- FREE TRIAL
- PURCHASED SERVICES
- USE OF THE SERVICES
- NON-CREWHU PROVIDERS
- FEES AND PAYMENT FOR PURCHASED SERVICES
- PROPRIETARY RIGHTS
- WARRANTIES AND DISCLAIMERS
- MUTUAL INDEMNIFICATION
- LIMITATION OF LIABILITY
- TERM AND TERMINATION
- NOTICES, GOVERNING LAW AND JURISDICTION
- GENERAL PROVISIONS
- Data Processor Addendum – GDPR
- PROCESSING OF PERSONAL DATA
- OUR OBLIGATIONS
- REMUNERATION AND COSTS
- LIMITATION OF LIABILITY AND INDEMNIFICATION
- Appendix A - PERSONAL DATA AND CATEGORIES OF DATA SUBJECTS
- Appendix B - APPROVED SUB-PROCESSORS
Master Subscription Agreement
THIS MASTER SUBSCRIPTION AGREEMENT (THIS “AGREEMENT”) GOVERNS YOUR ACQUISITION AND USE OF SERVICES OF CREWHU, LLC (“WE,” “OUR,” AND “US”). IF YOU REGISTER FOR AN EARLY ADOPTER TRIAL OR FREE TRIAL OF OUR SERVICES, THIS AGREEMENT WILL ALSO GOVERN THAT EARLY ADOPTER TRIAL OR FREE TRIAL.
BY ACCEPTING THIS AGREEMENT, EITHER BY CLICKING A BOX INDICATING YOUR ACCEPTANCE, OR BY SUBMITTING OR EXECUTING AN ORDER FORM THAT REFERENCES THIS AGREEMENT, YOU AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY AND ITS AFFILIATES TO THESE TERMS AND CONDITIONS, IN WHICH CASE THE TERMS “YOU” OR “YOUR” SHALL REFER TO SUCH ENTITY AND ITS AFFILIATES. IF YOU DO NOT HAVE SUCH AUTHORITY, OR IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS, YOU MUST NOT ACCEPT THIS AGREEMENT AND MAY NOT USE THE SERVICES.
You may not access the Services if You are Our direct competitor, except with written disclosure to that effect and Our prior express written consent. In addition, You may not access the Services for purposes of monitoring their availability, performance or functionality, or for any other benchmarking or competitive purposes.
This Agreement was last updated on May 31, 2013. It is effective between You and Us as of the date of You accepting this Agreement.
“Affiliate” means any entity which directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control,” for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
“Order Form” means the documents or webpages for subscribing for Services hereunder (in substantially the form attached hereto), including addenda thereto, that are entered into between You or any of Your Affiliates and Us from time to time, including addenda and supplements thereto. By entering into an Order Form hereunder, Your Affiliate agrees to be bound by the terms of this Agreement as if it were an original party hereto. Order Forms shall be deemed incorporated herein by reference.
“Purchased Services” means Services that You or Your Affiliates purchase under an Order Form, as distinguished from those provided pursuant to the offered subscription packages.
“Services” means the products and services that are ordered by You under the website subscription packages or an Order Form and made available by Us online via the customer login link at and/or other web pages designated by Us, including any associated offline components. “Services” exclude Non-CrewHu Applications.
“User Guide” means the online terms and conditions for the Services, accessible via login at https://www.crewhu.com as updated from time to time. You acknowledge that You have had the opportunity to review the User Guide.
“Users” means individuals who are authorized by You to use the Services, for whom subscriptions to a Service have been ordered, and who have been supplied user identifications and passwords by You (or by Us at Your request). Users may include but are not limited to Your employees, consultants, contractors and agents.
“You” or “Your” means the company or other legal entity for which you are accepting this Agreement, and Affiliates of that company or entity.
“Your Data” means all electronic data or information submitted by You to the Services.
2. FREE TRIAL
If You register on our website or otherwise for a free trial We will make the Services available to You until the end of the free trial period.
ANY DATA YOU ENTER INTO THE SERVICES, AND ANY CUSTOMIZATIONS MADE TO THE SERVICES BY OR FOR YOU, DURING YOUR FREE TRIAL MAY BE PERMANENTLY LOST UNLESS YOU PURCHASE A SUBSCRIPTION TO THE SAME SERVICES AS THOSE COVERED BY THE TRIAL, OR EXPORT SUCH DATA, BEFORE THE END OF THE TRIAL PERIOD.
