By subscribing to a WeTicket product, the individual or entity subscribing to a WeTicket product (“Customer”) enters into a binding legal agreement with WeTicket B.V., a private company with limited liability incorporated under the laws of The Netherlands (“WeTicket”). This agreement is hereinafter referred to as the “Agreement”. During the License Term and in accordance with these WeTicket Terms of Service, Customer may access and use the products which Customer subscribed to (each a “Product”), as referenced on the Pricing Page on WeTicket’s website (the “Pricing Page”), located at https://www.weticket.com/pricing. Each Product may include updates, cloud-based and support services, applications or documentation. Each of these are subject to the terms of these WeTicket Terms of Service as applicable. WeTicket may add to, change or discontinue any component of the Products at any time without giving notice thereof. Customer is responsible for all actions taken under its WeTicket account credentials, regardless of whether such actions are taken by Customer, their employees or a third party. Customer will safeguard all account credentials in its possession or under its control. WeTicket is not liable for any loss or damage arising from any unauthorized use of Customer’s account.
During the License Term, WeTicket grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use, and to permit its employees and all other users who access and use the Products on Customer’s behalf (collectively, the “Users”) to access and use, the Products as a service on the terms set forth in these WeTicket Terms of Service (the “License”). Customer agrees that all rights, title and interest in and to all the intellectual property rights in the Products, and all modifications, extensions, scripts and other derivative works of the Products provided or developed by WeTicket are owned exclusively by WeTicket or its licensors. All rights not granted to Customer in these WeTicket Terms of Service are reserved by WeTicket.
Customer and any Users shall not (and shall not allow any User or third party to): (i) decompile, disassemble, reverse engineer or attempt to reconstruct or discover any source code, underlying ideas, algorithms, file formats or programming or interoperability interfaces of the Products, by any means whatsoever; (ii) distribute viruses or other harmful or malicious computer code via or into the Products; (iii) engage in any conduct that disrupts or impedes a third party’s use and enjoyment of the Products; (iv) remove any product identification, copyright or other notices from the Products; (v) sell, lease, lend, assign, sublicense, grant access or otherwise transfer or disclose the Products in whole or in part, to any third party; (vi) use the Products for timesharing, service bureau or hosting purposes or otherwise use, resell, sublicense, distribute or transfer or allow others to use the Products to or for the benefit of third parties; (vii) modify or incorporate into or with other software or create a derivative work of any part of the Products, unless agreed to in writing by WeTicket; (viii) use the output or other information generated by the Products for any purpose other than as contemplated by the Agreement; (ix) use the Products for any use other than Customer’s internal business use; (x) use unauthorized modified versions of the Products, including without limitation, for the purpose of building a similar or competitive product or service or for the purpose of obtaining unauthorized access to the Product; or (xi) use the Products in any way that is contrary to applicable laws including, without limitation, privacy, data protection, electronic communications and anti-spam legislation. WeTicket retains all title to and, except as expressly licensed herein, all rights to the Products, all copies, derivatives and improvements thereof, and all related materials.
The “Initial Term” shall mean a period of one month, beginning on the first day of the calendar month prior to the effective date of the Agreement (e.g., when the effective date is 10 March, the Initial Term will commence on 1 March). Upon expiration of the Initial Term, the Agreement will automatically renew for a duration equal to the Initial Term (each a “Renewal Term”, the “Current Term” being the Initial Term or the then-current Renewal Term (as the case may be); and the Initial Term and all Renewal Terms collectively, the “License Term”) until terminated by Customer or WeTicket by delivery of written notice to the other party at least one day prior to the end of the Current Term. Except as otherwise specified herein, Customer may not terminate this Agreement prior to the expiration of the License Term.
Customer shall pay WeTicket the fees (“Fees”) specified on the Pricing Page. Unless required by applicable law, all payments by Customer to WeTicket under this Agreement are non-refundable and made via the payment method specified on the Pricing Page, or as otherwise agreed in writing by the parties. Customer shall undertake any additional actions reasonably requested by WeTicket to implement any automated Fee payment process. Amounts due WeTicket not paid through the designated automated Fee payment process shall be paid by Customer within 14 days of the date of receipt of WeTicket’s invoice. Any amounts past due shall accrue interest at a rate which is the lesser of: one and a half percent (1.5%) per month or the maximum rate allowable by law. Any assessment of late Fees shall be without prejudice to WeTicket’s right to suspend Customer’s access to the Products. Fees are net of tax. Any applicable goods and services or sales taxes, including any applicable VAT, will be added to Fees owing pursuant to the Agreement. WeTicket may increase Fees at the first day of any calendar month by giving Customer at least ten (10) days’ written notice thereof. By using the Product, Customer agrees to the terms of use of the payment service provider designated by WeTicket for payment processing and authorizes the said payment service provider to act as its agent solely for the purpose of receiving and processing payments.
