General terms of sale

Date : May 2026

‍

Abbove SA, a company under Belgian law, whose registered office is located at 1040 Etterbeek, Cours Saint-Michel 30/A (Belgium), and registered at the Crossroads Bank of Enterprises under the number 0678.616.849 (RPM Brussels, French-speaking section) distributes a wealth management platform in SaaS mode and provides recurring or one-time services, related to this platform.

The wealth management platform offers a clear and secure framework allowing its Users to have a global view on the family wealth of one or several subjects and to manage this wealth.

1. Definitions

1. "Account" means the emplacement containing the patrimonial and family data of a group of Subjects with a family and/or patrimonial link between them.
2. "Agreement" means the agreement relating to the Subscriber's subscription to the Services offered by the Company, consisting of the General Terms of Sale, the Quote (and any subsequent Quote) and the Data Processing Addendum (when applicable). In case of conflict between these contractual documents, the following order of preference will govern: (1) Data Processing Addendum, (2) the Quote, with the most recent Quote taking precedence over the older ones; (3) these General Terms of Sale.
3. "Company" means the Belgian company Abbove SA, whose registered office is located at 1040 Etterbeek, Cours Saint-Michel 30/A (Belgium), and which is registered with the Banque Carrefour des Entreprises under number 0678.616.849 (RPM Brussels, French-speaking section).
4. "External User" means any User, other than an Internal User, who has a right of access to an Account created and/or managed by the Subscriber (e.g. a client of the Subscriber, a family member of the Subscriber's client, an external advisor of the Subscriber's client).
5. "General Terms of Sale" or “GTS” means these general terms of sale are intended solely for persons who are not considered to be consumers within the meaning of Article I.1.2° of the Code of Economic Law.
6. "General Terms of Use" or “GTU” means the general terms of use of the Platform (as available on the Platform) and which must be accepted by each User.
7. "Internal User" means any User who uses the Platform as an employee, agent or representative of the Subscriber.
8. “One-Time Services” means any non-recurring service, not part of the Subscription, provided on an ad hoc basis by the Company according to the modalities and financial conditions defined in the Quote.
9. The "party" is each of the Subscriber and the Company.
10. "Platform" means the digital wealth management platform, distributed in SaaS mode, by the Company in the framework of this Agreement.
11. "Quote" means the document or order form created by the Company following the Subscriber's decision to subscribe to one or more of the Services offered by the Company and forming part of the Agreement. The Quote contains all the details of the subscription, including the duration of the Subscription, the Services to which the Subscriber subscribes to and the price associated with these Services.  
12. "Recurring Services" means the access to the Platform and all recurring services related to the Platform (in the form of a package or any other form defined by the Company) and provided by the Company in return for payment of the fee(s) indicated in the Quote.
13. "Services" means all services, whether recurring or one-time, provided by the Company under the Agreement, as defined in the Quote.
14. "Subject" means either:
    
    1. the natural person (who may or may not be a User) whose asset data is entered into the Platform (who may be the natural person whose asset data is processed, their partner (i.e. their spouse, legal cohabitant or de facto cohabitant) or another concerned data subject), or
    2. the legal person (company, corporation, association, foundation…) recognized by law as having its own rights and obligations, separate from the individuals associated with it, whose asset data is entered into the Platform.
15. “Subscriber” means the legal person who subscribes to the Subscription offer issued by the Company and whose precise details are set out in the Quote.  
16. ‍"Subscription" means all the Recurring Services subscribed by the Subscriber for a specific period, in return for payment of the fee(s) indicated in the Quote.
17. "User" means any natural person who has the right to access the Platform as part of the Services subscribed by the Subscriber.
18. “User Content” means without limitation documents, files, notes, comments, valuations, records, statements, attachments and any other material entered into the Platform by Users.
19. “User License” means the limited, non-exclusive, non-transferable, non-sublicensable, revocable right to access and use the Platform.‍
20. “Website” means the website https://www.abbove.com.

2. Acceptance

2.1 The Company can make an offer to the Subscriber for the provision of Services, in the form of a Quote. The Quote will only constitute an offer ("aanbod") in accordance with applicable laws if it is made by the Company. The Quote will be valid for a period of thirty (30) calendar days from the date of its communication to the Subscriber unless otherwise stated in the Quote. By agreeing to the Quote (for example, through electronic signature, including a scanned handwritten signature, or payment of the fees or other amounts set out in the Quote), the Subscriber unconditionally accepts the Quote, which results in the creation of the Agreement and the obligation for the Subscriber to pay the fees and any other amounts set out in the Quote, regardless of the actual use by the Subscriber or by the Users of the Platform.