NOTWITHSTANDING SECTION 9 (WARRANTIES AND DISCLAIMERS), DURING THE FREE TRIAL THE SERVICES ARE PROVIDED “AS-IS” WITHOUT ANY WARRANTY.
In exchange for the services offered in connection with the free trial period, You agree that We shall be permitted to use Your name and the results achieved using the Services in case studies and promotional advertising and We shall be permitted to disclose data about Your use of the Services to our service providers for the purpose of helping us improve our users’ experience with the Services, or as required by law.
3. PURCHASED SERVICES
3.1. Provision of Purchased Services. We shall make the Purchased Services available to You pursuant to this Agreement and the relevant Order Forms. You agree that Your purchases hereunder are neither contingent on the delivery of any future functionality or features nor dependent on any oral or written public comments made by Us regarding future functionality or features.
3.2. User. Unless otherwise specified in the applicable Order Form, (i) Services are purchased by Users and Users may be accessed by or for no more than one unique User at a time, and (ii) additional Users may be added at any time at the then-current pricing. User Slots are for one unique User at a time and cannot be shared or used by more than one unique User at a time, but might be reassigned to new Users replacing former Users who no longer require ongoing use of the Services.
4. USE OF THE SERVICES
4.1. Our Responsibilities. We shall: (i) provide Our most current and updated products and services to you for the Purchased Services to You at no additional charge, (ii) use commercially reasonable efforts to make the Purchased Services available 24 hours a day, 7 days a week, except for: (a) planned downtime (of which We shall give at least 8 hours notice via Our website or in another manner we deem reasonable and which We shall schedule to the extent practicable during non-business hours, or (b) any unavailability caused by circumstances beyond Our reasonable control, including without limitation, acts of God, acts of government, floods, fires, earthquakes, civil unrest, acts of terror, strikes or other labor problems (other than those involving Our employees), Internet service provider failures or delays, or denial of service attacks, and (iii) provide the Purchased Services only in accordance with applicable laws and government regulations.
4.2. Our Protection of Your Data. We shall maintain appropriate administrative, physical, and technical safeguards for protection of the security, confidentiality and integrity of Your Data. We shall not (a) modify Your Data, (b) disclose Your Data except as compelled by law in accordance with Section 8.3 (Compelled Disclosure) or as expressly permitted in writing by You, or (c) access Your Data except to provide the Services and prevent or address service or technical problems, or at Your request in connection with customer support matters.
4.3. Your Responsibilities. You shall (i) be responsible for Users’ compliance with this Agreement, (ii) be responsible for the accuracy, quality and legality of Your Data and of the means by which You acquired Your Data, (iii) use commercially reasonable efforts to prevent unauthorized access to or use of the Services, and notify Us promptly of any such unauthorized access or use, and (iv) use the Services only in accordance with the User Guide and applicable laws and government regulations. You shall not (a) make the Services available to anyone other than Users, (b) sell, resell, rent or lease the Services, (c) use the Services to store or transmit infringing, libellous, or otherwise unlawful or tortious material, or to store or transmit material in violation of third-party privacy rights, (d) interfere with or disrupt the integrity or performance of the Services or third-party data contained therein, or (e) attempt to gain unauthorized access to the Services or their related systems or networks.
5. NON-CREWHU PROVIDERS
5.1. Acquisition of Non-CrewHu Products and Services. We or third parties may from time to time make available to You third-party products or services, including but not limited to Non-CrewHu Applications and implementation, customization and other services. Any acquisition by You of such non-CrewHu products or services, and any exchange of data between You and any non-CrewHu provider, is solely between You and the applicable non-CrewHu provider. We do not warrant or support non-CrewHu products or services, whether or not they are designated by Us as “certified” or otherwise. Subject to Section 5.3 (Integration with Non-CrewHu Services), no purchase of non-CrewHu products or services is required to use the Services except a supported computing device, operating system, web browser and Internet connection.
5.2. Non-CrewHu Applications and Your Data. If You install or enable Non-CrewHu Applications for use with Services, You acknowledge that We may allow providers of those Non-CrewHu Applications to access Your Data as required for the interoperation of such Non-CrewHu Applications with the Services. We shall not be responsible for any disclosure, modification or deletion of Your Data resulting from any such access by Non-CrewHu Application providers. The Services shall allow You to restrict such access by restricting Users from installing or enabling such Non-CrewHu Applications for use with the Services.
