General Terms and Conditions for Stella
Introduction
These general terms of use (“Terms and Conditions”) govern the access to and use of a (white-label) candidate relationship management solution to maintain, evaluate, and provide professional services to candidates (“Candidates”) under your own corporate branding or designation (“Stella”). Stella can be accessed by you (“You”) as headhunter and/or consultancy to manage Your headhunter or recruitment services with respect to Your Candidates (“CRM Services”). Stella is provided by alphaheads AG, a company registered under the laws of Switzerland, with its registered office at Gubelstrasse 19, 6300 Zug, Switzerland (“alphaheads”, “We”, “Our”, or “Us”). By accessing and using Stella, You agree to be bound by these Terms and Conditions which form the basis of the agreement concluded between alphaheads and You (“Contract”). If You do not agree with these Terms and Conditions, You may not access or use Stella. You shall read these Terms and Conditions carefully and familiarize yourself with the provisions provided herein.
Conditions of participation and registration
You can use Stella if You are a natural person who has reached the age of 18. If You use Stella on behalf of a company or organization, You confirm to Us that You are authorized to act on behalf of that company or organization and You agree to be legally bound by these Terms and Conditions on their behalf.
The use of Stella requires that You have fully completed the registration process for Stella. In order to register for Stella You need
- to enter Your e-mail address and define a password
- to use a profile of a (social) network operated by third parties, such as LinkedIn, Google or Apple (“Social Login”); if You wish to register with Stella by means of Social Login, You will be redirected to the login/registration mask of the (social) network and You can log in there with Your user name and password stored with this provider
(“Login Details”).
You must ensure that the Login Details used for registration are protected against access by third parties and are kept in a safe place. If You have reason to believe that the confidentiality of Your password has been compromised or unauthorized access to Your account of Stella is otherwise possible, You agree to promptly change the Login Details.
We have the right to request password changes from time to time. We may suspend access to Stella pursuant to Section 8 until such a password change has been made.
Provision of Stella
We provide Stella to You as a cloud service in the “software as a service” model. During the term of the Contract, You are being granted the non-exclusive, non-transferable right to access Stella stored and running on servers used by Us, on a worldwide basis via an internet connection, and to use Stella solely for Your own business purposes in accordance with the terms of the Contract and in compliance with all applicable laws. We provide You Stella in the respective then-current version at the router output of the data center used by Us (“Delivery Point”). We do not warrant the establishment and/or maintenance of a data connection between the Delivery Point and Your IT systems.
The scope of features, functions, the quality, the purpose of use as well as the conditions of use of Stella are set out on Our website. Stella Essential (as defined below) is provided „as is“ if and to the extent Stella Essential is available and functional; however, We do not warrant the continuous availability and functionality of Stella Essential. For Stella Professional (as defined below), We undertake to comply with the service levels set out in Annex 1 (Service Level Agreement).
Stella Essential and Stella Professional
We provide a free-of-charge version of Stella with a reduced set of features (“Stella Essential”) as well as a paid professional version of Stella (“Stella Professional”).
We are constantly working on improving Stella. The scope of features that can be used within the Stella Essential is at Our discretion and We retain the right to change the scope of features in the Stella Essential at any time or to stop providing a Stella Essential at all. Without limiting the generality of the preceding sentence, We are entitled to make adjustments to Stella from time to time, for instance in the form of bug fixes, (security) updates or upgrades. If We change essential features of Stella in the context of such adjustments (“Modification”) and You use Stella Professional, We will inform You reasonably in advance about a Modification and any resulting changes to the Stella scope of services. If such a Modification adversely affects justified interests of You in such a way that You can no longer be expected to adhere to this Contract, You may terminate the Contract in text form with a notice period of one month prior to the announced Modification coming into effect. Unless You terminate the Contract, the Modification enters into force on the date specified. We will notify You of this right to termination when providing the information regarding a Modification.
