation and development work to further enhance the Messaging Services. Professional Services may also include the management of the delivery or execution of a process or campaign on behalf of the Customer|
|Provider||a third party that, under a contract with us, provides (a) access to Facilities they manage or maintain or (b) content or (c) a service – that we resupply to you|
|Regulator||Includes, but is not limited to the Federal Trade Commission and the Federal Communications Commission and any other government or statutory body or authority with jurisdiction relevant to the activities covered under this Agreement.|
|Reseller||a Customer whose Application Form states that they are appointed as a reseller of the Supplier’s Services|
|Services||a service (including any Equipment) which we provide to you as defined in your Contract|
|SMS||a text message carried by the short message service that was originally developed for use on the GSM mobile telephone network, whether it originates or terminates on a mobile phone or another kind of computer|
|SMS Service||a Messaging Service for SMS|
|Staff||any person, whether your employee, contractor or otherwise, who uses your Account|
|Standard Rate Messages||Messages that are billed by telecommunications carriers at standard rates, and in particular are not premium rate Messages, which are billed by such carriers at premium rates|
|Supplier||the entity described as such in the Application Form and/or your Plan and/or on the website on which these Customer Terms are published|
|Unrestricted Content||Content that is not Restricted Content|
Part B – Professional Services Service Terms
44. About this Part
This Part applies when we supply you with Professional Services.
45. Quote and Specifications
Prior to providing any Professional Services we will agree:
- (a) the specifications and requirements for the Professional Services; and
- (b) total estimated cost of the Professional Services.
46. Deposit for Services
We may require you to pay a deposit (of up to 35% of total estimated cost) for any Professional Services that you have asked us to provide to you.
47. Approval of Professional Services
Where we undertake Professional Services or any form of professional services, Customer will not unreasonably withhold signoff and approval of the completed project, where we are able to reasonably demonstrate that we have met the agreed specifications or requirements.
48. Customer Warranty
Customer warrants that all Content provided to us in relation to the provision of the Professional Services is duly licensed or authorised and not in breach of any law, third party rights or trademarks. The Customer further accepts without limitation that any fees, royalties or other payments for use of Content are to be paid by the Customer.
Upon completion of the Professional Services you agree to pay the total cost of the Professional Services within 14 days of receipt of an invoice for such services.
Part C – Reseller Terms
50. About this Part
This Part C applies if your Application Form states that you are a Reseller.
51. Reseller Rights
We grant you the non-exclusive and non-transferable right to market and resell the Services to your customers.
52. Reseller Independence
Your business is an independent business. Accordingly:
- (a) you are not, and must not (in any circumstances) hold yourself out as our agent, associate or affiliate;
- (b) you must not represent that we are in any way the owner or operator of your business;
- (c) your acts or omissions do not bind us;
- (d) this Customer Contract does not constitute either you or us as a joint venturer, partner, agent, employee or fiduciary of the other.
53. Provision of Services to Others
- (a) will enter in to separate legal agreements with your customers to whom you resell the Services which contain terms and conditions substantially similar to but no less restrictive than the Customer Terms;
- (b) expressly acknowledge that we will not, at any time, be responsible for or liable for the Content or the destination of any Content conveyed by or to you;
- (c) agree that, if you become aware that any End User does not wish to continue to receive Messages, you will take all necessary steps, including notifying us, to ensure that the End User does not continue to receive Messages.
54. 90 Day Notice of Termination
If you are a Reseller, then the reference to “30 days” in clause 30.1(a) is deleted and replaced with “90 days”. For the avoidance of doubt this means that you may terminate your Customer Contract at any time (except during the period of the Minimum Term) on 90 days’ written notice to us.
Part D – E-Privacy
55. About this Part
This Part D applies if the Services or the performance of our respective obligations under this Customer Contract involve the processing of any personal data (as defined in the GDPR) of, or sending Messages to, any individuals in the European Union.
56. Privacy and Electronic Communications and E-Commerce
- (a) You warrant and undertake at all times to comply (and to ensure that your Staff and End Users also comply) with your obligations under the Privacy and Electronic Communications (EC Directive) Regulations 2003 and the Electronic Commerce (EC Directive) Regulations 2002, in particular, you:
- (i) warrant and represent that End Users to whom you send Messages have consented or otherwise opted-in to the receipt of such Messages as required by any applicable Law or regulation.
- (ii) agree that you will include clear opt-out/unsubscribe information on your Messages when required to do so by any applicable Law or regulation; and
- (iii) will adhere to the Consumer Best Practices Guidelines promulgated by the Mobile Marketing Association, if applicable to your messages
- (b) You indemnify us for any Claim which results from your breach of paragraph (a) above.
57. Data Protection
- (a) The terms ‘data subject’, ‘personal data’, ‘process’, and ‘supervisory authority’ have the meanings given to them in the GDPR.
- (b) With effect from 25 May 2018, if a party is provided with, or has access to personal data in connection with the Services, it must comply with the GDPR and any other applicable law in respect of that personal data.
