This Ercom end user license agreement (thereafter « EULA ») is signed between Ercom SAS (“Ercom”) and yourself (also identified thereafter as the “End User”). It governs your use of the Cryptobox solution, (including any Cryptobox application edited by Ercom and installed by yourself on a terminal) to access the remote Cryptobox platform, store data shared by you or with you within the remit of its use (thereafter, all together, the “Solution”).
Please read carefully the following before accessing the Solution or using it. The provisions of this contract constitute a binding legal agreement between Ercom and yourself. You can only use the Solution because you have been designated as an End User by an entity that has signed a license agreement with Ercom or a distributor authorized by Ercom (thereafter the “Client”). Your acceptance of the EULA before any use of the Solution is required under the contract concluded by the Client, and you certify that you are authorized to legally bind the client to the present provisions as far as you are concerned.
By installing an application which gives access to the Solution from a terminal, by accessing the Solution (by using a mobile application or from a browser installed on a computer workstation, or through a dedicated PC or MAC client software) and/or by using the Solution in any way, you acknowledge having read and understood the present EULA and accept to be bound by its terms. Otherwise, you must uninstall any Cryptobox application and refrain from using the Solution.
The EULA is without effect on the license contract terms binding directly Ercom or an authorized distributor of the Solution to the Client.
1. User rights
Subject to other EULA provisions, during the term of the applicable license, Ercom grants to the End Users of a Client a limited, non-exclusive, non-transferable license which cannot be granted as a sub-license, to use the Solution in object code only, and exclusively on behalf of the Client, in conformity with the applicable documentation provided by Ercom on the use of the Solution (thereafter the “Documentation”). The Client must use the Solution and the Documentation for internal purposes only. Any use of the Solution in a way not expressly authorized herein is strictly forbidden. The Solution is licensed only, and is neither assigned, nor transferred, nor sold.
In this EULA, the term Solution designates all the software elements in object code, graphic materials, and brands, composing the Solution and the corrections and updates thereof when provided by Ercom.
2. Restrictions
The End User shall not : (i) use the Solution, in whole or part, in any other way than those expressly authorized in this EULA ; (ii) use whole or part of the Solution on equipment, products or systems not mentioned in the Documentation or through software (including Web browsers) not authorized or not recommended; (iii) modify (including by porting, adaptation, translation, and creation of derived work) all or part of the Cryptobox applications proposed by Ercom at the time of the installation to access the Solution from a terminal; (iv) use all or part of the Solution in a way contrary to applicable laws; (v) enable the use or the access to the Solution to individuals who cannot be considered as End Users, or to enable a person who cannot be considered anymore as an End User to continue using the Solution; (vi) publish or make available to third parties in any other way the results of the performance, functional or security evaluations of all or part of the Solution without the prior written authorization of Ercom; (vii) modify, dissimulate or remove the legal provisions contained in all or part of the Solution and (viii) use the Solution in connection with ultra-hazardous activities, or any activity for which failure or breakdown might result in serious damages to goods, death or grievous bodily injury.
3. Title and ownership
- All the elements which constitute the Solution when installing or accessing it, and which are later provided for an update remain Ercom’s property (or the property of one of its distributors or licensors). This concerns notably the software codes regardless of their form, and the elements associated (libraries, routines, firmware, APIs, licenses) or otherwise incorporated within the Solution (including any graph, user interface, logo, text…).
- Those elements, which cannot be used independently of the whole Solution, are generally protected by intellectual property and/or secret or commercial property international laws and conventions. Consequently, any use of the Solution or of one of its elements beyond the licensed rights and capacities in contradiction with your contractual commitment could be considered by Ercom not only as a breach of contract, but also as counterfeiting likely to generate civil and/or criminal litigations.
- This EULA grants you a license to use the Solution, but does not constitute an assignment, transfer or sale of the Solution.
- It is possible that the software incorporated in the Solution contain some code generally distributed under a license said “Open source” or “Free”. Ercom respects the particular obligations of this type of license, and inserts in the code of its software and in its technical documentation the paternity references required by such licenses. If required, you can, through the intermediary of the Client, ask us how you can be given the source code by addressing us a request.
- Ercom reserves the right to ensure the corrective operations, updates, maintenance, and evolution of the Solution (or to have designated third parties ensuring the corrective operations, updates, maintenance and evolution of the Solution). Thus you do not have the right to carry out or to have a third party carrying out corrective operations, debugging, updates, etc. You must not decompile and disassemble the software, carry inverse engineering or try to discover or reconstitute the source code, the algorithms, the format of files or the programming interface, in any way, in conformity with article L.122-6-1-IV of the Intellectual Property Code. If, in compliance with the law, you need technical information to allow for the interoperability of the monitoring software with other computer programs designed independently, you must first ask us in writing the elements that you want to have at your disposal.
- In the hypothesis that you would suggest to Ercom improvements concerning the characteristics, functionalities or operation of the Solution, and that we would respond favorably, the developments and evolutions will be Ercom’s sole property.
4. Client’s data
- All data, of any nature, that you stock and share through the Solution are considered as belonging to the Client. Ercom could not in any way be blamed by an End User concerning an issue of ownership of a shared data via the Solution, especially after the deletion or the inaccessibility of the data by the End User (notably following the expiry or deactivation of its rights by the Client or Ercom).
- You undertake to respect the whole legislation applicable to the data that you host securely through the Solution and you forbid to have hosted data whose collection, treatment, exploitation, and duration or stocking conditions are illegal, unfair or harm in any way third parties’ rights or the interests of the nation.