Support Services
We only offer support services for Stella if these have been explicitly agreed upon in text form. Otherwise, Stella is offered by Us without support services.
Your Responsibilities for CRM Services
You acknowledge that We provide Stella as a technical platform to You so that You may implement Stella for the management and processing of Your CRM Services.
You remain solely responsible for Your CRM Services and any data, documents, information, images, and any other content provided by You, Your Users and/or Your Candidates on Stella (“CRM Data”). alphaheads does not exercise any control over, nor does it bear any responsibility for Your CRM Services and/or the CRM Data. You are fully and independently responsible for ensuring the lawfulness, accuracy, and compliance of all CRM Services provided and/or CRM Data processed or made available on or via Stella.
You are required to prepare and provide Your own terms of use for Candidates (“Candidate Terms of Use”) and Your own privacy notice for Candidates (“Candidate Privacy Notice”) and make it available within Stella. You are responsible to comply with all applicable laws and regulations in relation to the preparation, provision and implementation of the Candidate Terms of Use and Candidate Privacy Notice, including but not limited to applicable data protection and consumer protection laws. Upon Your request, We provide You with templates for Candidate Terms of Use and Candidate Privacy Notice (“Templates”) as a starting point for Your preparation of Your Candidate Terms of Use and Candidate Privacy Notice. The Templates require customization from an operational and legal perspective to reflect Your individual setup. It is exclusively Your responsibility to ensure the appropriateness, completeness, and legal conformity of Your Candidate Terms of Use and Candidate Privacy Notice made available by You within Stella. Our liability for the provided Templates is limited to cases of intent or gross negligence; any further liability, in particular for slight negligence, is excluded to the extent permitted by applicable law.
Scope of use and User accounts
You shall ensure that the user accounts (including for Candidates) are only used by persons authorized by You (“User”). Each user account may only be used by the respective User to access Stella; the use of one account by several persons is not permitted.
You shall be liable for the acts and omissions of any User as for Your own acts and omissions.
Other than granting access to Users with respect to Your CRM Services, You are prohibited to (sub-)license, distribute, lease, rent or otherwise make Stella available to any third parties.
We are entitled to take appropriate technical measures for protection against non-contractual use.
Duties of care and cooperation
You are responsible for ensuring that the electronic devices used by You and Your Users have all the relevant technical specifications (internet connection, browser configuration etc.) required to use Stella.
You are responsible to ensure that You achieve the purposes You pursue with the use of the functionalities of Stella.
You are not permitted to do the following and are responsible for ensuring that Your Users do not do so either:
- copy, translate, disassemble, decompile, reverse engineer or otherwise modify Stella (except as permitted by mandatory law) in whole or in part or create derivative works therefrom;
- investigate, scan or test vulnerabilities of Stella and/or circumvent or compromise user authentications or security features of Stella or any associated host, network or account;
- search, retrieve, copy or monitor Stella and/or their content using a program, algorithm or similar method to collect or extract data (e.g., using automated tools such as bots, spiders or scrapers);
- modify, reproduce, or otherwise make available to the public, or publicly broadcast, or create a separate service comparable to, or replicate (any part of) Stella; and
- intentionally or negligently compromise the operation or security of Stella, including by sending, transmitting or implementing files that contain viruses, worms, Trojan horses or other harmful or destructive features.
You are required to inform Candidates that You, as a headhunter and/or consultancy, are solely responsible for providing Your CRM Services, and that neither alphaheads nor Stella is responsible for such CRM Services.
You must ensure that all Users (including any Candidates) keep their Login Details to Stella secret at any time and ensure that these are protected from unauthorized access by third parties or become known to third parties. If there is any suspicion that unauthorized persons may have gained knowledge of a User’s Login Details, You are obliged to inform Us of this incident immediately so that We can suspend the User’s access. We may require that the login password to Stella be changed from time to time. In this case, We may suspend access to Stella for the Users until such requested password change is completed.
