{"id":12598,"date":"2026-03-31T12:51:43","date_gmt":"2026-03-31T12:51:43","guid":{"rendered":"https:\/\/nwvbjzy.cluster100.hosting.ovh.net\/?page_id=12598"},"modified":"2026-03-31T13:12:48","modified_gmt":"2026-03-31T13:12:48","slug":"annexe-1","status":"publish","type":"page","link":"https:\/\/www.soft-concept.com\/en\/annexe-1\/","title":{"rendered":"Appendix 1"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"12598\" class=\"elementor elementor-12598\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3d6eddd2 e-flex e-con-boxed animejs-disable e-con e-parent\" data-id=\"3d6eddd2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3b1c3a49 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"3b1c3a49\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <h1 class=\"title tg-element-title mb-0\">APPENDIX 1 <br>\nPERSONAL DATA PROCESSING AGREEMENT  <\/h1>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3bd71a6f e-con-full e-flex animejs-disable e-con e-child\" data-id=\"3bd71a6f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-333bfb97 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"333bfb97\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">Within the framework of their contractual relationship, the parties undertake to comply with their obligations under the applicable regulations governing the processing of personal data and, in particular, Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 applicable from 25 May 2018 (hereinafter, &quot;<b>the European regulation on data protection<\/b>&quot; Or &quot;\u00bb<b>GDPR<\/b>&quot;) and under the Contract and in particular this appendix. The responsibilities of each party are detailed below. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5a931f2 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"5a931f2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\"><b>Processing of Personal Data by the Service Provider acting as a subcontractor for the Client<\/b> <br>\n\nThe Provider (hereinafter, the &quot;subcontractor&quot;) is authorized to process on behalf of the Client (hereinafter the &quot;data controller&quot;) the Personal Data necessary to provide the Services and Optional Services, in accordance with the details provided below. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f987086 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"f987086\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <h2 class=\"title tg-element-title mb-0\">1.1. Description of the processing subject to subcontracting <\/h2>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1e5e98e1 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"1e5e98e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The persons concerned are: survey respondents, the Client&#039;s customers and prospects, authorized users of the platform, as well as, where applicable, the Client&#039;s employees, partners or representatives whose data is collected in the context of the use of the Services. \n<\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-574523e4 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"574523e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The Personal Data processed is:  <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-86176bb dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"86176bb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">- <b>Identification data:<\/b> name, surname, pseudonym or user ID  <br>\n <br>\n\n- <b>Contact details:<\/b> email address, phone number - <b>Professional data:<\/b> function, organization or company  <br>\n <br>\n\n\n- <b>Survey participation data:<\/b> responses to questionnaires, evaluations, comments and other information entered by respondents  <br>\n <br>\n\n\n- <b>Technical and usage data:<\/b> IP address, technical identifiers, connection logs, browsing data, timestamp <br>\n <br>\n\n- <b>Statistical and analytical data:<\/b> Survey results, scores, indicators and aggregated data generated through the use of the Services <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9bb7938 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"9bb7938\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The types of processing carried out on Personal Data are as follows: collection, recording, organization, structuring, hosting, storage, consultation, extraction, statistical analysis, aggregation, anonymization or pseudonymization, modification, making results available to the Client, deletion or destruction of Personal Data in the context of the performance of the Services. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-38d3133 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"38d3133\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The purposes of the processing are:  <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8b4e7b5 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"8b4e7b5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">- data collection through questionnaires, surveys or forms <br>\n\n- the analysis and presentation of the results of studies, surveys or barometers <br>\n\n- improving knowledge of the Client&#039;s customers, prospects, users or employees <br>\n\n- conducting satisfaction surveys, marketing studies or internal studies <br>\n\n- managing and fostering relationships with the Client&#039;s customers, prospects, or users <br>\n\n- the dissemination of information, communications, newsletters or information campaigns <br>\n\n- the implementation of prospecting or communication operations (including email campaigns or other electronic communications) <br>\n\n- the production of statistics, indicators and dashboards <br>\n\n- the technical administration, security and improvement of the Services provided by the Provider <br><\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-160380d4 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"160380d4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <h2 class=\"title tg-element-title mb-0\">1.2. Obligations of the Service Provider, in its capacity as a subcontractor <\/h2>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c5123a4 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"c5123a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The subcontractor agrees to: \n<\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a59a9cf dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"a59a9cf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">a) process Personal Data only for the purposes for which the subcontracting is carried out; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1c53118 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"1c53118\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">b) process Personal Data in accordance with the following documented instructions from the data controller: <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0bdc419 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"0bdc419\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The subcontractor processes Personal Data only to the extent necessary for the provision of the Services and Optional Services provided for in the Contract and the associated Commercial Proposal and in accordance with this Annex. