The “Aurimatrix” application, accessible at the URL address www.aurimatrix.com (hereinafter the “Application”), is published by the company AURIMATRIX MEDICAL SOLUTIONS, a simplified joint stock company with a share capital of 100,000 euros, registered under the number 913 922 324 at the Montpellier Trade and Companies Register (hereinafter the “Application”), is published by the company AURIMATRIX MEDICAL SOLUTIONS, a simplified joint stock company with a share capital of 100,000 euros, registered under number 913 922 324 at the Montpellier Trade and Companies Register, located at ZAC Les Portes de l'Aéroport 204, rue du Negue-Cat 34130 MAUGUIO and whose number is Intra-community VAT is as follows: FR01913922324 (hereinafter “AURIMATRIX”).
Telephone: +33 4 82 75 31 49
e-mail: contact@aurimatrix.com
Publishing Director: Emmanuel SAGUI
The Application is hosted by the company:
Amazon web services EMEA SARL
38 JOHN F KENNEDY AVE
L 1855 99137 Luxembourg
http://aws.amazon.com
Design & production:
David Beaumont - Web solutions
49300 CHOLET
👉 Freelance Webflow developer
SIRET : 92913961600015
DATA PROTECTION AGREEMENT
As part of any subscription to a Subscription, the Parties process personal data within the meaning of the applicable regulations in force and, in particular, of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 applicable as of 25 May 2018 (the “RGPD”).
Some of these treatments are implemented by each of the Parties - as separate data controllers - while other treatments are carried out by the Service Provider - as a subcontractor.
This agreement on the protection of personal data (the “Agreement”) aims to specify the conditions under which these treatments, resulting from the execution of the General Conditions, are carried out.
It is an integral part of the General Conditions and constitutes its Annex 2.
1. DEFINITION
The terms and concepts, used in the Agreement with a capital letter, in the singular as well as in the plural, are understood in accordance with the definitions provided in the General Conditions and in this article:
“Supervisory authority” refers to the definition provided by the GDPR.
“Personal Data Protection Officer” means the person responsible for implementing GDPR compliance within the organization that appointed him or her, with respect to all Processes implemented by this body.
“Personal Data” refers to the definition provided by the GDPR.
“Data subject” refers to the definition provided by the GDPR.
“Data Controller” refers to the definition provided by the GDPR.
“Subcontractor” refers to the definition provided by the GDPR.
“Subcontractor” means the subcontractor that the Service Provider would use in connection with the provision of the Services.
“Processing” refers to the definition provided by the GDPR.
“Transfer” means any Treatment consisting in the access, copying or transmission of Personal Data from or to a country third to the European Union.
“Personal Data Breach” refers to the definition provided by the GDPR.
2. TREATMENTS IMPLEMENTED BY EACH OF THE PARTIES IN THE CAPACITY OF SEPARATE DATA CONTROLLER
Within the framework of the General Conditions, each Party respectively implements Treatments, as a separate Data Controller.
These treatments consist of:
- contract, billing and accounting management;
- the management of Personal Contact Data.
As such, each Party undertakes to comply with the regulations in force applicable to the Processing of Personal Data and in particular the RGPD.
3. TREATMENTS IMPLEMENTED BY THE SERVICE PROVIDER, IN THE CAPACITY OF SUBCONTRACTOR
The Service Provider is authorized to process on behalf of the Customer, acting as Data Controller, the Personal Data necessary to provide the Application and the associated Services.
The nature of the operations carried out on the Data consists in the collection, recording, storage, hosting, deletion and deletion of the Data.
The purposes of the Treatments implemented are the provision of the Application and the execution of the associated Services.
The Personal Data processed for this purpose are as follows:
- Civility
- Name
- Firstname
- Date of birth
- Phone
- Laterality
- Postal code
- Indication (diagnosis or symptom)
- Duration of evolution of the indication
- Topography (anatomical data) if applicable
- Various comments (at the discretion of the user)
- Ear photo
The persons concerned whose Personal Data will be processed are the Customer's employees and patients.
3.1 Obligations of the parties
3.1.1 Contractor commitments
As a Subcontractor, the Service Provider undertakes to:
- process this Data only for the sole purposes that are the subject of the subcontracting and in accordance with the documented instructions of the Customer. If the Service Provider considers that an instruction constitutes a violation of the RGPD, it will immediately inform the Customer. In addition, if the Service Provider is required to carry out a Data Transfer to a third country or to an international organization, pursuant to a law to which it is subject, the Service Provider will inform the Customer in advance of this legal obligation, unless the law concerned prohibits such information for important reasons of public interest;
- take all the technical and structural measures necessary to ensure the confidentiality and security of Personal Data;
- keep the Personal Data processed for the retention periods set by the Customer, and in any event, only for the time necessary to perform the Services;
- ensure that persons authorized to process Personal Data (i) undertake to respect their confidentiality or are subject to an appropriate legal obligation of confidentiality and (ii) receive the necessary training in the protection of Personal Data;
- take into account, with regard to its tools, products, applications or services, the principles of Data protection by design and of Data protection by default;
- not proceed with any Transfer of Personal Data outside the European Union, without having previously obtained the written authorization of the Customer and without having taken any supervisory measures required in application of the RGPD;
- provide reasonable assistance to the Customer in carrying out data protection impact analyses or in processing requests for the rights of Data Subjects;
- maintain a record of all categories of Processing activities carried out on behalf of the Client.