You shall be responsible to use Stella in such a way that You act in accordance with all laws applicable to You. You are obliged to indemnify Us against all claims by third parties that are based on the non-compliant use of Stella including but not limited to the processing of personal data by You or the Users in violation of the law or the provisions of the Contract or that are made with Your explicit or implicit approval. If You recognize that such claims are imminent, You must inform Us immediately.
You shall be responsible to secure Your data adequately, in particular by regularly generating backup copies of the data processed in connection with Stella and storing them in Your area of responsibility.
Suspending access
We may at Our reasonable discretion suspend access to Your or Your Users’ account of Stella if We determine or have reasonable grounds to suspect that the use of Stella by You, and/or Your Users:
- violates these Terms and Conditions and/or applicable law,
- infringes the rights of third parties,
- constitutes a security risk to the functioning of Stella, or
- causes liability for Us and/or other users.
We also reserve the right to suspend access to Your account to Stella if You have refused to agree to a reasonable Amendment of these Terms and Conditions pursuant to Section 15.1 by the scheduled date of the Amendment coming into effect.
We will remove the suspension as soon as the reason for the suspension no longer exists. For this purpose, You are welcome to contact Us at [XXX] in order to obtain clarification.
Further claims against You remain unaffected.
Subscribing to Stella Professional
For subscribing to Stella Professional, You may click through Our ordering process on the Stella platform. All details on prices, subscription term and other relevant aspects will be made transparent as part of the ordering process.
All prices are net prices plus the applicable taxes and fiscal charges that accrue by law.
Liability
We are liable in all cases of contractual and non-contractual liability for intent and gross negligence in accordance with the statutory provisions for damages or compensation for futile expenses. In case of slight negligence, We are only liable – unless otherwise provided for in Section 10.2 – if such negligence results in the breach of an essential contractual duty (Kardinalpflicht, a duty which itself is a necessary prerequisite for the contractual performance or a duty the breach of which jeopardizes the purpose of the Contract and upon fulfilment of which the other party could legitimately rely), in which case Our liability shall be limited to typical damages which are foreseeable at the time the Contract is being entered into; such typical foreseeable damage shall not exceed a maximum of one hundred (100) percent of the remuneration that You paid to Us during the period of twelve (12) months immediately preceding the date on which the damage occurred. In all other cases, the liability of Us is excluded subject to the provision of Section 10.2.
The liability of Us for damages
- from injury to life, body or health,
- due to the absence of a warranted quality or in the case of fraudulently concealed defects as well as
- due to mandatory liability
remains unaffected by the above limitations and exclusions of liability.
For the use of the Stella Essential, Section 10.1 shall not apply and Our liability for damages caused by the use of the Stella Essential shall be subject to the provisions on gratuitous lending, i.e., in particular, Our liability shall be limited to intent and gross negligence. The liability set forth in Section 10.2 above remains unaffected.
As far as Our liability is excluded or limited, this also applies regarding any legal representatives, employees or vicarious agents (“Representative”) of Us.
Confidentiality and Use of Data
In connection with the Contract, “Confidential Information” means all information which We or You protect against unrestricted disclosure to third parties or which is to be regarded as confidential according to the circumstances of disclosure or its content, including the Contract itself and all business and trade secrets of either party which become known to the other party in connection with the Contract, including any such information disclosed before entering into the Contract.
Each party shall (i) use Confidential Information only if it is required to fulfil or comply with its obligations under the Contract or if it is permitted under the Contract, (ii) share Confidential Information only with those Representatives that reasonably need to know such Confidential Information for the purpose of the Contract, (iii) not disclose Confidential Information to any third party without the other party’s consent, and (iv) treat Confidential Information of the other party with the same degree of care which such party applies for its own Confidential Information, but in no case with less than a reasonable degree of care.
Irrespective of the above Section 11.2, We shall be entitled to share and disclose Confidential Information to Our affiliated companies, if this is beneficial for the purposes of the Contract.