2.2 By accepting the Quote issued by the Company, the Subscriber unconditionally accepts the General Terms of Sale and irrevocably and unconditionally waives the application of its own general terms and conditions of purchase (or any other contractual provisions of the Subscriber which in the absence of this article 2.2 could be applicable to the contractual relationship between the Company and the Subscriber). No other terms and conditions shall be binding on Company unless accepted by it in writing.

2.3 Information (e.g. prices, features, etc.) publicly displayed by the Company (e.g. on the Website or in information brochures) is provided for information purposes only. The publication of this information does not constitute an offer (“aanbod”) under the applicable laws. 

2.4 The Company reserves the right to amend the General Terms of Sale at any time.      The Company will notify the Subscriber in writing of any intended changes, either via a banner displayed upon login to the Platform or through any other written means reasonably available. Unless the Subscriber expressly objects in writing within thirty (30) calendar days of the notification, the Subscriber will be deemed to have tacitly accepted the said changes, which will automatically apply to the parties on expiry of the said thirty (30) day period.

‍

3. General Terms of Use

The Subscriber must ensure that all Users are aware of the General Terms of Use and that they comply with them. The Subscriber is responsible for any failure by a User to comply with the General Terms of Use. In case of inconsistency between these General Terms of Sale and the General Terms of Use these General Terms of Sale shall prevail vis-à-vis the Subscriber. 

‍

4. Access and Use of the Platform

4.1 When subscribing to a Subscription, Company grants the Subscriber a User License within the conditions set out in the Quote. The Subscriber acknowledges that this User License does not confer any other rights than those explicitly granted in the Agreement.

4.2 The Subscriber determines the User Licenses granted to each User. There are two types of User Licenses to the Platform: (i) a reading right (consultation, loading of documents and writing comments); and (ii) a writing right (reading right and right to modify the data of the Account).

4.3 The Subscriber may solely use the Platform in a manner expressly allowed under the Agreement and in accordance with Company’s instructions. For example, but without limitation, the Subscriber is strictly prohibited from (i) modifying, reproducing, copying, borrowing, distributing all or part of the Platform outside the normal use of the Services; (ii) creating derivative works based in whole or in part on the elements present in the Platform outside the normal use of the Services; (iii) reverse engineer or assemble or in any other way attempt to find the source code of all or part of the Platform; (iv) sublicense or transfer in any manner whatsoever any rights in the Platform.

4.4 In addition, Subscriber shall not, and shall ensure that its Users do not, engage in any of the following prohibited conduct when using the Platform:

(a) Abusive behaviour: harassing, threatening, or defaming any person or entity; contacting any person who has requested no further contact; or using ethnic or religious slurs against any person or group;

(b) Privacy violations: violating the privacy rights of any person; collecting or disclosing personal addresses, social security numbers, or other personally identifiable information without a legal ground to do so; or facilitating identity theft;

(c) Intellectual property infringement: infringing upon the copyrights, trademarks, trade secrets, or other intellectual property rights of any person or entity; or reproducing, publishing, or disseminating software, audio recordings, video recordings, photographs, articles, or other works of authorship without the written permission of the rights holder;

(d) Hacking, viruses and network attacks: accessing any computer or communications system without authorization; attempting to penetrate or disable any security system; intentionally distributing a computer virus, launching a denial of service attack, or otherwise attempting to interfere with the functioning of any computer, communications system, or the Platform; or attempting to access or interfere with the accounts of other Users;

(e) Spam: sending bulk unsolicited communications or facilitating the dissemination thereof;

(f) Fraud: issuing fraudulent offers to sell or buy products, services, or investments; misleading any person about the details or nature of a commercial transaction; or committing fraud in any other way;

(g) Voluntary disruption: deliberately overloading the Platform or disrupting its effectiveness or functionality;

(h) Violations of law: using the Platform for any unlawful purpose or in violation of any applicable law or regulation.

4.5 Subscriber acknowledges that Company does not monitor, verify or validate any content uploaded or generated by Users in the Platform, including without limitation documents, files, notes, comments, valuations, records, statements, attachments and any other material entered into the Platform ("User Content"). Subscriber is solely responsible for ensuring that all User Content entered into the Platform by Subscriber or its Users is accurate, complete, lawful and does not infringe the rights of any third party, including Subjects. Company shall not be liable for any damage arising from User Content entered into the Platform by Subscriber or its Users.

