{"id":44082,"date":"2025-11-28T13:31:37","date_gmt":"2025-11-28T12:31:37","guid":{"rendered":"https:\/\/vintegris.com\/general-terms-and-conditions-of-service-nebulasuite\/"},"modified":"2025-12-10T11:07:57","modified_gmt":"2025-12-10T10:07:57","slug":"general-terms-and-conditions-of-service-nebulasuite","status":"publish","type":"page","link":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/","title":{"rendered":"General Terms and Conditions of Service nebulaSUITE"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"44082\" class=\"elementor elementor-44082 elementor-43761\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-129c4f2c e-flex e-con-boxed e-con e-parent\" data-id=\"129c4f2c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7b25dc59 elementor-widget elementor-widget-heading\" data-id=\"7b25dc59\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">General Terms and Conditions of Service nebulaSUITE<\/h1>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-663e6b86 e-flex e-con-boxed e-con e-parent\" data-id=\"663e6b86\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-5e398652 e-con-full e-flex e-con e-child\" data-id=\"5e398652\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t<div class=\"elementor-element elementor-element-30b20d08 e-con-full e-flex e-con e-child\" data-id=\"30b20d08\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4d783474 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"4d783474\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Terms and conditions<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6172f063 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"6172f063\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><a href=\"#Anexo1\">Annex I<\/a><br> <span style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\"><a href=\"#Anexo2\">Annex II<\/a><br><\/span> <a href=\"#Anexo3\">Annex III<\/a><\/p><p><strong><span style=\"color: #0078aa;\"><a style=\"color: #0078aa;\" href=\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/Condiciones-Generales-nebulaSUITE_v3.6.4-Noviembre-2025.pdf\" target=\"_blank\" rel=\"noopener\">Download PDF-ESP<\/a><\/span><\/strong><br> <strong><span style=\"color: #0078aa;\"><a style=\"color: #0078aa;\" href=\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/nebulaSUITE-General-Conditions-of-Service_-v3.6.4-November-2025.pdf\" target=\"_blank\" rel=\"noopener\">Download PDF-ENG<\/a><\/span><\/strong><\/p><p><em>Last update v3.6.4 November 2025<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2c9e84d5 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"2c9e84d5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>First: Definitions<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e3c5fb9 elementor-widget elementor-widget-text-editor\" data-id=\"e3c5fb9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\"><b>Service Level Agreement:<\/b> Clauses or particularities of the contract signed between the parties or included in these General Conditions that develop and stipulate the services in an objective manner in terms of level and quality that will be applicable.<\/p><p class=\"p1\"><b>Third-party applications \/ third-party software:<\/b> Third-party applications that may interact with V\u00cdNTEGRIS software.<\/p><p class=\"p1\"><b>Client:<\/b> Any individual or legal entity, duly represented, that contracts the nebulaSUITE Services provided by V\u00cdNTEGRIS. Unless otherwise agreed, the Client declares that they own the equipment on which the application is used or are authorized to use it. Furthermore, they declare that they have sufficient authority to bind the legal entity they represent to V\u00cdNTEGRIS&#8217;s documentation and these General Terms and Conditions, such that the use and payment of these services will constitute sufficient proof of the execution of the contracts and of acting with sufficient authority to bind the company they represent.  <\/p><p class=\"p1\"><b>Partner:<\/b> A company that meets the requirements to participate as a reseller of V\u00cdNTEGRIS solutions, acting on its own behalf, with its own organization and in direct relation to the customers who consume V\u00cdNTEGRIS solutions and services.<\/p><p class=\"p1\"><b>General Conditions:<\/b> This refers to the present general conditions, applicable in all cases to the Service, and its annexes.<\/p><p class=\"p1\"><b>Special Conditions:<\/b> This refers to the specific conditions that stipulate, where applicable, the personalized details of the Service and the ancillary services agreed between V\u00cdNTEGRIS and the Client.<\/p><p class=\"p1\"><b>Customer data:<\/b> Data entered by the Customer that will be collected systematically and be individually accessible<b> <\/b>by V\u00cdNTEGRIS.<\/p><p class=\"p1\"><b>Equipment:<\/b> Computers, tablets, smartphones, and any other electronic machines capable of storing and processing information for the proper development of the software or those devices that interact with the V\u00cdNTEGRIS service.<\/p><p class=\"p1\"><b>License:<\/b> Rights granted by V\u00cdNTEGRIS to the Client under the terms and conditions set out in the relevant contract, which include, among others, the limits on copying, installing, using, displaying and running the software.<\/p><p class=\"p1\"><b>Complementary Program:<\/b> This refers to any software tool or component owned or licensed by V\u00cdNTEGRIS, which V\u00cdNTEGRIS makes available to you for download as part of the Cloud Services to facilitate your access, operation, and\/or use of the Services Environment. It does not include separately licensed third-party technology. <\/p><p class=\"p1\"><b>Economic proposal:<\/b> This includes the specifications of the service contracted by the Client, including the number of users who can access the contracted Services.<\/p><p class=\"p1\"><b>SaaS Service:<\/b> Software as a Service. These are services provided via the internet by V\u00cdNTEGRIS to the Client, in relation to the use of the contracted service, through the SaaS Services platform and within the cloud computing infrastructure. <\/p><p class=\"p1\"><b>Applicant:<\/b> Natural person who, for the purposes of these General Conditions, acts on behalf of and represents the Client, and who REQUESTS from V\u00cdNTEGRIS, the provision of the nebulaSUITE service.<\/p><p class=\"p1\"><b>User:<\/b> Person authorized by the Client to use the V\u00cdNTEGRIS Software.<\/p><p class=\"p2\">V\u00cdNTEGRIS <b>:<\/b> It is the company V\u00cdNTEGRIS, SLU, with registered office at Calle Pallars 99, floor 3, office 33, 08018 Barcelona, Spain, and CIF B-62913926, and registered in the Mercantile Registry of Barcelona.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3e488021 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"3e488021\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Second: Vintegris Services<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5d8341d1 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"5d8341d1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">The Applicant, a natural person who for the purposes of these General Conditions acts in the name and on behalf of the Client, REQUESTS from V\u00cdNTEGRIS, the provision of the nebulaSUITE service.  <strong>nebulaSUITE includes the following services:<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7a3b8e19 elementor-widget__width-initial elementor-widget elementor-widget-jet-table\" data-id=\"7a3b8e19\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-table.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-table jet-elements\">\n\t\t<div class=\"jet-table-wrapper jet-table-responsive-mobile\">\n\t\t\t<table class=\"jet-table jet-table--fa5-compat\">\n\t\t\t\t<thead class=\"jet-table__head\"><tr class=\"jet-table__head-row\"><th class=\"jet-table__cell elementor-repeater-item-e3db0da jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Service Name<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-af41221 jet-table__head-cell\" colspan=\"10\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Description<\/div><\/div><\/div><\/th><\/tr><\/thead>\n\t\t\t\t\t\t\t\t<tbody class=\"jet-table__body\"><tr class=\"jet-table__body-row elementor-repeater-item-5b67eaa\"><td class=\"jet-table__cell elementor-repeater-item-482a65a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">nebulaUSERS<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-823eb92 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">User management service<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-63ad285\"><td class=\"jet-table__cell elementor-repeater-item-55d1878 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">nebulaID<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-621b72a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Identification issuance service<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-3cce18d\"><td class=\"jet-table__cell elementor-repeater-item-2510319 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">nebulaCERT<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-044587d jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Centralized certificate management service<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-c9e1ef1\"><td class=\"jet-table__cell elementor-repeater-item-e228778 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">nebulaACCESS<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-2973659 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Multi-factor dynamic authentication service<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-7d14036\"><td class=\"jet-table__cell elementor-repeater-item-cfaae93 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">nebulaSIGN<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-d1fe72c jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Signature portal service\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-9821ae4\"><td class=\"jet-table__cell elementor-repeater-item-40896c3 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">nebulaSNE<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-3778bfd jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Electronic notification management service<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-e24e652\"><td class=\"jet-table__cell elementor-repeater-item-2192b5e jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">nebulaDISCOVER<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-c844e61 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Digital certificate discovery service\n<\/div><\/div><\/div><\/td><\/tr><\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-793cab90 e-con-full e-flex e-con e-child\" data-id=\"793cab90\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-986891c elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"986891c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">The services indicated are provided by V\u00cdNTEGRIS in SaaS mode after their selection by the Client or licensee, using various computer applications owned by V\u00cdNTEGRIS located on a technological platform to which the Client will have access, once the relevant usage licenses have been granted.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1ce223ad e-con-full e-flex e-con e-child\" data-id=\"1ce223ad\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-62936e02 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"62936e02\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Third: Obligation of the General Conditions<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1bee8522 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"1bee8522\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>These General Terms and Conditions for the Contracting of Services (\u201cGeneral Terms\u201d), without prejudice to the documents listed in Clause Six, regulate the use of all nebulaSUITE services.<\/p><p>The &#8220;General Terms and Conditions&#8221; applicable to each Client are the latest version that the Client accepts and signs at the time of initial subscription\/renewal. If no version is available, the General Terms and Conditions published on the website and in effect at the time of subscription\/renewal will apply. <\/p><p>This version of the \u201cGeneral Conditions\u201d will be applicable and valid during the contracted or renewed subscription period (12 months by default).<\/p><p>V\u00cdNTEGRIS reserves the right to modify the General Conditions periodically and at its sole discretion, with these updated Conditions being applicable at the next renewal of the Client&#8217;s subscription, taking into account what is indicated in the previous paragraph and with the exception of the indications described in clause Eighteen.<\/p><p>The Client accepts and undertakes to make proper use of the nebulaSUITE services, in accordance with all applicable laws of the European Union and Spain, as well as with the corresponding regulations, rules, notices, criteria, reports and technical standards that may be appropriate (collectively referred to as \u201cLaws\u201d), and in accordance with the rules of good faith, public order and contained in the General Conditions, without prejudice to the order of precedence established in clause Twenty-Sixth.<\/p><p>These General Terms and Conditions are implemented in accordance with the Law, their own agreements, and the Confidential Practice Statement (CPS) in force at the time of the provision of each service, which can be found updated at the internet address https:\/\/www.vincasign.net\/<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-168a5635 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"168a5635\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Fourth: Hiring process\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-18adc769 e-con-full e-flex e-con e-child\" data-id=\"18adc769\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4e88ba3b elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"4e88ba3b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>For the contracting of the Service, the Applicant must sign the acceptance sheet included in the economic proposal, where the acceptance of the Particular Conditions and General Conditions attached in the economic proposal is declared.<\/p><p>Once the corresponding documentation has been signed, V\u00cdNTEGRIS will give the Client access to the Platform.<\/p><p>The completion of the subscription process is subject to verification of the information provided by V\u00cdNTEGRIS. Once the subscription is finalized, V\u00cdNTEGRIS will send the customer a Purchase Confirmation Letter via email containing the subscription details. Additionally, except in the case of renewals, V\u00cdNTEGRIS will send the customer a document called &#8220;Welcome Info (WI)&#8221; via email, which will include instructions for accessing the platform, the subscription validity period, the User ID for access, and the customer&#8217;s email address where the password reset link will be sent.  <\/p><p>It is important to note that the subscription start and end dates (validity period) will be those indicated in the &#8220;Welcome Info (WI)&#8221; document. The start date will coincide with the activation date of the environment and the date from which the subscription is contracted, and the end date will be the maximum contracted date. These dates will be used to determine the subscription&#8217;s expiration and renewal. <\/p><p>The password set by the user is unique, personal, and non-transferable. The Client is obligated to use their passwords and other credentials diligently and keep them secret. Consequently, the Client is responsible for the proper safekeeping and confidentiality of any identifiers and\/or passwords and agrees not to transfer their use to third parties, whether temporarily or permanently, nor to allow access to them by unauthorized persons. The Client will be responsible for the use of the Services by any unauthorized third party who uses a password due to the User&#8217;s negligence or loss of said password. Therefore, the Client is obligated to immediately notify V\u00cdNTEGRIS of any event that could lead to the misuse of identifiers and\/or passwords, such as theft, loss, or unauthorized access, so that they can be immediately canceled. Until such events are reported, V\u00cdNTEGRIS will be exempt from any liability that may arise from the misuse of identifiers or passwords by unauthorized third parties.     <\/p><p>It is recommended to change this password periodically and not use the same one for multiple services.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2c90b946 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"2c90b946\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Fifth: Applicant limitations\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4148d4d0 e-con-full e-flex e-con e-child\" data-id=\"4148d4d0\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1f2482e elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"1f2482e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The Applicant, at the time of requesting nebulaSUITE services and in accordance with current legislation, has been informed of the precise instructions for the use of the services, the limitations of use and the way in which V\u00cdNTEGRIS limits its possible liability, as well as the sufficient authorization of V\u00cdNTEGRIS, and the relevant dispute resolution procedures, and accepts them expressly and without reservation, for the purposes of what is indicated in articles 5 and 7 of Law 7\/1998, of April 13, on general conditions of contracting.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e5f9db4 e-con-full e-flex e-con e-child\" data-id=\"e5f9db4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-54ffd35a elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"54ffd35a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Sixth: Regulation of nebulaSUITE services\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1f0abd57 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"1f0abd57\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The nebulaSUITE services are specifically governed by the following service documentation, which is fully incorporated into the contract: 1) The Economic Proposal and any Special Conditions included therein. 2) These General Conditions. 3) Annex I \u201cSpecific Terms of the nebulaSUITE Services\u201d. 4) Annex II \u201cService Level Agreements (SLAs)\u201d. 5) Annex III \u201cData Processing Agreement (DPA)\u201d.    <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-221048ea elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"221048ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Seventh: Rates, billing and payment methods<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-58314894 e-con-full e-flex e-con e-child\" data-id=\"58314894\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-501f30a8 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"501f30a8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The Client shall pay the amount corresponding to the services referred to in these General Terms and Conditions in accordance with the price list approved by V\u00cdNTEGRIS at any given time, the current value of which is indicated in the Economic Proposal approved by both parties prior to the commencement of nebulaSUITE services. Notwithstanding any information that may appear in the price list, the price that the Client must pay is that which appears in the Economic Proposal. <\/p><p>The prices of the services contracted by the Client are found in the Economic Proposal, as well as the details of the services and technologies contracted by the Client.<\/p><p>In the event that the Client contracts the services through a V\u00cdNTEGRIS partner, V\u00cdNTEGRIS will invoice the partner for the corresponding amount indicated in the Economic Proposal approved by both parties prior to the start of the nebulaSUITE services.<\/p><p>The Partner will pay the corresponding amount according to the payment terms established in the Economic Proposal.<\/p><p>In these cases, V\u00cdNTEGRIS will not be responsible for the commitments that the Partner has acquired directly with the Client, it will only respond according to the services agreed and contracted by the Partner for the Client.<\/p><p>V\u00cdNTEGRIS reserves the right to increase the prices of its product subscriptions, which may be due, <em>among other things<\/em> , to increased costs to compensate for newly added features, costs of new procedures and certifications imposed by regulations, or the expansion of new services included in the subscriptions. If V\u00cdNTEGRIS anticipates such an increase, it will notify the customer 60 days in advance of the renewal date of the affected subscriptions, and the customer may then decide whether to renew or terminate their subscriptions. <\/p><p>The payment method and billing milestones are outlined in the Economic Proposal.<\/p><p>All payments will be made in euros (\u20ac), unless otherwise stated in the Economic Proposal.<\/p><p>V\u00cdNTEGRIS will invoice the Client as follows:<\/p><ol><li><strong>Standard Billing<\/strong><ol><li>100% of the Technology and Services will be billed (up to 5 days), after the provision to the Client (activation of the environment \/ sending of Welcome Info).<br><br><\/li><\/ol><\/li><li><strong>Special Billing.<\/strong>  The milestones and billing amounts are as follows:<br><ol><li>100% of the Technology, after making it available to the Client (activation of the environment \/ sending Welcome Info).<\/li><li>50% of the Services are due at the start of the project. The remaining 50% is due upon completion and after client approval. <br><br><\/li><\/ol><\/li><\/ol><p>If the Client contracts the services through a V\u00cdNTEGRIS Partner, the billing and payment policies indicated above will apply directly to the Partner.<\/p><p>If the Client fails to make full or partial payment of the amounts owed within one month of the agreed invoice due date, V\u00cdNTEGRIS may, after giving the Client prior notice, temporarily suspend the service. The service restriction will affect the services for which payment is overdue and may also affect other dependent services. Temporary suspension does not exempt the Client from the obligation to continue making the corresponding fixed periodic payments.  <\/p><p>V\u00cdNTEGRIS may also suspend or cancel the provision of the Service in the event that:<\/p><ol><li>the Client fails to comply with any of the obligations incumbent upon him or her under these General Conditions or the applicable Special Conditions;<\/li><li>has provided false or incorrect information in the application for registration with the Service;<\/li><li>V\u00cdNTEGRIS considers and\/or has reasonable indications that illicit, illegal, or antisocial activities, or activities contrary to public order and\/or good morals, or contrary to the provisions of the General Conditions themselves, could be carried out through the Service.<br><br><\/li><\/ol><p>A delay in payment for a period exceeding 2 months or the temporary suspension of the contract on two occasions due to late payment of any of the contracted services, will entitle V\u00cdNTEGRIS to the definitive interruption of all contracted services and the corresponding termination of the contract, after notifying the Client 10 business days in advance, indicating the date on which it will take place.<\/p><p>The policies regarding the suspension and cancellation of services due to non-payment will also apply to cases where the contract was made through V\u00cdNTEGRIS partners, and the billing and payment were delegated to them, and they failed to make the payment.<\/p><p>The Partner may request that V\u00cdNTEGRIS deactivate each active Subscription separately, and depending on the Solution, the Client will have limited or no access to it. V\u00cdNTEGRIS will not be liable to the Client in any way for the Partner&#8217;s deactivation of the Client&#8217;s Subscription. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ca4aba6 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"6ca4aba6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Eighth: Validity<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9324a4e e-con-full e-flex e-con e-child\" data-id=\"9324a4e\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-76ad6de4 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"76ad6de4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Except for clauses 9, 10, 11, 12, and 19, these General Terms and Conditions shall remain in effect for the duration of the service provided and shall be specified in the WI document or, failing that, in the purchase confirmation. The remaining clauses shall remain in effect until the legally established periods expire in each case, or, if no such periods are established, until any legal actions that V\u00cdNTEGRIS may take against the Client or third parties are time-barred or expire. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-74bb6728 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"74bb6728\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Ninth: Termination of services<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-520f2dda e-con-full e-flex e-con e-child\" data-id=\"520f2dda\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fab88a2 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"fab88a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The Services under this Contract will be provided during the Service Period defined in the WI document or failing that in the purchase confirmation, unless suspended or terminated early in accordance with these General Conditions or the Economic Proposal.<\/p><p><b>Early termination without just cause.  <\/b>The Customer may choose to cancel their subscription early, at any time, but will not receive any refund of previously paid fees and must immediately pay all outstanding fees due until the end of the Subscription Term. In this case, the service will remain active until the initially defined expiration date, unless the Customer expressly instructs us to deactivate the account. <\/p><p><b>Early termination for justified cause.  <\/b>Either party may terminate the provision of the Services for just cause as follows: (i) by giving the other party thirty (30) days&#8217; prior notice that a material breach has occurred, provided that such breach has not been remedied by the end of that period. In this case, V\u00cdNTEGRIS reserves the right to deactivate the Customer&#8217;s SaaS Service and terminate the license to use the software related to the Services; all of this without prejudice to any right of access in relation to personal data, as provided in clause 17 of these General Terms and Conditions. <\/p><p>Also, V\u00cdNTEGRIS may terminate the provision of the Services for justified cause with thirty (30) days&#8217; prior notice if V\u00cdNTEGRIS determines that the Client is acting (or has acted) in a manner that reflects negatively on V\u00cdNTEGRIS or affects V\u00cdNTEGRIS or its prospects or clients.<\/p><p>In any of the aforementioned cases, if V\u00cdNTEGRIS declares the termination of services due to infringement or improper conduct by the Client, the Client will not receive any refund of previously paid fees and must immediately pay all unpaid fees owed until the end of the Subscription Period.<\/p><p>Except for these reasons, the Service may not be terminated before the end of the Subscription Term.<\/p><p><strong>Termination within the subscription period.<\/strong>  If the Customer wishes to not renew the subscription service, they must notify at least one month in advance of the current subscription date; otherwise, the customer may be required to pay cancellation fees and comply with the other conditions specified in this cancellation section.<\/p><p>If you cancel the Services, they will end on the final date of the current Service period or, if V\u00cdNTEGRIS charges invoices to your account periodically, at the end of the period in which you canceled.<\/p><p>To cancel the Services you must contact your Commercial Manager or notify the address <a href=\"mailto:customercare@vintegris.com\">customercare@vintegris.com<\/a> .<\/p><p>Please note that you will be required to pay all charges made to your billing account for the Services up to the subscription termination date.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3980a658 e-con-full e-flex e-con e-child\" data-id=\"3980a658\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-31eabca elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"31eabca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Tenth: Software License<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-589714da elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"589714da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Unless accompanied by a separate license agreement between V\u00cdNTEGRIS and the customer, all software provided to you by V\u00cdNTEGRIS as part of the Services is subject to these Terms:<\/p><ol><li>A temporary, onerous, non-exclusive, non-transferable license is granted, in accordance with the provisions of these General Conditions and, where applicable, the Special Conditions, for the right of reproduction for the purposes of the right of use in relation to the nebulaSUITE service modality contracted, in exchange for payment of the fee established in Clause 7.<br><br>The software or website that is part of the Services may include third-party code. Any scripts or code belonging to third parties, linked to or referenced by the software or website, are licensed to you by the third-party owners of such code, not by V\u00cdNTEGRIS. Any notices included in this document regarding third-party code are for informational purposes only.  <br><br><\/li><li>V\u00cdNTEGRIS reserves all rights to the software not expressly granted by V\u00cdNTEGRIS under these Terms. This license does not grant any rights with respect to the following; specifically, the licensee may not do the following unless authorized in writing by V\u00cdNTEGRIS: <br><br><ol><li>To circumvent or omit the technical protection measures contained in or related to the software or the Services;<\/li><li>Disassemble, decompile, decrypt, emulate, exploit a vulnerability or reverse engineer all or part of the software or any other aspect of the Services included in or accessible through them, without prior written permission from V\u00cdNTEGRIS, except and only to the extent that such activity is expressly permitted by applicable intellectual property law;<\/li><li>Copying, modifying, creating derivative works or otherwise attempting to extract the source code of the Software or any of the V\u00cdNTEGRIS Services;<\/li><li>Sublicense, transfer, reproduce or distribute any of the Services;<\/li><li>Selling, reselling or otherwise making the Services and\/or the Software available to a third party as part of a commercial offer that does not have material value independent of the Services;<\/li><li>Reproducing, distributing, selling, transforming, publishing, publicly communicating, renting, leasing or transmitting to any person or entity, partially or in whole, in any form, or by any means, whether mechanical, magnetic, by photocopy or any other, without prior written permission from V\u00cdNTEGRIS, the software.<\/li><li>Separate software components or services for use on different devices;<\/li><li>Publish, copy, rent, lease, sell, export, import, distribute or loan the software or the Services;<\/li><li>Transfer the software, software licenses, or rights to access or use the Services;<\/li><li>Using the Services in an unauthorized manner that may interfere with their use by any other person or with their access to services, data, accounts or networks or in any other manner that is not in accordance with applicable law;<\/li><li>Allowing access to the Services or modification of devices authorized by V\u00cdNTEGRIS by unauthorized third-party applications.<\/li><li>Create telematic \u201clinks\u201d with the services described in this Agreement, nor adapt or duplicate any content of the Software on any other server or wireless device;<\/li><li>Accessing the product or services covered by these General Conditions in order to create a competitive product or service, or to create a product using ideas, features, functions or graphics similar to those of the services provided for therein.<br><br><\/li><\/ol><\/li><\/ol><p>Access to the Service is only permitted to those persons who have the password, under the responsibility of the Client, and the Service will be limited to the number of users that corresponds according to the Services contracted by the Client and as described in the Economic Proposal.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3c04c49d elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"3c04c49d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Eleventh: Guarantee<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-76673d89 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"76673d89\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>SaaS services are composed of elements from different contractual causes, on the one hand, those derived from the software license and on the other hand, those derived from its deployment in cloud infrastructure.<\/p><ol><li><p>Regarding defective compliance resulting from V\u00cdNTEGRIS software:<\/p><p>V\u00cdNTEGRIS warrants that: (i) it will provide the Services in all material respects as described in these Terms and the Special Conditions; (ii) it will provide the Services professionally in accordance with these Terms and the Special Conditions; and (iii) it will not knowingly introduce any viruses or other forms of malicious code into the service.   <\/p><p>To the extent permitted by law, V\u00cdNTEGRIS Services are provided &#8220;as is&#8221; without any warranty or condition other than that set forth in the preceding paragraph.<\/p><p>If the Services provided to the Client are not provided in accordance with the above guarantee, the Client must notify V\u00cdNTEGRIS in writing, describing the deficiency in the Services.<\/p><p>Within the first 5 days, V\u00cdNTEGRIS will make a diagnosis of the technical reasons for the defective compliance in the provision of its services in accordance with these General Conditions and the Special Conditions.<\/p><p>If the service can be restored in less than 10 days, V\u00cdNTEGRIS will make all commercially reasonable efforts to correct the situation, and will propose alternative technical measures to the customer to minimize any potential damage that may affect the customer.<\/p><p>If it is not possible to provide the services in accordance with the foregoing warranty within 15 days of notification of the defective performance, V\u00cdNTEGRIS will propose alternative technical measures to the Client to minimize any potential damages that may affect the Client. Within sixty (60) days from the date of notification of non-performance, either party may terminate the Services by sending written notice to the other. <\/p><p>The return of prepaid amounts from the moment of breach of the guarantee will be the RESPONSIBILITY OF V\u00cdNTEGRIS, making said amount the maximum compensation for damages that the Client may claim and demand from V\u00cdNTEGRIS, provided that it is not attributable to gross negligence or willful misconduct by V\u00cdNTEGRIS.<\/p><\/li><li><p>Regarding defective compliance resulting from the availability of the cloud infrastructure.<\/p><p>In this sense, Annex II, which details the terms of the Service Level Agreements (SLAs) offered by V\u00cdNTEGRIS to its clients, forms an integral part of this contract.<\/p><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-50db65de elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"50db65de\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Twelfth: Limitation of liability and exclusion of warranties<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5adba618 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"5adba618\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Any liability on the part of V\u00cdNTEGRIS for failure to comply with the level of service as set out in ANNEX II will only be granted if V\u00cdNTEGRIS was responsible for the failure.<\/p><p>In particular, V\u00cdNTEGRIS is not responsible for:<\/p><ol><li>No unavailability, suspension, or termination of any of the services, or any other performance issues thereof: (i) resulting from a suspension caused by factors beyond V\u00cdNTEGRIS&#8217;s reasonable control, including any force majeure event or internet access or related problems beyond its point of demarcation; (ii) resulting from any action or omission by the Client or a third party; (iii) resulting from Client personnel, software, or any other technology and\/or equipment of a third party (other than third-party equipment that is under the direct control of V\u00cdNTEGRIS); (iv) resulting from a suspension and termination of the Client&#8217;s right to use the services pursuant to the service agreement; (v) affecting test, development, pre-production, or commercial environments; (vi) resulting from the Client&#8217;s failure to follow V\u00cdNTEGRIS&#8217;s instructions; or (vii) that which results from its equipment, software or other technology and\/or third-party equipment, software or other technology (other than third-party equipment that is under the direct control of V\u00cdNTEGRIS.       <\/li><li>The modification of the V\u00cdNTEGRIS service by any other person, or the modification by V\u00cdNTEGRIS of said service in accordance with the specifications or instructions provided by the Client.<\/li><li>The content, including links to third-party websites and user-generated activities, is not attributable to V\u00cdNTEGRIS and does not represent the opinion of V\u00cdNTEGRIS. <\/li><li>To compensate for any damage, direct or indirect, that results from the use of the service in a manner that violates the Law or these General Conditions.<\/li><li>V\u00cdNTEGRIS shall not be liable for any failure or delay in performing its obligations under these General Terms and Conditions to the extent such failure or delay results from circumstances beyond V\u00cdNTEGRIS&#8217;s reasonable control (for example, labor disputes, natural disasters, war or terrorist activity, malicious damage, accidents, or compliance with applicable law or government regulation). V\u00cdNTEGRIS will endeavor to minimize the effects of such events and fulfill its obligations that are not affected by them. <\/li><li>The unavailability, suspension or termination of any of the contracted services, or any other performance problem as a result of the preventive and corrective maintenance carried out by V\u00cdNTEGRIS in accordance with the section \u201cEvolution of the service\u201d described in Annex II, provided that this is communicated to the Client in advance.<br><br><\/li><\/ol><p>V\u00cdNTEGRIS will only be liable if the material obligations of the Contract are intentionally breached or when required by applicable law.<\/p><p>Additionally, unless otherwise agreed in writing, V\u00cdNTEGRIS will not be obligated to make any modifications to its systems or services to adapt them to operational requirements demanded by any regulatory or business need of the Client.<\/p><p>Neither party shall be liable for any indirect, incidental, special, punitive or consequential damages, or for any loss of profits, revenue (excluding fees due under this Agreement), data or use of data.<\/p><p>V\u00cdNTEGRIS&#8217;s total liability for any damage arising out of, or in any way related to, this Agreement, whether contractual, extra-contractual, or otherwise, shall be limited to the amount of the fees paid to V\u00cdNTEGRIS for the Services governed by the contract giving rise to the liability during the twelve (12) month period immediately preceding the event giving rise to such liability, less any refunds or credits received from V\u00cdNTEGRIS under the contract, provided that it is not attributable to gross negligence or willful misconduct by V\u00cdNTEGRIS.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65d8f699 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"65d8f699\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Thirteenth. Customer Obligations \n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b0d7a7 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"b0d7a7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>The Client must:<\/strong><\/p><ol><li class=\"li1\">To ensure the maintenance of the facility for proper access to services and, if necessary, to adapt it to the technological evolution of the contracted services.<\/li><li class=\"li1\">Comply with the instructions of V\u00cdNTEGRIS and those indicated in the documentation provided to you, if applicable.<\/li><li class=\"li1\">Pay the agreed economic consideration in the Economic Proposal.<\/li><li class=\"li1\">To facilitate the proper performance of activities by V\u00cdNTEGRIS.<\/li><li class=\"li1\">Do not share your user accounts and access with third parties. The Client will be responsible for the diligent and proper use of access to the contracted Service and\/or Software. <\/li><li class=\"li1\">It will ensure that the use that it and its End Users make of the Services, including all use made of Customer Data, as well as access to it, complies with the provisions of these General Conditions, that they will act diligently in the use of the services and will not use them to carry out any activity contrary to the laws, morals or public order or to use the services for fraudulent, illicit, prohibited purposes or that may cause harm to the interests of third parties, V\u00cdNTEGRIS declining any responsibility that may arise from these actions.<\/li><li class=\"li1\">Ensure that the data you enter into the platform is legal and that you are duly authorized to possess and process it.<\/li><li class=\"li1\">To inform V\u00cdNTEGRIS of any fact or situation that may have occurred that could jeopardize the security of access by authorized users.<\/li><li class=\"li1\">It is forbidden to force errors or look for security vulnerabilities on the platform without express authorization from V\u00cdNTEGRIS.<\/li><li class=\"li1\">Do not subject the platform to workloads clearly intended to destabilize it, including distributed denial-of-service (DDoS) attacks or similar situations. If such situations are detected, the previously indicated service level will not apply, and it will be considered an emergency. <\/li><li class=\"li2\">Observe the restrictions set out in the clauses relating to the license and Intellectual Property.<\/li><li class=\"li3\">The Client shall be liable to V\u00cdNTEGRIS and any third party acting in good faith, for any damages resulting from the Client&#8217;s breach of any of the obligations set forth in these General or Special Conditions.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3dbec47c elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"3dbec47c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Fourteenth: Intellectual Property\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1a86f0cf e-con-full e-flex e-con e-child\" data-id=\"1a86f0cf\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5ec76508 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"5ec76508\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Without prejudice to the provisions of clause NINTH, any computer program (Software) supplied, as well as all its documentation and\/or information relating thereto, is the exclusive property of V\u00cdNTEGRIS or, where applicable, of V\u00cdNTEGRIS&#8217;s Software Providers.<\/p><p>All intellectual property and copyright rights over the Program, the documentation, as well as over any other work, program and\/or product that may be delivered by V\u00cdNTEGRIS to the Client in compliance with the applicable agreements according to Clause Six belong to V\u00cdNTEGRIS or its Software Providers.<\/p><p>The Client shall refrain from deleting, modifying or otherwise altering the reservation of rights notices in favor of the licensor, as well as, among others, the name, logo or trademark that identifies the latter entity in all documentation provided on any medium in the context of the agreements applicable according to Clause Six.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-70ea71eb elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"70ea71eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Fifteenth: Customer Brands<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-11d60698 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"11d60698\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>By accepting these General Conditions, the Client authorizes V\u00cdNTEGRIS to use its trademark(s) and logo(s) (hereinafter, the \u201cTrademarks\u201d) for the sole purpose of using them in commercial presentations to refer to the fact that it is a Client of V\u00cdNTEGRIS.<\/p><p>To that effect, the Client authorizes V\u00cdNTEGRIS to insert and communicate its Trademarks in all advertising and support materials as provided.<\/p><p>The Client authorizes the arrangement and configuration of its Trademarks so that they appear in the form and place appropriate to its image, without altering colors, shapes, symbols or graphics.<\/p><p>Thus, V\u00cdNTEGRIS undertakes to (i) not alter, deface or mutilate the Trademark(s) in any way; (ii) not use the Trademark(s) in a way that harms the prestige or image of the Client; (iii) respect those reasonable indications transmitted by the Client in relation to the use of the Trademark(s) for its protection and maintenance of its distinctive strength, renown and homogeneity.   <\/p><p>The use that V\u00cdNTEGRIS makes of the Trademark(s) during the execution of the commercial agreement between both parties does not mean in any case that V\u00cdNTEGRIS acquires any right over it\/them.<\/p><p>The Client will always have the option to prohibit V\u00cdNTEGRIS from using its trademarks as indicated in this clause. If the Client chooses this option, they must notify V\u00cdNTEGRIS of their intention not to use its trademarks, as stipulated herein, in writing, either physically or electronically. <\/p><p>Upon termination of the commercial relationship between the Client and V\u00cdNTEGRIS, the Client will immediately cease using the Trademark(s).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-823e5c9 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"823e5c9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Sixteenth: Protection of Personal Data<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8418c14 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"8418c14\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>V\u00cdNTEGRIS, as the Data Controller, in compliance with current data protection regulations, informs you of the collection and processing of personal data that it may process as a result of contracting the services included in these General Conditions:<\/p><h5><span style=\"color: #0078aa;\"><strong>Contact person details and data related to the management of the contracted services:<\/strong><\/span><\/h5><p>The identification and contact information provided during the pre-contractual and contractual phases of this relationship will be processed for the purpose of managing the contracted service: providing the required information, managing incidents, administrative tasks, invoicing, and sending information related to the services provided by VINTEGRIS. The legal basis for this processing is the existing pre-contractual\/contractual relationship between both parties and VINTEGRIS&#8217;s legitimate interest in maintaining relationships of any kind with the legal entity where the data subject provides their services. <\/p><p>Data may be communicated to public bodies in compliance with legal obligations.<br> The data retention period will be that established by applicable regulations and, where appropriate, the data will be kept for the time necessary to demonstrate the proper execution of the contract. Basic contact information may also be retained indefinitely for future marketing activities based on VINTEGRIS&#8217;s legitimate interest. <\/p><p>The interested party will inform VINTEGRIS of any changes that occur in the data provided, so that they can be kept up to date.<\/p><h5><strong><span style=\"color: #0078aa;\">Data related to the issuance of certificates<\/span><\/strong><\/h5><p>If the services contracted with VINTEGRIS include the issuance of VINTEGRIS certificates as a qualified trust service provider, the personal data provided will be processed for the purpose of issuing and, where applicable, revoking the certificate. The personal data processed corresponds to the identifying information of the certificate holders and the documents they provide that prove their identity, as well as any attributes that may be included in the certificate. In cases where the certificate so requires, data related to the holder&#8217;s position within the company and\/or their status as a representative or authorized agent will be processed. Additionally, the contact information provided by the signatory (email address and mobile phone number), necessary for the certificate issuance process, will be processed.   <\/p><p>The data may be communicated to competent bodies and auditors in compliance with current regulations<\/p><p>The legal basis for this processing is the existing contractual relationship between both parties and compliance with current regulations applicable to the provision of trust services.