5.3. Integration with Non-CrewHu Services. The Services may contain features designed to interoperate with Non-CrewHu Applications (e.g., Facebook or Twitter applications). To use such features, You may be required to obtain access to such Non-CrewHu Applications from their providers. If the provider of any such Non-CrewHu Application ceases to make the Non-CrewHu Application available for interoperation with the corresponding Service features on reasonable terms, We may cease providing such Service features without entitling You to any refund, credit, or other compensation.
6. FEES AND PAYMENT FOR PURCHASED SERVICES
6.1. Fees. You shall pay all fees specified in all Order Forms hereunder. Except as otherwise specified herein or in an Order Form, (i) fees are based on the number of Users subscribed for and not actual usage, (ii) payment obligations are non-cancelable and fees paid are non-refundable, (iii) the number of Uses will be determined by the maximum active users in the prior period, therefore, fees for Users added in the middle of a monthly period will be charged for that full monthly period., and (iv) the number of Users may be increased by You at any time.
6.2. Invoicing and Payment. You will provide Us with valid and updated credit card information. If You provide credit card information to Us, You authorize Us to charge such credit card for the maximum number of active users in the prior period. Users for the first billing month are determined by the maximum number of active users in the free trial period. Such charges shall be made in advance, either monthly or in accordance with any different billing frequency stated in the applicable Order Form. You are responsible for providing complete and accurate billing and contact information to Us and notifying Us of any changes to such information.
6.3. Overdue Charges. If any fees for Services are not received from You by the due date, then at Our discretion, such fees may accrue late interest at the rate of 1.5% of the outstanding balance per month, or the maximum rate permitted by law, whichever is lower, from the date such payment was due until the date paid.
6.4. Suspension of Service and Acceleration. If any amount owing by You under this or any other agreement for Our Services is 7 or more days overdue, We may, without limiting Our other rights and remedies, accelerate Your unpaid fee obligations under such agreements so that all such obligations become immediately due and payable, and suspend Our services to You until such amounts are paid in full. We will give You at least 7 days’ prior notice that Your account is overdue, in accordance with Section 13.2 (Manner of Giving Notice), before suspending services to You.
6.5. Payment Disputes. We shall not exercise Our rights under Section 6.3 (Overdue Charges) or 6.4 (Suspension of Service and Acceleration) if You are disputing the applicable charges reasonably and in good faith and are cooperating diligently to resolve the dispute.
6.6. Taxes. Unless otherwise stated, Our fees do not include any taxes, levies, duties or similar governmental assessments of any nature, including but not limited to value-added, sales, use or withholding taxes, assessable by any local, state, provincial, federal or foreign jurisdiction (collectively, “Taxes”). You are responsible for paying all Taxes associated with Your purchases hereunder. If We have the legal obligation to pay or collect Taxes for which You are responsible under this paragraph, the appropriate amount shall be invoiced to and paid by You, unless You provide Us with a valid tax exemption certificate authorized by the appropriate taxing authority. For clarity, We are solely responsible for taxes assessable against Us based on Our income, property and employees.
7. PROPRIETARY RIGHTS
7.1. Reservation of Rights in Services. Subject to the limited rights expressly granted hereunder, We reserve all rights, title and interest in and to the Services, including all related intellectual property rights. No rights are granted to You hereunder other than as expressly set forth herein.
7.2. Restrictions. You shall not (i) permit any third party to access the Services except as permitted herein, (ii) create derivate works based on the Services except as authorized herein, (iii) copy, frame or mirror any part or content of the Services, other than copying or framing on Your own intranets or otherwise for Your own internal business purposes, (iv) reverse engineer the Services, or (v) access the Services in order to (a) build a competitive product or service, or (b) copy any features, functions or graphics of the Services.
7.3. Your Data. Subject to the limited rights granted by You hereunder, We acquire no right, title or interest from You or Your licensors under this Agreement in or to Your Data, including any intellectual property rights therein.
7.5. Suggestions. We shall have a royalty-free, worldwide, irrevocable, perpetual license to use and incorporate into the Services any suggestions, enhancement requests, recommendations or other feedback provided by You, including Users, relating to the operation of the Services.