4.6 Subscriber hereby grants to Company a non-exclusive, transferable, sub-licensable, worldwide, royalty-free license to use, copy, modify, create derivative works, display and distribute (i) User Content in connection with operating and providing the Services and (ii) anonymized and/or aggregated User Content for analysing and statistical reporting purposes.

4.7 Subscriber shall indemnify and hold Company harmless from any claim, damage, loss, liability or expense (including reasonable legal fees) arising out of or relating to (i) any breach of Article 4.3 and 4.4 by Subscriber or any of its Users; (ii) any User Content entered into the Platform by Subscriber or its Users; (iii) any failure by Subscriber to ensure that Users comply with the General Terms of Use; or (iv) any claim brought by a Subject, External User or third party in connection with data or content entered into the Platform by Subscriber or its Users.

4.8 Company may temporarily suspend Subscriber’s and User’s access to the Platform if:  (i) Subscriber violates any of the restrictions in Article 4.3 and 4.4.; (ii) Company reasonably determines that (A) there is a threat or attack on any of its Intellectual Property Rights; (B) Subscriber's or any User's use of the Platform disrupts or poses a security risk to the Platform or to any other Subscriber or vendor of Company; (C) Subscriber, or any User, is using the Platform for fraudulent or illegal activities; (D) Company’s provision of the Platform to Subscriber or any User is prohibited by applicable law; (iii) any vendor of Company has suspended or terminated Company’s access to or use of any third-party services or products required to enable Subscriber to access the Platform, to the extent permitted by law; or (iv) Subscriber fails to pay Company within payment term. (“Service Suspension”). Company shall use commercially reasonable efforts to provide written notice of any Service Suspension to Subscriber and to provide updates regarding resumption of access to the Platform following any Service Suspension. Company shall resume providing access to the Platform as soon as reasonably possible after the event giving rise to the Service Suspension is cured. Company will have no liability for any damage, liabilities, losses (including any loss of data or profits), or any other consequences that Subscriber or any User may incur as a result of a Service Suspension.

4.9 The content and structure of the Website and the Platform, including texts, images, photos, logos, software, database and any other information contained on the Website or on the Platform, are protected by one or more intellectual property rights (including copyright) which are and remain the exclusive property of the Company. It is forbidden to (re)use or reproduce them in any way (apart from the normal use of the Services), and to remove or adapt in any way the references to intellectual property rights of the Platform (trademarks, trade names, copyrights, etc.) without the express, written and prior permission of the Company.

5. Services

5.1 The Subscription gives the Subscriber the right to benefit from the Services described in the Quote.  

5.2 The General Terms of Sale shall apply to any Service subscribed by the Subscriber.

6. Updates

6.1 The Company reserves the right to modify, update and enhance the Services, Website or the Platform, at any time, including API versions, Platform versions, software components, interfaces, and underlying infrastructure (hereafter “Updates”).

6.2 The Subscriber must integrate the Updates within the timelines specified by Company. Company will maintain support for the deprecated version for a reasonable transition period as specified in the update notice. Company is not obligated to maintain deprecated versions indefinitely.

6.3 Following the migration deadline, use of deprecated versions is entirely at the Subscriber’s risk. Company shall have no obligation to support deprecated versions and shall not be liable for any consequences arising from their use, including security vulnerabilities, service degradation, or unavailability. Service Level Agreements do not apply to deprecated versions. Company may discontinue access to deprecated versions at any time.

6.4 In exceptional circumstances, Subscriber may request Extended Support for deprecated versions, subject to Company’s sole discretion and additional fees.

6.5 If Subscriber does not accept the Updates and can demonstrate clearly and convincingly to Company that the Update cause (or will cause) a substantial disruption in its use of the Services or significantly impacts the core functionality of the Services, the Subscriber must notify Company within fifteen (15) calendar Days of Company’s notice of the Update that he does not agree with such Update. In that case Company may, as the Subscriber’s sole remedy, permit the Subscriber to continue under the prior version of the Platform until Subscriber’s next renewal of Subscription term (after which the modified version will apply) or the Subscriber may terminate the Subscription. 

7. Price, payment and activation

7.1 Recurring Services will be provided for a recurring fee, the amount of which is set forth in the Quote. 

7.2 One-Time Services will be provided for a fee as set out in the Quote. 

7.3 Amounts shown on the Website or communicated to the Subscriber should be understood to be in Euros and to exclude any applicable taxes (including VAT).