The duty of confidentiality set forth in this Section 11 does not apply for Confidential Information (i) that was already available to the public at the time when the information was made available to the receiving party or that was later made available to the public through no fault of the receiving party, or (ii) that was already known to the receiving party without an obligation to treat the information confidentially, or (iii) that was developed by the receiving party independently of the Confidential Information received, or (iv) the receiving party lawfully received from a third party without an obligation to treat the information confidentially, or (v) that has been released from the duty of confidentiality by the disclosing party in text form, or (vi) that – after exploitation of all means of defense – necessarily must be disclosed to comply with a judicial order or a regulatory decree; however, in these circumstances, the affected party has to promptly give notice to the other party of such a judicial order or regulatory decree.
The obligation to maintain confidentiality also applies after termination or expiration of the Contract.
We are entitled to analyze or have third parties analyze Your use of Stella for Our product development, diagnostic, corrective, security, license auditing as well as marketing purposes. You agree that all data that is created or generated in the context of the analyses of Your use of Stella, shall be vested with Us. To the extent that the data are allocated to You under statutory law, You hereby grant Us a non-exclusive, worldwide, perpetual, irrevocable, substantially unrestricted, transferable and sublicensable right to use the data for the purposes specified in this Section 11.6.
Term and termination
The Contract for the use of Stella runs for an indefinite period of time.
You can terminate the Contract at any time without giving a reason. This can also be done by deleting Your Stella account. Upon any such termination, the Contract will automatically end immediately (Stella Essential) or at the time the current pre-paid term of Your subscription plan lapses (Stella Professional).
We can terminate the Contract in text form with three (3) months notice at any time (Stella Essential) or to the end of a pre-paid term of Your subscription plan (Stella Professional).
In addition to the right of termination set forth in Section 12.3, We can terminate the Contract for good cause without notice, especially if:
- We consider that You have used Stella in a fraudulent manner, in breach of these Terms and Conditions or for illegal or improper purposes;
- We consider that Your account is being used for the benefit of a third party or You have otherwise deliberately cheated or taken unfair advantage of Us or any of Our other users;
- We are required to do so to comply with applicable law, an order of a court or other regulatory authority.
Our right to suspend Your access to Stella pursuant to Section 8 remains unaffected.
IP and Reference Clause
You are only allowed to use Stella, its features, functionalities, and documentation as well as any other services of Us to the extent specified in these Terms and Conditions. Unless otherwise explicitly provided in these Terms and Conditions, all rights to Stella, its features, functionalities and documentation as well as to other services of Us in the relationship between You and Us are owned by Us, Our affiliated companies or licensors. This also applies if and to the extent these are created or further developed as a result of specifications by or collaboration with You or Your Users. The preceding sentences also apply, in particular, with regard to feedback, suggestions and ideas provided by You or the Users in the context of the integration and/or use of Stella.
You are prohibited from removing any references and/or information regarding copyrights, trademark rights, patent rights and other intellectual property rights referring to Us or Our licensors.
We are authorized to use Your logo in marketing or similar activities without Your prior consent. This includes the right of Us to use Your name, logo and a brief description of the cooperation in a reference list.
Data Protection
We and You undertake to comply with all applicable data protection laws.
Towards the Candidates, You act as an independent data controller with respect to CRM Data. You undertake to process the CRM Data with regard to purpose, duration, type and scope always in compliance with the applicable data protection law.
If and to the extent We processes personal data on Your behalf within the scope of Stella, such processing shall be carried out in accordance with the data processing agreement attached hereto as Annex 2.
Miscellaneous
Modifications to Stella pursuant to Section 2.2, as well as changes to statutory requirements or other reasons may make it necessary for Us to amend these Terms and Conditions (“Amendment”). We will inform You in the event of a planned Amendment to these Terms and Conditions with at least four (4) weeks’ notice to the scheduled date of entry into force; the amended Terms and Conditions will only come into effect if You have agreed to the Amendments. Any amendments and supplements to the Contract must be made in text form to be legally effective.