8.1. Definition of Confidential Information. As used herein, “Confidential Information” means all confidential information disclosed by a party (“Disclosing Party”) to the other party (“Receiving Party”), whether orally or in writing, that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Your Confidential Information shall include Your Data; Our Confidential Information shall include the Services; and Confidential Information of each party shall include the terms and conditions of this Agreement and all Order Forms, as well as business and marketing plans, technology and technical information, product plans and designs, and business processes disclosed by such party. However, Confidential Information shall not include any information that (i) is or becomes generally known to the public without breach of any obligation owed to the Disclosing Party, (ii) was known to the Receiving Party prior to its disclosure by the Disclosing Party without breach of any obligation owed to the Disclosing Party, (iii) is received from a third party without breach of any obligation owed to the Disclosing Party, or (iv) was independently developed by the Receiving Party as evidenced by tangible data.
8.2. Protection of Confidential Information. The Receiving Party shall use the same degree of care that it uses to protect the confidentiality of its own confidential information of like kind (but in no event less than reasonable care) (i) not to use any Confidential Information of the Disclosing Party for any purpose outside the scope of this Agreement, and (ii) except as otherwise authorized by the Disclosing Party in writing, to limit access to Confidential Information of the Disclosing Party to those of its and its Affiliates’ employees, contractors and agents who need such access for purposes consistent with this Agreement and who have signed confidentiality agreements with the Receiving Party containing protections no less stringent than those contained herein. Neither party shall disclose the terms of this Agreement or any Order Form to any third party other than its Affiliates and their legal counsel and accountants without the other party’s prior written consent.
8.3. Compelled Disclosure. The Receiving Party may disclose Confidential Information of the Disclosing Party if it is compelled by law to do so, provided the Receiving Party gives the Disclosing Party prior notice of such compelled disclosure (to the extent legally permitted) and reasonable assistance, at the Disclosing Party’s cost, if the Disclosing Party wishes to contest the disclosure. If the Receiving Party is compelled by law to disclose the Disclosing Party’s Confidential Information as part of a civil proceeding to which the Disclosing Party is a party, and the Disclosing Party is not contesting the disclosure, the Disclosing Party will reimburse the Receiving Party for its reasonable cost of compiling and providing secure access to such Confidential Information.
9. WARRANTIES AND DISCLAIMERS
9.1. Our Warranties. We warrant that (i) We have validly entered into this Agreement and have the legal power to do so, (ii) the Services shall perform materially in accordance with the intended use, and (iii) subject to Section 5.3 (Integration with Non-CrewHu Services), the functionality of the Services will not be materially decreased. For any breach of a warranty above, Your exclusive remedy shall be as provided in Section 12.3 (Termination for Cause) and Section 12.4 (Refund or Payment upon Termination) below.
9.2. Your Warranties. You warrant that You have validly entered into this Agreement and have the legal power to do so.
9.3. Disclaimer. EXCEPT AS EXPRESSLY PROVIDED HEREIN, NEITHER PARTY MAKES ANY WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, AND EACH PARTY SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING ANY WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW.
9.4. Non-GA Services. From time to time We may invite You to try, at no charge, Our products or services that are not generally available to Our customers (“Non-GA Services”). You may accept or decline any such trial in Your sole discretion. Any Non-GA Services will be clearly designated as beta, pilot, limited release, developer preview, non-production or by a description of similar import. Non-GA Services are provided for evaluation purposes and not for production use, are not supported, may contain bugs or errors, and may be subject to additional terms. NON-GA SERVICES ARE NOT CONSIDERED “SERVICES” HEREUNDER AND ARE PROVIDED “AS IS” WITH NO EXPRESS OR IMPLIED WARRANTY. We may discontinue Non-GA Services at any time in Our sole discretion and may never make them generally available.
10. MUTUAL INDEMNIFICATION
10.1. Indemnification by Us. We shall defend You against any claim, demand, suit, or proceeding made or brought against You by a third party alleging that the use of the Services as permitted hereunder infringes or misappropriates the intellectual property rights of a third party (a “Claim Against You”), and shall indemnify You for any damages, attorney fees and costs finally awarded against You as a result of, and for amounts paid by You under a court-approved settlement of, a Claim Against You; provided that You (a) promptly give Us written notice of the Claim Against You; (b) give Us sole control of the defense and settlement of the Claim Against You (provided that We may not settle any Claim Against You unless the settlement unconditionally releases You of all liability); and (c) provide to Us all reasonable assistance, at Our expense. In the event of a Claim Against You, or if We reasonably believe the Services may infringe or misappropriate, We may in Our discretion and at no cost to You (i) modify the Services so that they no longer infringe or misappropriate, without breaching Our warranties under “Our Warranties” above, (ii) obtain a license for Your continued use of the Services in accordance with this Agreement, or (iii) terminate Your User subscriptions for such Services upon 30 days’ written notice and refund to You any prepaid fees covering unused User Slots.