7.4   Any invoice objection must be raised within thirty (30) calendar days of issuance by email to accounting@abbove.com, specifying the reasons and disputed amount.Failing such objection within this period, the invoice shall be deemed accepted as to its basis and amount.

7.5 Each invoice specifies the due date for the payment of invoices which, in the absence of such mention, is set at thirty (30) calendar days from the date of the invoice. The Company reserves the right, with prior written notice and after allowing a reasonable period of time to the Subscriber, to immediately suspend the Subscription (and the access of the Users to the Platform) if the Subscriber remains in default of paying one or more bills, partially or in full. The Company also reserves the right to charge reactivation fees. If an invoice is not paid in full within the payment term, the Subscriber shall, automatically and without prior notice, owe damages equal to 15% of the invoice amount and with a minimum of EUR 185. Under the same conditions, the Subscriber will owe late payment interest on the invoice amount in application of the law of 2 August 2002 on combating late payment in commercial transactions.

7.6 Unless otherwise agreed by the parties, the Subscriber shall pay the amounts due in full prior to the activation of the Subscription and the Company will activate the Subscription within five (5) working days of receipt of payment of the invoice by the Subscriber. 

7.7 The Subscriber agrees to use the Services only within the limits or conditions set forth in the Quote. If these limits or conditions are exceeded, the Company shall be entitled to charge for the additional Services

7.8 The Company reserves the right to adjust new prices at the beginning of each calendar year according to the formula below. The prices thus adjusted will be applicable to the Subscriber and for invoices issued after the adjustment: New price = Old price * [0.2 + 0.8 * (New Agoria Digital index / Base Agoria Digital index)] where (i) Old Price: the price set out in the Quote; (ii) New Agoria Digital index: the Agoria Digital index applicable in the month of the price adjustment; (iii) Agoria Digital Base Index: the Agoria Digital index applicable in the month of January preceding the entry in force of the Agreement; (iv) Agoria Index: the Agoria index for reference salaries which can be found at https://www.agoria.be/fr/services/donnees-analyse/couts-salariaux-de-reference/tableaux-synoptiques.

7.9 Without prejudice to Article 7.8, the Company reserves the right to change prices for Subscriptions at the start of each new Subscription period provided that such price change is based on objective factors (for the sake of clarity, to the extent permitted by law, such objective factors include improvements to the Platform). The Company will notify the Subscriber thereof in writing at the latest 4 months before expiry of the then current Subscription period, either via a banner displayed upon login to the Platform or through any other written means reasonably available. In the event the Subscriber does not accept the updated prices, the Subscriber may terminate the Agreement in accordance with the termination provisions of these General Terms of Sale. If such termination is not exercised in a timely manner, the updated prices shall apply as from the start of the next Subscription period. 

8. Duration and termination

8.1 Unless otherwise agreed between the Parties, the Subscription is concluded for a period of one year and begins on the day of its activation. The Subscription will be automatically renewed on expiry, for successive periods equal to that originally determined by the Parties, unless the Subscriber informs the Company by registered letter with acknowledgement of receipt or by email with acknowledgement of receipt to the following address: accounting@abbove.com at the latest three (3) months before the Subscription expiry date of its desire not to renew the Subscription.

8.2 The Company and the Subscriber may immediately terminate the Subscription upon written notice: (i) if the other party fails to comply with any of its obligations under the Agreement and has not sufficiently remedied such breach within fifteen (15) business days of receipt by such defaulting party of written notice of such breach; or (ii) to the extent permitted by law, if the other Party has become insolvent or has been declared bankrupt, dissolved or is being wound up, or where a decision has been made or judgement given ordering the winding up of that Party or a liquidator or administrator has been appointed to exercise all or part of the rights of that Party or to wind up that Party under any applicable law.

8.3 The Company may immediately terminate the Subscription by giving written notice in the event of a serious breach by the Subscriber of its obligations under the Agreement and in particular in the event of failure by the Subscriber to comply with its obligations under Articles 4 (Access and Use of the Platform).

8.4 Upon termination of a Subscription, for whatever reason, all User access rights shall automatically terminate and the Agreement shall automatically terminate (except for those provisions of these General Terms of Sale intended to survive termination of the Agreement, including (without limitation) sections 4, 8.4, 9, 10, 11, 12 and 15).