You are not entitled to transfer the Contract to third parties without Our prior consent in text form.
Subject to any mandatory provisions of the applicable laws of Your place of residence, the Contract is subject to the laws of Switzerland, without recourse to its conflict of laws principles. The United Nations Convention on Contracts for the International Sale of Goods (CISG) does not apply to the Contract. Exclusive place of jurisdiction for any disputes arising out of or in connection with the Contract including its validity is [Zug, Switzerland].
If any provision of this Contract or its application to any person or circumstance is void, invalid and/or unenforceable, then the remainder of the Contract or the application of such remainder to other persons or circumstances is not affected thereby. However, if any provision or application thereof is void, invalid and/or unenforceable, then such provision shall be substituted by a valid, suitable and equitable provision or application which comes closest in meaning and economic purpose to the intent and purposes of the void, invalid and/or unenforceable provision or application. The same applies if there is a gap in the Contract.
Annex 1: Service Level Agreement
This Service Level Agreement (SLA) specifies the obligations of Us with regard to the availability and maintenance of Stella Professional.
Availability of Stella Professional
We commit to an availability of Stella Professional of at least [98.5 %] in the calendar month average.
The achieved availability is calculated as follows:
(total amount of minutes per month-Overall Downtimetotal amount of minutes per month-Excluded Downtime) * 100
“Overall Downtime” means the total amount of minutes in a month during which Stella Professional cannot be accessed at the Delivery Point.
“Excluded Downtime” means the total amount of minutes in a month during which access to Stella Professional is restricted or excluded due to maintenance work and software updates in accordance with Section 2. Excluded Downtime also includes availability restrictions based on technical malfunctions which are beyond Our control.
Maintenance and Updates
We are entitled to suspend the provision of Stella Professional for maintenance and updates.
We will schedule the maintenance and updates in such a way that the use of Stella Professional for You is affected as minimal as possible.
Planned maintenance and updates shall be notified to You electronically as soon as possible.
We reserve the right to perform non-scheduled maintenance of Stella Professional for good cause, e.g. in the event of a risk to service operations. This includes in particular emergency changes and maintenance, such as the installation of security patches, which are necessary to secure and maintain the operation of Stella Professional and require immediate implementation.
We will also try to notify You electronically in advance of non-scheduled maintenance work, if possible.
Incident Management and Support Time
You are obliged to inform Us immediately of any incidents.
We will take incident reports from You on working days from [08:00 to 18:00] CET (“Support Time”), provide them with an identification, determine the adequate priority level and, on the basis of this determination, carry out the necessary measures to analyze and trouble shoot.
We assign notified incidents to one of the following priority levels after initial inspection:
| Priority Level | Description | Response time |
|---|---|---|
| 1. critical | An incident of priority level 1 exists if the use of Stella Professional or its core functionalities is completely impossible. | Less than [1 hour] during Support Time |
| 2. high | An incident of priority level 2 exists if the use of Stella Professional or its core functionalities is significantly impaired. | Less than [2 hours] during Support Time |
| 3. low | An incident of priority level 3 exists if the use of Stella Professional or its core functionalities is only insignificantly impaired. | less than [8 hours] during Support Time |
Measures
- We will respond to notified incidents from You within the time specified in Section 3.3.
- Subsequently, We will immediately initiate appropriate measures on the basis of the circumstances communicated by You in order to identify and remedy the root cause of the incident.
- If after initial analysis the notified incident is not caused by a malfunction of Stella Professional, We will inform You of this without undue delay.
Annex 2: Data Processing Agreement (DPA) according to Art. 28 GDPR
Subject of the Processing and Duration of the DPA
The subject of the processing is the performance of the following task(s) by alphaheads:
- Provision of candidate relationship management solution Stella
The term of the DPA corresponds to the term of the Contract concluded under the Terms and Conditions.