3.1.2 Customer commitments
As Data Controller, the Customer undertakes to:
- provide the Service Provider with the above-mentioned Personal Data, necessary for the performance of the Services. In particular, the Customer guarantees the Service Provider to have collected the Data lawfully, and in particular, to have obtained the consent of the patients whose Personal Data is processed by the Application. The Customer also undertakes to have adequately informed the persons concerned about the processing methods implemented and the rights they have, in application of the RGPD;
- document in writing any instructions concerning Data Processing by the Service Provider;
- supervise the Treatments, including by carrying out audits of the Service Provider in accordance with the conditions agreed between the Parties;
3.2 Security measures
The Service Provider undertakes to implement appropriate technical and organizational security measures in order to guarantee a level of security adapted to the nature and purposes of the Treatments implemented, such as in particular measures to guarantee the confidentiality, integrity, availability and constant resilience of the processing systems and services.
Among these measures, the Service Provider in particular implements a TLS protocol, the use of software to detect and remove malicious programs, the restriction of administration interfaces to only authorized persons or even to secure passwords via a password management policy in accordance with the state of the art.
In addition, the Service Provider undertakes to put in place mechanisms aimed at regularly evaluating the effectiveness of technical and organizational measures to ensure the security of the Treatments.
3.3 Personal Data Breaches
The Service Provider shall notify the Customer of any Personal Data Breach as soon as possible after becoming aware of it.
To the extent possible, this notification will include:
a) a description of the nature of the Personal Data Breach including, where possible, the categories and approximate number of individuals affected by the Breach and the categories and approximate number of Personal Data records concerned;
b) the name and contact details of the data protection officer or other contact point from which additional information can be obtained;
c) a description of the likely consequences of the Personal Data Breach;
d) a description of the measures taken or that the Service Provider proposes to take to remedy the Personal Data Breach, including, where appropriate, measures to mitigate any negative consequences.
As Data Controller, it will be up to the Customer to make any possible notification to the competent Control Authority and/or to the Persons concerned.
3.4 Subcontracting and Transfers
The Service Provider informs the Customer, who accepts it, that it uses subsequent Subcontractors (processing Personal Data) in the context of the provision of the Services.
To date, the subsequent Subcontractors used by the Service Provider are the following:
Identity of Subcontractor 1:
- Amazon Web Services EMEA SARL
- Coordinates: 38 AV JOHN F KENNEDY, L 1855 99137 Luxembourg
- Sub-contracted activities: Application hosting
- Transfer outside the European Union: NO
- Identity of the Subcontractor 2: BARBABLANKA
- Coordinates: Benjamin Franklin roundabout, Cap Omega, CS 39521, 34000 Montpellier,
- Sub-contracted activities: Application Maintenance
- Transfer outside the European Union: NO
In the event of the addition or replacement of one or other of the above-mentioned Subcontractors, the Service Provider will inform the Customer in advance and in writing, specifying the changes envisaged. This information will specify the subcontracted processing activities as well as the identity and contact details of the prospective Subcontractors. The Customer will have a period of fifteen (15) calendar days from the date of receipt of this information to present his objections.
This subcontracting can only be carried out if the Customer has not raised an objection within the agreed period.
In the event of Transfer of Personal Data outside the European Union authorized by the Customer, this Transfer may only take place within the strict limit necessary for the execution of the Services and subject to:
- Whether it is carried out to a country benefiting from an adequacy decision; or
- That it is governed by the conclusion of standard contractual clauses, in force during the execution of Professional Services and validated by the European Commission, and by the implementation of technical and organizational measures guaranteeing an adequate level of protection of personal data; or
- That it be carried out in accordance with any other device allowed by the applicable regulations.
In any event, the Service Provider remains solely responsible, vis-à-vis the Customer, for the performance of the obligations incumbent on its subsequent Subcontractors.
Therefore, it is the responsibility of the Service Provider to ensure that its subsequent Subcontractors present the same sufficient guarantees as to the implementation of appropriate technical and organizational measures, so that the Treatments meet the requirements of the RGPD.
In the event that the Service Provider is required to carry out a Data Transfer outside the European Union, pursuant to a judicial or administrative decision, the Service Provider undertakes to make its best efforts to inform the Customer, prior to any Transfer, within the limits allowed by applicable law.
3.5 Requests to requests for the rights of the persons concerned
The Service Provider undertakes to provide reasonable assistance to the Customer in order to enable the latter to process requests to exercise the rights of the Persons Concerned. Likewise, the Service Provider undertakes to transmit to the Customer, as soon as possible, any request to exercise rights that it may have received and which would concern the above Treatments.
3.6 Audit
As part of the supervision of Treatments subcontracted to the Service Provider, the Customer has the right to carry out or have an audit carried out of the performance of the Services, up to a limit of one (1) time per year and at its own expense.