9. Confidentiality

9.1 “Confidential Information” means all information, of whatever nature, such as financial, commercial, economic, technical, legal or any other information, and in whatever form, such as analyses, compilations, studies, proprietary information, intellectual property rights, trade secrets, know-how, personal data, or other tangible or intangible materials, that is furnished by one Party to the other Party, or otherwise acquired by one Party, during or in the framework of this Agreement, in writing or verbally or electronically, and that is marked or identified, in writing or otherwise, or can otherwise be reasonably considered to qualify, as confidential information. 

9.2  In the course of the performance of the Agreement, the parties may have access to Confidential Information of the other party. The parties therefore undertake to maintain the confidentiality of such information with the same care as they take to maintain their own confidential information and not to communicate or disclose it to third parties, except with the prior written consent of the other party or as may be required by law. The parties agree to take all reasonable steps to ensure that confidential information is solely disclosed to their employees or contractors on a need to know basis and under substantially the same terms as under these General Terms of Sale.

9.3 At the express request of the party providing the Confidential Information or upon termination of the Agreement, the receiving party shall return such information or destroy it and all copies and documents and media containing such information.

9.4 The party receiving the confidential information will not be bound by confidentiality for any information that is:

• easily accessible by the public;
• received by a third party legally in possession of such confidential information and legally authorised to communicate it;
• received by the receiving party with the express authorisation of the other party as to their disclosure;
• provided by law or by a judgement of a competent court.

9.5 The terms of this obligation shall apply for the duration of the Agreement and for as long as the relevant confidential information has not been made public by the Company and for a minimum period of five (5) years after the end of the Agreement (for whatever reason). However, at the end of this period, this article 9 (Confidentiality) will continue to apply to trade secrets disclosed by the disclosing Party to the receiving Party for as long as the trade secrets retain their secrecy. For the sake of clarity, any breach of this article by the receiving Party will not alter the confidential character of these trade secrets.

10. Protection of personal data

10.1 The Subscriber acknowledges and agrees that the Company will process personal data about the Users and/or about the Subjects in the context of the execution of the Agreement.

10.2 The Company will process such personal data in accordance with applicable data protection legislation (including the General Data Protection Regulation 2016/679 (the "GDPR")).

10.3 Insofar as the Company processes personal data concerning Users and/or Subjects in its capacity as data controller (as defined in Article 4.7 of the GDPR), the Subscriber undertakes to inform the data subjects of the existence of the privacy policy of the Company and to transmit to the Company as soon as practically possible and at the latest within seven (7) calendar days, any request from the data subjects concerning the exercise of their rights in relation to their personal data.

10.4 To the extent that the Company processes personal data relating to the Users and/or Subjects in its capacity as a processor (as defined in Article 4.8 of the GDPR), the Company undertakes to process such personal data in accordance with Annex 1: Data Processing Addendum.

10.5 Company guarantees that data processed through the AI conversation assistant (i) remains within the European Union; (ii) is not used for advertising purposes; (iii) is not shared with third parties outside the framework of the Data Processing Addendum; and (iv) is processed in accordance with applicable data protection legislation. For the avoidance of doubt, the processing of personal data through the AI conversation assistant is subject to the Data Processing Addendum.

10.6 For the processing of personal data of Users through the Platform, the Subscriber acts as data controller within the meaning of Article 4.7 GDPR and determines the purposes and essential means of such processing. In this context the Subscriber warrants and undertakes that it complies, and will continue to comply, with all obligations imposed on it under applicable data protection legislation, including Regulation (EU) 2016/679 (GDPR). In particular, the Subscriber warrants and undertakes that it provides Users and Subjects with all information required under Articles 13 and 14 GDPR in relation to the processing of their personal data through the Platform, including the use of the Platform, the involvement of the Company as data processor, and any applicable legal bases for such processing.

11. Exclusion of warranty

11.1 The Services are provided "as is". To the maximum extent permitted by law, the Company excludes all warranties (express or implied) in relation to the Services, including any warranty that the Services will meet the Subscriber's expectations or be available on an uninterrupted, secure or correct basis. The Subscriber acknowledges that the Services provided by the Company must be considered as obligations of means.

11.2 The Company does not guarantee the quality, accuracy, timeliness, truthfulness, completeness or reliability of the content of the Platform. The Subscriber acknowledges that they are solely responsible for decisions based on data displayed in the Platform, and that Company does not provide any legal, financial, tax or investment advice

11.3 The Company is also not responsible for any interruptions in the networks (cable, internet or any other relevant network), hardware, software and other problems related to the operation of the network as well as errors in the input or processing of certain data, except in case of fraud or intentional fault attributed to the Company.