If a charge to Customer’s account is disputed and the transaction reversed, either manually by Customer or automatically (“Chargeback”), Customer shall pay WeTicket the corresponding amount within five (5) days as of the date on which Customer was notified of the Chargeback. WeTicket reserves the right to charge fees and/or expenses associated with such Chargebacks (“Chargeback Fees”). In addition, WeTicket reserves the right to modify these Chargeback Fees without prior notice at any time. In the event of a Chargeback, or if a payment to be made to WeTicket fails and the Customer does not settle the amount due by alternative means within the period indicated by WeTicket, WeTicket reserves the right to recover the outstanding balance from any future payouts due to the Customer via WeTicket’s payment service provider. In the event WeTicket suspects fraud on the part of Customer and/or when WeTicket considers a Chargeback likely to happen, WeTicket is entitled to hold a maximum of 100% of the Customer revenue as received by WeTicket in the account of Customer, as a reserve. This reserve is held to cover potential Chargebacks and associated costs. WeTicket shall transfer this amount to Customer ultimately with the next payment due to Customer after the deadline for filing a Chargeback has passed.
WeTicket and Customer (each a “Receiving Party”) shall each retain in confidence all information received from the other party (the “Disclosing Party”) pursuant to or in connection with the Agreement or the Products, that the Disclosing Party identifies as being proprietary and/or confidential or that, by the nature of the circumstances surrounding the disclosure, ought in good faith to be treated as proprietary and/or confidential (“Confidential Information”), and will make no use of such Confidential Information except as necessary to fulfill their respective obligations under the Agreement. Each party shall treat the terms and conditions of the Agreement as confidential; however, either party may disclose such information in confidence to its legal and financial consultants as required in the ordinary course of that party’s business. Notwithstanding the foregoing, the restrictions set forth above will not apply to (i) information previously known to the Receiving Party without reference to the Disclosing Party’s Confidential Information, (ii) information which is or becomes publicly known through no wrongful act of the Receiving Party, (iii) information that is independently developed by the Receiving Party without reference to the Disclosing Party’s Confidential Information, or (iv) information required to be disclosed pursuant to applicable law by enforceable orders of the court or other governmental authority. The foregoing shall also not prevent WeTicket from using Customer Data on an aggregate and de-identified basis. Customer shall ensure that its Users fully comply with the terms of this Section and shall be responsible for any damage suffered by WeTicket as a result of a User’s failure to do so.
Customer represents and warrants that currently and throughout the License Term (i) Customer is fully authorized to enter into the Agreement and that Customer and any Users are fully authorized to utilize the Products, (ii) Customer and any Users are and will remain in compliance with all WeTicket policies, applicable laws and regulations with respect to its and their use of the Products and activities related to the Agreement, including but not limited to fiscal and privacy laws; (iii) if Customer or any of its Users imports lists into the Products for the purpose of sending electronic communication (e.g., email, text messages), or otherwise collects electronic addresses for the purpose of sending electronic messages, then Customer warrants that each person on such list has previously opted-in to receive promotional electronic communications from Customer (where applicable) and that the content of such communications by Customer will comply with applicable laws and regulations; and (iv) if Customer enables or uses functionality within the Products to apply surcharges to card payments, Customer acknowledges that the permissibility, conditions and limits of surcharging may vary by jurisdiction, card scheme rules and acquiring arrangements. Customer is solely responsible for ensuring that its use of surcharging complies at all times with all applicable laws, regulations, card scheme rules, disclosure requirements and contractual obligations, including any limits on surcharge amounts or restrictions on eligible card types. Customer acknowledges that card scheme rules may change from time to time and that Customer is solely responsible for ensuring continued compliance with such rules. Customer further acknowledges that any surcharge amounts collected from customers may form part of Customer’s taxable revenue and that Customer is solely responsible for the correct treatment of such amounts for all applicable taxes, levies and fiscal reporting obligations, and for ensuring that any surcharge is refunded where required in connection with a transaction refund. WeTicket only provides the technical functionality to configure surcharges and does not verify or monitor Customer’s compliance with applicable requirements. Customer remains solely responsible for any fines, penalties, Chargebacks, claims or losses arising from its use of surcharging functionality, including any enforcement actions by payment networks, acquirers or regulators. WeTicket reserves the right to suspend or disable surcharging functionality at any time where it reasonably believes Customer’s use may be non-compliant.