<\/p><p>The data retention period will be 15 years from the date the certificate expires in accordance with the applicable regulations.<\/p><p>Furthermore, based on V\u00edntegris&#8217; legitimate interest and in compliance with the requirements established in the regulations applicable to trusted service providers, the data collected for issuing the certificate may be processed for the purposes of conducting internal audits to verify the proper functioning of our processes and to monitor that the actions taken are correct. The data may be processed for these purposes for the time necessary to meet the audit requirements. Likewise, personal data necessary for the internal management of invoicing for issued certificates may be processed. The legal basis for this processing is the legitimate interest of the data controller in issuing invoices for the contracted certificates. The data retention period will be that established in the regulations applicable for accounting and tax purposes and for addressing claims arising from the issued invoices. The data may also be processed for statistical purposes based on the legitimate interest of the data controller.   <\/p><p><strong><span style=\"color: #0078aa;\">Data related to nebulaID (Video identification)<br><\/span><\/strong><br> When issuing certificates, the identity validation process is carried out using Nebula ID, the personal data collected in this process will be processed for the purpose of identifying and validating the identity of the applicant.<span class=\"Apple-converted-space\">  <\/span>The personal data processed are: identification data, image of identity documents, results of OCR processing of the identity documents provided, recorded video image as proof of life, including voice recording, audit record of the verification process and data related to the circumstances of the applicant and that have a relationship with the certificate (nationality, position or representation in the company\u2026)<\/p><p class=\"p3\">Although a facial recognition process is performed using biometric techniques, no biometric data is stored.<\/p><p class=\"p3\">The video identification process and the personal data collected are those established in current regulations, which, along with the data subject&#8217;s consent obtained before the process begins, constitute the legal basis for processing the data. The data subject is informed of the possibility of verifying their identity through other means, such as in-person identity verification. <\/p><p class=\"p3\">This data may be communicated to competent bodies and auditors in compliance with applicable regulations.<\/p><p class=\"p3\">The data retention period is fifteen years from the expiration date of the issued certificate and five years when the validation process has failed and it is considered that there may be an attempt at fraud, counting from the date of its execution, in accordance with the provisions of current regulations.<\/p><p class=\"p3\">Furthermore, based on V\u00edntegris&#8217; legitimate interest and in compliance with the requirements established in the regulations applicable to trusted service providers, the data collected for issuing the certificate may be processed for the purposes of conducting internal audits to verify the proper functioning of our processes and to monitor that the actions taken are correct. The data may be processed for these purposes for the time necessary to comply with the audit requirements. Likewise, personal data necessary for the internal management of invoicing for issued certificates may be processed. The legal basis for this processing is the legitimate interest of the data controller in issuing invoices for the contracted certificates. The data retention period will be that established in the regulations applicable for accounting and tax purposes and for addressing claims arising from the issued invoices. The data may also be processed for statistical purposes based on the legitimate interest of the data controller.   <\/p><p class=\"p1\">When, in any of the data processing activities indicated in this clause, data from third parties is provided, the client must inform the owner of this data beforehand of the terms contained herein.<\/p><p class=\"p1\">At any time, the interested party may submit a request to exercise their rights recognized in the regulations on the protection of personal data, by means of a written and signed request, accompanied by a copy of their national identity document or equivalent document that proves their identity. Likewise, when acting through a representative, it will be necessary to prove the existence of said representation. Requests should be addressed to V\u00cdNTEGRIS. <\/p><ul><li><strong>By email:<\/strong> <a href=\"mailto:incidentesRGPD@old.vintegris.com\">incidentesRGPD@old.vintegris.com<\/a><\/li><li><strong>By mail<\/strong> to the address of the Data Controller: Calle Pallars, 99 <span style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">, Floor 3,<\/span> <span style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">Office 33,<\/span> <span style=\"font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';\">08018 Barcelona<\/span><\/li><\/ul><p class=\"p1\">V\u00cdNTEGRIS also reminds the interested party that they have the right to lodge a complaint with the relevant supervisory authority (Spanish Data Protection Agency).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-73ce7ccf e-con-full e-flex e-con e-child\" data-id=\"73ce7ccf\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-50d4f561 elementor-widget elementor-widget-jet-table\" data-id=\"50d4f561\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-table.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-table jet-elements\">\n\t\t<div class=\"jet-table-wrapper jet-table-responsive-mobile\">\n\t\t\t<table class=\"jet-table jet-table--fa5-compat\">\n\t\t\t\t<thead class=\"jet-table__head\"><tr class=\"jet-table__head-row\"><th class=\"jet-table__cell elementor-repeater-item-e3db0da jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Version Number<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-af41221 jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Effective date<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-7f34191 jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Approved by (Name and position)<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-b5959ef jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Approval Date<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-d82e322 jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Description<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-b82c1da jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Author (Name and position)<\/div><\/div><\/div><\/th><\/tr><\/thead>\n\t\t\t\t\t\t\t\t<tbody class=\"jet-table__body\"><td class=\"jet-table__cell elementor-repeater-item-5b67eaa jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">1<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-482a65a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">28\/02\/2024<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-823eb92 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Matthew Walsh, Chief Executive Officer<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-245dcd5 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">28\/02\/2024<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-df33c15 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Vintegris&#8217; internal information and whistleblower protection system strategy<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-f26f361 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Noem\u00ed Cruz, Head of the Internal Information System<\/div><\/div><\/div><\/td><\/tr><\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5658a597 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"5658a597\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Seventeenth: Data Retention and Deletion<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4e9076a3 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"4e9076a3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>At all times during the term of their subscription, the Customer will have the ability to access the Customer Data stored in the nebulaSUITE Service, as well as the ability to extract and delete it.<\/p><p>The Client will have access to the application&#8217;s audit logs for a period of 12 months. V\u00cdNTEGRIS will continue to safeguard these logs for longer periods in cases where applicable legislation so requires, but they will no longer be accessible to the Client through the platform. <\/p><p>V\u00cdNTEGRIS will retain Customer Data still stored on the nebulaSUITE Services in a limited-functionality account for sixty (60) days following the expiration or termination of the Customer&#8217;s subscription, allowing the Customer to retrieve the data. After the sixty (60) day retention period, V\u00cdNTEGRIS will deactivate the Customer&#8217;s account and delete the Customer Data and Personal Data within an additional ninety (90) days, unless applicable law requires V\u00cdNTEGRIS to retain such data. <\/p><p>In cases where for any reason the Client does not have any access to their account, V\u00cdNTEGRIS will provide alternative mechanisms so that the Client&#8217;s Data can be extracted.<\/p><p>V\u00cdNTEGRIS will not incur any liability for deleting Customer Data or Personal Data, as described in this section.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f749836 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"f749836\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Eighteenth: Security measures<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48eee24 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"48eee24\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">VINTEGRIS guarantees in the provision of its services compliance with the security measures established in the regulations eIDAS, NIS 2, ENS (High) and in the standards ISO 27001, ISO 27017, ISO 27018 and ISO 27701 as accredited by our certifications in these regulations and security standards.<\/p><p class=\"p1\">While VINTEGRIS is responsible for implementing security measures, certain security measures depend on the Client&#8217;s management of them. To guarantee information security, the Client agrees to: <\/p><ul class=\"ul1\"><li class=\"li1\">User Management: VINTEGRIS will provide a user manager account to the person designated by the Client. The Client&#8217;s user manager will handle the creation, deletion, and modification of users within their tenant, with the Client being solely responsible for this management. The Client agrees to properly manage user access, specifically by deactivating (disabling) users who, due to a change in their role, no longer require access to the tenant or who leave the organization.  <\/li><\/ul><ul class=\"ul1\"><li class=\"li1\">Access rights: The Client, through their manager user, will grant access permissions to their users, by assigning the different roles existing in Nebula, that are necessary for the exercise of their functions.<\/li><\/ul><p class=\"p4\">The Client undertakes to conduct a periodic review of the users with access to the tenant and their access rights.<\/p><ul class=\"ul1\"><li class=\"li1\">User responsibility: The Client will guarantee the correct use of<span class=\"Apple-converted-space\">  <\/span>The users created. The users will be named and their sharing will not be allowed, so that the traceability of the actions performed by each user is guaranteed. <\/li><\/ul><p class=\"p5\">The user will be responsible for the actions carried out with their identifier, and therefore should not allow the use of their user by third parties.<\/p><ul class=\"ul1\"><li class=\"li1\">Passwords and two-factor authentication: The Client will configure secure passwords and activate the use of two-factor authentication.<\/li><\/ul><p class=\"p5\">Users are responsible for maintaining the confidentiality of their passwords. If they believe their password has been compromised, they must change it as soon as possible and report any unauthorized use of their account. <\/p><p class=\"p1\">VINTEGRIS will not be liable for any security incident affecting the information contained in the Client&#8217;s tenant when the cause of this incident originates from a breach of the obligations established in this clause<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-643d808 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"643d808\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Nineteenth: Modifications<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e1fca9 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"2e1fca9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">V\u00cdNTEGRIS reserves the right to modify the terms and conditions of these General Terms and Conditions and\/or any included Annexes related to the Service at any time. These modifications will apply to the next renewal of each Client&#8217;s subscription. If the Client does not accept these new General Terms and Conditions, they must notify V\u00cdNTEGRIS that they will not be renewing their subscription. <\/p><p class=\"p1\">In the event that these General Terms and Conditions are amended for regulatory and\/or legal reasons, and these changes affect the use of nebulaSUITE services or the Client&#8217;s legal rights under our Services, V\u00cdNTEGRIS will notify the Client before the effective date via email to the address associated with their account. These updated Terms and Conditions will take effect no sooner than 30 days after the date we send the notification. <\/p><p class=\"p1\">If the Client does not accept the changes implemented by V\u00cdNTEGRIS, V\u00cdNTEGRIS will enter into a negotiation process with the Client to try to resolve the dispute. Should the Client ultimately reject these changes, their account will be canceled. Where applicable, V\u00cdNTEGRIS will offer the Client a prorated refund based on the amounts already paid for the Services and the date of account cancellation.  <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-80c1a33 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"80c1a33\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Twentieth: Integrity<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3fd4dc5 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"3fd4dc5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">The clauses of these General Conditions are independent of each other, which is why, if any clause is considered invalid or unenforceable, the remaining clauses will continue to apply, unless expressly agreed otherwise by the parties.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-124a89c elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"124a89c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Twenty-first: Documentation\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48dc7a2 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"48dc7a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">It is expressly stated that a copy in electronic format (by making it available on the website) of all the documentation referred to in these General Conditions has been delivered, as well as a copy of the same together with the Economic Proposal.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc13aec elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"fc13aec\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Twenty-second: Notifications\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b026eee elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"b026eee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">All notices between the parties shall be in writing and delivered personally or by any other means that certifies receipt by the notified party. For the purpose of notifications, V\u00cdNTEGRIS establishes the following email address: <span class=\"s1\"><a href=\"mailto:administracion@old.vintegris.com\"><span class=\"s2\">administracion@vintegris.com<\/span><\/a><\/span> <\/p><p class=\"p2\">Any change of address by one of the parties must be notified to the other immediately and by a means that guarantees receipt of the message.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a6b99e1 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"a6b99e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Twenty-third: Applicable law and jurisdiction\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b7a861f elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"b7a861f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">In all matters not covered by these general terms and conditions, the agreement shall be governed by Spanish civil and commercial law. The competent jurisdiction is that indicated in Law 1\/2000, of January 7, on Civil Procedure. In the event of any disagreement between the parties regarding the interpretation or performance of these General Terms and Conditions, the parties shall attempt to resolve the matter amicably beforehand, in accordance with the procedure established by V\u00cdNTEGRIS for this purpose.  <\/p><p class=\"p1\">If the parties cannot reach an agreement in this regard, either of them may submit the dispute to civil jurisdiction, subject to the Courts of the registered office of V\u00cdNTEGRIS, except when the applicable legislation establishes different mandatory rules.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-286a40f elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"286a40f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Twenty-fourth: Cessation of operations<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f8c2af1 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"f8c2af1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">In the event that V\u00cdNTEGRIS decides to cease its operations, all reasonable efforts will be made to notify the Client as far in advance as possible and to provide mechanisms for the recovery of their personal data and audit records.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7e95f99 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"7e95f99\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Twenty-fifth: Force majeure\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-544595b elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"544595b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">V\u00cdNTEGRIS will not be in default or in delay of its obligations to the extent that its performance is delayed or impeded by causes beyond its control, including, without limitation, acts beyond its will, such as: acts of the Client; governmental restrictions (including the denial or cancellation of any export, import or other license); acts of third parties not under the control of V\u00cdNTEGRIS; acts of any governmental body; pandemics; war, hostility, insurrection, sabotage or armed conflict; embargo, fire, flood, strike or any other labor disturbance; interruption or delay in transportation; unavailability or interruption or delay of telecommunications or third-party services; virus or hacker attacks; errors in third-party software (including, without limitation, e-commerce software, payment systems, chat, statistics or free scripts); as well as the inability to obtain raw materials, supplies or energy or the equipment necessary for the provision of the Services.<\/p><p class=\"p1\">V\u00cdNTEGRIS will use reasonable efforts to mitigate the effects of a force majeure event.<\/p><p class=\"p1\">If such an event persists for more than 30 days, either party may cancel the pending Services by written notice.<\/p><p class=\"p1\">This clause does not relieve the parties of the obligation to take reasonable steps to follow their normal disaster recovery procedures or their obligation to pay for the Services.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-15b6eb5 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"15b6eb5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Twenty-sixth: Entirety of the General Conditions<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3d6beb5 elementor-widget elementor-widget-menu-anchor\" data-id=\"3d6beb5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Annex1\"><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9a69716 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"9a69716\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">ANNEX I<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3826d6f elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"3826d6f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Specific Terms of Service nebulaSUITE<\/p><h5><strong><span style=\"color: #0078aa;\">1. NebulaUSERS Terms<\/span><\/strong><\/h5><div><p>1.1. Collection of personal data. Creating new user accounts involves collecting the following personal information: first name, last name, user ID, email address, and telephone number (optional). This information is processed in accordance with clause sixteen of the nebulaSUITE General Terms and Conditions.  <\/p><p>1.2. Integration with corporate user repositories. Personal information imported into nebulaUSERS from corporate repositories is used and stored in the same way as information collected directly. Under no circumstances is information retrieved from the client&#8217;s corporate systems that could compromise user security, such as passwords.  <\/p><p>1.3. Distribution of proprietary software. All client software and\/or documentation published on the nebulaUSERS portal follows the licensing and usage model detailed in clause eight of the nebulaSUITE General Terms and Conditions. <\/p><h5><strong><span style=\"color: #0078aa;\">2. NebulaACCESS Terms<\/span><\/strong><\/h5><div><p>N\/A<\/p><\/div><h5><strong><span style=\"color: #0078aa;\">3. NebulaID Terms<\/span><\/strong><\/h5><div><p>3.1. Issuance of qualified certificates. To configure and activate the functionality for issuing qualified certificates from the V\u00cdNTEGRIS certification authority in any of its modalities, a specific contract between V\u00cdNTEGRIS and the client is required. <\/p><p>3.2. Service Options. nebulaID is a product that allows the creation of verified digital identities through identity validation processes that have the same legal standing as legal personhood. Depending on the nature of these validation processes, the product can be used in the following ways.  <\/p><ul><li>In person. The registration operator verifies the identity of the certificate holder in person. <\/li><li>Unattended remote video identification. The certificate holder is identified using biometric recognition technology. The registration operator unattendedly reviews the process evidence and validates that the process requirements are met before verifying the applicant&#8217;s identity.  <\/li><\/ul><p>The unattended remote video identification modality is offered following the requirements established by current legislation on digital identification, as established by Order ETD\/465\/2021, of May 6, which regulates the methods of remote identification by video for the issuance of qualified electronic certificates.<\/p><p>This modality internally makes use of both V\u00cdNTEGRIS&#8217; own technology and that of other technology providers.<\/p><p>3.3. Definition of identification process states and consumption metrics. The following details the different states of the identification processes in the unattended remote video identification mode. <\/p><ul><li>Process initiated. Request to initiate an identification process specifying the requesting user and the set of personal data to be verified. <\/li><li>Video identification. An autonomous process through which the requesting user provides evidence that allows for the reliable validation of their personal data and identity. <\/li><li>Process in progress. Review by a registration operator of the set of evidence resulting from the Video Identification process. <\/li><li>Process pending. Request from the registration operator for additional information from the requesting user necessary to successfully validate the process. <\/li><li>Process approved. Approval by the registration operator of all the evidence provided that allows verification of the identity of the requesting user and, in those cases where required, approval of the issuance of a qualified electronic certificate. <\/li><li>Process rejected. Termination of the process due to the inability to meet the minimum requirements to verify the applicant&#8217;s identity because: a) the set of evidence does not guarantee the user&#8217;s identity, ii) the user has not provided the required additional information correctly and\/or in a timely manner.   <\/li><li>System error. Irregular behavior of the nebulaID product that prevents the normal execution of any step of the identification process and results in its unexpected termination. <\/li><\/ul><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7925352 elementor-widget elementor-widget-image\" data-id=\"7925352\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"334\" src=\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp\" class=\"attachment-large size-large wp-image-44083\" alt=\"\" srcset=\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp 1024w, https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-300x125.webp 300w, https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-768x321.webp 768w, https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1536x642.webp 1536w, https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png.webp 1975w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ad4f690 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"ad4f690\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The following describes the different consumption metrics associated with the identification processes carried out in the Video Identification modality as described in this section.<\/p><ul><li>Contracted processes (Number\/package of contracted video identifications). Set of approved processes within the contracted subscription period plus the set of irregular processes that exceed the agreed minimum conversion percentage (PCMA) between V\u00cdNTEGRIS and the Client. <\/li><li>Approved processes. A set of processes successfully executed that result in obtaining a verified identity and, where applicable, issuing a qualified electronic certificate. <\/li><li>Irregular processes. Set of processes that: i) end in a Rejected state or, ii) end in an Approved state, but require more than one iteration of the Video Identification process and\/or a request for additional information and documentation from the requesting user.   <\/li><\/ul><p>The processes contracted by the client will therefore be accounted for as follows:<\/p><ul><li>Approved processes will subtract 1 from the total number of contracted processes.<\/li><li>Irregular processes below the PCMA threshold will not be subtracted from the total number of contracted processes.<\/li><li>Irregular processes above the PCMA threshold that end in a Rejected state will subtract 1 from the total number of contracted processes.<\/li><li>Irregular processes above the PCMA threshold that end in Approved status will subtract 2 from the total number of contracted processes.<\/li><\/ul><p>If V\u00cdNTEGRIS and the client do not agree on a specific PCMA, it will be assumed to be 20%.<\/p><p>3.4. Service Level Agreements (SLA) for the V\u00cdNTEGRIS Registry Operator service.<\/p><p>The use of nebulaID in its unattended remote video identification mode requires the manual review of biometric evidence by a registration operator, whose availability directly conditions the response time between the completion of the process by the requesting user and the moment in which the user&#8217;s identity is validated and the issuance of the qualified electronic certificate or any other subsequent process can proceed.<\/p><p>This response time is regulated by a Service Level Agreement (SLA) between the client and V\u00cdNTEGRIS, which governs the limits under which each request is handled. This SLA is defined as follows. <\/p><ul><li>Registration service availability (Service Coverage). Time interval during which operators are available to handle requests. Examples: 8&#215;5, 12&#215;7, 24&#215;7.  <\/li><li>Maximum resolution interval or time (Response Time). This is the maximum time that elapses before a request is resolved within the service&#8217;s operating hours. This includes both approved and rejected processes, as defined in section 3.3. Examples: 1 hour, NBD (next business day), 1 week.<br> The processing time for an application will only begin once the identification process has been completed by the applicant and all required documentation has been correctly attached.   <\/li><li>Volume of requests processed (Minimum number of video identifications). Minimum number of requests committed for review by the registration operators within the maximum resolution interval.<br> The team of operators will be able to process more requests depending on availability, as long as it does not conflict with the SLA agreed with other clients. <\/li><\/ul><p>V\u00cdNTEGRIS does not guarantee any SLA that has not been clearly stated in a prior agreement between the two parties. This includes response times from the registry office, conversion rates for the video identification process, and availability of the video identification service. <\/p><h5><strong><span style=\"color: #0078aa;\">4. NebulaCERT Terms<\/span><\/strong><\/h5><div><p>4.1. Use of Qualified Certificates. It is the client&#8217;s responsibility to use their qualified digital certificates in accordance with the terms stipulated by the issuing trusted service provider. The conditions of use for the certificates are detailed in the &#8220;acceptance sheet&#8221; or contract signed by the certificate holder upon delivery, and such use must comply with applicable law, including any laws regulating signature authentication and signature delegation. V\u00cdNTEGRIS will not be liable for the consequences of a breach of contract between the certificate holder and the issuing certification authority, or for any misuse of a certificate and its associated private key by the holder.   <\/p><\/div><h5><strong><span style=\"color: #0078aa;\">5. NebulaSIGN Terms<\/span><\/strong><\/h5><div><p>5.1. Signature formats. nebulaSIGN allows you to generate the most common signature formats, including CAdES, PAdES, and XAdES in their various forms. Detailed information on the different recognized signature formats can be found on the e-government portal: <a href=\"http:\/\/firmaelectronica.gob.es\/Home\/Ciudadanos\/Formatos-Firma.html\" target=\"_blank\" rel=\"noopener\">http:\/\/firmaelectronica.gob.es\/Home\/Ciudadanos\/Formatos-Firma.html<\/a>  <\/p><\/div><h5><span style=\"color: #0078aa;\"><strong>6. NebulaSNE Terms<\/strong><\/span><\/h5><div><p>N\/A<\/p><\/div><h5><span style=\"color: #0078aa;\"><strong>7. Nebula Terms DISCOVER<\/strong><\/span><\/h5><div><p>7.1 Collection of personal data. During the registration process, the following personal information is collected: name, surname, company, and email address. This information is processed in accordance with the provisions of clause sixteen of the nebulaSUITE General Terms and Conditions.  <\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e51c2b elementor-widget elementor-widget-menu-anchor\" data-id=\"6e51c2b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Annex2\"><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-853be87 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"853be87\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">ANNEX II<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dad84d5 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"dad84d5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>Service Level Agreements (SLAs)<\/strong><\/p><p>This Service Level Agreement (\u201cSLA\u201d) for nebulaSUITE Services is a policy that governs the use of nebulaSUITE and applies independently to each service. In the event of a conflict between the terms of this SLA and the General Terms and Conditions, the terms and conditions of this SLA shall apply, but only to the extent of such conflict. Terms used herein and not defined herein shall have the meanings set forth in the General Terms and Conditions.  <\/p><h5><span style=\"color: #0078aa;\"><strong>Definitions<\/strong><\/span><\/h5><ul><li>Error Rate: (i) the total number of internal server or service availability errors returned by each service divided by (ii) the total number of requests during a five-minute period. The Error Rate for each nebulaSUITE account and for each service separately will be calculated as a percentage for each five-minute period in the billing cycle. The calculation of the number of internal server or service availability errors will not include errors that arise directly or indirectly as a result of any SLA exclusions for the services, as defined below.    <\/li><li>Average Service Availability Percentage (ASAP): is calculated as the difference between 100% of the average Error Rates of each 5-minute period of the billing cycle, whatever it may be.<\/li><\/ul><h5><strong><span style=\"color: #0078aa;\">Support<\/span><\/strong><\/h5><p>V\u00cdNTEGRIS provides the CLIENT with a technical support team made up of engineers with extensive experience in the field of information systems security, digital certificates and electronic signatures, with sufficient experience and training to offer a personalized and high-quality support service.  <\/p><p>The support service is available through different usage modalities by the CLIENT: Standard Support, Plus Support and Plus Support 24\u00d77.<\/p><p><span style=\"color: #0078aa;\"><strong>STANDARD SUPPORT<\/strong><\/span><\/p><p>Included by default and at no additional cost with all nebulaSUITE service subscriptions.<br> Standard Support is available during the active subscription period, provided that the subscription is up to date with payments.<\/p><ul><li style=\"list-style-type: none;\"><ul><li aria-level=\"2\">In 10&#215;5 mode, from Monday to Friday (except national holidays), from 8:30 a.m. to 6:30 p.m.<\/li><li aria-level=\"2\">Includes access to the support portal (https:\/\/vintegris.zendesk.com\/) and the nebulaSUITE resource and documentation portal<\/li><li aria-level=\"2\">Interaction with the support team always begins through the support portal and continues either through the portal, via email, or in remote collaborative sessions via teleconference.<\/li><li aria-level=\"2\">Incident reports must always be opened by a nebulaSUITE technical user\/administrator within the CLIENT&#8217;s organization. Support is not provided for requests created by end users of the CLIENT. <\/li><li aria-level=\"2\">We provide support for product issues due to malfunctions of our intellectual property, development defects, unavailability of cloud components, etc.<br><br><\/li><\/ul><\/li><\/ul><p><span style=\"color: #0078aa;\"><strong>Standard Support does not include, under any circumstances:<\/strong><\/span><\/p><ul><li style=\"list-style-type: none;\"><ul><li style=\"list-style-type: none;\"><ul><li style=\"list-style-type: none;\"><ul><li aria-level=\"3\">On-site support for the customer<\/li><li aria-level=\"3\">Code design or development<\/li><li aria-level=\"3\">Support for testing integrations, customizations and\/or modifications  <\/li><li aria-level=\"3\">Managing change or improvement requests in nebulaSUITE<\/li><li aria-level=\"3\">Support or any action regarding third-party software included in the Services  <\/li><li aria-level=\"3\">Support for applications developed and\/or owned by the CLIENT<\/li><li aria-level=\"3\">Support for incidents caused by significant changes in the software configuration by the CLIENT<\/li><li aria-level=\"3\">Errors attributable to the lack of diligence or responsibility of the CLIENT<\/li><li aria-level=\"3\">Consulting or training services  <\/li><li aria-level=\"3\">Customized documentation<\/li><li>Responsibility for changes or replacement of Customer hardware\/software that may be necessary to properly use V\u00cdNTEGRIS&#8217; intellectual property due to a temporary solution, fix or new version.<\/li><\/ul><\/li><\/ul><\/li><\/ul><\/li><\/ul><p><strong><br><span style=\"color: #0078aa;\">Procedure to follow to report an incident:<\/span><\/strong><\/p><p>When reporting a new incident, the customer must provide V\u00cdNTEGRIS with the following information through the Support Portal ( <a href=\"https:\/\/vintegris.zendesk.com\/\">https:\/\/vintegris.zendesk.com\/<\/a> ):<\/p><ul><li aria-level=\"2\">Customer name and code. A customer code is required to open a support ticket in the Support Portal. <\/li><li>CUSTOMER contact details: Name, email and telephone number of the contact person<\/li><li>Details of the affected product<\/li><li>Product version or affected modules<\/li><li>System\/architecture details: Operating system version, etc.<\/li><li>Detailed description of the incident<\/li><li>Scope of the impact of the incident:<ul><li aria-level=\"4\">Affected environment (Productive environment, Non-Productive environment or isolated case)  <\/li><li aria-level=\"4\">Urgency or criticality<\/li><\/ul><\/li><\/ul><p>The CLIENT user responsible for creating an incident will be available to respond to requests for information, testing, or direct collaboration that support engineers may need for the diagnosis of the incident.<\/p><p>If within a period of 5 working days the CLIENT does not provide the data or test results required by the support engineers, or does not respond to any other requirement, the incident will be marked as completed, although the option to reopen it will be given if necessary.<\/p><p>The response time, depending on the severity of the incident opened in Standard Support, is as follows:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b4d2ddf elementor-widget elementor-widget-jet-table\" data-id=\"b4d2ddf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-table.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-table jet-elements\">\n\t\t<div class=\"jet-table-wrapper jet-table-responsive-mobile\">\n\t\t\t<table class=\"jet-table jet-table--fa5-compat\">\n\t\t\t\t<thead class=\"jet-table__head\"><tr class=\"jet-table__head-row\"><th class=\"jet-table__cell elementor-repeater-item-e3db0da jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Severity<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-af41221 jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Incident Type (1)<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-7f34191 jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Max. Response Time (2) <\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-b5959ef jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Contact Method<\/div><\/div><\/div><\/th><\/tr><\/thead>\n\t\t\t\t\t\t\t\t<tbody class=\"jet-table__body\"><td class=\"jet-table__cell elementor-repeater-item-5b67eaa jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Severity 3<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-482a65a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Isolated incidents with low impact.\n Product issues that affect Test, Trial or Pre-Production environments.<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-823eb92 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">2 business days  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-245dcd5 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Support portal with tracking via the portal and email.\n<\/div><\/div><\/div><\/td><tr class=\"jet-table__body-row elementor-repeater-item-4233595\"><td class=\"jet-table__cell elementor-repeater-item-403d3bf jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Severity 2<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-40d1f48 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Product incidents that do not affect a production environment or that do not have a great impact or urgency.\n Product issues that prevent users from using the product sporadically or individually.<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-8b3b1b1 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">1 business day<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-73867b7 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Support portal with tracking via the portal and email.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-63e1bf3\"><td class=\"jet-table__cell elementor-repeater-item-691db2f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Severity 1<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b2118b7 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Critical Incidents, which affect the Production environment with great impact or urgency.\n Product issue that prevents the product&#8217;s main functions from being performed on all workstations or by all users (major impact).<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-efcf526 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">4 working hours<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-cf622b2 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Support portal with tracking via the portal and email.<\/div><\/div><\/div><\/td><\/tr><\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d4c6780 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"d4c6780\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>(1) Incident type:<\/strong> When incidents created by the CLIENT do not fit the description corresponding to their severity according to this table, the support team may change the severity level accordingly at their discretion.<\/p><p><strong>(2) Maximum response time:<\/strong> This is the maximum time established during which V\u00cdNTEGRIS support staff will contact the CLIENT, to collect data regarding the product incident and assign staff for its analysis and resolution.<\/p><p><span style=\"color: #0078aa;\"><strong>PLUS SUPPORT  <\/strong><\/span><\/p><p>Available only through specific subscription by the CLIENT. Plus Support can be purchased provided there is an active and up-to-date nebulaSUITE subscription.<br> SUPPORT PLUS is a service offered specifically by V\u00edntegris to certain CLIENTS at V\u00edntegris&#8217; discretion. The Support Plus service must always be within the contracted nebulaSUITE subscription period.    <\/p><ul><li>The Plus Support includes all the features of the Standard Support and adds the following features:<ul><li>It has an exclusive portal for reporting incidents and requests for Plus Support <small><small>(3).<\/small><\/small><p> <\/p><\/li><\/ul><\/li><li>Expand the scope of the service by offering <strong><small>(4)<\/small> :<\/strong><ul><li>Resolution of usage or operational questions not covered by Standard Support<\/li><li>Direct support to the CLIENT in specific service operation tasks in their corporate environments, even if not caused by incidents or malfunction of nebulaSUITE or any of its components.<\/li><li>Direct support for updating and configuring on-premise components of the service, with the customer being responsible for the subsequent mass distribution of these components if necessary; for example, mass distribution of the nebulaCERT agent to workstations.<\/li><li>Support for specific questions regarding the development of integrated applications using the nebulaSUITE REST API<\/li><li>It helps users and operators in the processes of requesting, approving and issuing V\u00edntegris certificates<\/li><\/ul><\/li><\/ul><ul><li style=\"list-style-type: none;\"><ul><li style=\"list-style-type: none;\"> <\/li><\/ul><\/li><\/ul><p>To contract this service, you need to contact V\u00edntegris.<\/p><p><strong>(3)<\/strong> Plus Support requests will be handled under the same SLA as standard support. The resolution time for these requests will vary depending on their nature and will be managed through a ticket. The procedure for registering an incident covered by standard support is the same as described above for this support modality.  <\/p><p><strong>(4)<\/strong> Refer to the relevant section for detailed information on tasks and services included and excluded in each of the listed categories<\/p><h5><span style=\"color: #0078aa;\"><strong>PLUS SUPPORT 24 x 7<\/strong><\/span><\/h5><p>Available only through specific subscription by the CLIENT. 24&#215;7 Plus Support can be purchased provided there is an active and up-to-date nebulaSUITE subscription. <\/p><p><strong>SUPPORT PLUS<\/strong> is a service offered specifically by V\u00edntegris to certain CLIENTS at V\u00edntegris&#8217; discretion. The 24&#215;7 Support Plus service must always be within the contracted nebulaSUITE subscription period. <\/p><ul><li>For the provision of the 24\u00d77 Plus Support service, V\u00edntegris makes available to its clients a team made up of support engineers and DevOps engineers trained for the urgent diagnosis and resolution, outside of working hours, of most of the incidents that may cause an unavailability of a critical service.<\/li><li>The 24&#215;7 Plus Support includes all the features of the Standard Support and Plus Support and adds the following features:<ul><li aria-level=\"2\">24\/7 service available at any time of day, including holidays, only for Severity 1 incidents  <\/li><li aria-level=\"2\">Direct telephone <em>hotline<\/em> for reporting Severity 1 incidents every day of the week at any time of day 24&#215;7 (5)<\/li><li aria-level=\"2\">The CLIENT&#8217;s previously designated contacts may activate 24\/7 support only when they are experiencing a malfunction or unavailability of the nebulaSUITE service or any of its components due to technical problems originating from\/within nebulaSUITE that prevent the client&#8217;s users from performing their work or cause it to be performed deficiently, hindering the overall performance of these users&#8217; functions within the client&#8217;s organization.<\/li><li aria-level=\"2\">Our 24\/7 Support teams will request additional documentation of the critical incident from the customer through the support portal for documentation purposes and as a mechanism for tracking its lifecycle.<\/li><li aria-level=\"2\">Specific SLA for 24&#215;7 Support requests:<\/li><\/ul><\/li><li style=\"list-style-type: none;\"><ul><li style=\"list-style-type: none;\"><ul><li style=\"list-style-type: none;\"> <\/li><\/ul><\/li><\/ul><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7ee4690 elementor-widget elementor-widget-jet-table\" data-id=\"7ee4690\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-table.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-table jet-elements\">\n\t\t<div class=\"jet-table-wrapper jet-table-responsive-mobile\">\n\t\t\t<table class=\"jet-table jet-table--fa5-compat\">\n\t\t\t\t<thead class=\"jet-table__head\"><tr class=\"jet-table__head-row\"><th class=\"jet-table__cell elementor-repeater-item-e3db0da jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Severity<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-af41221 jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Incident Type (1)<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-7f34191 jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Max. Response Time (2) <\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-b5959ef jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Contact Method<\/div><\/div><\/div><\/th><\/tr><\/thead>\n\t\t\t\t\t\t\t\t<tbody class=\"jet-table__body\"><tr class=\"jet-table__body-row elementor-repeater-item-63e1bf3\"><td class=\"jet-table__cell elementor-repeater-item-691db2f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Severity 1<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b2118b7 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Critical Incidents, which affect the production environment with a high impact or urgency.\n Product incidents that prevent the main functions of the product from being carried out on all workstations or users (major impact).<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-efcf526 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">2 hours<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-cf622b2 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">By telephone through a previously designated CLIENT contact person.<\/div><\/div><\/div><\/td><\/tr><\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b575625 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"b575625\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>(5)<\/strong> It is recommended to use the telephone <em>Hotline<\/em> only outside normal working hours, since the usual channels already allow the management of critical incidents during this period.<\/p><p>To contract this service, it is necessary to contact V\u00edntegris.<\/p><h4><span style=\"color: #0078aa;\"><strong>Detailed scope of Plus Support coverage<\/strong><\/span><\/h4><p>Through the Plus Support service, V\u00cdNTEGRIS provides a help and collaboration service to its customers that goes beyond the Standard Support included by default with each nebulaSUITE subscription or any of its components.<\/p><p>It is aimed at those customers who make intensive, functional or frequent use of nebulaSUITE in organizations, primarily through:<\/p><ul><li><p>nebulaSUITE administrators<\/p><\/li><li>Certificate owners in nebulaCERT<\/li><li>Programmers who use the REST API<\/li><li>Operators of the vinCAsign Registration Authority via nebulaID<\/li><li>Users requesting vinCAsign certificates<\/li><\/ul><p>This service is not intended to be a managed service that replaces the work that each of the aforementioned groups performs in the CLIENT&#8217;s organization, but rather an assistance tool to resolve doubts or carry out actions for which, due to their specialized nature or simply lack of knowledge, they are not initially qualified.