11.4 The Subscriber acknowledges that the Company does not provide through the Platform investment services or activities as defined by the applicable law or any form of portfolio management or investment advice. The Subscriber undertakes to inform the Internal Users of the fact that they remain responsible towards the External Users and Subjects for the provision of investment services or activities as defined by the applicable law.

11.5 Company does not provide payment services to Subscribers or Users. Any payment functionality offered through the Platform is provided by third-party payment service providers. Such third-party providers' own terms and conditions govern the processing of payments and payment data. Company accepts no liability in connection with the provision of such third-party payment services.

11.6 The Platform incorporates an AI conversation assistant. Company does not guarantee the accuracy, completeness or reliability of responses generated by the AI conversation assistant. Such responses are generated automatically and may contain errors or approximations. They do not constitute legal, financial, tax or investment advice, nor any formal recommendation. Subscriber assumes full responsibility for any use of, or reliance on, AI-generated responses by itself, its Internal Users or its External Users. Subscriber shall ensure that Users do not enter sensitive or confidential information in exchanges with the AI conversation assistant beyond what is strictly necessary for the use of the Platform, and that Users do not use the AI conversation assistant for fraudulent or unlawful purposes.

12. Responsability of the Company

12.1 The Company shall not incur any liability other than that expressly set out in the General Terms of Sale, to the extent permitted by applicable law.

12.2 To the extent permitted by applicable law, the Company shall only be liable to the Subscriber for death or personal injury caused by the Company's wilful misconduct or gross negligence or for any damage caused by fraud or wilful misconduct of the Company or any person acting for the Company in connection with the Agreement.

12.3 The Company shall only be liable for direct damages and shall in no event be liable for indirect damages suffered by the Subscriber, by Users or by third parties arising out of the performance of the Agreement such as (but not limited to) acts, omissions and negligence of other Users or loss of income, loss of profits, loss or compromise of data, loss of customers, loss of turnover, loss of profit or increase in overheads, whether or not the Company has been advised of the possibility of such damage.

12.4 The Company shall not be liable in any way in the event of force majeure, i.e., situations not attributable to the Company that make the performance of its obligations under the Agreement reasonably impossible, including (without limitation) the following situations natural disasters, revolts, wars and military operations, national or local emergencies, storms, acts or omissions of authorities, economic conflicts of a similar nature, actions of workers, fire, telecommunication failures, third party software bugs, as well as any act or negligence of persons or entities beyond the Company's reasonable control.

12.5 Except in the case of gross negligence, wilful misconduct or fraud, the Company's total liability to the Subscriber under the Agreement shall not exceed, for each loss, the amount of the fee paid by the Subscriber during the 12 months preceding the occurrence of the loss and only for the Service(s) that led to said loss.

12.6 To the extent permitted by law, Subscriber expressly acknowledges that damages caused in the performance of the Agreement by Company and/or its auxiliaries, directors, associates, employees or subcontractors, shall only lead to contractual liability, even if the event at the origin of the damages constitutes a tort. 

13. Insurance

The parties shall at their own expense at all times be covered by professional indemnity insurance covering all damages that may arise in connection with the Agreement. Each party shall provide, upon request of the other, a copy of its insurance certificates or other documentation proving that it is covered by such insurance.‍

14. Miscellaneous provisions

14.1 The Subscriber may not assign or otherwise transfer to a third party all or part of its rights and obligations under the Agreement without the prior written consent of the Company.

14.2 No action, delay, inertia or negligence on the part of either party other than an express written waiver shall be construed as a waiver of any other right or provision of the General Terms of Sale.

14.3 If any provision (or part thereof) of the General Terms of Sale is unenforceable or contradicts a mandatory provision of law, the validity and enforceability of the remaining provisions (or parts thereof) of the General Terms of Sale shall not be affected. In this case, the unenforceable part or the illegal provision shall be replaced by an enforceable and legal provision that comes as close as possible to the purpose and intention of the original provision.

15. Applicable law and competent courts

15.1 All issues, questions and disputes about the validity, interpretation, enforcement, performance or termination of this Agreement will be governed by and construed in accordance with Belgian law. No effect will be given to any other choice of law or to any conflict-of-laws rules or provisions (Belgian, foreign or international), that would cause applying the laws of any country other than Belgium.