This audit must be carried out - online - by members of the Customer's staff or by a third party agreed with the Service Provider, subject to compliance with a minimum written notice of fifteen (15) calendar days.
In any event, this audit may only relate to the conditions of performance of the Services, in application of the General Conditions, and may not exceed a duration of one (1) calendar day.
A copy of the audit report will be given to the Service Provider.
3.7 Communication
Any information or notification relating to the above Processing of Personal Data or relating to the execution of this Agreement must be sent to the Personal Data Protection Officer of each party or to any privileged interlocutor, by name.
- For the Service Provider: contact@aurimatrix.com
- For the Customer: identity and contact details of the Delegate or the privileged interlocutor to be communicated to the Service Provider
3.8 Data fate
At the end of the execution of the Services and within a period of thirty (30) calendar days from this term, the Service Provider undertakes to delete all Personal Data processed on behalf of the Customer, subject to its legal obligations.
This destruction will be recorded by a report dated and signed by the Service Provider.
GENERAL CONDITIONS OF USE
Version dated November 7, 2023
The purpose of these general conditions of use (hereinafter referred to as “CGU”) is to determine the rules for using the Application.
For this purpose, AURIMATRIX recalls that the Application is strictly reserved for professional use by doctors, personnel in the (para) medical sector or personnel whose training has been recognized by an administrator approved by AURIMATRIX.
By connecting to it, you unconditionally or reservedly accept all of the T&Cs defined below.
Any visit and/or use of the Application must be in compliance with these Terms and Conditions.
Section 1. DEFINITIONS
Terms beginning with a capital letter in these Terms, whether used indifferently in the singular or plural, have the meaning given to them below:
“Administrator” refers to the health professional in charge of managing User rights for accounts associated with the Customer. The appointment of an Administrator is made at the discretion of the Customer but remains subject to prior validation by AURIMATRIX. Once appointed, the Administrator acts under the responsibility of the Customer.
“Content (s)” means, without this list being exhaustive, the structure of the Application, its graphic elements, its editorial and visual content, its brands and logos, its audio and sound content, present within the Application and/or any other element composing the Application.
“Services” refer to the various functionalities offered by the Application, as described in article 2 of these Terms of Use.
“User” or “You” refers to a natural person with a right of access to the Application, issued by an Administrator. A User must have the status of doctor, staff in the (para) medical sector or have been trained by an Administrator.
Section 2. OBJECT
As of the effective date of these Terms of Use, the following Services are in particular offered to the User through the Application, according to the offer subscribed and the rights of use granted by the Administrator:
- the complete management of a patient file;
- the proposal of auriculotherapy protocols according to the medical indication in the form of points to be stimulated;
- helping identify auriculotherapy points on a patient's ear;
- the possibility of creating your own protocols;
- the subsequent validation of an auriculotherapy session in an automated manner, according to the option chosen by the User or imposed by the Administrator;
- the subsequent validation of the protocols used.
This list is not exhaustive and may be modified at any time by AURIMATRIX without being held liable in this respect.
Section 3. ACCESS TO THE APPLICATION
The Application is accessible from a computer, smartphone or tablet and is reserved for strictly professional use. The application software version may be updated from time to time by AURIMATRIX, at its discretion, to add new features and services, which may be subject to additional billing.
AURIMATRIX reminds each User of the personal and confidential nature of any username and password. As such, each action on the Application, being traced and time-stamped, is presumed to be carried out by the owner of the identified User account.
1) Creation of a User account and first login
In order to access the Application, a request to create a user account must be sent via the Application registration form to the Administrator with the following information: title, surname, first name, date of birth, date of birth, country of practice, country of practice, email, telephone, address. After verifying the status of the User who requested registration and subject to the effective payment of the Subscription to which the said User would be attached, the Administrator will proceed with the creation of the account.
Once the password has been created, the User will be asked to determine a personal password, composed of at least twelve (12) characters including uppercase, lowercase, numbers and special characters.
2) Renewing passwords for Administrator accounts and blocking access
In order to continue to access the Application, the User with an Administrator account must change his password every three (3) months, according to the definition rule described above, without it being possible for him to reuse one of his last three (3) passwords.
3) Forgotten or lost passwords
In case of forgetting or losing passwords, the User can reset their password via the “forgotten password” link. The information requested for the reissuance of a password is the User's email address.
4) Deleting access and the User account
If the User wishes to delete his User account from the Application, he must send a request to the Administrator. In addition, in the event of a User's failure to comply with any of the obligations of these Conditions, AURIMATRIX reserves the right, without notice and without any compensation, to close any User account. Likewise, AURIMATRIX reserves the right to limit access to the Application in the event of non-payment of the Subscription.
Section 4. INTELLECTUAL PROPERTY
The Application and all the elements that constitute it (in particular the texts, presentations, videos, videos, photographs, downloadable documents, brands and logos...), the associated software, are protected by intellectual property rights and related rights, reserved only to the holders of these rights.
AURIMATRIX is the exclusive owner of all intellectual property rights relating to the Application and the Contents. None of the provisions of the CGU may be interpreted as an assignment, transfer, sale, sale, sale, concession, license, loan, rental, operating authorization granted directly or indirectly by AURIMATRIX for the benefit of the User on the Application.