<\/p><p>Therefore, unless otherwise determined by the support team, all service actions provided through Plus Support will require the active collaboration of at least the person requesting the service, and the tasks necessary for their execution will be carried out through direct interaction between the support staff and this person.<\/p><p>Similarly, although the actions carried out with applicants will, as far as possible, have an educational character so that the requesting user can improve their training in the use of our technology, Support Plus is not a training service, nor is it a tool to create specific documentation for the CLIENT&#8217;s users.<\/p><p>All service actions within the Support Plus framework will be limited by nebulaSUITE&#8217;s technical capabilities at the time the specific service is provided. You will be notified promptly if a request cannot be fulfilled because it exceeds these capabilities or falls outside the functional scope of our solution. <\/p><p>On-premise components requiring specific actions must use officially supported versions; if not, the CLIENT will be coordinated to update them.<\/p><h4><strong><span style=\"color: #0078aa;\">Details of tasks included in Plus Support<\/span><\/strong><\/h4><p>Resolution of extended usage or operation questions that are not covered by Standard Support.<\/p><ul><li><ul><li>To address any type of doubt or technical question about the operation and use of nebulaSUITE and its components.<\/li><li>Whenever possible, try to answer using the documentation provided in the nebulaSUITE product and user manuals in order to familiarize users with this material and its use.<\/li><li>If the request exceeds the scope outlined in the nebulaSUITE manuals, it may need to be transferred to another team before it can be answered for the requester.<\/li><\/ul><\/li><\/ul><p>To directly support the CLIENT in specific service operation tasks in their corporate environments, even if they are not caused by incidents or malfunctions of nebulaSUITE or any of its components.<br> Among others, the following types of actions are included:<\/p><ul><li>Creating and configuring users and groups in nebulaUSERS<\/li><li>General and security configuration of the corporate nebulaSUITE environment<\/li><li>Help with importing certificates in nebulaCERT<\/li><li>Help with creating certificate policies, ACLs, and navigation cycles in nebulaCERT<\/li><li>Help with nebulaSIGN signature workflows and step configuration<\/li><li>SAML federation configuration with corporate IDP<\/li><\/ul><p>Provide direct support for updating and configuring on-premise service components:<\/p><ul><li>nebulaCERT agent on Windows workstations<\/li><li>SSO components for authentication integrated with Active Directory<\/li><li>Active Directory User and Group Synchronizer<\/li><li>Authentication Bridge for authentication integrated with Active Directory<\/li><li>Local KeyCave for key storage in the corporate infrastructure (with and without HSM)<\/li><\/ul><p>Provide support for the development of integrated applications using the nebulaSUITE REST API<\/p><ul><li>Requests for specific help for using nebulaSUITE functionalities through its REST API&lt;<\/li><li>Providing examples via Postman<\/li><\/ul><p>It helps users and operators in the processes of requesting, approving and issuing V\u00edntegris certificates<\/p><ul><li><ul><li>It assists CLIENT operators in creating requests for new certificates<\/li><li>Resolution of procedural doubts and doubts about documentation required for the approval of applications depending on the type of certificates<\/li><li>It helps end users in the processes of video identification, issuance and downloading of certificates<\/li><\/ul><\/li><\/ul><p>To ensure the availability of the Plus Support service for all customers, there are logical limits to its use. These limitations are detailed in the customer&#8217;s specific terms and conditions. <\/p><h4><strong><span style=\"color: #0078aa;\">Service evolution<\/span><\/strong><\/h4><p><strong>V\u00cdNTEGRIS<\/strong> provides software maintenance and update services, consisting of a new version of the software that eliminates existing errors in the current version or software improvements.<\/p><p><strong>V\u00cdNTEGRIS<\/strong> reserves the right to suspend, totally or partially, the contracted service if it notices, detects and\/or verifies in its maintenance work any alteration that slows down or leads to a detriment in the provision of the service or the rights of clients or third parties; also if a risk or vulnerability to the security of the Service is detected.<\/p><p><strong>V\u00cdNTEGRIS<\/strong> reserves the right to unilaterally update or improve its solutions without incurring any additional costs on the current subscription, without prejudice to the negotiation of the subscription renewal.<\/p><p><strong>The Client<\/strong> agrees to provide V\u00cdNTEGRIS, without being asked, with all the information necessary for the correct evaluation and execution of the corresponding service request to check and know the possible causes relating to the conditions of its operating system and other elements that may affect navigation.<\/p><p>Furthermore, <strong>the Client<\/strong> is obliged to install the updates made available by V\u00cdNTEGRIS and to use only the most current version of the software or the one immediately prior to it.<\/p><p><strong>V\u00cdNTEGRIS<\/strong> will not be responsible for actions arising from or damages caused by the operation of the Platform if it does not meet the CLIENT&#8217;s expectations or when they may be due to problems caused by the CLIENT&#8217;s own systems and assets.<\/p><h4><span style=\"color: #0078aa;\"><strong>Service availability<\/strong><\/span><\/h4><p>Unless otherwise specified in the particular clauses of each service, V\u00cdNTEGRIS Cloud services are available 24 hours a day, 7 days a week.<\/p><p>V\u00cdNTEGRIS will make all commercially reasonable efforts to ensure service availability with an Average Service Availability (ASA) of at least 99.5%, excluding justified downtime. V\u00cdNTEGRIS will monitor service availability automatically 24 hours a day, 7 days a week. <\/p><p>In the event of a planned service outage due to a platform update, V\u00cdNTEGRIS will notify its customers in advance, indicating the reason for the service interruption, the date, time frame, and affected services. Therefore, it is the customer&#8217;s responsibility to keep their contact information updated for notifications throughout the duration of the Services. <\/p><h4><span style=\"color: #0078aa;\"><strong>Frequency of updates<\/strong><\/span><\/h4><p>Product updates do not occur on a fixed schedule. Should an update affect the availability of the Service, we will notify you, as described in the previous section. <\/p><h4><strong><span style=\"color: #0078aa;\">SLA Exclusions<\/span><\/strong><\/h4><p>The Service Commitment does not apply to any unavailability, suspension, or termination of any of the services, or any other performance issues: (i) resulting from a suspension; (ii) caused by factors beyond V\u00cdNTEGRIS&#8217;s reasonable control, including any force majeure event or internet access or related problems beyond its demarcation point; (iii) resulting from any action or omission by the Client or a third party; (iv) resulting from Client personnel, software, or any other technology and\/or equipment, software, or technology of a third party (other than third-party equipment that is under V\u00cdNTEGRIS&#8217;s direct control); (v) resulting from a suspension and termination of the Client&#8217;s right to use the services pursuant to the service agreement; (vi) affecting testing, development, pre-production, or commercial environments.      <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a260203 elementor-widget elementor-widget-menu-anchor\" data-id=\"a260203\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Annex3\"><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e114bfa elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"e114bfa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">ANNEX III<\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0fa8328 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"0fa8328\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><em>(Data Processing Agreement V\u00cdNTEGRIS 2022-ES.Rev.1.3_rev)<\/em><\/p><p> <\/p><h3><strong><span style=\"color: #0078aa;\">Data Processing Agreement (\u201cDPA\u201d) for V\u00edntegris nebulaSUITE services<\/span><\/strong><\/h3><p>This Data Processing Agreement (\u201cDPA\u201d) is an agreement between the applicant and the entity they represent (\u201cClient\u201d) and V\u00edntegris, SL (\u201cV\u00cdNTEGRIS\u201d) and sets out the obligations of both parties with respect to the processing and security of the personal data for which the Client is responsible in connection with the use of nebulaSUITE Services.<\/p><p>This ATD supplements the nebulaSUITE Service Terms and Conditions available at https:\/\/old.vintegris.com\/es\/nebulasuite-service-terms\/ or any other agreement between the Client and V\u00cdNTEGRIS governing the Client&#8217;s use of nebulaSUITE Services provided by V\u00cdNTEGRIS when Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (\u201cGDPR\u201d) applies to the use of these services.<\/p><p>Excluded from this agreement are the processing of personal data that V\u00cdNTEGRIS may carry out as Data Controller, in the contracting of services related to its status as a trusted service provider and whose processing of personal data is established in clause sixteen.<\/p><h3><strong><span style=\"color: #0078aa;\">Definitions<\/span><\/strong><\/h3><p>For the purpose of this ATD:<\/p><p>\u201cApplicable data protection law\u201d means the laws and regulations applicable where data processing takes place, which apply to the terms of this Data Protection Agreement and which may change over time. This includes both Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (\u201cGDPR\u201d) and applicable local laws where the processing takes place. <\/p><p><strong>&#8216;Controller&#8217; or &#8216;Controller of processing&#8217;<\/strong> means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law;<\/p><p><strong>&#8220;Processor&#8221;<\/strong> or &#8220;Data Processor&#8221; means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;<\/p><p><strong>\u201cInterested party\u201d<\/strong> means a person who is the subject of the personal data; \u201cATD\u201d, \u201cthis ATD\u201d, \u201cthis ATD agreement\u201d is this Data Processing Agreement;<\/p><p><strong>\u201cPersonal data\u201d<\/strong> means any information relating to an identified or identifiable natural person (\u201cdata subject\u201d); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;<\/p><p><strong>\u201cSupervisory authority\u201d<\/strong> means an independent public authority established by a Member State which is responsible for supervising the processing of personal data in order to protect the fundamental rights and freedoms of natural persons with regard to the processing of their data;<\/p><p><strong>\u201cCustomer Data\u201d<\/strong> refers to all personal data (including personal data collected in digital certificates) that authorized Customer personnel enter into the databases and hosting systems of each service, as well as any data that may be generated and stored through the use of nebulaSUITE services. The Customer is responsible for the processing of this personal data. <\/p><p><strong>\u201cServices\u201d and<\/strong> \u201cnebulaSUITE Services\u201d are Software as a Service (SaaS) services. These are services provided by V\u00cdNTEGRIS to the Client via the internet, in relation to the use of the contracted service, through the nebulaSUITE platform and within the cloud computing infrastructure; <\/p><p><strong>\u201cSubprocessors\u201d<\/strong> means any natural or legal person, public authority, agency, or other body engaged by a data processor to perform some or all of the services that are the subject of a data processing agreement. Any subcontracting of services arising from a data processing agreement is authorized by the data controller. In the data processing agreement governed by this ATD, subprocessors are the data processors that Microsoft uses to process Customer Data, Professional Services Data, and Personal Data, as described in Article 28 of the GDPR.  <\/p><h3><strong><span style=\"color: #0078aa;\">TERMS<\/span><\/strong><\/h3><h4><strong><span style=\"color: #0078aa;\">SECTION I<\/span><\/strong><\/h4><h4><strong><span style=\"color: #0078aa;\">Clause 1.<\/span><\/strong><span style=\"color: #0078aa;\">  Purpose and scope<\/span><\/h4><ol><li>The purpose of the clauses in this ATD (hereinafter referred to as the &#8220;terms and conditions&#8221;) is to ensure compliance with Article 28(3) and (4) of Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation).<\/li><li>The controllers and processors listed in Annex I have consented to be bound by this clause in order to ensure compliance with Article 28, paragraphs 3 and 4, of Regulation (EU) 2016\/679.<\/li><li>This set of clauses applies to the processing of personal data specified in Annex II.<\/li><li>Annexes I to IV form part of the document.<\/li><li>The terms and conditions are understood to be without prejudice to the obligations to which the controller is subject under Regulation (EU) 2016\/679.<\/li><li>This set of clauses does not in itself guarantee compliance with the obligations relating to international transfers set out in Chapter V of Regulation (EU) 2016\/679.<\/li><li>The terms and conditions of this ATD are aligned with Commission Implementing Decision (EU) 2021\/915 of 4 June 2021 on standard contractual terms between controllers and processors.<\/li><li>This ATD, including its definitions, recitals and annexes, is a separate document that does not incorporate commercial terms that should have been established by the parties in separate commercial agreements.<\/li><\/ol><h4><strong><span style=\"color: #0078aa;\">Clause 2.<\/span> <\/strong><span style=\"color: #0078aa;\">Invariability of the terms and conditions<\/span><\/h4><ol><li>The parties agree not to modify the terms and conditions, except to add or update information in the annexes.<\/li><li>This does not prevent the parties from adding other clauses or additional guarantees, provided that they do not contradict, directly or indirectly, the terms and conditions or harm the fundamental rights or freedoms of the interested parties.<\/li><\/ol><h4><span style=\"color: #0078aa;\"><strong>Clause 3.<\/strong>  Interpretation<\/span><\/h4><ol><li>Where terms defined in Regulation (EU) 2016\/679 are used in this document, they shall have the same meaning as in the relevant Regulation.<\/li><li>This set of terms and conditions shall be read and interpreted in accordance with the provisions of Regulation (EU) 2016\/679.<\/li><li>No interpretations of these terms and conditions may be made that conflict with the rights and obligations established in Regulation (EU) 2016\/679 and\/or that prejudice the fundamental rights or freedoms of the interested parties.<\/li><\/ol><h4><span style=\"color: #0078aa;\"><strong>Clause 4.<\/strong>  Hierarchy<\/span><\/h4><p>In the event of any conflict between this set of clauses and the provisions of related agreements between the parties that were in force at the time this set of clauses was agreed or began to be applied, this set of clauses shall prevail.<\/p><h3><strong><span style=\"color: #0078aa;\">SECTION II. OBLIGATIONS OF THE PARTIES <\/span><\/strong><\/h3><h4><span style=\"color: #0078aa;\"><strong>Clause 5.<\/strong>  Description of the treatment or treatments<\/span><\/h4><p>Annex II specifies the details of the processing operations and, in particular, the categories of personal data and the purposes for which the personal data are processed on behalf of the controller.<\/p><h4><span style=\"color: #0078aa;\"><strong>Clause 6.<\/strong>  Obligations of the parties<\/span><\/h4><p><strong><span style=\"color: #0078aa;\">6.1. Instructions<\/span><\/strong><\/p><p>The controller shall instruct the processor to process personal data in the manner reasonably necessary for the processor to carry out the processing in accordance with this ATD and in accordance with Regulation (EU) 2016\/679.<\/p><p>The processor shall process personal data only on documented instructions from the controller, in accordance with the terms of service set out in the nebulaSUITE General Terms of Service, unless required to do so by Union or Member State law to which the processor is subject. In such a case, the processor shall inform the controller of that legal requirement prior to processing, unless such law prohibits it for important reasons of public interest. The controller may also give further instructions at any time during the processing of personal data. Such instructions must always be documented.   <\/p><p>The controller shall refrain from providing instructions that do not comply with applicable laws, including Regulation (EU) 2016\/679 and, if such instructions are given, the processor has the right to refuse to carry them out.<\/p><p>The processor shall immediately inform the controller if, in the processor&#8217;s opinion, the instructions given by the controller infringe Regulation (EU) 2016\/679, Regulation (EU) 2018\/1725 or applicable provisions of Union or Member State law relating to data protection.<\/p><p>The processor will not disclose any personal data to a third party under any circumstances other than at the specific written request of the controller, unless such disclosure is necessary to comply with the obligations of the Service Agreement or is required under Union or Member State law to which the processor is subject.<\/p><p><span style=\"color: #0078aa;\"><strong>6.2. Limitation of purpose<\/strong><\/span><\/p><p>The processor will process personal data only for the specific processing purposes indicated in Annex II, except when following additional instructions from the controller.<\/p><p><span style=\"color: #0078aa;\"><strong>6.3. Duration of personal data processing<\/strong><\/span><\/p><p>The processing by the processor will only take place during the period specified in Annex II.<\/p><p><span style=\"color: #0078aa;\"><strong>6.4. Treatment safety<\/strong><\/span><\/p><p>a) The information system that supports the services provided by Vintegris is certified in the National Security Scheme (HIGH category) and in the ISO 27001, 27017, 27018 and 27701 standards. Vintegris will make the corresponding certificates of these standards available to the Client when required. <\/p><p>b) The technical and organizational security measures applied to the processing of data subject to the provision of the service are those established in the standards set out in section (a). <\/p><p>c) The data controller considers the security measures implemented by Vintegris to be adequate.<\/p><p>d) The processor shall only grant access to the personal data processed to members of its staff to the extent that it is strictly necessary for the execution, management and monitoring of the contract.<\/p><p>(e) The processor shall ensure that persons authorized to process the personal data received have undertaken to respect confidentiality or are subject to a statutory obligation of confidentiality. The processor shall keep all documented records of compliance with the confidentiality obligation available to the controller. <\/p><p>f) The data controller must ensure that all persons authorized to process personal data receive the necessary training in personal data protection.<\/p><p><span style=\"color: #0078aa;\"><strong>6.5. Sensitive data<\/strong><\/span><\/p><p class=\"p1\">If the data processing carried out by Vintegris, as the data processor, affects sensitive data, the data controller will be solely responsible for complying with the requirements established in current data protection regulations in order to process this data.<\/p><p><span style=\"color: #0078aa;\"><strong>6.6. Documentation and compliance<\/strong><\/span><\/p><p>a) The parties must be able to demonstrate compliance with the terms and conditions of this ATD.<\/p><p>b) The processor shall promptly and appropriately resolve the controller&#8217;s queries related to the processing in accordance with this clause.<\/p><p>c) The processor shall designate in Annex I a contact point within its authorized organization to respond to inquiries related to the processing of Personal Data and shall cooperate with the controller, the Data Subject and the Supervisory Authority with regard to all such inquiries within a reasonable time.<\/p><p>d) The processor shall make available to the controller all the information necessary to demonstrate compliance with the obligations set out in this specification and which derive directly from Regulation (EU) 2016\/679.<\/p><p>(e) At the request of the controller, the processor shall permit and assist in the performance of audits of the processing activities covered by this document, at reasonable intervals or if there are indications of non-compliance. In deciding whether to conduct an audit, the controller may take into account relevant certifications held by the processor attesting to compliance with its obligations as verified by an independent third party. <\/p><p class=\"p1\">These audits will be requested with reasonable notice and will be conducted during the data controller&#8217;s business hours. The request may be subject to any necessary consent or approval from a supervisory authority within the data controller&#8217;s country. <\/p><p class=\"p1\">The cost of the audit, when performed by a third party designated by the Client, will be borne entirely by the Client. If the audit is performed by third parties contracted by the Client, there must be no conflict of interest with Vintegris. Audits must be limited exclusively to the Client&#8217;s services and information, and access to third-party information is prohibited. The Processor&#8217;s procedures and regulations are for internal use only and are confidential; therefore, copies of these documents may not be made during audits, except for those sections agreed upon with Vintegris.  <\/p><ol class=\"ol1\"><li class=\"li2\">The parties shall make available to the competent supervisory authorities, at their request, the information referred to in this clause and, in particular, the results of the audits.<\/li><\/ol><ol class=\"ol2\"><li class=\"li2\">The processor will notify the controller of any request for information from the supervisory authority.<\/li><li class=\"li3\">The processor shall notify the controller of any complaint, notification or communication received that relates directly or indirectly to the processing of personal data or other related activities, or that relates directly or indirectly to the processor&#8217;s and\/or controller&#8217;s compliance with applicable law, including applicable data protection law.<\/li><\/ol><p><span style=\"color: #0078aa;\"><strong>6.7. Appeal to sub-managers<\/strong><\/span><\/p><ol><li>The processor has the controller&#8217;s authorization to engage sub-processors listed in an agreed list documented in Annex IV. The processor shall inform the controller specifically and in writing of any additions to or replacements of sub-processors on that list at least one month in advance, so that the controller has sufficient time to object to such changes before the sub-processor(s) in question are engaged. The processor shall provide the controller with the information necessary for the controller to exercise its right to object.  <\/li><li>When the processor engages a sub-processor to carry out specific processing activities (on behalf of the controller), it shall do so through a contract that imposes on the sub-processor, in essence, the same data protection obligations as those imposed on the processor under this contract term. The processor shall ensure that the sub-processor complies with the obligations to which it is subject under this contract term and Regulation (EU) 2016\/679. <\/li><li>The processor will provide the controller, upon request, with a copy of the contract with the sub-processor and any subsequent amendments thereto. To the extent necessary to protect trade secrets or other confidential information, such as personal data, the processor may redact the text of the contract before sharing the copy. <\/li><li>When it is not possible to sign a specific contract with the sub-processor, the terms and conditions for contracting its services established by the sub-processor must be adjusted and comply with the necessary guarantees of compliance with Regulation (EU) 2016\/679<\/li><li>The controller will agree with the sub-processor on a third-party beneficiary clause under which, in the event that the processor disappears de facto, ceases to exist legally or is insolvent, the controller will have the right to terminate the contract of the sub-processor and order the sub-processor to delete or return the personal data.