“Customer Data” means any data that Customer or its Users input into the Products for processing in connection with the Agreement, including any personally identifiable information (“Personal Data”) forming part of such data.
Customer may select the Personal Data it inputs into the Products at its sole discretion; WeTicket has no control over the nature, scope, origin, and/or the means by which Customer acquires Personal Data processed by the Products. WeTicket will comply, and will ensure that its personnel comply, with the requirements of applicable privacy laws and regulations governing Customer Personal Data in WeTicket’s possession or under its control. Customer is solely responsible for ensuring that it complies with any legal, regulatory or similar restrictions applicable to the types of data Customer elects to process through the Products. Customer remains responsible for properly handling and processing notices regarding Personal Data of Customer’s customers and Users.
WeTicket will regularly perform backups of Customer Data stored in the Products to the extent possible. WeTicket will assist Customer in recovering and restoring Customer Data to the Products to the extent commercially feasible. Customer understands and agrees that WeTicket is not responsible for any loss or corruption of Customer Data. WeTicket may delete any Customer Data stored in the Products as from the 30th day following termination of the Agreement.
WeTicket uses and protects Customer Data, including information transmitted via the Products, in accordance with WeTicket’s Privacy Policy, located at https://www.weticket.com/ (the “Privacy Policy”) and the Data Processing Agreement included in Chapter B (the “DPA”). The Privacy Policy is incorporated into the Agreement by reference. In addition to the permissions granted in the Privacy Policy and the DPA, Customer allows WeTicket to use and share non-personal data with third parties to build anonymous data profiles, provide segmented marketing information, create aggregate statistical reports, and improve current and new products and services.
Customer agrees that any materials that it provides to WeTicket, including but not limited to questions, comments, suggestions, ideas, plans, notes, drawings, modifications, improvements, original or creative materials or other information regarding WeTicket or the Products, whether such materials are provided in email, feedback forms, or any other format (the “Feedback”), shall belong exclusively to WeTicket, without any requirement to acknowledge or compensate Customer. Customer agrees to assign, and hereby assigns, all rights, title, and interest worldwide in and to the Feedback and the related intellectual property rights to WeTicket and agrees to assist WeTicket, at WeTicket’s expense, in perfecting and enforcing such rights. WeTicket may disclose or use Feedback for any purposes whatsoever without any obligation to Customer.
“Third-Party Services” are products, applications, services, software, networks, systems, directories, websites, databases and information from third parties, including from WeTicket’s payment service provider, that one or more Products link to, or which Customer may connect to or enable in conjunction with one or more Products. Customer may decide to enable, access or use any Third-Party Services (as defined above). Customer agrees that access and use of such Third-Party Services shall be governed solely by the terms and conditions of such Third-Party Services, and that WeTicket is not responsible or liable for, and makes no representations or warranties as to any aspect of such Third-Party Services, including, without limitation, their content or data practices (including with regards to Customer Data and Personal Data) or any interaction between Customer and the provider of such Third-Party Services, regardless of whether or not such Third-Party Services are provided by a third party that is a member of a WeTicket partner program or otherwise designated by WeTicket as “certified”, or “approved” by or “integrated” with WeTicket. Any use by Customer of Third-Party Services shall be solely between Customer and the applicable third-party provider. Customer irrevocably waives any claim against WeTicket with respect to such Third-Party Services. WeTicket is not liable for any damage or loss caused or alleged to be caused by or in connection with Customer’s enablement, access or use of any such Third-Party Services, or Customer’s reliance on the privacy practices, data security processes or other policies of such Third-Party Services.
Without limiting the foregoing, Customer acknowledges that any integration with third-party fiscal or accounting services is provided solely as a technical facilitation. WeTicket is not responsible for the accuracy or legality of tax calculations, filings, or reports generated through such integrations. Customer remains solely responsible for all related tax obligations and shall indemnify and hold harmless WeTicket from any claims, fines, or costs arising therefrom.