AURIMATRIX grants the User a personal right to use the Application and the Contents, which is non-exclusive, revocable, non-transferable, only for their own needs in the context of the use of its functions, to the exclusion of any other purpose.
It is strictly forbidden for the User to access and/or use the source codes of the Application or Content and/or their software components. The User is therefore prohibited from reproducing, representing, adapting and/or exploiting either Content. The User expressly undertakes that the use of the Application and the Contents will in no way infringe the rights of AURIMATRIX, and in particular that this use does not constitute an act of counterfeiting, unfair competition or parasitic competition with the Content.
The provisions of this article will remain in force for the duration of the provision of the Application by AURIMATRIX.
Section 5. CONFIDENTIALITY
AURIMATRIX remaining the exclusive owner of the Application, its Contents and any data contained therein, the User undertakes to take all useful precautions to preserve the confidentiality and security of this information and in particular to prevent it from being deformed, damaged or accessed by unauthorized third parties.
Section 6. AVAILABILITY OF THE APPLICATION
AURIMATRIX is committed to making its best efforts to secure access, consultation and use of the Application and Services. The Application is accessible 24 hours a day, 7 days a week except in the event of force majeure or the occurrence of an event beyond the control of AURIMATRIX and subject to any maintenance interventions necessary for the proper functioning of the Application.
Maintenance interventions may be carried out without Users having been notified in advance.
Section 7. PERSONAL DATA
In execution of a Subscription, AURIMATRIX processes various Users' personal data (hereinafter your “Data” or “Personal Data”), within the meaning of the regulations in force applicable to the processing of personal data and, in particular, of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 applicable as of 25 May 2018 (hereinafter the “RGPD”).
These treatments consist in the collection, registration, hosting, storage and deletion of Users' names, first names and email addresses, for the purposes of providing the Services and more specifically (i) to create any User account and, (ii) to implement the maintenance operations necessary for the proper functioning of the Application.
In this context, the Data will be communicated and processed by AURIMATRIX's technical service providers, in charge of maintaining and hosting the Application.
AURIMATRIX undertakes to implement the technical and organizational measures necessary to ensure the security of the Application and the confidentiality of the Data, such as in particular the implementation of a TLS protocol, the use of software to detect and remove malicious programs, the restriction of administration interfaces to only authorized persons, or the security of passwords according to the latest recommendations of the CNIL (12 characters minimum 1 + SHIFT, 1 min., 1 number and 1 special character).
As such, AURIMATRIX also undertakes not to communicate the Data to unauthorized third parties who do not have the strict need to know it, to use only subsequent subcontractors offering sufficient guarantees so that the treatments meet the requirements of the RGPD, and to not carry out any transfer of Data outside the European Union.
Users' Personal Data is kept by AURIMATRIX throughout the duration of the activity of the User account and will, at the latest, be destroyed by AURIMATRIX, at the first request to delete his account, by the User.
In addition, AURIMATRIX undertakes, as soon as possible, to inform Users of the occurrence of any Data breach or security breach occurring on the Application by specifying what were and are the measures implemented by AURIMATRIX to mitigate it and to minimize its effects.
In accordance with the regulations applicable to personal data, you can access the Data concerning you, request its correction and/or deletion, exercise your right to limit the processing of your Data or even your right to organize the fate of your Data in the event of death.
To exercise your rights or for any questions about the processing of your Data, you can send your request to contact@aurimatrix.com.
Finally, each User also has the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) if they consider that the processing of Data concerning them constitutes a violation of the applicable regulations.
Section 8. RESPONSIBILITY
1) AURIMATRIX's responsibility
Access and use of the Application are at the risk and peril of the User.
The Application, its Content and its Services are provided “as is” and “as available” without any other guarantee whatsoever. It is the responsibility of all Users to take all appropriate measures in order to protect their own data and/or software stored on their computer and telephone equipment against any attack.
2) Responsibility of Users
Users are solely responsible for the use they make of the Application, Services and Contents.
The User is prohibited from using any hardware or software, from inserting any data or any element that may alter or prevent the proper functioning of the Application and the Services.
Section 9. EVOLUTION OF THE GENERAL CONDITIONS OF USE
The applicable T&Cs are those in force on the date of connection and use of the Application by the User.
AURIMATRIX reserves the right to modify, at any time, all or part, the provisions of the T&Cs in order to adapt them to changes in the Services, to technical, legal or jurisprudential developments or when implementing new services.
Any changes made by AURIMATRIX to the Terms of Use will be brought to the attention of Users the next time they connect to the Application, via an information banner.
They are deemed to have been accepted without reservation by any User who accesses the Application after such posting.
AURIMATRIX therefore invites all Users to consult the CGU regularly.
Section 10. CONTACT
Any questions relating to the Application can be sent to the following address: contact@aurimatrix.com.
Section 11. APPLICABLE LAW
These CGU are subject to French law.
Any dispute or dispute relating to the execution or interpretation of these Terms and Conditions that cannot be settled amicably between the parties will be subject to the exclusive jurisdiction of the Paris Judicial Court.