10.2. Indemnification by You. You shall defend Us against any claim, demand, suit or proceeding made or brought against Us by a third party alleging that Your Data, or Your use of the Services in breach of this Agreement, infringes or misappropriate the intellectual property rights of a third party or violates applicable law (a “Claim Against Us”), and shall indemnify Us for any damages, attorney fees and costs finally awarded against Us as a result of, or for any amounts paid by Us under a court-approved settlement of, a Claim Against Us; provided that We (a) promptly give You written notice of the Claim Against Us; (b) give You sole control of the defence and settlement of the Claim Against Us (provided that You may not settle any Claim Against Us unless the settlement unconditionally releases Us of all liability); and (c) provide to You all reasonable assistance, at Your expense.
10.3. Exclusive Remedy. This Section 10 (Mutual Indemnification) states the indemnifying party’s sole liability to, and the indemnified party’s exclusive remedy against, the other party for any type of claim described in this Section.
11. LIMITATION OF LIABILITY
11.1. Limitation of Liability. NEITHER PARTY’S LIABILITY WITH RESPECT TO ANY SINGLE INCIDENT ARISING OUT OF OR RELATED TO THIS AGREEMENT (WHETHER IN CONTRACT OR TORT OR UNDER ANY OTHER THEORY OF LIABILITY) SHALL EXCEED THE LESSER OF $10,000 OR THE AMOUNT PAID BY YOU HEREUNDER IN THE 12 MONTHS PRECEDING THE INCIDENT, PROVIDED THAT IN NO EVENT SHALL EITHER PARTY’S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT (WHETHER IN CONTRACT OR TORT OR UNDER ANY OTHER THEORY OF LIABILITY) EXCEED THE TOTAL AMOUNT PAID BY YOU HEREUNDER. THE FOREGOING SHALL NOT LIMIT YOUR PAYMENT OBLIGATIONS UNDER SECTION 6 (FEES AND PAYMENT FOR PURCHASED SERVICES).
11.2. Exclusion of Consequential and Related Damages. IN NO EVENT SHALL EITHER PARTY HAVE ANY LIABILITY TO THE OTHER PARTY FOR ANY LOST PROFITS OR REVENUES OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, COVER OR PUNITIVE DAMAGES HOWEVER CAUSED, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, AND WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE FOREGOING DISCLAIMER SHALL NOT APPLY TO THE EXTENT PROHIBITED BY APPLICABLE LAW.
12. TERM AND TERMINATION
12.1. Term of Agreement. This Agreement commences on the date You accept it and continues until it has been terminated
12.2. Term of Purchased Users. Users purchased by You commence on the start date specified in the applicable Order Form and continue until the agreement has been terminated. All subscriptions shall automatically renew for the number of maximum active users from the previous month or other period determined by order form, unless either party gives the other notice of non-renewal at least 30 days prior to replenishment. The User pricing shall be the same as that for the prior Users unless We have given You written notice of a pricing increase at least 30 days before the replenishment.
12.3. Termination for Cause. A party may terminate this Agreement for cause: (i) upon 30 days written notice to the other party of a material breach if such breach remains uncured at the expiration of such period, or (ii) if the other party becomes the subject of a petition in bankruptcy or any other proceeding relating to insolvency, receivership, liquidation or assignment for the benefit of creditors.
12.4. Refund or Payment upon Termination. Upon any termination for cause by You, We shall refund You any prepaid fees covering Users. In no event shall any termination relieve You of the obligation to pay any fees payable to Us for Users prior to the effective date of termination.
12.5. Return of Your Data. Upon request by You made within 30 days after the effective date of termination of a Purchased Services subscription, We will make available to You for download a file of Your Data. After such 30-day period, We shall have no obligation to maintain or provide any of Your Data and may thereafter, unless legally prohibited, delete all of Your Data in Our systems or otherwise in Our possession or under Our control.