It may be necessary for WeTicket to perform scheduled and/or unscheduled repairs or maintenance, or remotely patch or upgrade the Product. This may temporarily degrade the quality of the services or result in a partial or complete outage of the Product. WeTicket will endeavor to carry out such work during times that will cause the least disruption to Customer’s business. Customer shall cooperate, if necessary, to perform such work.
In the event of a material breach of the Agreement by either party, the non-breaching party may terminate the Agreement by giving the breaching party written notice specifying the nature of the breach in reasonable detail and the non-breaching party’s intention to terminate (a “Termination Notice”). If the breach has not been cured within the period ending thirty (30) days following delivery of the Termination Notice, then the Agreement shall automatically terminate.
Notwithstanding the foregoing, WeTicket may suspend Customer’s access to the Products immediately without notice if WeTicket, in its sole discretion, believes: (i) such suspension is required by law; (ii) there is a security or privacy risk to Customer; (iii) Customer is infringing or violating the rights of third parties, or acting in a manner that is abusive, profane or offensive; (iv) Customer does not pay its Fees or any invoices in a timely manner; (v) Customer is in breach of any material provision of the Agreement, including its License restrictions or confidentiality obligations; or (vi) Customer uses or has used the product in an unlawful, deceptive, exploitative, or fraudulent manner. Any suspension of Customer’s access to the Products will not limit or waive WeTicket’s rights to terminate the Agreement or Customer’s access to the Products.
Upon termination of the Agreement, Customer shall discontinue its use of the Product(s). Notwithstanding the foregoing, termination of the Agreement by WeTicket shall not limit Customer’s obligation to pay all of the applicable Fees, nor restrict WeTicket from pursuing any available remedies, including injunctive relief. Any installments that have not yet matured will become due immediately upon termination. Customer agrees that following termination of Customer’s account and/or use of the Product, WeTicket may immediately deactivate Customer’s account and delete Customer Data. Customer further agrees that WeTicket shall not be liable to Customer nor to any third party for any termination of Customer’s access to the Product or deletion of Customer Data in accordance with the Agreement. Sections discussing License restrictions, Fees and payment, confidentiality, Customer representation, indemnification, and limitation of liability shall survive termination of the Agreement, along with any other provisions that are intended by their terms to survive termination of the Agreement.
“Data Act” is Regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonised rules on fair access to and use of data and amending Regulation (EU) 2017/2394 and Directive (EU) 2020/1828.
“Product Data” are any data, including metadata, generated by the use of connected devices or related services, which is collected, stored, or otherwise processed by WeTicket in connection with the use of the Products by Customer, including data necessary to provide, maintain, or improve the Products. Product Data excludes anonymised data, aggregated statistics, or data derived by WeTicket that does not identify or relate to Customer or its Users.
1. Switching Request.
1.1 Customer may request to switch from WeTicket’s Products to another service provider or to its own environment (“Switching Request”) at any time during the term of the Agreement, by providing two (2) months’ prior written notice.
1.2 WeTicket shall enable Customer to export or transfer the relevant Product Data within thirty (30) calendar days following the end of the two-month notice period (“Transition Period”).
1.3 If the Transition Period is technically infeasible, WeTicket shall inform Customer within fourteen (14) business days of receipt of the Switching Request, providing a reasonable explanation and proposing an alternative transition period not exceeding seven (7) months in total. Customer shall have the right to extend the Transition Period once for a period that Customer considers more appropriate for its own purposes.
1.4 WeTicket shall act with due care to maintain service continuity and data integrity during the switching process. Customer shall notify WeTicket upon completion of the data export.
2. Deletion Request. Upon written request (“Deletion Request”), WeTicket shall delete Customer’s Product Data in accordance with the Agreement except where retention is required under applicable law or for legitimate business purposes (e.g., billing, compliance, or dispute management).
Information on the jurisdiction to which the ICT infrastructure deployed by WeTicket is subject, and a general description of the technical, organizational and contractual measures adopted by WeTicket in order to prevent unauthorized international governmental access to or transfer of non-personal data can be found at www.weticket.com.
This Section A13 prevails over any conflicting provision in these WeTicket Terms of Service solely with respect to the rights and obligations set out herein. In all other respects, these WeTicket Terms of Service remain in full force and effect.
Customer shall indemnify, defend and hold harmless WeTicket and its officers, employees, and agents from and against all losses, expenses, liabilities, damages and costs including, without limitation, reasonable attorneys’ fees (collectively “Costs”), to the extent that such Costs are attributable to any breach by Customer or any User, independent contractor, or affiliate thereof, of any representations, warranties or other obligations set forth in the Agreement.