GENERAL CONDITIONS OF SALE
Version dated 1 July 2024
The company AURIMATRIX MEDICAL SOLUTIONS, a simplified joint stock company with a share capital of 100,000 euros, registered under the number 913 922 324 in Montpellier, located at ZAC Les Portes de l'Aéroport at 204 rue du Negue-Cat 34130 MAUGUIO, France, and whose intra-community VAT number is the following: FR01913922324 (hereinafter “AURIMATRIX”) is the owner of a computer solution to help the practice of auriculotherapy, with multiple interfaces (administrators and users) accessible in SaaS mode.
As part of its activities, AURIMATRIX offers in particular the provision of this IT solution to customers, health professionals, practicing auriculotherapy sessions. In addition, AURIMATRIX also carries out research activities and periodically shares with its customers new therapeutic protocols based on the feedback of its users, but also stimulation areas not indicated in the usual maps.
These general conditions (hereinafter the “General Conditions”) are intended to explain the methods of providing the Application and providing the Services as part of a Subscription to the Application.
In this respect, it is recalled that the Application and the Services are reserved for strictly professional and medical use. Any use of the Application in any other context is prohibited.
These General Conditions consist of these conditions and their annexes: annex 1 “Description of the Application” and annex 2 “Data Protection Agreement” .They are supplemented by the general conditions of use (hereinafter the “CGU”) applicable to Users, available from the Application.
Any version of the Application or Services will be governed by these Terms.
Section 1. DEFINITIONS
For the purposes of these general conditions of sale, the concepts and terms used below, with a capital letter, in the singular or in the plural, are understood as follows:
“Subscription” means the subscription that can be taken out by a Customer in order to benefit from the Services.
“Anomaly” means any reproducible defect, malfunction or non-compliance of all or part of the Application with respect to the Documentation, while the Application is used in accordance with the Documentation, while the Application is used in accordance with the Documentation by the Users.
“Application” refers to the software solution in SaaS mode, accessible at the URL https://www.aurimatrix.com as described in Appendix 1 “Application Description”.
“Customer” means the company subscribing to a Subscription.
“Documentation” means the set consisting of the Application user manual and any other online help guide, which the Service Provider makes available to the Customer, on an electronic medium.
“Confidential Information” means any information, knowledge, data communicated or made accessible by a Party to the other Party, in writing, orally or visually, during the period of validity of the General Conditions and within the framework of the latter, and whether they have been marked “confidential” or not, including without being limited to information, knowledge, data, of a technical, scientific, regulatory, commercial, legal, financial, accounting, economic and/or strategic nature of any kind. What that is, regardless of the form (knowledge, experience, know-how, plans, studies, know-how, plans, studies, materials, etc., plans, studies, materials, etc.) and methods (paper support, computer support, test, method, method, method, tool design, process, prototype, specific component, software, etc.) and methods (paper support, computer support, supply of products, samples, materials, materials, etc.).
Information that is not considered confidential is:
1) already known to the public domain at the time of their disclosure or which would fall into it, through no fault of either Party;
2) communicated to the Party that received them, by a third party in a lawful manner;
3) whose Party that must disclose them could prove that it knew them prior to their communication or obtaining them, in good faith;
4) disclosed in execution of a legal provision, regulation or administrative or judicial decision. In the latter case, the Party that received the information undertakes to immediately notify the Party that disclosed it and to obtain an assurance that such information will receive confidential treatment equivalent to this.
“Deliverable” means any report, document or result generated directly or indirectly by the use of the Application by the Customer.
“Party (s)” means the parties hereto: individually, the Customer or the Service Provider and collectively, the Customer and the Service Provider.
“Service provider” means AURIMATRIX.
“Services” mean the services offered to the Customer by the Service Provider provided as part of the provision of the Application, under a Subscription taken out.
“User” means any natural person, members of the Customer's staff, authorized by the Customer and under his responsibility, to access and use the Application.
Section 2. SCOPE OF APPLICATION
The General Conditions apply, without restriction or reservation, to any Subscription taken out by the Customer.
These General Terms and Conditions establish all the rights and obligations of the Parties and cancel all other oral or written commitments that the Parties may have subscribed previously and which would relate to the same object.
Consequently, any general terms and conditions of purchase of the Customer are thus excluded.
Finally, taking into account the changes that the Service Provider is likely to make, the Customer is invited to read the General Conditions before taking out a Subscription.
Section 3. SUBSCRIPTION TO A SUBSCRIPTION
The use of the Application Services is subject to the subscription of a Subscription.
3.1 Subscription Description
Any Subscription to the Application allows the Customer, as well as the Users under his responsibility, to access all the functionalities of the Application, namely the management of the patient file, the entry of points, the use of protocols, cards and point sets, the possibility of creating new points and protocols.
These functionalities may be subject to possible restrictions imposed by the Administrator, if the User uses the latter.
It is recalled that a Subscription can only be taken out on behalf of a single Customer.
The methods of processing personal data resulting from these Services are defined in Annex 2 “Data Protection Agreement” of these Conditions.
3.2 Subscription terms
Before subscribing to a Subscription, the Customer undertakes to carry out any useful verification to ensure the adequacy of the Services and the Application to its needs and acknowledges having had all the technical and pre-contractual information necessary for this purpose.