- (c) The subject matter of the processing by us shall be the performance of this Customer Contract. The nature and purpose of the processing shall be the provision of the Services. The duration of the processing shall be the duration of this Customer Contract.
- (d) We shall:
- (i) only process personal data on your behalf in accordance with, your instructions and for the purposes set out in this Customer Contract;
- (ii) implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.
- (iii) ensure that any of our personnel engaged in the processing are subject to a duty of confidentiality.
- (iv) co-operate with you if you are required to deal or comply with any assessment, enquiry, notice or investigation by the Information Commissioner, to assist you in complying with such assessment, enquiry, notice or investigation.
- (v) notify you if we receive a request from a data subject for access to personal data, and shall provide you with reasonable co-operation and assistance in relation to any such request.
- (vi) inform you without undue delay if at any time any personal data is or is suspected to be, lost, corrupted, used or disclosed to a third party except in accordance with this Customer Contract and provide reasonable assistance to you in relation to your obligation to notify data subjects or a supervisory authority.
- (e) You acknowledge that in providing the Services, personal data may be transferred outside the European Economic Area under the Customer Contract and each party undertakes to comply with its obligations under the Model Clauses.
- (f) You hereby consent to the sub-processing of personal data by a Provider. We shall only appoint additional sub-processors where we have your prior consent to do so and where we have written terms in place with the sub-processor that reflect these terms.
- (g) You warrant that you have provided a fair processing notice to End Users that notifies them of our processing activities and that where our processing of personal data on your behalf requires the consent of End Users, you have and will obtain this and provide us with evidence on request.
- (h) On termination of this Client Contract, we shall delete all personal data that you have provided to us, unless we are required by law to retain it (in which case, we will not actively process it after the termination date).
- (i) You may, not more than once in any 12-month period and on giving at least 30 days’ written notice, conduct an audit of our processing of personal data under this Client Contract. We shall mutually agree on the scope, timing and duration of the audit. The audit shall exclude any personnel records and any data, systems and facilities which are subject to confidentiality obligations to third parties. You shall not be entitled to take copies of any information.
- (j) You indemnify us for any Claim by your Staff, End Users or any other third party that it has suffered Loss as a result of your breach of paragraphs (b), (e) or (g) above.
Part E – Model Clauses
STANDARD CONTRACTUAL CLAUSES (PROCESSORS) For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection
Name of the data exporting organisation: Customer as shown on the Application Form
Address: Customer’s address as shown on the Application Form
Tel: Customer’s telephone number as shown on the Application Form
E-mail: Customer’s email address as shown on the Application Form
Other information needed to identify the organisation: N/A
(the data exporter)
Name of the data importing organisation: Supplier as shown on the Application Form
Address:Supplier’s address as shown on the Application Form
Tel: Supplier’s telephone number as shown on the Application Form
E-mail: Supplier’s email address as shown on the Application Form
Other information needed to identify the organisation: N/A
(the data exporter)
each a ‘party’; together ‘the parties’,
HAVE AGREED on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.
Clause 1 Definitions
For the purposes of the Clauses:
- (a) ‘personal data’, ‘special categories of data’, ‘process/processing’, ‘controller’, ‘processor’, ‘data subject’ and ‘supervisory authority’ shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;
- (b) ‘the data exporter’ means the controller who transfers the personal data;
- (c) ‘the data importer’ means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country’s system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC;
- (d) ‘the sub-processor’ means any processor engaged by the data importer or by any other sub-processor of the data importer who agrees to receive from the data importer or from any other sub-processor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract;
- (e) ‘the applicable data protection law’ means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established;
- (f) ‘technical and organisational security measures’ means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.
Clause 2 Details of the transfer
The details of the transfer and in particular the special categories of personal data where applicable are specified in Appendix 1 which forms an integral part of the Clauses.
Clause 3 Third-party beneficiary clause
1. The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary.
2. The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity.
3. The data subject can enforce against the sub-processor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Such third-party liability of the subprocessor shall be limited to its own processing operations under the Clauses.
4. The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law.
Clause 4 Obligations of the data exporter
The data exporter agrees and warrants:
- (a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;
- (b) that it has instructed and throughout the duration of the personal data-processing services will instruct the data importer to process the personal data transferred only on the data exporter’s behalf and in accordance with the applicable data protection law and the Clauses; 12.2.2010 Official Journal of the European Union L 39/11 EN;
- (c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 to this contract;
- (d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;
- (e) that it will ensure compliance with the security measures;
- (f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;
- (g) to forward any notification received from the data importer or any sub-processor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;
- (h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for sub-processing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;
- (i) that, in the event of sub-processing, the processing activity is carried out in accordance with Clause 11 by a sub-processor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and
- (j) that it will ensure compliance with Clause 4(a) to (i).