15.2 To the extent permitted by law, any dispute or difference relating to, or connected with, the formation, interpretation, performance or termination of the Agreement shall be submitted to the exclusive jurisdiction of the Business Court of Brussels (French speaking section).

‍

Annex 1: Data processing Annex

This Data Processing Annex forms an integral part of the Agreement. Capitalised terms not defined in this Annex shall have the same meaning as in the General Terms of Sale. In case of conflict between the Terms of Sale and this Data Processing Annex, the latter will prevail. 

1. Definitions

1.1 In this Annex:

1. "Annex" means this Data Processing Annex;
2. "Applicable Data Protection Legislation" means any law, regulation or bylaw applicable to the processing of Personal Data, as applicable to the Subscriber and/or the Company, including the GDPR and the Law of 30 July 2018 on the protection of individuals with regard to the processing of personal data, in each case, as in force and applicable, and, where applicable, as amended, supplemented or replaced from time to time ;
3. "Approved Subcontractors" means subcontractors who have been approved by the  Company in accordance with clause 5;
4. "Data Subject" means the person identified or identifiable through one or more Personal Data. The categories of Data Subjects whose Personal Data will be processed are the Subjects;
5. "Personal Data" means personal data which will be processed by the Company or any of the Approved Processors under or in connection with the Agreement, excluding personal data which would be processed by the Company as a controller. For the purposes of this definition, the terms "processing", "personal data", "processor" and "controller" shall have the same meanings as given to those terms under the Applicable Data Protection Legislation. In particular, the Company will process the following categories of Personal Data:

• Personal identification data (surname, first name, address, etc.);
• Email addresses;
• Electronic identification data (IP addresses, etc.);
• Login data (email address, phone number);
• Financial data;
• Property data (e.g. property characteristics and values, property addresses, etc.);
• Professional identification data;
• Family composition;

For the purpose of this Annex, the Subscriber shall qualify as a Controller and the Company as a Processor. 

6. "Security Incident" means a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data;
7. "Third country" means a country outside the European Economic Area.

2. Compliance with Applicable Data Protection Legislation

2.1 The Subscriber and the Company shall at all times comply with their obligations under the Applicable Data Protection Legislation.

2.2 The Subscriber instructs the Company to process the Personal Data in order to provide the Services under the Agreement and authorises the Company to give equivalent instructions to Approved Subcontractors on behalf of the Subscriber. If, in the reasonable opinion of the Company, compliance with the Subscriber's instructions would constitute a breach of any applicable legal provision, the Company undertakes to inform the Subscriber immediately.

2.3 The Company will only process Subscriber's Personal Data for: (i) processing necessary to provide the Service in accordance with the Agreement; (ii) processing initiated by Subscriber in connection with Subscriber's use of the Service; and (iii) processing to comply with any other reasonable instructions provided by Subscriber (e.g., by email or support tickets) that are consistent with the terms of the Agreement.

3. Security and privacy

3.1 The Company undertakes to the Subscriber to treat all Personal Data in strict confidence. Unless otherwise agreed in writing by the Subscriber, the Company will not disclose Personal Data to any person other than (i) its employees, Approved Subcontractors and employees of Approved Subcontractors to whom disclosure is necessary for the provision of the Services under, or in connection with, the Agreement; or (ii) any jurisdiction, governmental or other regulatory authority having jurisdiction, to the extent required pursuant to an applicable legal requirement.

3.2 The Company will maintain throughout the duration of the Agreement appropriate technical and organisational measures to ensure the security, confidentiality and integrity of Personal Data. More specifically, the Company will take appropriate measures to prevent the occurrence of a Security Incident. The Company undertakes in particular to (i) maintain a secure access to The Platform through a two-factor authentication or any other authentication system that meets the applicable security standards; and (ii) encrypt Personal Data (in transit and/or on disk) to the extent provided in accordance with applicable security standards.

4. Security Incident Reporting

4.1 The Company will notify the Subscriber as soon as possible after becoming aware of the occurrence of a Security Incident.

4.2 In the event of a Security Incident, the Company will provide the Subscriber, to the extent available, with the following information: (i) the nature of the Security Incident including, if possible, the categories and approximate number of affected Data Subjects and the categories and approximate number of Personal Data records affected; (ii) the name and contact details of the Data Protection Officer or other point of contact from whom further information may be obtained (iii) the likely consequences of the Security Incident; and (iv) the steps taken or proposed to be taken by the Company to remedy the Security Incident, including, where appropriate, steps to mitigate any adverse consequences.