Therefore, the Customer can subscribe to a Subscription by clicking on the “register” link accessible from the Application. He will then be invited to fill in the information necessary to create his account and, if applicable, any promotional code he may have.
After validation of these entries, the Customer will automatically be redirected to the website of the online payment provider Stripe to proceed with the payment of the Subscription. In all cases, after confirmation of the order and payment of the latter, the Customer will receive a confirmation email, summarizing the information relating to his order.
3.3 Prices and terms of payment
The price applicable to the Subscription is available on the Application, when the Customer validates the subscription and includes all taxes.
If necessary, these prices may be reduced if the Customer uses a promotional code when subscribing to their Subscription.
Payment for the Subscription is made in euros and by bank card (CB, Visa, Mastercard, American Express), excluding any other means of payment. The Service Provider uses Stripe for all payment transactions.
In order to make the payment due, the Customer must provide his last name, his bank card number, the expiry date of the card accompanied, if applicable, by the visual cryptogram.
All payments are made as soon as the Subscription is taken out by the Customer, at the end of the free period granted.
Payments will be secured by a data encryption procedure in order to avoid the interception of this information by a third party. In addition, the payment may be validated after entering a 3D Secure code provided by the bank of the Customer holding the bank card and communicated by SMS. For this purpose, the Customer guarantees that he has the authorizations that may be necessary to use the payment instrument chosen at the time of validation of his order.
In the context of Internet payments, a check is carried out online with competent banking institutions and organizations, interviewed via the Stripe company system.
In the event of refusal by the bank, the order will be automatically cancelled and the Customer will be informed by the Service Provider.
Payments made by the Customer will only be considered final after effective collection by the Service Provider of the amounts due.
It is specified that since the Service Provider uses the Stripe payment provider, the Service Provider has no access to information relating to the Customer's payment method.
The Service Provider cannot be held responsible in the event of fraudulent use of the payment methods used.
3.4 Duration and termination
Any Subscription remains in force, unless cancelled early, for the duration initially subscribed, i.e. one (1) month or twelve (12) months depending on the subscription plan subscribed to.
At the end of its initial term, any Subscription is renewed by tacit renewal for an equivalent period, except in cases of force majeure or termination requested by one or other of the Parties, it being understood that the Customer may cancel the renewal of his Subscription by notifying the Service Provider at the latest, one (1) month before the end of the current commitment period.
Any cancellation of a Subscription terminates access to the Application by the Customer at the end of the current commitment period, except for the exceptions provided for herein.
In addition, in the event of violation or non-performance by one or other of the Parties of any of its obligations under these Conditions, the injured Party may, after sending a letter of formal notice to comply with the defaulting Party that has remained unsuccessful within a period of thirty (30) calendar days, automatically cancel the current Subscription by sending a notification by registered letter with acknowledgement of receipt to the Party. failing.
3.5 Right of withdrawal
The Customer, subscribing to a Subscription as part of and for the needs of his main professional activity, does not have a right of withdrawal, as provided for by the Consumer Code.
Section 4. AVAILABILITY AND SECURITY
The Application is accessible 24 hours a day, 7 days a week except in the event of the occurrence of an event beyond the control of the Service Provider (including cases of force majeure), possible malfunctions or maintenance interventions necessary for the proper functioning of the Application.
However, the Customer is reminded that the Service Provider may, at any time and for any reason whatsoever (in particular update, maintenance or suspicion of a security event), interrupt access to the Application and/or the Services, without being held liable in this respect.
Maintenance and/or update interventions may be carried out without the Customer having been notified in advance.
The Service Provider undertakes to make its best efforts to secure access and use of the Services and the Application. As such, the Service Provider undertakes in particular to implement technical and organizational measures, such as in particular the execution of a TLS protocol, the use of software for the detection and removal of malicious programs, the restriction of administration interfaces to only authorized persons or the establishment of a specific procedure for securing passwords.
However, the Customer declares to be aware of the characteristics and limitations of the Internet and that it is therefore up to him to take any useful measure (i) to keep his passwords and sensitive information confidential and (ii) to protect his own data and information systems, from attempts of intrusion or hacking, by third parties, via the Application.
As a result of the above, the Service Provider declines all responsibility in the event of the occurrence of one of the facts mentioned above which would not be the direct consequence of a fault on its part.
Section 5. OBLIGATIONS OF THE PARTIES
5.1 General Obligations
Each Party undertakes, as part of the provision of the Services, to honor its contractual obligations in good faith and to bring to the attention of the other Party, as soon as possible, any information likely to directly or indirectly impact the performance of the Services.
5.2 Specific obligations of the Service Provider
The Service Provider undertakes to perform the Services, as a diligent professional, according to a general obligation of means. As part of its obligation to advise and warn, the Service Provider also undertakes to inform the Customer of any recommendation or alert relevant to the circumstances encountered.
5.3 Specific obligations of the Customer
The Customer undertakes to respect its obligations, as defined herein and to inform the Service Provider of any event likely to impact the proper performance of the Services.