Clause 5 Obligations of the data importer
The data importer agrees and warrants:
- (a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
- (b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
- (c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred;
- (d) that it will promptly notify the data exporter about: (i) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation; (ii) any accidental or unauthorised access; and (iii) any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so;
- (e) to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;
- (f) at the request of the data exporter to submit its data-processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority;
- (g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for sub-processing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;
- (h) that, in the event of sub-processing, it has previously informed the data exporter and obtained its prior written consent;
- (i) that the processing services by the sub-processor will be carried out in accordance with Clause 11;
- (j) to send promptly a copy of any sub-processor agreement it concludes under the Clauses to the data exporter.
Clause 6 Liability
1. The parties agree that any data subject who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or sub-processor is entitled to receive compensation from the data exporter for the damage suffered.
2. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his sub-processor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity. The data importer may not rely on a breach by a sub-processor of its obligations in order to avoid its own liabilities.
3. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the sub-processor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the sub-processor agrees that the data subject may issue a claim against the data sub-processor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. The liability of the sub-processor shall be limited to its own processing operations under the Clauses. 12.2.2010 Official Journal of the European Union L 39/13 EN
Clause 7 Mediation and jurisdiction
1. The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject: (a) to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority; (b) to refer the dispute to the courts in the Member State in which the data exporter is established.
2. The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law.
Clause 8 Cooperation with supervisory authorities
1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law.
2. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any sub-processor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law.
3. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any sub-processor preventing the conduct of an audit of the data importer, or any sub-processor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5(b).
Clause 9 Governing law
The Clauses shall be governed by the law of the Member State in which the data exporter is established, namely the Country specified in the Application Form.
Clause 10 Variation of the contract
The parties undertake not to vary or modify the Clauses. This does not preclude the parties from adding clauses on business related issues where required as long as they do not contradict the Clause.
Clause 11 Sub-processing
1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Where the data importer subcontracts its obligations under the Clauses, with the consent of the data exporter, it shall do so only by way of a written agreement with the sub-processor which imposes the same obligations on the sub-processor as are imposed on the data importer under the Clauses. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor’s obligations under such agreement.
2. The prior written contract between the data importer and the sub-processor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Such third-party liability of the sub-processor shall be limited to its own processing operations under the Clauses.
3. The provisions relating to data protection aspects for sub-processing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established, namely the Country specified in the Application Form.
4. The data exporter shall keep a list of sub-processing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5(j), which shall be updated at least once a year. The list shall be available to the data exporter’s data protection supervisory authority.
Clause 12 Obligation after the termination of personal data-processing services
1. The parties agree that on the termination of the provision of data-processing services, the data importer and the sub-processor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In that case, the data importer warrants that it will guarantee the confidentiality of the personal data transferred and will not actively process the personal data transferred anymore.
2. The data importer and the sub-processor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data-processing facilities for an audit of the measures referred to in paragraph 1.
Appendix 1 to the Standard Contractual Clauses
This Appendix forms part of the Clauses and must be completed and signed by the parties
The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix
Data exporter: The data exporter is a customer of the data importer, who wishes to use the data importer’s telecommunications services to send electronic messages to individuals within the European Economic Area.
Data importer: The data importer, who is specified in the Application Form, is a telecommunications service provider that processes certain personal data provided to it by its customers in order to provide electronic messaging services to those customers.
Data subjects The personal data transferred concerns the following categories of data subjects:
Customers, employees and other end users of the data exporter. As the data exporter has full control over the personal data which is being transferred to the data importer, and the data importer will receive any personal data that the data exporter transfers, the data exporter has sole control over the specific data subjects.
Categories of data:
As the data exporter has full control over the personal data which is being transferred to the data importer, and the data importer will receive any personal data that the data exporter transfers, the data exporter necessarily has sole control over the specific categories of data. Categories may include name, telephone numbers and email addresses.
Special categories of data (if appropriate)
The personal data transferred concern the following special categories of data (please specify):
As the data exporter has full control over the personal data which is being transferred to the data importer, and the data importer will receive any personal data that the data exporter transfers, the data exporter necessarily has sole control over any special specific categories of data which may be transferred to and processed by the data importer.
Processing operations: The personal data transferred will be subject to the following basic processing activities: Submission to telecommunication providers for delivery; storage; access for customer service, email and messaging abuse detection, prevention, and remediation; monitoring, maintaining and improving the data importers services.
Appendix 2 to the Standard Contractual Clauses
This Appendix forms part of the Clauses and must be completed and signed by the parties.
Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):
The data importer’s security measures include, but are not limited to:
- Customers interact with and transmit messages over a secure (encrypted) TLS/SSL connection
- Services interact and transmit to carriers over a secure (encrypted) TLS connections and/or VPN tunnels
- Firewalls protecting the data importer’s production network and servers.
- Non-public access to production network and servers is also protected by a secure VPN connection
- Services are hosted in secure Tier-1 datacentres protecting physical servers and devices.
- Strict protocols and controls governing authorisation and access to the data importer’s servers and devices.
- Audits by security experts, including penetration testing.