<\/li><\/ol><p><span style=\"color: #0078aa;\"><strong>6.8. International transfers<\/strong><\/span><\/p><ol><li>Data transfers to a third country or to an international organisation by the processor may only be carried out following documented instructions from the controller or pursuant to an express requirement of Union or Member State law to which the processor is subject; they shall be carried out in accordance with Chapter V of Regulation (EU) 2016\/67.<\/li><li>The controller agrees that, where the processor uses a sub-processor pursuant to clause 6.7 to carry out specific processing activities (on behalf of the controller) and those activities involve a transfer of personal data within the meaning of Chapter V of Regulation (EU) 2016\/679, the processor and the sub-processor may ensure compliance with Chapter V of Regulation (EU) 2016\/679 by using standard contractual clauses adopted by the Commission pursuant to Article 46(2) of Regulation (EU) 2016\/679, provided that the conditions for the use of such standard contractual clauses are met.<\/li><\/ol><h4><strong><span style=\"color: #0078aa;\">Clause 7.<\/span><\/strong><span style=\"color: #0078aa;\">  Obligations of the data controller<\/span><\/h4><p>The data controller guarantees and undertakes that:<\/p><ol><li>Personal data has been collected, processed and transferred in accordance with applicable data protection laws.<\/li><li>You must carry out an assessment of the impact on the protection of personal data of the processing operations that the processor will carry out when the type of processing may give rise to a high risk to the rights and freedoms of the data subjects.<\/li><li>It will have appropriate technical and organizational measures in place to protect the confidentiality of personal data, as well as to protect them against accidental or unlawful destruction or accidental loss, alteration, disclosure or unauthorized access, and which provide a level of security appropriate to the risk posed by the processing and the nature of the data to be protected.<\/li><li>It will respond to requests from interested parties and supervisory authorities regarding the processing of personal data, as stipulated in Clause 8(b).<\/li><li>It will carry out the appropriate prior consultations with the supervisory authority when a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk.<\/li><\/ol><h4><span style=\"color: #0078aa;\"><strong>Clause 8.  <\/strong>Collaboration with the data controller<\/span><\/h4><p>a) The person in charge shall promptly notify the controller of any requests received from the interested party. The person in charge shall not respond to such requests himself unless authorized to do so by the controller. <\/p><p>b) The processor shall collaborate with the controller in fulfilling its obligations related to the management of requests for the exercise of rights of interested parties, forwarding to it as soon as possible any requests it may receive and, where appropriate, providing it with the necessary information or carrying out, when requested by the controller, the actions necessary to comply with the exercise of these rights.<\/p><p>(c) In addition to the processor&#8217;s obligation to assist the controller under clause 8(b), the processor shall also assist the controller in ensuring compliance with the following obligations, taking into account the nature of the processing and the information available to the processor: <\/p><ol><li><ol><li>the obligation to carry out an assessment of the impact of processing operations on the protection of personal data (&#8220;impact assessment&#8221;) when a type of processing is likely to pose a high risk to the rights and freedoms of natural persons;<\/li><li>the obligation to consult the competent supervisory authorities before processing when a data protection impact assessment shows that processing would entail a high risk if the controller does not take measures to mitigate it;<\/li><li>the obligation to ensure that personal data are accurate and up-to-date, informing the controller without delay if the processor discovers that the personal data being processed is inaccurate or has become outdated; the obligations set out in [OPTION 1] Article 32 of Regulation (EU) 2016\/679 \/ [OPTION 2] Articles 33 and 36 to 38 of Regulation (EU) 2018\/1725.<\/li><\/ol><\/li><\/ol><p>d) The parties shall set out in Annex III appropriate technical and organizational measures that require the processor to assist the controller in applying this clause, as well as the purpose and scope of the assistance required.<\/p><h4><span style=\"color: #0078aa;\"><strong>Clause 9.  <\/strong>Notification of personal data security breaches<\/span><\/h4><p class=\"p1\"><span class=\"s1\">In the event of a personal data security breach, the processor shall notify the controller within a maximum period of 36 hours of the possible security incident affecting the personal data owned by the controller and shall collaborate with the controller in the management of the incident until its resolution, as well as in the preparation of the reports necessary for the supervisory authority.<\/span><\/p><h4><strong><span style=\"color: #0078aa;\">SECTION III. FINAL PROVISIONS <\/span><\/strong><\/h4><h4><span style=\"color: #0078aa;\"><strong>Clause 10.  <\/strong>Breach of contract clauses and termination of contract<\/span><\/h4><ol><li>Without prejudice to Regulation (EU) 2016\/679, if the processor fails to comply with its obligations under this contract, the controller may order the processor to suspend the processing of personal data until it complies with this contract, or terminate the contract. The processor shall promptly inform the controller if it is unable to comply with this contract for any reason. <\/li><li>The data controller shall be entitled to terminate the contract with regard to the processing of personal data under these terms and conditions when:<ol><li>the processing of personal data by the processor has been suspended by the controller pursuant to point a) and compliance with these terms and conditions is not resumed within a reasonable period and, in any event, within one month from the date of suspension;<\/li><li>the processor substantially or persistently fails to comply with these terms and conditions or with the obligations assigned to it by Regulation (EU) 2016\/679 and\/or Regulation (EU) 2018\/1725;<\/li><li>the controller fails to comply with a binding decision of a competent court or competent supervisory authority in relation to the obligations assigned to them by this specification, Regulation (EU) 2016\/679 and\/or Regulation (EU) 2018\/1725.<\/li><\/ol><\/li><li>The processor shall be entitled to terminate the contract with regard to the processing of personal data under this clause when, after having informed the controller that its instructions infringe the legal requirements required by clause 7.1(b), the controller insists that such instructions be followed.<\/li><li>Following the termination of the contract, the deletion of the data will be carried out in accordance with the provisions of the General Terms and Conditions of contracting nebulaSuite services.<\/li><li>Other reasons and conditions for termination will be subject to the nebulaSUITE General Terms of Service.<\/li><\/ol><h4><strong><span style=\"color: #0078aa;\">Clause 11.  <\/span><\/strong><span style=\"color: #0078aa;\">Liability and compensation<\/span><\/h4><ol><li>The processor shall not be liable for any claim brought by a data subject that results from any action of the processor to the extent that such action is the direct result of the controller&#8217;s instructions and the incorrect implementation of its technical and organizational measures.<\/li><li>In the event that a data subject brings a claim against the processor arising from any act or omission of the processor to the extent that such act or omission is the direct result of the controller&#8217;s instructions, or the controller&#8217;s improper application of its organizational measures, in accordance with Clause 7(c) of this DTA, the controller shall indemnify, hold harmless, and defend at its own expense the processor against all costs, claims, damages, or expenses incurred by the processor for which the processor may be liable due to any breach by the controller or its managers, employees, agents, or contractors of its obligations under the clauses of this DTA.<\/li><\/ol><h4><strong><span style=\"color: #0078aa;\">Clause 12.  <\/span><\/strong><span style=\"color: #0078aa;\">Legislation applicable to this ATD<\/span><\/h4><p>This Data Protection Agreement (DPA) shall be governed by and construed in accordance with the laws and regulations of the EU country where the data processing takes place. The parties to this agreement submit to the exclusive jurisdiction of the place where the data processing occurs for all purposes of this DPA. <\/p><h4><strong><span style=\"color: #0078aa;\">Clause 13.  <\/span><\/strong><span style=\"color: #0078aa;\">Dispute resolution with stakeholders or supervisory authorities<\/span><\/h4><ol><li>In the event of a dispute or claim brought by a data subject or a supervisory authority concerning the processing of personal data against one or both parties, the parties shall inform each other of such disputes or claims and cooperate with a view to resolving them amicably and in the most timely manner.<\/li><li>The parties agree to respond to any available non-binding mediation proceedings, generally initiated by a data subject or a supervisory authority. If they participate in such proceedings, the parties may choose to do so remotely (e.g., by telephone or other electronic means). The parties also agree to consider participating in any other arbitration, mediation, or other dispute resolution procedures available for data protection disputes.  <\/li><li>Each party undertakes to abide by the decision of the supervisory authority, which is final and against which it will no longer be possible to appeal.<\/li><\/ol><h4><span style=\"color: #0078aa;\"><strong>ANNEX I. List of parts<\/strong><\/span><\/h4><h4><span style=\"color: #0078aa;\">As Data Controller:<\/span><\/h4><p><strong>Name:<\/strong> The Client who contracts nebulaSUITE services under the agreed General Conditions of Service<\/p><p><strong>Address:<\/strong> As specified in the nebulaSUITE service agreement or contract signed between both parties<\/p><p><strong>Reference department\/employee:<\/strong> As specified in the nebulaSUITE service agreement or contract signed between both parties<\/p><p><strong>Name, position and contact details of the contact person:<\/strong> As specified in the agreement or contract between both parties<\/p><p><strong>Date of accession:<\/strong> Date the nebulaSUITE service provision contract or agreement signed by both parties comes into effect<\/p><h4><span style=\"color: #0078aa;\">As Data Controller:<\/span><\/h4><p><strong>Name:<\/strong> V\u00cdNTEGRIS, SL<\/p><p><strong>Address:<\/strong> Calle Pallars, 99, Floor 3, Office 33, 08018 Barcelona, Spain<\/p><p><strong>Reference department\/employee:<\/strong> As specified in the nebulaSUITE service agreement or contract signed between both parties.<\/p><p><strong>Contact details of the contact person:<\/strong> incidentesRGPD@old.vintegris.com<\/p><p><strong>Date of accession:<\/strong> Date the nebulaSUITE service provision contract or agreement signed by both parties comes into effect<\/p><h4><strong><span style=\"color: #0078aa;\">ANNEX II. Treatment Description <\/span><\/strong><\/h4><p class=\"p1\">Personal data will be processed for the purpose of providing the nebulaSuite services described in ANNEX I of the General Terms and Conditions that are contracted by the Client.<\/p><p class=\"p1\">Services contracted by the Client that are related to services provided by Vintegris in its capacity as a qualified trusted service provider are excluded.<\/p><p class=\"p1\">In relation to the provision of trust services, a processing assignment will only be considered to exist when the Client is a Qualified Trust Service Provider (QTSP) and contracts the services of Vintegris as its delegated RA.<\/p><p>Categories of data subjects whose personal data is processed<\/p><p>Depending on the services contracted:<\/p><ul><li>Staff, collaborators and others authorized by the Client who are users of the nebulaSUITE platform<\/li><li>Holders of the certificates that the Client manages through nebulaSUITE services<\/li><li>Applicants for the issuance of qualified certificates through remote video identification using the nebulaID platform<br><br><\/li><\/ul><h4><span style=\"color: #0078aa;\"><strong>Categories of personal data processed<\/strong><\/span><\/h4><p>Depending on the services contracted:<\/p><ul><li>Information from nebulaSUITE platform users necessary to access and use the services<ol><li>User identity, for example, their first and last name<\/li><li>Professional contact information such as email address and phone number<\/li><li>Authentication data for access<\/li><li>Logs of user activity on the use of the Services, which may include information about the IP address from which the nebulaSUITE platform is accessed<\/li><\/ol><\/li><li>Data of the certificate holders that the Client decides to include in them:<ol><li>Personal identification information, including unique identity numbers such as ID or passport number, employee number, or others that the client uses to identify certificate holders<\/li><li>Professional contact information, such as a professional email address<\/li><li>Information regarding professional relationships, such as company and job title or powers of attorney granted<\/li><li>Image of the signature that may appear on documents stored on the nebulaSUITE platform<\/li><\/ol><\/li><li>The certificates themselves are qualified as supporting documentation for the data of the certificate holders<\/li><li>In the case of using nebulaID for remote video identification:<ol><li>Identifying information<\/li><li>Image of identity documents<\/li><li>OCR processing results of identity documents<\/li><li>Recorded video footage of the platform user&#8217;s proof of life, including voice recordings<\/li><li>Audit records of the verification process<\/li><li>Personal details of the applicant depending on the type of certificate to be issued (position or representation, professional association membership, qualification)<\/li><\/ol><\/li><\/ul><h4><span style=\"color: #0078aa;\">Special category data:<\/span><\/h4><ul><li>This ATD does not consider the processing of data classified as &#8220;special category data&#8221; or data requiring special protection measures<\/li><li>The processing of such data on behalf of the client should only be carried out with a prior agreement between both parties and after having carried out an appropriate data protection impact assessment before processing<\/li><li>In the case of nebulaID, although a facial recognition process is performed using biometric techniques, no biometric data is stored.<\/li><\/ul><h4><span style=\"color: #0078aa;\">Nature of treatment<\/span><\/h4><p>Depending on the services contracted:<\/p><ul><li>V\u00cdNTEGRIS will process Customer Data through the Services provided by the nebulaSUITE platform<\/li><li>It involves the following activities:<ol><li>Registration and storage of customer information<\/li><li>Deletion or destruction of information when required by the Client and upon termination of the service<\/li><li>Limitation of the processing of information at the request of the Client or competent authority<\/li><\/ol><\/li><li>In the case of services provided through nebulaID:<ol><li>Capturing videos of users and their identification documents<\/li><li>Scanning and OCR processing of identification documents<\/li><li>Application of facial recognition algorithms by comparing the image of the person with the one contained in the identification document using document validation technology and facial biometrics<\/li><li>Preservation of the evidence collected during the recognition process for the periods established by legal obligations<\/li><\/ol><\/li><li>All data is stored on servers in the EU using services provided by third parties, as stipulated in ANNEX IV List of Sub-processors<\/li><li>The data is provided by the Client, as the data controller, when using the Services<\/li><li>Processing on the nebulaSUITE platform is automated, therefore V\u00cdNTEGRIS staff do not have access to Customer data. Such access would only occur at the Customer&#8217;s express request and under their supervision, for example, if they require support for its use or to resolve a problem reported by the Customer. <\/li><li>V\u00cdNTEGRIS believes that it does not have instructions for processing any other personal data that may be included in the content managed by the Client.<\/li><li>Any additional personal data that is processed by V\u00cdNTEGRIS on behalf of the Client must be agreed to as an amendment to this ATD<\/li><li>It should be noted that if the contracted services include the issuance of qualified certificates by VinCAsign, the certification authority of V\u00cdNTEGRIS, the responsibility for this processing lies with V\u00cdNTEGRIS, as established by current legislation relating to the provision of trust services<\/li><li>The use of nebulaID corresponds to a registration authority (RA) function, and is therefore only considered part of a processing engagement when the client is another Qualified Certification Service Provider (QTSP) that has responsibility for the RA<\/li><\/ul><h4><span style=\"color: #0078aa;\">Purpose of the processing of personal data on behalf of the data controller<\/span><\/h4><p>Depending on the services contracted:<\/p><ul><li>V\u00cdNTEGRIS will process the data solely for the purpose of providing the services of the nebulaSUITE platform contracted and in accordance with the General Conditions of Service.<\/li><li class=\"li1\">VINTEGRIS will process the data exclusively to perform identity validation through video identification.<\/li><\/ul><h4><span style=\"color: #0078aa;\">Treatment duration<\/span><\/h4><ul><li>This ATD applies for the duration of the service provision as set out in the nebulaSUITE service provision contract or agreement signed by both parties.<\/li><li>After the termination of the contract or agreement, V\u00cdNTEGRIS will maintain its obligations with respect to the data processed in accordance with the period determined by the data retention policy described in the General Terms of Service nebulaSUITE or other terms specifically agreed between both parties.<\/li><li>In the case of the use of nebulaID services, in accordance with the provisions of current regulations, which govern remote video identification methods for issuing qualified electronic certificates:<ol><li>A copy of the video recording will be kept for a minimum period of fifteen years from the expiry of the validity of the certificate obtained by this means<\/li><li>Photos or screenshots of the applicant and the identity document used will be kept for a minimum period of fifteen years, in which both the person and the front and back of the identity document will be clearly recognizable.<\/li><li>The automatic result of the verification performed by the application, as well as the evaluation and observations made by the operator along with their decision to approve or reject the identification, will be kept for a minimum period of fifteen years.<\/li><li>All evidence of incomplete identification processes that have not been completed will be retained for a period of five years from the execution of the identification process, specifying the reason why they were not completed, in accordance with the policy established for this purpose. The authenticity, validity, and physical and logical integrity of the identification document used and the correspondence of the document holder with the applicant will be verified.<\/li><li>Data will be preserved by blocking the data, in accordance with the provisions of Article 32 of Organic Law 3\/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights<\/li><\/ol><\/li><\/ul><h4><span style=\"color: #0078aa;\"><strong>ANNEX III. Technical and organizational measures to guarantee data security <\/strong><\/span><\/h4><p class=\"p1\">VINTEGRIS applies the necessary technical and organizational security measures to ensure an adequate level of information security in order to protect the confidentiality of personal data, as well as to protect it against accidental or unlawful destruction or accidental loss, alteration, disclosure or unauthorized access, taking into account the nature, scope, context and purpose of the processing, as well as the risks to the rights and freedoms of natural persons.<\/p><p class=\"p1\">These measures are implemented within the framework of an Information Security Management System that has ISO 27001, 27701 and 27018 certifications, as well as certifications from the National Security Scheme (ENS), in the HIGH category, and compliance with eIDAS and NIS2 regulations as qualified trust service providers.<\/p><p class=\"p1\">On the other hand, the Client is responsible for the implementation and maintenance of the security and personal data protection measures relevant as a user of the Services in those aspects that are under their control.<\/p><p class=\"p1\">Consequently, V\u00cdNTEGRIS confirms that it has implemented the measures listed below that apply to the processing it carries out on behalf of the controller.<\/p><p><strong><span style=\"color: #0078aa;\">SECURITY CONTROLS IMPLEMENTED<\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3cddfab elementor-widget__width-initial elementor-widget elementor-widget-jet-table\" data-id=\"3cddfab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-table.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-table jet-elements\">\n\t\t<div class=\"jet-table-wrapper jet-table-responsive-mobile\">\n\t\t\t<table class=\"jet-table jet-table--fa5-compat\">\n\t\t\t\t<thead class=\"jet-table__head\"><tr class=\"jet-table__head-row\"><th class=\"jet-table__cell elementor-repeater-item-e3db0da jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Organizational policies<\/div><\/div><\/div><\/th><th class=\"jet-table__cell elementor-repeater-item-af41221 jet-table__head-cell\" colspan=\"10\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/th><\/tr><\/thead>\n\t\t\t\t\t\t\t\t<tbody class=\"jet-table__body\"><tr class=\"jet-table__body-row elementor-repeater-item-5b67eaa\"><td class=\"jet-table__cell elementor-repeater-item-482a65a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Security policy  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-823eb92 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">There is an information security and personal data protection policy published and known to all staff and collaborators\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-63ad285\"><td class=\"jet-table__cell elementor-repeater-item-55d1878 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Security Officer  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-621b72a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS has appointed a Chief Information Security Officer (\u201cCISO\u201d) as responsible for coordinating and overseeing security rules and procedures\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-3cce18d\"><td class=\"jet-table__cell elementor-repeater-item-2510319 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Roles and responsibilities in security  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-044587d jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Information security roles and responsibilities are appropriately defined and assigned within the organization.\n V\u00cdNTEGRIS staff who manage Services containing Customer Data are subject to confidentiality obligations and information security and personal data protection regulations<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-c9e1ef1\"><td class=\"jet-table__cell elementor-repeater-item-e228778 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Risk management program  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-2973659 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Within the framework of the Information Security Management System, there is a plan for the assessment and treatment of information security risks, and it is reviewed periodically.