In addition, the Customer undertakes in particular to:
- Obtain and maintain, at its own expense, the computer hardware, software, telecommunications lines and installations necessary to use the Application;
- Regularly send the Service Provider an updated list of Users of the Application;
- Ensure the continuous protection of its equipment, hardware, software, passwords, in particular against viruses and intrusion attempts;
- Respect the Service Provider's intellectual property rights on the Application and Documentation, in accordance with article 6 “Intellectual Property”.
Section 6. INTELLECTUAL PROPERTY
6.1 Ownership of the Application
The Application, all the elements that constitute it (in particular the texts, presentations, videos, videos, photographs, downloadable documents, graphic charter, brands and logos...) and the Documentation are protected by intellectual property rights and related rights, reserved only to the holders of these rights.
The Service Provider expressly reserves all rights to the Application, associated domain names and sub-domains, the name Aurimatrix Medical Solutions, its logo, its service marks and trade names as well as to any element reproduced on its possible accounts on social networks, regardless of its form.
Therefore, in accordance with the provisions of the intellectual property code, any representation, reproduction, modification, distortion of the Application and/or the Documentation, in whole or in part, by any process whatsoever and on any medium whatsoever, without the express and prior authorization of the Service Provider, is prohibited.
Hereby, the Service Provider grants the Customer a right to use the Application, its components and the Documentation, which is non-exclusive, revocable and non-transferable, valid for the entire duration of subscription to a Subscription.
It is therefore strictly forbidden for the Customer to:
- To carry out any adaptation, modification, translation, transcription, arrangement, arrangement, arrangement, arrangement, compilation, compilation, compilation, decompilation, assembly, disassembly, transcoding, or to apply reverse engineering (or “Reverse Engineering”) of all or part of the Application or Documentation;
- To extract or reuse, for any purpose whatsoever, all or part of the Application or Documentation, whether manually or automatically (web scraping through software, scripts or equivalent);
- To create derivative works from the Application and/or Documentation;
- To use software, vacuum, extraction robots or processes intended to copy the content of the Application and/or Documentation;
- To merge all or part of the Application and/or Documentation with other computer programs;
- To reproduce the Application and/or the Documentation, in whole or in part, by any means and in any form;
- To sell, rent, distribute or sublicense the Application and/or the Application to third parties, without the prior written authorization of the Service Provider.
The Customer undertakes to inform the Service Provider as soon as it becomes aware of an act of piracy and in particular in the event of illicit or non-contractual use of the Application and its content or Documentation, regardless of the mode of distribution.
6.2 Ownership of Deliverables
The Service Provider is and remains the exclusive owner of the property and the copyright on the Deliverables.
However, as part of any Subscription, the Service Provider grants the Customer a license to use and reproduce the Deliverables, for the entire duration of said Subscription, and for the whole world.
In accordance with article L.131-3 of the Intellectual Property Code, it is specified that the rights granted include:
- the rights of use by the Customer of all or part of the Deliverables;
- the right to reproduce or to have reproduced, to digitize or to have digitized, in as many copies as the Customer wishes, all or part of the Deliverables.
In application of the above, the Customer undertakes to cease all use of the Deliverables at the end of its Subscription.
6.3 Eviction guarantee
The Service Provider guarantees the Customer from any eviction of his personal act and from the material existence of the Application, to the exclusion of any other guarantee. The Parties expressly declare that the provisions of this article will remain in force after the cessation of these terms and conditions, for any reason whatsoever and in particular in the event of termination of the Subscription.
Section 7. PERSONAL DATA
The processing of personal data implemented as part of the Services is described in Annex 2 “Data Protection Agreement”.
Section 8. CONFIDENTIALITY
As part of the execution of the Services, the Parties are required to exchange Confidential Information. The content and methods of execution of the Services also constitute Confidential Information.
As such, each of the Parties undertakes to:
- Implement all necessary measures to ensure that the Information communicated by the other Party remains secret and kept strictly confidential;
- Apply to Confidential Information the same care and the same security, protection and precautionary measures that it would apply to its own Confidential Information;
- Do not use Confidential Information for purposes other than for the performance of the Services;
- To disclose Confidential Information only to members of its staff who will have a strict need to know it and who will be subject to the same confidentiality obligations as those defined in the General Conditions;
- To not transmit or communicate to any third party, directly or indirectly, all or part of said Confidential Information, without the prior written consent of the other Party;
- Not to copy, reproduce, duplicate totally or partially all or part of the Confidential Information, when such copies, reproductions or duplications have not been authorized by the Party from which they emanate, in a specific manner and in writing;
- To respect and to ensure that members of its staff and any subcontractors required to perform the Services respect the strictest confidentiality of all Information that they may be required to know on this occasion.
The Parties acknowledge and accept that the right of ownership over all Confidential Information that the Parties disclose to each other belongs in any event, subject to the rights of third parties, to the Party from which they emanate.
The obligation of mutual confidentiality remains for the duration of the General Conditions and will continue beyond its cessation, for whatever reason, until the information has been made public.