12.6. Surviving Provisions. Section 6 (Fees and Payment for Purchased Services), 7 (Proprietary Rights), 8 (Confidentiality), 9.3 (Disclaimer), 10 (Mutual Indemnification), 11 (Limitation of Liability), 12.4 (Refund or Payment upon Termination), 12.5 (Return of Your Data), 13 (Notices, Governing Law and Jurisdiction) and 14 (General Provisions) shall survive any termination or expiration of this Agreement.
13. NOTICES, GOVERNING LAW AND JURISDICTION
13.1. Manner of Giving Notice. Except as otherwise specified in this Agreement, all notices, permissions and approvals hereunder shall be in writing and shall be deemed to have been given upon: (i) personal delivery, (ii) the second business day after mailing, (iii) the second business day after sending by confirmed facsimile, or (iv) the first business day after sending by email (provided email shall not be sufficient for notices of termination or an indemnifiable claim). Billing-related notices to You shall be addressed to the relevant billing contact designated by You. All other notices to You shall be addressed to the relevant Services system administrator designated by You.
13.2. Agreement to Governing Law and Jurisdiction. Each party agrees that this agreement shall be governed by the laws of the State of Florida without regard to choice or conflicts of law rules, and consents to the exclusive jurisdiction of the state and federal courts located in Miami-Dade County, Florida for any action or litigation in any way arising out of or related to this Agreement.
13.4. Waiver of Jury Trial. Each party hereby waives any right to jury trial in connection with any action or litigation in any way arising out of or related to this Agreement.
14. GENERAL PROVISIONS
14.1. Relationship of the Parties. This Agreement does not create a partnership, franchise, joint venture, agency, fiduciary or employment relationship between the parties.
14.2. No Third-Party Beneficiaries. There are no third-party beneficiaries to this Agreement.
14.3. Waiver. No failure or delay by either party in exercising any right under this Agreement shall constitute a waiver of that right.
14.4. Severability. If any provision of this Agreement is held by a court of competent jurisdiction to be contrary to law, the provision shall be modified by the court and interpreted so as best to accomplish the objectives of the original provision to the fullest extent permitted by law, and the remaining provisions of this Agreement shall remain in effect.
14.5. Attorney Fees. You shall pay on demand all of Our reasonable attorney fees and other costs incurred by Us to collect any fees or charges due Us under this Agreement following Your breach of Section 6.2 (Invoicing and Payment).
14.6. Assignment. Neither party may assign any of its rights or obligations hereunder, whether by operation of law or otherwise, without the prior written consent of the other party (not to be unreasonably withheld). Notwithstanding the foregoing, either party may assign this Agreement in its entirety (including all Order Forms), without consent of the other party, to its Affiliate or in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets not involving a direct competitor of the other party. A party’s sole remedy for any purported assignment by the other party in breach of this paragraph shall be, at the non-assigning party’s election, termination of this Agreement upon written notice to the assigning party. In the event of such a termination, We shall refund to You any prepaid fees covering unused User Slots. Subject to the foregoing, this Agreement shall bind and inure to the benefit of the parties, their respective successors and permitted assigns.
14.7. Entire Agreement. This Agreement, including all exhibits and addenda hereto and all Order Forms, constitutes the entire agreement between the parties and supersedes all prior and contemporaneous agreements, proposals or representations, written or oral, concerning its subject matter. No modification, amendment, or waiver of any provision of this Agreement shall be effective unless in writing and either signed or accepted electronically by the party against whom the modification, amendment or waiver is to be asserted. However, to the extent of any conflict or inconsistency between the provisions in the body of this Agreement and any exhibit or addendum hereto or any Order Form, the terms of such exhibit, addendum or Order Form shall prevail. Notwithstanding any language to the contrary therein, no terms or conditions stated in Your purchase order or other order documentation (excluding Order Forms) shall be incorporated into or form any part of this Agreement, and all such terms or conditions shall be null and void.
Data Processor Addendum – GDPR
(Effective May 25, 2018)
This Data Processor Addendum - GDPR (this “Addendum”) forms part of the Master Subscription Agreement (the “Agreement”) between CREWHU, LLC (“CrewHu,” “we,” “our,” and “us”) and our customers (“you” or “your”) with respect to the collection, processing and destruction of personal data of certain Users obtained by us in connection with our Services and protected by GDPR. Capitalized terms used herein and not otherwise defined, shall have the meanings set forth in the Agreement.
We agree to comply with the European Union General Data Protection Regulation, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
3. PROCESSING OF PERSONAL DATA
3.1 In connection with our delivery of Services to you, we will process certain categories and types of your, your employees’, and your customers’ personal data on your behalf.