Specification of the Processing
The nature and purpose of the intended processing of data, the scope, nature and purpose of the collection, processing and/or use of personal data by alphaheads are described as follows:
- Within the framework of providing the relationship management solution Stella, alphaheads processes personal data of candidates exclusively on behalf of and in accordance with Your documented instructions. The purpose of the processing is to technically enable the management, and storage of Your candidate profiles, documents, and application-related information.
Type of Data
The following data types/categories (enumeration/description of data categories) are subject of the processing of personal data:
- Identification data (e.g., name, email address, user ID)
- Profile data (e.g., CV, profile photo, career history, qualifications, skills)
- Uploaded documents (e.g., CVs, certifications, references, cover letters)
- Application data (e.g., information related to specific job applications, application status, notes entered by You)
- Account and access data (e.g., login data, user activity logs, invitation and access history)
- Electronic identification data (e.g., IP address, device identifiers, timestamps)
Categories of data subjects
The categories of data subjects concerned by the processing include
- Candidates
- Your employees and other staff
Processing according to Your instructions
alphaheads shall process the personal data within the scope of the DPA only on Your documented instructions. You may issue additional instructions insofar as this is necessary to comply with the applicable data protection laws.
You shall confirm verbal instructions without undue delay (at least in text form).
alphaheads shall inform You without undue delay if it considers that an instruction violates data protection regulations. alphaheads shall be entitled to suspend the execution of the relevant instruction until it is confirmed or amended by You.
Security Measures
alphaheads shall establish security in accordance with Art. 28 (3) lit. c, 32 GDPR in particular in conjunction with Article 5 (1) and (2) GDPR.
alphaheads shall document the security measures to be taken in a data protection concept. Upon Your request, alphaheads shall provide a copy of the data protection concept.
The measures to be taken ensure a level of protection appropriate to the risk in terms of confidentiality, integrity, availability and resilience of the systems. The state of the art, the implementation costs and the nature, scope and purposes of the processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons within the meaning of Article 32 (1) GDPR shall be taken into account.
The security measures are subject to technical progress and further development. In this respect, alphaheads is permitted to implement alternative adequate measures. In doing so, the current security level shall not fall below the security level at the time of the conclusion of the DPA.
Other duties of alphaheads
In addition to compliance with the provisions of this DPA, alphaheads has statutory obligations pursuant to Art. 28 to 33 GDPR; in this respect, alphaheads shall in particular ensure compliance with the following requirements:
- Written appointment of a Data Protection Officer who performs his duties in accordance with Art. 38 and 39 GDPR: A data protection officer has been appointed at alphaheads who can be contacted at […].
b) Maintaining confidentiality in accordance with Art. 28 (3) sentence 2 lit. b, 29, 32 (4) GDPR: By providing its services, alphaheads shall only entrust employees who have been bound to confidentiality and who have previously been familiarised with the data protection provisions relevant to their work. alphaheads and any person acting under its authority who has access to personal data shall not process this data unless on Your instructions, which includes the powers granted in this DPA, unless required to do so by law.
c) Implementation of and compliance with all technical and organisational measures necessary for this DPA in accordance with Art. 28 (3) sentence 2 lit. c, Art. 32 GDPR.
d) alphaheads shall cooperate, on request, with the supervisory authority in performance of its tasks.
e) alphaheads shall inform You without undue delay of any inspections and measures conducted by supervisory authorities.
f) Control: alphaheads shall regularly control the internal processes as well as the technical and organisational measures to ensure that the processing in its area of responsibility is carried out in accordance with the requirements of the applicable data protection law and that the protection of the rights of the data subject is safeguarded. If alphaheads detects a breach of the applicable data protection law, it shall notify You thereof without undue delay.