WeTicket shall indemnify, defend and hold harmless Customer and its officers, employees, agents and affiliates from and against all Costs, to the extent such Costs are attributable to the Products infringing or misappropriating any registered third-party intellectual property right, including trademarks, patents and copyrights if WeTicket is notified promptly in writing and given authority, information, and assistance for the defense or settlement of any related proceeding.
TO THE FULLEST EXTENT PERMISSIBLE BY APPLICABLE LAW, WETICKET’S AGGREGATE LIABILITY UNDER THE AGREEMENT SHALL BE LIMITED TO THE FEES PAID BY CUSTOMER DURING THE THREE-MONTH PERIOD IMMEDIATELY PRECEDING THE DATE THE CLAIM GIVING RISE TO SUCH LIABILITY WAS FIRST ASSERTED.
TO THE FULLEST EXTENT PERMISSIBLE BY APPLICABLE LAW, NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, RELIANCE OR PUNITIVE DAMAGES OR LOST OR IMPUTED PROFITS OR ROYALTIES, LOST DATA OR COST OF PROCUREMENT OF SUBSTITUTE SERVICES, WHETHER FOR BREACH OF CONTRACT, WARRANTY, TORT, STATUTORY REMEDY OR ANY OBLIGATION ARISING THEREFROM OR OTHERWISE AND IRRESPECTIVE OF WHETHER EITHER PARTY HAS ADVISED OR BEEN ADVISED OF THE POSSIBILITY OF ANY SUCH LOSS OR DAMAGE.
TO THE FULLEST EXTENT PERMISSIBLE BY APPLICABLE LAW, CUSTOMER HEREBY WAIVES ANY CLAIM THAT THESE EXCLUSIONS DEPRIVE IT OF AN ADEQUATE REMEDY. THE PARTIES ACKNOWLEDGE THAT THE PROVISIONS OF THIS SECTION FAIRLY ALLOCATE THE RISKS UNDER THE AGREEMENT AS BETWEEN THEM. THE PARTIES ACKNOWLEDGE THAT THE LIMITATIONS SET FORTH IN THIS SECTION ARE INTEGRAL TO THE AMOUNT OF FEES CHARGED IN CONNECTION WITH MAKING THE PRODUCTS AVAILABLE TO CUSTOMER AND THAT, WERE WETICKET TO ASSUME FURTHER LIABILITY OTHER THAN AS SET FORTH HEREIN, SUCH FEES WOULD OF NECESSITY BE SET SIGNIFICANTLY HIGHER.
CUSTOMER ACKNOWLEDGES THAT (i) WETICKET CANNOT GUARANTEE THE RESULTS GENERATED THROUGH THE PRODUCTS, OR THAT THE PRODUCTS WILL BE CONTINUOUSLY AVAILABLE FOR USE WITHOUT INTERRUPTION, (ii) THE PRODUCTS ARE PROVIDED “AS IS”, ON AN “AS AVAILABLE” BASIS WITHOUT ANY REPRESENTATION, WARRANTY OR CONDITION OF ANY KIND, AND WETICKET HEREBY DISCLAIMS ALL CONDITIONS, REPRESENTATIONS AND ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE WITH RESPECT TO THE PRODUCTS, INCLUDING, BUT NOT LIMITED TO, ANY (a) IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, (b) IMPLIED WARRANTY ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, (c) WARRANTY OF TITLE OR NON-INFRINGEMENT; OR (d) STATUTORY REMEDY, AND (iii) WETICKET IS NOT RESPONSIBLE FOR ANY PRODUCT CONFIGURATION SETTINGS OR PRODUCT CHANGES APPLIED BY OR ON BEHALF OF CUSTOMER. WETICKET EXPRESSLY DISCLAIMS ANY SPECIFIC SERVICE LEVEL WARRANTIES OR COMMITMENTS. REGARDLESS OF ANY OTHER TERM OF THE AGREEMENT, NOTHING IN THE AGREEMENT EXCLUDES OR PURPORTS TO EXCLUDE ANY STATUTORY RIGHT OR WARRANTY THAT MAY NOT BE EXCLUDED BY LAW.
Customer may not assign any of its rights or obligations under the Agreement without WeTicket’s prior written consent. WeTicket may, without Customer’s prior consent, assign its rights and obligations under the Agreement. Subject to the foregoing, the provisions of the Agreement shall be binding on and inure to the benefit not only of the parties hereto but also to their successors and permitted assigns. WeTicket shall be free to perform all or any part of the Agreement through one or more subcontractors.