3.2 “Personal Data” includes “any information relating to an identified or identifiable natural person” as set forth in GDPR, article 4(1)(1) (the “Personal Data”). The categories and types of Personal Data processed by us on your behalf are listed in Appendix A. We only perform processing activities that are necessary and relevant to perform the Services. The parties shall update Appendix A whenever changes occur that necessitates an update.
3.3 We shall have and maintain a register of processing activities in accordance with GDPR, article 32 (2).
4.1 We may only act and process the Personal Data in accordance with the documented instruction from you (the “Instruction”). The Instruction at the time of entering into this Addendum is that we may only process the Personal Data for purposes of delivering the Services in accordance with the Agreement.
4.2 You warrant, represent, and guarantee that the Personal Data transferred to us is collected and processed by you in accordance with applicable law, including GDPR and the legislative requirements in respect to consent and lawfulness of the processing.
4.3 We will give you notice without undue delay if we consider the Instruction to be in conflict with GDPR.
5. OUR OBLIGATIONS
5.1.1. We shall treat all the Personal Data as strictly confidential information. The Personal Data may not be copied, transferred or otherwise processed in conflict with the Instruction unless otherwise agreed to in writing by you.
5.1.2. We shall not share, sell, rent, or lease the Personal Data to third parties, government agencies, or company at any time unless compelled to do so by law.
5.1.3. Our employees are required to treat all the Personal Data under this Addendum with strict confidentiality.
5.2 We shall implement the appropriate technical and organizational measures as set out in this Addendum and in accordance with GDPR, article 32. These include:
5.2.1. SSL with 256-bit encryption
5.2.2. Fully secured server infrastructure, with dedicated servers, automated backups, and routinely updated security patches
5.2.3. Privacy Shield standards for Data Transfers via Amazon Web Services.
5.3 We shall ensure that access to the Personal Data is restricted to only the employees to whom it is necessary and relevant to process the Personal Data in order for us to perform our obligations under the Agreement and this Addendum.
5.4 We shall also ensure that our employees only process the Personal Data in accordance with the Instruction.
5.5 If our assistance is necessary and relevant, we shall assist you in preparing data protection impact assessments in accordance with GDPR, article 35, along with any prior consultation in accordance with GDPR, article 36.
5.6 Rights of Data Subjects
5.6.1 If you receive a request from a data subject for the exercise of the data subject’s rights under GDPR and the correct and legitimate reply to such a request necessitates our assistance, we shall assist you by providing the necessary information and documentation. We shall be given 30 days to assist you with such requests in accordance with GDPR and/or applicable law.
5.6.2 If we receive a request from a data subject for the exercise of the data subject’s rights under GDPR and such request is related to your Personal Data, we must immediately forward the request to you and must refrain from responding to the person directly.
5.7 Personal Data Breaches
5.7.1 We shall give you notice without undue delay and no later than 72 hours if a breach of the data security occurs, that can lead to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to, personal data transmitted, stored or otherwise processed regarding the Personal Data processed on your behalf (a “Personal Data Breach”).
5.7.2 We shall have and maintain a register of all Personal Data Breaches. The register shall at a minimum include the following:
- A description of the nature of the Personal Data Breach, including, if possible, the categories and the approximate number of affected Data Subjects and the categories and the approximate number of affected registrations of personal data.
- A description of the likely as well as actually occurred consequences of the Personal Data Breach.
- A description of the measures that we have taken or propose to take to address the Personal Data Breach, including, where appropriate, measures taken to mitigate its adverse effects.
5.7.3 The register of Personal Data Breaches shall be provided to you in copy if so requested in writing by you or the relevant Data Protection Authority.
5.8 Documentation of Compliance
5.8.1 After your written request, we shall provide documentation substantiating that:
- We comply with our obligations under this Addendum and the instruction; and
- We comply with the GDPR in respect to the processing of your Personal Data.
5.8.2 Our documentation of compliance shall be provided within reasonable time following your written request.
5.9 Location of Personal Data
5.9.1 Personal Data is processed by us on our Amazon Web Services (AWS) based Infrastructure.
5.9.2 Any transfers of the Personal Data to any third countries or international organizations shall only be done to the extent such transfer is permitted and done in accordance with GDPR.