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c799e7a dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"c799e7a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">If the processor considers, without being required to actively monitor the matter, that an instruction constitutes a violation of the GDPR or any other provision of Union or Member State law relating to data protection, it shall immediately inform the data controller. Furthermore, if the processor is required to transfer personal data to a third country or an international organization under Union or Member State law to which it is subject, it must inform the data controller of this legal obligation before processing, unless the law in question prohibits such notification for important reasons of public interest.; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-be722d4 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"be722d4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">c) make its best efforts to ensure the confidentiality of Personal Data processed under the Contract; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e7838f0 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"e7838f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">d) ensure that the persons authorized to process Personal Data under the Contract: <br>\n\n- undertake to respect confidentiality or are subject to an appropriate legal obligation of confidentiality; <br>\n\n- receive the necessary awareness regarding the protection of Personal Data; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2ed5dc8 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"2ed5dc8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">e) take into account, with regard to its tools, products, applications or Services, the principles of data protection by design and data protection by default. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae7ccbc dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"ae7ccbc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">f) Subcontracting: the subcontractor is authorized to use the following entities (hereinafter, the \u00ab <b>subsequent subcontractor<\/b> \u00bb)\u202f: <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c0a66f7 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"c0a66f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">OVHcloud <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2601d08 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"2601d08\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">- Company name: OVH SAS  <br>\n\n- Address: 2 rue Kellermann, 59100 Roubaix, France  <br>\n\n- Server location: European Union (mainly France)  <br>\n\n- Processing provided: data hosting, cloud infrastructure, data storage and backup (as part of the Services, when this option is subscribed to by the Client)  <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e3f2d3f dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"e3f2d3f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">Sellsy <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-990daaf dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"990daaf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">- Company name: Sellsy SAS  <br>\n\n- Address: 50 avenue du Lazaret, 17000 La Rochelle, France <br> \n\n- Server location: European Union (France)  <br>\n\n- Services provided: customer relationship management, support ticket management (ticketing), sending communications and emails (including support and information related to the Services) <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-04328e1 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"04328e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">If additional subcontractors are subsequently engaged, the subcontractor must inform the data controller in writing beforehand of the proposed change, including the name of the new subcontractor, their contact details, the date of the subcontracting agreement, and the processing activities to be subcontracted. If the data controller does not object within eight (8) days of receiving this notification, they are deemed to have accepted the change, and the subcontracting may be implemented.  <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-768581a dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"768581a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The subsequent sub-processor is required to comply with the obligations of the Contract on behalf of and according to the instructions of the data controller. It is the Provider&#039;s responsibility to ensure that the subsequent sub-processor offers the same guarantees regarding the implementation of appropriate technical and organizational measures that comply with the requirements of the GDPR. If the subsequent sub-processor fails to fulfill its data protection obligations, the Provider remains fully liable to the data controller for the subsequent sub-processor&#039;s performance of its obligations. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d09e17 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"0d09e17\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">g) Right of information of the persons concerned: it is the Client&#039;s responsibility to provide information to the persons concerned by the processing operations at the time of collection or transmission of Personal Data to the subcontractor, including the processing relating to the notification of vulnerabilities by its service providers in application of Articles L2321-4-1 and Article R2321-1-16 et seq. of the Defence Code. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-85b84cd dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"85b84cd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">h) Exercise of data subject rights: where possible, the subcontractor must assist the controller in fulfilling its obligation to respond to requests to exercise the rights of data subjects: right of access, rectification, erasure and objection, right to restriction of processing, right to data portability, right not to be subject to an automated individual decision. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4507324 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"4507324\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The Client will communicate with the data subjects to invite them to contact the Client to exercise their rights. If, despite this, the data subjects submit requests to the subcontractor to exercise their rights, the subcontractor must forward these requests immediately upon receipt by email to the address provided for this purpose by the Data Controller or, failing that, to their contact person at the Data Controller. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3dce905 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"3dce905\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">(i) Notification of Personal Data Breaches: The processor shall notify the controller of any personal data breach within a maximum of 24 working hours of becoming aware of it, by email to the address provided for this purpose by the controller or, failing that, to the address of its usual contact person at the controller. This notification shall be accompanied by all relevant documentation to enable the controller, if necessary, to notify the competent supervisory authority of the breach. The data controller is informed that in the event of a finding of significant vulnerability affecting one of its products or in the event of a computer incident compromising the security of its information systems and likely to significantly affect one of its products, the Provider has a legal obligation to notify ANSSI, and may be required, if circumstances require, to notify any person considered to be a user of its products, pursuant to Articles L2321-4-1 and R2321-1-16 et seq. of the French Defence Code. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a01c6b7 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"a01c6b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">j) Assistance to the data processor in the context of the data controller&#039;s compliance with its obligations: the data processor assists the data controller in carrying out data protection impact assessments when required. The data processor assists the data controller in conducting the prior consultation with the supervisory authority when required. This assistance may be billed at the current rate for project management assistance if the data controller places excessive demands on the data processor, namely more than one person-day per year for these matters, even though the data processor has provided all relevant information regarding its services. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6741dd7 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"6741dd7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">k) Security measures: the subcontractor undertakes to make its best efforts, within commercially reasonable limits, to implement security measures in accordance with good practices and in particular those documented and transmitted to the Client before the signing of the Contract. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b2af8fa dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"b2af8fa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">l) Handling of Personal Data: Personal Data may only be processed by the subcontractor in accordance with the instructions of the data controller and this appendix. Upon termination of the Contract, the Personal Data will be returned to the Client or destroyed, in accordance with the provisions of the &quot;Termination&quot; clause of the Contract. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1b02ccb dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"1b02ccb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">m) Data Protection Officer: any request related to this annex should be sent by email to the contact designated by the Data Controller for this purpose or, failing that, to the usual contact person of the subcontractor at the Data Controller. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e68722e dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"e68722e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">n) Register of processing activity categories: the subcontractor declares that it keeps a written register of all categories of processing activities carried out on behalf of the controller; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f9fe20 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"6f9fe20\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">o) Documentation: the subcontractor shall make available to the controller the documentation necessary to demonstrate compliance with all its obligations and to allow for audits, including inspections, by the controller or another auditor appointed by the controller, and contribute to these audits. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9cfda25 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"9cfda25\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <h2 class=\"title tg-element-title mb-0\">1.3. Obligations of the Client, the data controller  <\/h2>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-98c13e5 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"98c13e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">The data controller undertakes to: <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-820cc13 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"820cc13\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">a) Provide the subcontractor with the Data necessary for the subcontractor to enable the latter to implement the Services; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f2ee98 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"0f2ee98\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">b) Ensure a determination of the roles and rights of Users accessing Personal Data in accordance with the principle of &quot;privacy by default&quot; and inform the subcontractor of the departure of a User within eight (8) days of leaving its staff at the latest so that his account can be deleted; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-44fe472 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"44fe472\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">c) Document in writing all instructions concerning the processing of data by the subcontractor and verify their compliance with the GDPR beforehand. In this respect, the data controller cannot evade its responsibility by claiming the subcontractor failed to provide warnings, and cannot validly hold the subcontractor liable in this context; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b61e084 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"b61e084\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">d) Ensure, beforehand and throughout the duration of the processing, compliance with the obligations provided for by the GDPR; ; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cf6db58 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"cf6db58\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">e) To present oneself as the interlocutor for the persons concerned for the exercise of their rights; <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-66f4ddd dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"66f4ddd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">f) Do not send personal data to the Database Provider by email or other unsecure means of transmission. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b722ae7 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"b722ae7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">Furthermore, the data controller declares and warrants that: <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-448ffaa dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"448ffaa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">- Personal data transmitted to the Provider, or collected via the Services, is collected and processed in compliance with applicable regulations; <br><br>\n\n- he has validly informed the persons concerned, in accordance with the GDPR; <br><br>\n\n- where applicable, it has obtained the consent of the persons concerned for the envisaged processing at the time of collection or at any appropriate time; <br><br>\n\n- it allows the persons concerned to exercise their rights in accordance with the regulations, by informing them that the exercise of rights is carried out directly with the Client; <br><br>\n\n- the information is accurate, complete, unambiguous and up-to-date, without any request from the persons concerned to prohibit its collection, use, communication or storage; failing that, it undertakes to rectify, complete, clarify, update or delete it. <\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8f6f310 dark:text-white text-dark text-opacity-70 animejs-disable elementor-widget elementor-widget-tg-heading\" data-id=\"8f6f310\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tg-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t        <p class=\"title tg-element-title mb-0\">Updated on 31\/03\/2026<\/p>\r\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>ANNEXE 1 ACCORD DE TRAITEMENT DES DONNEES PERSONNELLES Dans le cadre de leurs relations contractuelles, les parties s\u2019engagent \u00e0 respecter leurs obligations au titre de la r\u00e9glementation en vigueur applicable au traitement de donn\u00e9es \u00e0 caract\u00e8re personnel et, en particulier, le r\u00e8glement\u202f(UE) 2016\/679 du Parlement europ\u00e9en et du Conseil du 27 avril 2016 applicable \u00e0 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-12598","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Annexe 1 - Soft Concept<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.soft-concept.com\/en\/annexe-1\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Annexe 1 - Soft Concept\" \/>\n<meta property=\"og:description\" content=\"ANNEXE 1 ACCORD DE TRAITEMENT DES DONNEES PERSONNELLES Dans le cadre de leurs relations contractuelles, les parties s\u2019engagent \u00e0 respecter leurs obligations au titre de la r\u00e9glementation en vigueur applicable au traitement de donn\u00e9es \u00e0 caract\u00e8re personnel et, en particulier, le r\u00e8glement\u202f(UE) 2016\/679 du Parlement europ\u00e9en et du Conseil du 27 avril 2016 applicable \u00e0 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.soft-concept.com\/en\/annexe-1\/\" \/>\n<meta property=\"og:site_name\" content=\"Soft Concept\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-31T13:12:48+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/annexe-1\\\/\",\"url\":\"https:\\\/\\\/www.soft-concept.com\\\/annexe-1\\\/\",\"name\":\"Annexe 1 - Soft Concept\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/#website\"},\"datePublished\":\"2026-03-31T12:51:43+00:00\",\"dateModified\":\"2026-03-31T13:12:48+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/annexe-1\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.soft-concept.com\\\/annexe-1\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/annexe-1\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.soft-concept.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Annexe 1\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/#website\",\"url\":\"https:\\\/\\\/www.soft-concept.com\\\/\",\"name\":\"Soft Concept\",\"description\":\"Toute la chaine de vos datas au m\u00eame endroit\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.soft-concept.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/#organization\",\"name\":\"Soft Concept\",\"url\":\"https:\\\/\\\/www.soft-concept.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.soft-concept.com\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/cropped-soft-concept-scaled-1.png\",\"contentUrl\":\"https:\\\/\\\/www.soft-concept.com\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/cropped-soft-concept-scaled-1.png\",\"width\":2558,\"height\":668,\"caption\":\"Soft Concept\"},\"image\":{\"@id\":\"https:\\\/\\\/www.soft-concept.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/soft-concept\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Appendix 1 - Soft Concept","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.soft-concept.com\/en\/annexe-1\/","og_locale":"en_GB","og_type":"article","og_title":"Annexe 1 - Soft Concept","og_description":"ANNEXE 1 ACCORD DE TRAITEMENT DES DONNEES PERSONNELLES Dans le cadre de leurs relations contractuelles, les parties s\u2019engagent \u00e0 respecter leurs obligations au titre de la r\u00e9glementation en vigueur applicable au traitement de donn\u00e9es \u00e0 caract\u00e8re personnel et, en particulier, le r\u00e8glement\u202f(UE) 2016\/679 du Parlement europ\u00e9en et du Conseil du 27 avril 2016 applicable \u00e0 [&hellip;]","og_url":"https:\/\/www.soft-concept.com\/en\/annexe-1\/","og_site_name":"Soft Concept","article_modified_time":"2026-03-31T13:12:48+00:00","twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.soft-concept.com\/annexe-1\/","url":"https:\/\/www.soft-concept.com\/annexe-1\/","name":"Appendix 1 - Soft Concept","isPartOf":{"@id":"https:\/\/www.soft-concept.com\/#website"},"datePublished":"2026-03-31T12:51:43+00:00","dateModified":"2026-03-31T13:12:48+00:00","breadcrumb":{"@id":"https:\/\/www.soft-concept.com\/annexe-1\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.soft-concept.com\/annexe-1\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.soft-concept.com\/annexe-1\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.soft-concept.com\/"},{"@type":"ListItem","position":2,"name":"Annexe 1"}]},{"@type":"WebSite","@id":"https:\/\/www.soft-concept.com\/#website","url":"https:\/\/www.soft-concept.com\/","name":"Soft Concept","description":"Your entire data chain in one place","publisher":{"@id":"https:\/\/www.soft-concept.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.soft-concept.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.soft-concept.com\/#organization","name":"Soft Concept","url":"https:\/\/www.soft-concept.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.soft-concept.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.soft-concept.com\/wp-content\/uploads\/2026\/01\/cropped-soft-concept-scaled-1.png","contentUrl":"https:\/\/www.soft-concept.com\/wp-content\/uploads\/2026\/01\/cropped-soft-concept-scaled-1.png","width":2558,"height":668,"caption":"Soft Concept"},"image":{"@id":"https:\/\/www.soft-concept.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/soft-concept"]}]}},"_links":{"self":[{"href":"https:\/\/www.soft-concept.com\/en\/wp-json\/wp\/v2\/pages\/12598","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.soft-concept.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.soft-concept.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.soft-concept.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.soft-concept.com\/en\/wp-json\/wp\/v2\/comments?post=12598"}],"version-history":[{"count":34,"href":"https:\/\/www.soft-concept.com\/en\/wp-json\/wp\/v2\/pages\/12598\/revisions"}],"predecessor-version":[{"id":12636,"href":"https:\/\/www.soft-concept.com\/en\/wp-json\/wp\/v2\/pages\/12598\/revisions\/12636"}],"wp:attachment":[{"href":"https:\/\/www.soft-concept.com\/en\/wp-json\/wp\/v2\/media?parent=12598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}