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-7d14036\"><td class=\"jet-table__cell elementor-repeater-item-cfaae93 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Continuous assessment  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-d1fe72c jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS performs a periodic verification and evaluation of the effectiveness of the technical and organizational measures implemented to protect information security in processing systems, work centers and users who use them.\n This evaluation and review is carried out under the criteria of industry security standards and the policies and procedures determined by the Information Security Management System<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-9821ae4\"><td class=\"jet-table__cell elementor-repeater-item-40896c3 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Supplier security policy  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-3778bfd jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">There is a formal process that allows for the assessment of compliance with the information security requirements that must be met by suppliers who process personal information and data.\nInformation is only granted to suppliers when there is a legitimate need that justifies this access.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-e24e652\"><td class=\"jet-table__cell elementor-repeater-item-2192b5e jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Staff and collaborators<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-e7493f6 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-d326b47\"><td class=\"jet-table__cell elementor-repeater-item-95ee41a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Confidentiality agreement<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-81a3198 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">All staff and collaborators with access to information and personal data have signed a commitment regarding:  <br>\n<br> <ul> <li>  Maintain secrecy and guarantee confidentiality and security regarding the data to which they may have access for reasons of their employment, contractual or any other responsibility  <\/li>\n<br><li>Do not use the confidential information to which you have access for purposes other than those you have determined\n Do not communicate, reveal, disclose or transfer confidential information to unauthorized third parties<\/li> \n<br><li>Maintain the duty of secrecy for a minimum period of time of 1 year once the employment or contractual relationship has ended<\/li><\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-ccb95ad\"><td class=\"jet-table__cell elementor-repeater-item-12ed45f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Internal information security regulations<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b39a4f8 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">There are regulations regarding information security, personal data protection, and the use of computer resources that all staff and collaborators have committed to complying with.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-25b36eb\"><td class=\"jet-table__cell elementor-repeater-item-108911f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Information security training  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-8ec8657 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">All staff and collaborators with access to information and personal data have received appropriate training regarding information security and the protection of personal data.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-2fe4c76\"><td class=\"jet-table__cell elementor-repeater-item-9054346 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Guidelines for using information systems<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-3fefaf0 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Information security regulations establish the acceptable use standards for information systems and equipment that personnel are responsible for.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-8692905\"><td class=\"jet-table__cell elementor-repeater-item-6a38dda jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Prohibition of using corporate equipment for personal purposes<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-c69b6c5 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">It has been established that the use for private purposes of those computers and devices intended for the processing of corporate information and personal data is not permitted.\n Access to corporate information from personal devices is also prohibited.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-350e873\"><td class=\"jet-table__cell elementor-repeater-item-61cddd2 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Workplace safety<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-c844e61 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-aea7085\"><td class=\"jet-table__cell elementor-repeater-item-77c6ee7 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Unattended equipment  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-259e23f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">A mechanism has been established so that when a computer is left unattended, the screen is locked or the session is closed.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-5d4b1c1\"><td class=\"jet-table__cell elementor-repeater-item-d667575 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Document custody<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-a9d2f04 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Regulations have been established to ensure that no paper documents or information media are left unattended in the workplace at any time.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-3aee968\"><td class=\"jet-table__cell elementor-repeater-item-cb421ab jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Secure destruction of information<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-0bdf37d jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Mechanisms have been established to facilitate the secure destruction of confidential information on paper or other electronic media.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-1835107\"><td class=\"jet-table__cell elementor-repeater-item-c74073a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Secure remote workspace<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-77ee075 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">A policy has been established to ensure that teleworking can be carried out safely.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-b632960\"><td class=\"jet-table__cell elementor-repeater-item-4b3e351 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Mobile device security<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-fb0cc60 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">A policy has been established to protect the use of mobile devices and the information they may contain.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-0088a36\"><td class=\"jet-table__cell elementor-repeater-item-9ec834c jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Incident and security breach management<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-1fc0910 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-9204c02\"><td class=\"jet-table__cell elementor-repeater-item-6db7dbc jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Incident management procedure<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-72103f1 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">A procedure has been defined for recording and resolving incidents that affect information security and personal data.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-70673ed\"><td class=\"jet-table__cell elementor-repeater-item-8fefd11 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Access to the systems<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-8658e6f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-287b8c4\"><td class=\"jet-table__cell elementor-repeater-item-0820af4 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Access control policy<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-9e3c037 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS maintains an access control policy that determines the security privileges of individuals who have access to information<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-564c438\"><td class=\"jet-table__cell elementor-repeater-item-c7ed8c1 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Access authorization<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-10fb250 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">There is a formal process for managing the authorization, creation, deletion, and modification of user access to the systems<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-cd06883\"><td class=\"jet-table__cell elementor-repeater-item-a8e784e jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Individual accounts<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-64bc020 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Each person uses an individual and non-transferable user account.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-83ef6c9\"><td class=\"jet-table__cell elementor-repeater-item-12a885e jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Minimum privilege<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-04a2512 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS has defined and applies a minimum access policy by default, which ensures that staff and collaborators only have access to the information they require to perform their job duties<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-6a404cf\"><td class=\"jet-table__cell elementor-repeater-item-04176ed jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Accounts with privileged access<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-2865247 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">For system administration and configuration tasks, named access accounts with privileged rights are used, which are different from and segregated from the accounts used for ordinary system use.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-03346d9\"><td class=\"jet-table__cell elementor-repeater-item-ee33638 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Authentication<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-ecae7c0 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS uses industry-standard practices to identify and authenticate users attempting to access information systems.  \n\n<br>  Two-factor authentication systems are used to access more exposed networks or for system administration.\n All systems include controls to prevent repeated attempts to gain access to information systems using an invalid password. Use of MFA.   <br><\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-7f62c23\"><td class=\"jet-table__cell elementor-repeater-item-045f642 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Password security<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-694ec93 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The existence of password policies (or equivalent mechanisms) for access to systems and applications will be guaranteed, which must meet at least the following requirements:\n<br>\n<br> <ul> <li>  Password length: minimum 8 characters\n <\/li>\n<br><li>Periodic password renewal\n<\/li> \n<br><li>Password complexity requirements\n<\/li>\n<br><li>Limits on password reuse\n<\/li><\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-02ef12d\"><td class=\"jet-table__cell elementor-repeater-item-3d4fd27 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Password confidentiality<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-0b9e166 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">There are regulations in place to ensure the confidentiality of passwords, preventing them from being exposed or shared with third parties.\n Internally, all passwords are stored using irreversible encryption algorithms.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-3e5c2e1\"><td class=\"jet-table__cell elementor-repeater-item-5eccfad jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Access logs  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-0bc0f4d jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">A record of accesses and access attempts to the systems is maintained and monitored.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-d679530\"><td class=\"jet-table__cell elementor-repeater-item-b1268ad jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Information processing assets<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-58b9187 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-55e2ab7\"><td class=\"jet-table__cell elementor-repeater-item-0587301 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Asset inventory  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-f7818b4 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">An inventory is available of the systems and equipment used in the processing of information, with information on the person responsible for said equipment.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-b508968\"><td class=\"jet-table__cell elementor-repeater-item-2d2308c jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Safe disposal and reuse  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-82b7906 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Formal processes have been defined for the safe disposal and\/or reuse of information processing equipment<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-6dfbddd\"><td class=\"jet-table__cell elementor-repeater-item-f108d23 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Equipment maintenance  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-ad797e6 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The systems and equipment used for information processing are properly maintained and updated.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-e4f8a97\"><td class=\"jet-table__cell elementor-repeater-item-0296288 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Malware protection  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-3a42a3e jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The equipment used to process or store information has permanently active and updated anti-malware protection.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-aa578d7\"><td class=\"jet-table__cell elementor-repeater-item-1fc0b31 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Software update  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-c45a20e jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">All software used for data processing is properly updated and has no known serious vulnerabilities.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-2afc2be\"><td class=\"jet-table__cell elementor-repeater-item-21445f5 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Bastion of the systems<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-8d28825 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">System hardening measures have been implemented, including, but not limited to:\n<br>\n<br> <ul> <li>Only open the essential ports\n\n <\/li>\n<br><li>Deactivate all non-essential services\n\n<\/li> \n<br><li>Block or change the default passwords of accounts with privileged access\n\n<\/li>\n<br><li>Encryption of the disks containing the information\n<\/li><\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-e61c67e\"><td class=\"jet-table__cell elementor-repeater-item-5e8376a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Restriction on software installation by users  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-4ea69b2 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">There are regulations or technical measures in place to prevent staff from installing unauthorized software on their work equipment, as well as to prevent the use of software that may violate the intellectual property of third parties.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-813a003\"><td class=\"jet-table__cell elementor-repeater-item-b2643eb jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Limitation of administrative privileges  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-5bbbcc5 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Technical measures have been implemented to prevent users from modifying or disabling the security settings of the equipment.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-4097b27\"><td class=\"jet-table__cell elementor-repeater-item-bb0ac54 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Restriction on use for personal purposes  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-23b5cdb jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">There are regulations that prohibit the private use or use for personal purposes of corporate equipment\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-3f30e54\"><td class=\"jet-table__cell elementor-repeater-item-152a701 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Protection of information in transit and at rest<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-2ce02c0 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-eb4483a\"><td class=\"jet-table__cell elementor-repeater-item-aee4174 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">perimeter protection of networks  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-1ec0bf4 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">There is perimeter protection of the network to protect it against attacks and unauthorized access to those systems where information and personal data are stored and\/or processed.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-5223843\"><td class=\"jet-table__cell elementor-repeater-item-12821fd jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Network segregation<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-31c3b6a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The network has been configured so that there are segregated security zones according to the different security requirements that have been established.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-38e2343\"><td class=\"jet-table__cell elementor-repeater-item-5029232 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Secure information transmission protocols<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-297bc92 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">All traffic on the organization&#8217;s networks, especially when it runs wholly or partially over public networks, is encrypted using secure protocols with no known serious vulnerabilities (for example, at least TLS 1.2).<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-605a92b\"><td class=\"jet-table__cell elementor-repeater-item-4adcae0 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Secure remote access<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-21dfb01 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">For remote access to the organization&#8217;s network, for example, through virtual private networks (VPNs), secure protocols and authentication keys are used at the communication endpoints.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-c5a3335\"><td class=\"jet-table__cell elementor-repeater-item-729e472 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Encryption of information on transit media<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-3c7b351 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Mechanisms exist to encrypt information on media and equipment in transit outside of regular processing facilities<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-25da4ed\"><td class=\"jet-table__cell elementor-repeater-item-e5e7b9f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Vulnerability analysis<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-4bb5771 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Tests are periodically performed to verify that the networks are free of vulnerabilities and the necessary corrective measures are applied.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-cd716cc\"><td class=\"jet-table__cell elementor-repeater-item-8860001 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Segregation of Wi-Fi networks<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-8d9bff9 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The Wi-Fi networks for visitors are segregated so that access to the company&#8217;s internal networks is not possible.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-b3dd3f6\"><td class=\"jet-table__cell elementor-repeater-item-86feb77 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Security of cloud provider services<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-e378c5a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">In the case of using services from a cloud provider (IaaS, PaaS, SaaS,\u2026) to process the information, it is guaranteed that the provider provides or allows the application of security measures at least equivalent to those required of the processor itself.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-8b9c1fd\"><td class=\"jet-table__cell elementor-repeater-item-ac79c22 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Audit records<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-4e83c4d jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Audit records of operations performed on data (access, modification, and deletion) are collected, maintained, and reviewed, especially when dealing with special category data.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-2a60ef9\"><td class=\"jet-table__cell elementor-repeater-item-662f180 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Segregation of customer instances<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-db8dc12 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Segmentation of services to different clients through a multi-tenant architecture. Logical segregation of users and data is provided. <\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-220ddd3\"><td class=\"jet-table__cell elementor-repeater-item-70a4a71 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Physical security of treatment spaces<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-bfd303d jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-7325237\"><td class=\"jet-table__cell elementor-repeater-item-637fa35 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Physical security perimeter<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b652bd4 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">A security perimeter exists to protect the premises and facilities where information is processed or stored.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-321b19c\"><td class=\"jet-table__cell elementor-repeater-item-10b1f72 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Access limitation  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-2065d00 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Physical access controls have been implemented in the premises where information processing takes place to ensure that only authorized personnel have permitted access.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-42f868e\"><td class=\"jet-table__cell elementor-repeater-item-c830135 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Physical access control<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-8e63c80 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Specific entry controls have been established to limit access to strictly authorized personnel to secure areas where servers, network equipment, or document archives used for information processing and storage are located.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-22a2b8c\"><td class=\"jet-table__cell elementor-repeater-item-5d2c6de jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Protection against external and environmental threats<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-7611121 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The necessary measures have been established to protect people, equipment and facilities in case of natural disasters, malicious attacks or incidents such as fire, floods, water leaks, air conditioning failures, etc.