6.1 We are given general authorization to engage third-parties to process the Personal Data (“Sub-Processors”) without obtaining any further written, specific authorization from you, provided that we notify you in writing about the identity of a potential Sub-Processor (and its processors, if any) before any agreements are made with the relevant Sub-Processors and before the relevant Sub-Processor processes any of the Personal Data. If you wish to object to the relevant Sub-Processor, you shall give notice hereof in writing within seven (7) calendar days from receiving the notification from us. Absence of any objections from you shall be deemed a consent to the relevant Sub-Processor.
6.2 We shall conclude a written sub-processor agreement with any Sub-Processors. Such an agreement shall at a minimum provide the same data protection obligations as the ones applicable to us, including the obligations under this Addendum. We shall on an ongoing basis monitor and verify our Sub-Processors’ compliance with GDPR. Documentation of such monitoring and control shall be provided to you if so requested in writing.
6.3 We are accountable to you for any Sub-Processor in the same way as for our own actions and omissions.
6.4 At the time of entering into this Addendum, we are using the Sub-Processors listed in Appendix B. If we initiate sub-processing with a new Sub-Processor, such new Sub-Processor shall be added to the list in Appendix B.
7. REMUNERATION AND COSTS
7.1 You shall remunerate us based on time spent to perform the obligations under section 5.5, 5.6, 5.7 and 5.8 of this Addendum based on our hourly rates.
7.2 We are also entitled to remuneration for any time and material used to adapt and change the processing activities in order to comply with any changes to your Instruction, including implementation costs and additional costs required to deliver the Services due to the change in the Instruction. we are exempted from liability for non-performance with the Agreement if the performance of the obligations under the Agreement would be in conflict with any changed Instruction or if contractual delivery in accordance with the changed Instruction is impossible. This could, for instance, be the case; (i) if the changes to the Instruction cannot technically, practically or legally be implemented; (ii) where you explicitly require that the changes to the Instruction shall be applicable before the changes can be implemented; and (iii) in the period of time until the Agreement is changed to reflect the new Instruction and commercial terms hereof.
7.3 If changes to GDPR, including new guidance or court rulings, result in additional costs to us, you shall indemnify us for such additional costs.
8. LIMITATION OF LIABILITY AND INDEMNIFICATION
8.1 Except with respect to your indemnification obligations under Section 8.2 below, the limitation of liability provisions of the Agreement are applicable to any and all claims and damages arising under this Addendum.
8.2 You shall be responsible for any breach of this Addendum, including without limitation, your obligation to comply with GDPR, and shall indemnify and hold us harmless from and against any and all liabilities, claims, causes of action, costs and expenses (including attorneys’ fees and expenses) arising out of the breach of this Addendum and/or any failure to comply with GDPR, by you or your representatives.
The Addendum shall remain in force until the Agreement is terminated.
10.1 Our authorization to process Personal Data on your behalf shall terminate upon the termination of this Addendum or the Agreement, whichever is earlier. Notwithstanding the foregoing, we may continue processing the Personal Data for up to three (3) months after the termination of the Addendum or the Agreement to the extent necessary to comply with GDPR or applicable law and doing so shall be deemed permitted under the Instruction. During such period, we are authorized to include the Personal Data in our backup.
10.2 Following the termination of this Addendum and upon your written request, we and our Sub-Processors shall return the Personal Data processed under this Addendum to you, provided that you are not already in possession of the Personal Data. We agree to anonymize or delete all the Personal Data and provide you documentation for such anonymization or deletion within a reasonable time following such termination and upon your written request.
PERSONAL DATA AND CATEGORIES OF DATA SUBJECTS
We process the following types of Personal Data about the following categories of data subjects on your behalf in connection with our delivery of Services:
- Registration Data: When registering on our service companies will provide information (such as, company name, individual name, company address, work phone number, mobile phone number and email
- Employee Data: For our clients’ employees to use the program companies will be required to provide their first name, last name and email. Optional information collected includes employee birthday (month/day) and hire date.
- Customer Data: When using our Customer Satisfaction module, we collect customer company name, customer contact name, phone number, email, and customer feedback either through integration or through manual input.
- Personal data provided by the users in connection with their use of the Services (these personal data are not seen or accessed by us unless we after the request hereof from you assist with support and bug fixing).
The following Sub-Processors shall be considered approved by you at the time of entering into this Addendum:
- Hosting supplier: Amazon web Services
- MLAB – Database servers
- Stripe- payment processors
- Hubspot – CRM
- Mailgun – email provider