- Ercom can, by virtue of its existing legal and regulatory obligations, be ordered by injunction to communicate Client’s data secured by Cryptobox. As Ercom cannot technically deliver these data, nor intelligible furnish the whole technical means allowing the authorities or their agent to proceed to the decryption of these data, the Client, and yourself after being asked by the Client, agree to help Ercom following any valid request of the competent authorities, and, if necessary to give them the data requested or the means allowing access to the said data, and that in a way that will exonerate Ercom from any responsibility. In case of any default from the Client or End User, the Client will hold Ercom harmless from any liability.
- Cryptobox is a collaborative and secured document sharing solution subject to the regulations applicable to dual-use goods and products using or integrating cryptographic means. End Users must ensure with the Customer that they are authorized to use the Cryptobox Service or to hold the Cryptobox application in the country where they are located, including in the transit zone. Ercom shall in no event be liable for the consequences thereof.
- The supply of the Solution under a license does not constitute in any way a back-up or safeguard service. It is therefore strongly recommended to save the data and information before stocking or using them with the Solution. Ercom rejects all responsibility for any loss of data or information caused by the absence of back-up by the Client or End User.
5. Duration
- The present user license of the Solution is granted as an ancillary application of the license contract agreed by the Client for the use of the Solution. It lasts as long as the license granted to the Client is in force, and the End User is, in this respect, entitled to use the Solution. At the end of the license granted to the Client, the End User cannot use the sharing functions, nor add any new data.
- Data is stored within the Solution during a period of 30 days as from the date the license of use ends. The End User will have thirty (30) days to download its data, after which the data will definitely be inaccessible and unrecoverable. If the End User has used the Solution under an evaluation or trial license granted for free, it can only access its data after subscription to a commercial license within a period of 30 days. If not subscripted within this period of time, the data is definitively inaccessible and unrecoverable.
6. Warranties and liability
- Conditions applicable to the warranties that may be granted as part of the use of the Solution are set out in the contract entered into directly between the Client and Ercom of an authorized distributor.
- In case any dysfunction or error arises, the End Users must contact the Client’s administrator (or account manager). This latest is, under the Client’s contract, responsible to contact a First Level Support center. In no instance Ercom shall directly provide any support or maintenance services to End Users.
- Subject to warranties that may be granted to the End Users as a result of the terms of the contract concluded by the Client, the End User acknowledges that the Solution is made available “as is”.
- To the fullest extent permitted by law, Ercom and its suppliers and/or licensors cannot be held to any liability vis-a-vis the End User, for indirect, special and punitive damage, nor any immaterial or intangible damage such as shortfalls, loss of opportunity, commercial losses, loss of revenue or profit, loss of customers, disorganization, and its resources and procedures, waste of time, loss, inaccuracy or corruption of files or data, cost of data or database recovery, obtaining a product, a software, a service or a substitution technology.
- In no event the aggregate liability of Ercom, for the whole compensable losses suffered by the End Users of a given Client, shall exceed the liability cap set out in the contract entered into between the Client and Ercom or the authorized distributor if any, and in no event Ercom shall indemnify End Users directly.
7. Personal Data
- When the Solution is hosted and operated by the Client or an authorized distributor, Ercom does not collect or process any personal information from End Users.
On the other hand, when the Solution is hosted under Ercom control, the Solution is managed by Ercom at the Client’s request. All personal data of End Users collected or processed by Ercom via the Solution are processed in accordance with the applicable regulations on personal data processing and, in particular, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and the law of 6 January 1978 as amended.
- In order to enable the subscription to the Solution, Ercom needs to know the name, first name and e-mail address of the End User, within the Customer’s company, responsible for managing the licenses subscribed to by the Customer “the Account Manager” and who is designated by the Customer, in order to transmit to him, by e-mail, a link and a password allowing him to access the Solution (the “Personal Data of the Account Manager”). This information is communicated to us by the Customer having subscribed to the Cryptobox service. It is the Client’s responsibility at this time to inform End Users of the indirect collection made.
- In order to activate and manage the access rights of End Users, Ercom needs to have at its disposal some personal data (the “End Users Personal Data”). When the Cryptobox service is subscribed by a Client, the Client sends us the name, first name and e-mail address of each End User authorized to access the service and we directly invite the authorized End Users by e-mail to create their account from the application. At the first connection you provide us only your first and last name. We do not ask you for any other personal information. This information is mandatory in order to validate your registration with the Client. In addition, during the use of the Solution, Ercom may collect End Users usage data (metadata) such as the date and time of an action performed with the Solution, or the IP address used.
- All Personal Data are stored in France only, in Ercom’s servers and/or, when relevant, in the servers of the Ercom partner’s ensuring the technical availability of the Solution. They are used by Ercom or its partner only to enable performance of the Client’s contract and availability of the Solution to End Users. They are neither transferred nor assigned in any manner whatsoever. They are stored by Ercom, in conditions ensuring their security and integrity, during the term of the license and a subsequent period of 12 months thereafter for invoicing, follow-up and customer relationship management purposes, except for End Users usage data (metadata) which are kept for a period of 12 months from the date of their recording.
- All data subjects who consider that Personal Data concerning them have been collected and/or are being processed by Ercom may send a request for access, rectification, deletion or transmission of these data, as well as for limitation or opposition to their processing, and withdraw their consent to the processing of these data by email to the address dpo@ercom.fr. If these data subject consider that their rights concerning their personal data have not been respected, they can also lodge a complaint with a supervisory authority, such as the CNIL in France.
- Before using the Solution, End Users must read and agree to the Cryptobox Privacy Policy, which specifically details the collection and processing of Personal Data.
8. Applicable law and competent jurisdiction
Unless specifically provided for in the license agreement entered into by the Client for the use of the Solution:
– This EULA is governed by French law and shall be interpreted in accordance with this law;
– Any dispute or claim arising out of or in connection with this EULA shall exclusively be brought to the competent court of Paris, regardless of the plurality of defendants or action by third parties.
Version 7.1