The Agreement shall be governed by and construed in accordance with the laws of the Netherlands.
Any claim, dispute or controversy (whether in contract or tort, pursuant to statute or regulation, or otherwise, and whether pre-existing, present or future) arising out of or relating to: (i) the Agreement; (ii) the Products or any other services provided by WeTicket; (iii) oral or written statements, or advertisements or promotions relating to the Agreement or to the Products or any other services provided by WeTicket; or (iv) the relationships that result from the Agreement, will be determined by the courts of Amsterdam, the Netherlands.
Notwithstanding the foregoing provisions, (i) each party retains the right to seek injunctive or other equitable relief in a court of competent jurisdiction to prevent the actual or threatened infringement, misappropriation or violation of a party’s copyrights, trademarks, trade secrets, patents, or other intellectual property rights; and (ii) WeTicket reserves the right to collect any outstanding amounts that Customer owes to WeTicket in a court of competent jurisdiction.
If one or more of the provisions of the Agreement is held to be invalid, illegal or unenforceable in any respect by a court of competent jurisdiction, then the validity, legality and enforceability of the remaining provisions of the Agreement shall be unaffected.
WeTicket may provide any and all notices, statements and other communications to Customer through either email, posting on its website, an in-product message, or by mail or express delivery service. During the term of the Agreement, Customer grants WeTicket a free license to use, reference and display the Customer’s name and trademarks in any communications, including publications, press releases, stories, websites, social media posts, and public filings in connection with the promotion, marketing, distribution and public disclosure of the WeTicket brand, activities and Products (collectively, the “Materials”). Following the termination of the Agreement, WeTicket shall have sixty (60) days to remove all Customer’s name and trademarks from the Materials.
Neither party shall be deemed in default or otherwise liable for any delay in or failure of its performance under the Agreement (other than Customer’s payment obligations) by reason of any act of God, fire, natural disaster, accident, act of government, shortage of materials, failure of transportation or communication or of suppliers of goods or services, or any other cause to the extent it is beyond the reasonable control of such party.
The Agreement, along with these WeTicket Terms of Service and the Privacy Policy, constitutes the entire agreement and understanding between the parties with respect to the subject matter hereof and supersedes all prior or contemporaneous written, electronic or oral communications, representations, agreements or understandings between the parties with respect thereto.
WeTicket reserves the right, at any time and upon ten (10) days’ written notice, to amend the Agreement, including making changes to the scope of the Products.
This Data Processing Agreement (“DPA”) forms an integral part of the Agreement concluded by and between Customer as controller and WeTicket as processor in connection with Customer’s license to access and use the Product, which includes the provision of various data processing services to Customer (the “Services”).
Terms used in this DPA have the same meaning as those used in Chapter A, unless otherwise stated. If there are any conflicts or inconsistencies between the General Terms and Conditions and the DPA, the DPA prevails.
When providing the Services, WeTicket may have access to or otherwise receive or process information relating to identified or identifiable individuals (“Personal Data”).
Depending on how the Customer chooses to use the Services, WeTicket may process the following types of Personal Data: first name, last name; contact information (e-mail address, home address, phone number); language; date of birth; role/function; IP address; location data; government-issued identification numbers; financial information, bank account details and buying behavior. WeTicket may also process other kinds of Personal Data if Customer has chosen to collect and input such Personal Data into the Product. The Services do not require other kinds of Personal Data to function properly. WeTicket disclaims all liability for damages or claims associated with Customer’s choice to input non-compulsory Personal Data into the Product.
Personal Data about the following categories of individuals is processed:
WeTicket shall process Personal Data on behalf of Customer to provide the Services to Customer pursuant to the Agreement and any additional purposes as instructed by Customer when using the Services.
Customer is the controller of all the Personal Data that it collects through the Services. Customer shall ensure that it is entitled to process and transfer the Personal Data to WeTicket so that WeTicket may lawfully process the Personal Data on Customer’s behalf, as contemplated under this DPA.
WeTicket acts as a processor of the Personal Data collected by Customer through the use of the Services.