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-9851276\"><td class=\"jet-table__cell elementor-repeater-item-259d0f9 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Supply facilities<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-f4d3509 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The necessary measures have been put in place to guarantee the continuity of the electricity supply\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-6691acd\"><td class=\"jet-table__cell elementor-repeater-item-e4a2f45 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Resilience of systems<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-9ff0723 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-4fa1066\"><td class=\"jet-table__cell elementor-repeater-item-a85ef0f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">System availability  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-47b9194 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS has established measures to guarantee the availability of the systems in accordance with the committed service levels\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-4e1b194\"><td class=\"jet-table__cell elementor-repeater-item-c5dea34 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Capacity monitoring and management  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-c2948f1 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The performance of the systems is continuously monitored, with alert systems to immediately detect any incident.\n System capacity is continuously monitored to ensure sufficient capacity is available for required services.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-8ea0345\"><td class=\"jet-table__cell elementor-repeater-item-4d82cc8 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Redundancies<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-eb3dc7d jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">All of V\u00cdNTEGRIS&#8217; systems are redundant, internally on different servers and in different geographically distant data centers.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-f58e8ad\"><td class=\"jet-table__cell elementor-repeater-item-3945975 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Backups  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-a490b8f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS performs a backup stored on a separate medium from the regular processing equipment. This backup is performed as frequently as necessary to meet the agreed service levels.\n Additionally, V\u00cdNTEGRIS maintains a backup stored at a different location, geographically separate from its regular data processing facilities. This backup is performed as frequently as necessary to ensure the fulfillment of service levels in the event of a serious incident at the data processing facilities.  <\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-8fe99e3\"><td class=\"jet-table__cell elementor-repeater-item-b9120bd jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Monitoring backups  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-2b2b44c jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">The correct execution of backups is continuously monitored.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-19f5903\"><td class=\"jet-table__cell elementor-repeater-item-1cfdad7 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Recovery tests  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-069b832 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Periodic tests are performed to recover and verify the information contained in the backups.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-b307155\"><td class=\"jet-table__cell elementor-repeater-item-2924073 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Business Continuity Plan  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-97b93e1 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">A &#8220;Business Continuity Plan&#8221; has been developed to allow for the recovery of system availability and data integrity in the event of a serious incident.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-3c10f90\"><td class=\"jet-table__cell elementor-repeater-item-f6ec02b jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Recovery procedures  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-8a5f6e8 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Specific protection and recovery procedures are in place against threats that compromise the integrity of information, such as ransomware attacks.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-be2296a\"><td class=\"jet-table__cell elementor-repeater-item-10ac925 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Privacy by design and by default<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-87ac185 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-9136d15\"><td class=\"jet-table__cell elementor-repeater-item-347f0a4 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Minimizing data collection  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-c49c0cc jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Only the data strictly necessary for the purpose for which it must be processed is collected.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-2836c3b\"><td class=\"jet-table__cell elementor-repeater-item-e9363c5 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Limitation of the data retention period<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-effe120 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS has established procedures to limit data retention and prevent its storage beyond the established timeframes. Temporary files created as a result of processing are deleted when they are no longer needed. <\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-6f284ed\"><td class=\"jet-table__cell elementor-repeater-item-0a7e331 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Limitation of purpose<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-18e9b0f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS has defined mechanisms to prevent the information processed on behalf of the controller from being used for purposes other than those established in this Data Processing Agreement (DPA).<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-d21e7db\"><td class=\"jet-table__cell elementor-repeater-item-852d9b2 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Data pseudonymization and encryption  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-8de23a0 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Pseudonymization and data encryption measures are applied, especially when the information processed includes special category or particularly sensitive data.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-0fec2a3\"><td class=\"jet-table__cell elementor-repeater-item-d3db2d1 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Segregation of sensitive information  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-42e2768 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Access to the most sensitive information is segregated so that it can only be consulted and processed by specifically authorized personnel.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-6025639\"><td class=\"jet-table__cell elementor-repeater-item-4c70542 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Exercise of the rights of interested parties<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-4915eda jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-ed10c9d\"><td class=\"jet-table__cell elementor-repeater-item-a7656d0 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Response procedure<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-bd79b5a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS has defined a formal process to attend to and assist the responsible party in responding to requests to exercise the rights of interested parties.\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-e0239db\"><td class=\"jet-table__cell elementor-repeater-item-07b82ab jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Communication of requests to exercise rights  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-3f5579b jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">V\u00cdNTEGRIS has defined the channels to communicate requests to exercise the rights of interested parties to the data controller.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-1fbcae4\"><td class=\"jet-table__cell elementor-repeater-item-8381924 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Treatment limitation  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-a7a6783 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Mechanisms exist to limit the processing of data whenever required.\n<\/div><\/div><\/div><\/td><\/tr><\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-248c674 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"248c674\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>ANNEX IV: List of sub-managers<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-34a5c15 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"34a5c15\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Agreed list of sub-managers in accordance with Clause 6.7 (a) Depending on the services contracted.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-556f97c elementor-widget elementor-widget-jet-table\" data-id=\"556f97c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-table.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-table jet-elements\">\n\t\t<div class=\"jet-table-wrapper jet-table-responsive-mobile\">\n\t\t\t<table class=\"jet-table jet-table--fa5-compat\">\n\t\t\t\t<thead class=\"jet-table__head\"><tr class=\"jet-table__head-row\"><th class=\"jet-table__cell elementor-repeater-item-b5959ef jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/th><\/tr><\/thead>\n\t\t\t\t\t\t\t\t<tbody class=\"jet-table__body\"><td class=\"jet-table__cell elementor-repeater-item-5b67eaa jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Name of the assistant manager<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-482a65a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Amazon Web Services Inc.<\/div><\/div><\/div><\/td><tr class=\"jet-table__body-row elementor-repeater-item-4233595\"><td class=\"jet-table__cell elementor-repeater-item-403d3bf jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Treatment description<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-40d1f48 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">IaaS and PaaS service provider<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-63e1bf3\"><td class=\"jet-table__cell elementor-repeater-item-691db2f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Treatment location<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b2118b7 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">European Union (Ireland, Frankfurt, Paris)<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-1dffde7\"><td class=\"jet-table__cell elementor-repeater-item-a3d33db jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Address and contact details  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-563e730 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Amazon Web Services EMEA SARL\n 38 Avenue John F. Kennedy, L-1855, Luxembourg\n Tel: +352 2789 0057<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-d4b6ac9\"><td class=\"jet-table__cell elementor-repeater-item-d1b4e4a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Guarantees provided<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b0f2c16 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">https:\/\/aws.amazon.com\/compliance\/gdpr-center\/<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-542aac6\"><td class=\"jet-table__cell elementor-repeater-item-f841663 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">&#8211;<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-d1e066f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-7e8c92a\"><td class=\"jet-table__cell elementor-repeater-item-f26029b jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Name of the assistant manager<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b8ffbc7 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">AE Group S.\u00e0 rl (AtlasEdge)<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-c30b0f0\"><td class=\"jet-table__cell elementor-repeater-item-cb5f1c2 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Treatment description  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-eafacb1 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Provider of the data centers where V\u00cdNTEGRIS servers are located. AtlasEdge personnel do not have access to either the servers or the data contained therein.<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-c447b31\"><td class=\"jet-table__cell elementor-repeater-item-f9c572a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Treatment location  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-0871007 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Spain (Barcelona and Madrid)\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-e7d613f\"><td class=\"jet-table__cell elementor-repeater-item-7654046 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Address and contact details  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-276b856 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Email: privacy@atlasedge.com\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-63ed046\"><td class=\"jet-table__cell elementor-repeater-item-3ab420f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Guarantees provided  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-1a016c8 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">https:\/\/atlasedge.com\/documents\/AtlasEdge%20Procurement%20GTCs%20v01.09.21.pdf\n https:\/\/atlasedge.com\/wp-content\/uploads\/2021\/10\/AtlasEdge_Barcelona-DC_DataSheet.pdf\n https:\/\/atlasedge.com\/wp-content\/uploads\/2021\/10\/AtlasEdge_Madrid-DC_DataSheet.pdf\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-ada31f1\"><\/tr><\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-06b1ef8 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"06b1ef8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>When Vintegris acts as the treatment manager for another trusted service provider:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b626210 elementor-widget elementor-widget-jet-table\" data-id=\"b626210\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-table.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-table jet-elements\">\n\t\t<div class=\"jet-table-wrapper jet-table-responsive-mobile\">\n\t\t\t<table class=\"jet-table jet-table--fa5-compat\">\n\t\t\t\t<thead class=\"jet-table__head\"><tr class=\"jet-table__head-row\"><th class=\"jet-table__cell elementor-repeater-item-b5959ef jet-table__head-cell\" scope=\"col\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><\/div><\/div><\/th><\/tr><\/thead>\n\t\t\t\t\t\t\t\t<tbody class=\"jet-table__body\"><td class=\"jet-table__cell elementor-repeater-item-5b67eaa jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Name of the assistant manager<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-482a65a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">VERIDAS DIGITAL AUTHENTICATION SOLUTIONS, SL\n<\/div><\/div><\/div><\/td><tr class=\"jet-table__body-row elementor-repeater-item-4233595\"><td class=\"jet-table__cell elementor-repeater-item-403d3bf jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Treatment description<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-40d1f48 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Provider of the technological platform that supports the identity recognition process\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-63e1bf3\"><td class=\"jet-table__cell elementor-repeater-item-691db2f jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Treatment location<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b2118b7 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Spain\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-1dffde7\"><td class=\"jet-table__cell elementor-repeater-item-a3d33db jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Address and contact details  <\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-563e730 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Email: partners@veridas.com<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-d4b6ac9\"><td class=\"jet-table__cell elementor-repeater-item-d1b4e4a jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Guarantees provided<\/div><\/div><\/div><\/td><td class=\"jet-table__cell elementor-repeater-item-b0f2c16 jet-table__body-cell\"><div class=\"jet-table__cell-inner\"><div class=\"jet-table__cell-content\"><div class=\"jet-table__cell-text\">Data Processor Agreement included in the License Agreement for use and distribution of platforms signed between V\u00edntegris and Veridas\n<\/div><\/div><\/div><\/td><\/tr><tr class=\"jet-table__body-row elementor-repeater-item-542aac6\"><\/tr><\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0aff32e elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"0aff32e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>When Vintegris acts as the treatment manager for another trusted service provider:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e36ef73 elementor-widget elementor-widget-button\" data-id=\"e36ef73\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/Condiciones-Generales-nebulaSUITE_v3.6.4-Noviembre-2025.pdf\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Download PDF (Spanish)<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1b33c28 elementor-widget elementor-widget-button\" data-id=\"1b33c28\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/nebulaSUITE-General-Conditions-of-Service_-v3.6.4-November-2025.pdf\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Download English PDF<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e4583e3 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"e4583e3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Do you need more information?<\/p><p><a href=\"https:\/\/vintegris.com\/contacto\/\">Contact us<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-591dd229 e-con-full e-flex e-con e-parent\" data-id=\"591dd229\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-64c0ba20 elementor-widget elementor-widget-template\" data-id=\"64c0ba20\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"container\" data-elementor-id=\"43865\" class=\"elementor elementor-43865 elementor-521\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3e4d9ad0 e-flex e-con-boxed e-con e-parent\" data-id=\"3e4d9ad0\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-43bfa597 e-con-full e-flex e-con e-child\" data-id=\"43bfa597\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3b6eadf elementor-widget elementor-widget-html\" data-id=\"3b6eadf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<script charset=\"utf-8\" type=\"text\/javascript\" src=\"\/\/js-eu1.hsforms.net\/forms\/embed\/v2.js\"><\/script>\r\n<script>\r\n  hbspt.forms.create({\r\n    portalId: \"143553883\",\r\n    formId: \"409238aa-5bd7-4dee-8ea7-6eb006e48c9f\",\r\n    region: \"eu1\"\r\n  });\r\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-468278d8 e-con-full e-flex e-con e-child\" data-id=\"468278d8\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-251349f1 elementor-widget elementor-widget-heading\" data-id=\"251349f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Stay up to date with our news.<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f258e06 elementor-widget elementor-widget-text-editor\" data-id=\"f258e06\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Subscribe to our newsletter and discover the latest updates on cybersecurity, digital identity, and trusted business solutions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Terms and conditions Annex I Annex II Annex III Download PDF-ESP Download PDF-ENG Last update v3.6.4 November 2025 First: Definitions Service Level Agreement: Clauses or particularities of the contract signed between the parties or included in these General Conditions that develop and stipulate the services in an objective manner in terms of level and quality [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"content-type":"","footnotes":""},"class_list":["post-44082","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>General Terms and Conditions of Service nebulaSUITE - vintegris<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"General Terms and Conditions of Service nebulaSUITE - vintegris\" \/>\n<meta property=\"og:description\" content=\"Terms and conditions Annex I Annex II Annex III Download PDF-ESP Download PDF-ENG Last update v3.6.4 November 2025 First: Definitions Service Level Agreement: Clauses or particularities of the contract signed between the parties or included in these General Conditions that develop and stipulate the services in an objective manner in terms of level and quality [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/\" \/>\n<meta property=\"og:site_name\" content=\"vintegris\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-10T10:07:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"94 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/\",\"url\":\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/\",\"name\":\"General Terms and Conditions of Service nebulaSUITE - vintegris\",\"isPartOf\":{\"@id\":\"https:\/\/vintegris.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp\",\"datePublished\":\"2025-11-28T12:31:37+00:00\",\"dateModified\":\"2025-12-10T10:07:57+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#primaryimage\",\"url\":\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp\",\"contentUrl\":\"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/vintegris.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"General Terms and Conditions of Service nebulaSUITE\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/vintegris.com\/en\/#website\",\"url\":\"https:\/\/vintegris.com\/en\/\",\"name\":\"vintegris\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/vintegris.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"General Terms and Conditions of Service nebulaSUITE - vintegris","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/","og_locale":"en_US","og_type":"article","og_title":"General Terms and Conditions of Service nebulaSUITE - vintegris","og_description":"Terms and conditions Annex I Annex II Annex III Download PDF-ESP Download PDF-ENG Last update v3.6.4 November 2025 First: Definitions Service Level Agreement: Clauses or particularities of the contract signed between the parties or included in these General Conditions that develop and stipulate the services in an objective manner in terms of level and quality [&hellip;]","og_url":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/","og_site_name":"vintegris","article_modified_time":"2025-12-10T10:07:57+00:00","og_image":[{"url":"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"94 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/","url":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/","name":"General Terms and Conditions of Service nebulaSUITE - vintegris","isPartOf":{"@id":"https:\/\/vintegris.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#primaryimage"},"image":{"@id":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#primaryimage"},"thumbnailUrl":"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp","datePublished":"2025-11-28T12:31:37+00:00","dateModified":"2025-12-10T10:07:57+00:00","breadcrumb":{"@id":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#primaryimage","url":"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp","contentUrl":"https:\/\/vintegris.com\/wp-content\/uploads\/2025\/11\/terminos-nebulaid.png-1024x428.webp"},{"@type":"BreadcrumbList","@id":"https:\/\/vintegris.com\/en\/general-terms-and-conditions-of-service-nebulasuite\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/vintegris.com\/en\/"},{"@type":"ListItem","position":2,"name":"General Terms and Conditions of Service nebulaSUITE"}]},{"@type":"WebSite","@id":"https:\/\/vintegris.com\/en\/#website","url":"https:\/\/vintegris.com\/en\/","name":"vintegris","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/vintegris.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/vintegris.com\/en\/wp-json\/wp\/v2\/pages\/44082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vintegris.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/vintegris.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/vintegris.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/vintegris.com\/en\/wp-json\/wp\/v2\/comments?post=44082"}],"version-history":[{"count":4,"href":"https:\/\/vintegris.com\/en\/wp-json\/wp\/v2\/pages\/44082\/revisions"}],"predecessor-version":[{"id":44142,"href":"https:\/\/vintegris.com\/en\/wp-json\/wp\/v2\/pages\/44082\/revisions\/44142"}],"wp:attachment":[{"href":"https:\/\/vintegris.com\/en\/wp-json\/wp\/v2\/media?parent=44082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}