g) Supporting You in the fulfilment of Your obligations: Taking into account the type of processing and the information available to alphaheads, alphaheads shall support You with technical and organisational measures to comply with the obligations set out in Art. 32-36 GDPR, in particular with regard to the security of the processing, with data privacy impact assessments and the consultation with supervisory authorities, as well as with regard to claims for correction, deletion or blocking or in processing applications to exercise the rights of the data subjects set out in Chapter III of the GDPR within the scope of its own possibilities. You shall compensate alphaheads for the expenses incurred in this respect. Insofar as a data subject contacts alphaheads directly in this regard, alphaheads shall forward this request to You without undue delay. alphaheads shall provide You with the information necessary for the creation of the register of processing activities.
Subcontractors
alphaheads uses various subcontractors to perform the contractually agreed services.
alphaheads shall provide You with a list of the subcontractors used upon request.
If alphaheads wishes to engage further or other subcontractors, these must be selected with the due care required by law and You will be informed of the fact that such a change is planned at least 15 days before the start of processing. You shall have the opportunity to object to such changes, stating comprehensible reasons. If no solution can be reached, alphaheads is entitled to terminate the DPA with 15 days' notice.
alphaheads shall structure the contracts with subcontractors in such a way that they comply with the requirements of the applicable data protection laws and this DPA. The subcontractors shall in particular be obliged by alphaheads not to engage any further or other subcontractors without complying with the procedure provided for in this Section 6. alphaheads shall check whether sufficient safeguards are provided by the subcontractor that the appropriate technical and organisational measures are implemented in such a way that the applicable data protection law is complied with.
Subcontractual relationships within the meaning of this provision shall be understood to be those services which relate directly to the provision of Stella. This does not include ancillary services which alphaheads uses e.g. as telecommunications services, postal/transport services, maintenance and user services or the disposal of data carriers as well as other measures to ensure the confidentiality, availability, integrity and resilience of the hardware and software of data processing systems. However, alphaheads shall be obliged to implement appropriate and legally compliant contractual agreements as well as control measures to ensure data protection and data security of Your data also in the case of outsourced ancillary services.
Proof of Compliance
Upon request, alphaheads shall provide You with all necessary information to prove compliance with alphaheads’ obligations under this DPA and under Art. 28 GDPR. alphaheads further undertakes to provide You with any necessary information upon request and, in particular, to provide evidence of the implementation of the technical and organisational measures.
alphaheads shall provide up-to-date test certificates, reports or report extracts from independent qualified authorities on request. alphaheads shall facilitate and contribute to additional verifications, including inspections by You or an auditor commissioned by You. The costs of such additional verifications shall be borne by You, unless the certificate provided by alphaheads gives reasonable cause to doubt compliance with the legal requirements.
Transfer to third countries
The transfer of personal data to countries other than the member states of the European Union or the contracting states of the agreement on the European Economic Area shall only take place within the framework of the provision of the contractually agreed data processing if the special requirements of Art. 44 et seq. GDPR are fulfilled.
alphaheads agrees to provide appropriate or adequate safeguards used for the transfer to a third country, if this is required by Art. 13 (1) lit. f) or Art. 14 (1) lit. f) GDPR for the information of the data subjects.
Liability
alphaheads shall be liable according to the standards regulated in the General Terms and Conditions for Stella.
In the internal relationship with alphaheads, You alone shall be responsible to the data subject for compensation for damages suffered by a data subject due to inadmissible or incorrect data processing or use within the scope of the commissioned processing in accordance with data protection laws.
Deletion and return of personal data
After termination of the performance of the services or, if applicable, earlier you’re your request, alphaheads shall, at Your option, delete or return to You all personal data that has come into alphaheads’ possession in connection with the contractual relationship and delete any existing copies.
The obligation under Section 10.1 shall not apply to any storage and, where applicable, further processing of such personal data for which there is an obligation to store under European Union or member state law or for which there is another legal basis for further processing.