Customer acknowledges and hereby grants its express written authorization that WeTicket may engage sub-processors as necessary to perform the Services. WeTicket may add, replace or change its sub-processors. Customer may object to the changes on legitimate grounds in accordance with the principles of good faith, reasonableness and fairness. Customer acknowledges that if it objects to WeTicket’s use of a sub-processor, WeTicket will not be obligated to provide Customer the Services for which WeTicket uses that sub-processor.
WeTicket shall ensure that any processing shall be fair, lawful, and consistent with WeTicket’s obligations under this DPA and compliant with applicable data protection law.
WeTicket shall process Personal Data only on the documented instructions of Customer. If WeTicket is required to additionally process Personal Data in compliance with an applicable law or regulation to which WeTicket is subject, it will inform Customer of such legal requirement prior to such processing, unless prohibited from doing so by an applicable law or regulation.
WeTicket shall ensure appropriate protection of Personal Data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, in particular where processing involves a transmission of Personal Data over a network, and against all other unlawful forms of processing.
WeTicket shall comply with the security requirements set forth in Clause B12, taking into consideration the state of the art, the costs of implementation and the nature, scope, context and purposes of processing.
WeTicket shall not disclose Personal Data to any third party or unauthorized persons, unless Customer has given its prior written consent to such disclosure and subject to the conditions laid down in this Clause B6.
WeTicket shall hold Personal Data in strict confidentiality and require that employees and any other person under its authority who will be provided access to or will otherwise process Personal Data are held to the same level of confidentiality in accordance with the requirements of the DPA (including during the term of their employment or engagement and thereafter).
WeTicket shall take appropriate measures to assist Customer, insofar as this is possible, in fulfilling Customer’s obligations as a controller in responding to requests from individual data subjects to exercise their rights under any applicable data protection law or regulation. In addition, WeTicket shall promptly notify Customer if it receives a request from an individual with respect to Personal Data, including but not limited to information access requests, information rectification requests, requests for blocking, erasure, or portability of Personal Data and shall not respond to any such requests unless expressly authorized to do so by Customer or unless required under an applicable data protection law to which WeTicket is subject. Additionally, WeTicket shall ensure that it has implemented technical and organizational measures to assist Customer in fulfilling its obligation to respond to any such requests from an individual with respect to Personal Data processed. WeTicket shall promptly and properly deal with enquiries and requests from Customer in relation to the processing of Personal Data under this DPA.
Taking into account the nature of the processing and the information available to WeTicket, WeTicket shall assist Customer in ensuring compliance with the obligations regarding security measures and conducting data protection impact assessments, where necessary pursuant to Articles 32-36 of the General Data Protection Regulation (“GDPR”). WeTicket shall assist and support Customer in the event of an investigation by a competent data protection authority, if and to the extent that such investigation relates to the processing of Personal Data under this DPA. WeTicket shall promptly notify Customer if in WeTicket’s view an instruction given by Customer infringes an applicable law or regulation, including data protection laws, or a change in the applicable laws and regulations is likely to have a substantially adverse effect on its ability to comply with its obligations under this DPA. WeTicket shall be entitled to suspend the implementation of the relevant instruction until it is confirmed or amended by Customer. WeTicket may refuse to carry out an instruction that is obviously unlawful.
To the extent permitted by applicable law, WeTicket shall notify Customer of each request WeTicket receives from a public authority requiring WeTicket to disclose Personal Data processed in the context of the Agreement or to participate in an investigation involving that Personal Data. WeTicket will make reasonable efforts to narrow the scope of any such request received and will provide only the Personal Data specifically requested.
WeTicket shall promptly (and in any event within forty-eight (48) hours) after becoming aware, notify Customer of any facts known to WeTicket concerning any actual accidental or unauthorized access, disclosure or use, or accidental or unauthorized loss, damage or destruction of Personal Data by any current or former employee, contractor or agent of WeTicket or by any other person or third party. WeTicket shall cooperate fully with Customer in the event of any accidental or unauthorized access, disclosure or use, or accidental or unauthorized loss, damage or destruction of Personal Data by any current or former employee, contractor or agent of WeTicket or by any other person or third party, in order to limit the unauthorized disclosure or use, seek the return of any Personal Data, and assist in providing notice to competent regulators and affected individuals if requested by Customer.
WeTicket may only subcontract performance of part of the Services to third parties as sub-processors if WeTicket ensures that such sub-processors are bound to obligations that are not less onerous than those set out in this DPA.
WeTicket processes Personal Data for as long as it is reasonably needed to deliver the Services. The retention term can be longer if WeTicket is required to keep Personal Data longer on the basis of applicable law or to administer its business.