4.3 The Company and the Subscriber will coordinate to investigate any Security Incident.

5. Subcontracting

5.1 The Subscriber gives its general written consent for the processing of Personal Data by (second-tier) subcontractors and in particular for the subcontractors listed below, which are to be considered as "Approved Subcontractors" for the purposes of this Annex:

• Amazon Web Services (for hosting certain Personal Data);
• Twilio Inc. (for multi-factors authentication purposes);
• Powens SAS (for aggregation services if this service has been adhered to by the Subscriber);
• Flanks (Split Payments SL) (for aggregation services if this service has been adhered to by the Subscriber).

5.2 If the Company intends to subcontract all or part of the processing of Personal Data to subcontractors other than Approved Subcontractors, the Company will inform the Subscriber in advance of its intention to recruit another subcontractor so that the Subscriber has the opportunity to raise objections. If the Subscriber does not object within a reasonable period of time, and at the latest within fifteen (15) calendar days, the Subscriber shall be deemed to have tacitly approved such other subcontractor who shall be deemed an Approved Subcontractor for the purposes of this Annex.

6. Transfers of Personal Data to Third Countries

The Company will not transfer Personal Data to a Third Country unless: (i) there has been an adequacy decision made by the European Commission in respect of that Third Country in accordance with the Applicable Data Protection Legislation and the transfer falls within the scope of that adequacy decision or (ii) the Subscriber and/or the Company has entered into an agreement with the entity located in a Third Country containing the standard contractual clauses as approved by the European Commission (“EU SCCs”) or by another competent public authority in accordance with the Applicable Data Protection Legislation. The Company will ensure that it implements all appropriate measures to ensure a substantially equivalent level of protection for Personal Data in the Third Country as compared to their level of protection in the European Economic Area. The Company will terminate any transfer in respect of which a substantially equivalent level of protection of Personal Data cannot be guaranteed.

7. Audit

7.1 The Subscriber may request in writing, and the Company shall permit the Subscriber to obtain copies of any non-confidential information that is reasonably necessary to verify the Company's compliance with its obligations under this Annex. The Company undertakes to provide, to the best of its knowledge, the information requested within a reasonable time, taking into account the amount and complexity of the information requested.

7.2 To the extent that the Subscriber has not obtained the necessary information in accordance with Article 7.1, the Subscriber has the right to request that audits be carried out on the Company, including inspections, by the Subscriber itself or by another auditor appointed by it, and that the Company contribute to such audits. Such a request must be provided in writing to the Company at least sixty (60) calendar days before the audit takes place. The audit shall be conducted during normal business hours and may not affect the day-to-day operations of the Company. The audit will not take longer or require more resources than necessary to obtain the information requested. The Subscriber and or its appointed auditor will submit to reasonable specific confidentiality obligations in advance in respect of the requested information. Where applicable, the auditor appointed by the Subscriber may not be a direct competitor of the Company. The Subscriber and the Company will agree on a written plan of action containing the exact scope of the information requested and the information systems to be audited. The Subscriber will bear all costs and expenses associated with the audit (including costs and expenses incurred by the Company in connection with the Company's assistance with the audit).

8. Support

The Company will cooperate fully with the Subscriber, and at the Subscriber's expense, in (i) following up on requests made by Data Subjects to exercise their rights; and (ii) conducting data protection impact assessments in connection with the provision of the Services.

9. Duration

This Schedule shall remain in force for as long as the Company provides the Services under the Agreement.

10. Return/Destruction of Personal Data

10.1 Within a maximum of three (3) months after the expiration or termination of the Agreement, the Company will, at the Subscriber's option: (i) return to the Subscriber, in a commonly used electronic format, all Personal Data that, as of the date of expiration or termination, is in the Company's possession; and/or (ii) destroy or purge from its systems all Personal Data that, as of the date of expiration or termination, is in the Company's possession. This obligation does not apply, however, to Personal Data that the Company has archived on its backup systems, which Personal Data is securely isolated, protected from further processing and automatically deleted within a maximum of 12 months in accordance with the Company's backup policy.

10.2 The provisions of the preceding paragraph shall not apply to Personal Data that the Company is required by applicable law to retain after the termination or expiration of the Agreement, in which case the provisions of this Schedule shall survive the termination or expiration of the Agreement and shall continue to apply to such Personal Data and the Company shall discharge its obligation under the preceding paragraph once the Company is no longer required to retain such Personal Data.

‍