Upon request by Customer, WeTicket shall immediately cease to process Personal Data and shall promptly return all such Personal Data, or delete the same, in accordance with such instructions as may be given by Customer at that time, unless it is required to store the Personal Data under an applicable law or regulation to which WeTicket is subject or unless explicitly agreed otherwise with Customer. The obligations set out in this Clause B8 shall remain in force notwithstanding termination or expiration of this DPA.
WeTicket will make available to Customer all information necessary to demonstrate compliance with the obligations regarding the processing of Personal Data provided to WeTicket in its role as a data processor.
WeTicket shall make the processing systems, facilities and supporting documentation relevant to the processing of Personal Data available for an audit by Customer or a qualified independent assessor selected by Customer and provide all assistance Customer may reasonably require for the audit no more than one time per 12-month period. If the audit demonstrates that WeTicket has breached any obligation under the DPA, WeTicket shall immediately cure that breach.
In case of inspection or audits by a competent governmental authority relating to the processing of Personal Data, WeTicket shall make available its relevant processing systems, facilities and supporting documentation to the relevant competent public authority for an inspection or audit if this is necessary to comply with applicable laws. In the event of any inspection or audit, each party shall provide all reasonable assistance to the other party in responding to that inspection or audit. If a competent public authority deems the processing of Personal Data under this DPA unlawful, the parties shall take immediate action to ensure future compliance with applicable data protection law. Instead of on-site inspections and controls, WeTicket may refer Customer to an equivalent control by independent third parties (such as neutral data protection auditors), compliance with an approved code of conduct (as referred to in Article 40 GDPR) or suitable data protection or IT security certifications pursuant to Article 42 GDPR. This applies in particular if company and business secrets of WeTicket or Personal Data of third parties would be endangered by the controls.
Customer will reimburse WeTicket for any reasonable costs incurred by WeTicket in connection with any audit or inspection by (or on behalf of) Customer or a competent governmental authority, except where such audit or inspection reveals that WeTicket has materially breached any of its obligations under the DPA.
Except where WeTicket is otherwise prohibited by law from making such disclosure, WeTicket shall promptly inform Customer if: (i) it receives an inquiry, a subpoena or a request for inspection or audit from a competent public authority relating to the processing of Personal Data under this DPA, if it concerns Customer Data; or (ii) it intends to disclose Personal Data to any competent public authority.
WeTicket shall ensure that any employee, agent, independent contractor, or any other person engaging in the provision of the Services and who has access to Personal Data of Customer, shall comply with all data protection and privacy laws and regulations (including any and all legislative and/or regulatory amendments or successors thereto), applicable to WeTicket.
Customer may, at any time, contact WeTicket at info@weticket.com with all questions and suggestions concerning data protection.
Any amendments or supplements to this DPA must be made in writing. The same applies to any waiver of any right or obligation under this DPA. The order of precedence of individual contractual agreements shall remain unaffected thereby. WeTicket reserves the right to amend this DPA at any time with effect for the future. Amendments will only be made if the following objective reasons exist:
If any provision of this DPA is or becomes invalid or impracticable in whole or in part, the validity of the remaining provisions shall not be affected thereby.
This DPA shall be effective for the entire License Term and this DPA terminates on the date on which the Agreement has expired or is terminated.
The following description provides an overview of the technical and organizational security measures implemented by WeTicket:
Preventing Unauthorized Product Access.
Outsourced processing: WeTicket hosts its services on third party hosting infrastructure in the form of data centers and Infrastructure-as-a-Service (IaaS). Additionally, WeTicket maintains contractual relationships with vendors in order to provide the Services in accordance with the DPA. WeTicket relies on contractual agreements, privacy policies, and vendor compliance programs in order to protect data processed or stored by these vendors.
Physical and environmental security: WeTicket hosts its Product infrastructure with multi-tenant, outsourced infrastructure providers who have implemented certified physical and environmental security controls.
Authentication: WeTicket implemented a strong authentication mechanism for WeTicket users accessing its customer products.
Authorization: Customer Data is stored in multi-tenant storage systems accessible to customers via only application user interfaces and application programming interfaces. Customers are not allowed direct access to the underlying application infrastructure. The authorization model in each of WeTicket’s Products is designed to ensure that only the appropriately assigned individuals can access relevant features, views, and customization options. Authorization to data sets is performed through validating the User’s permissions against the attributes associated with each data set.