Section 9. SUBCONTRACTING
The Service Provider informs the Customer, who accepts it, that it uses: in the context of the execution of the Services, it uses:
- Amazon Web Services EMEA SARL, 38 AV JOHN F KENNEDY, L 1855 99137 Luxembourg, for the hosting services required for the Application, it being specified that it is a certified personal health data host (https://esante.gouv.fr/offres-services/hds/liste-des-herbergeurs-certifies);
- Barbablanka, Benjamin Franklin roundabout, Cap Omega, CS 39521,34000 Montpellier, France for maintenance services required for the Application;
- Stripe Payments Europe Limited, The One Building, 1 Grand Canal Street Lower, 1 Grand Canal Street Lower, Dublin 2 Co., Dublin, Ireland for online subscription payment services.
The Service Provider undertakes to notify the Customer as soon as possible of any addition or modification to the list of subcontractors above.
The obligations of the Service Provider, applicable to the subcontracting of Personal Data Processing, are specified in Annex 2 “Data Protection Agreement”.
Section 10. RESPONSIBILITY
In the event of a breach by either Party of its obligations hereunder, the injured Party may claim compensation for its damage for all direct damages within the limit of the amounts set out in the Order Form concerned and paid by the Customer during the twelve (12) months preceding the occurrence of the causative event.
In any case, the liability of the defaulting Party cannot be limited and/or excluded in the event of personal injury, gross negligence or even fraudulent misconduct.
Each Party is solely responsible for the compliant execution of its obligations, it being specified that the performance of the Services by the Service Provider is only subject to a general obligation of means.
Finally, the Customer uses the Application and the results obtained through it under its exclusive responsibility, without possible recourse against the Service Provider.
Section 11. FORCE MAJEURE
In the event of a case of force majeure, within the meaning of article 1218 of the Civil Code, no Party may be held responsible for the non-execution or delay in the execution of any of its obligations.
In such a case, it will be up to the prevented Party to notify the other Party, without delay, of the existence of the case of force majeure encountered.
However, in the event of persistence of the case of force majeure for a period of more than thirty (30) calendar days, the other Party will be entitled, by written notification to the defaulting Party, to request the termination of the current Subscription, without any compensation on either side.
ARTICLE 12 - CONTINGENCY
In the event of a change in unforeseeable circumstances when the Subscription is taken out, in accordance with the provisions of article 1195 of the Civil Code, the Party that has not accepted to assume an excessively onerous risk of performance will be free to request a renegotiation of the General Conditions.
In the event of refusal by the other Party or the failure of the renegotiation at the end of the period agreed between them, the Parties may request, by mutual agreement, a judge to adapt the Conditions.
In the absence of agreement within a period of thirty (30) calendar days from this adaptation, the most diligent Party may ask the judge to cancel the current Subscription on the date and under the conditions that it will set.
ARTICLE 13 - INSURANCE
Each Party declares that it has subscribed to an insurance policy guaranteeing the consequences of its civil and contractual liability.
ARTICLE 14 — EVIDENTIARY AGREEMENT
Unless proven otherwise, the data recorded in the Service Provider's computer system constitutes proof of all actions and interactions between the Customer and the Users.
ARTICLE 15 — GENERAL
1) Tolerance and non-renunciation
No tolerance or renunciation by a Party in the execution of the terms of these General Terms and Conditions shall not constitute or be considered as a waiver of its rights or as a modification of the Conditions.
2) Nullity
In the event that one of the non-substantial provisions of the General Conditions is considered void under a legal or regulatory provision, present or future, or a court decision with the authority of res judicata and emanating from a competent jurisdiction or body, the clause in question will be considered to be unwritten, all other provisions of the Conditions remaining binding between the Parties.
3) Independence of the Parties
Each Party constitutes an independent legal person acting in its own name and under its sole responsibility.
4) Communications and references
Each Party remains free to be able to communicate on the existence of the General Conditions, subject to having obtained the prior written authorization of the other Party.
As such, the Customer authorizes the Service Provider, throughout the duration of the Subscription purchased and free of charge, to use its corporate name, brand, or logo in the context of the advertising or the above-mentioned communications that it could make to its French customers, in any format.
5) Notifications
For the execution of these terms, each of the Parties elects residence at the address of its head office. Any modification must be notified to the other Party as soon as possible.
Any notification will be validly made subject to being sent by registered letter with acknowledgement of receipt or by email and confirmed by registered letter with acknowledgement of receipt.
Notifications made by registered letter with acknowledgement of receipt will be presumed to have been made on the date of their first presentation to the addressee's address.
Notifications made by email will be presumed to have been made on the date the email was sent, subject to confirmation by registered letter with acknowledgement of receipt.
6) Survival
It is understood between the Parties that the term of a Subscription, regardless of the cause, will not affect the validity of certain clauses which - due to their nature, legal regime or in execution hereof - will survive the latter.
ARTICLE 16 - APPLICABLE LAW - LANGUAGE - DISPUTES
The General Conditions are subject to French law, to the exclusion of any other legislation, and are written in French.
In case of translation, the French version of the Terms will prevail over any other foreign language version.
In the event of a dispute relating to the validity, interpretation or execution of the General Conditions, the Parties agree to come together to try to find an amicable solution to their dispute within a period of thirty (30) calendar days, from the date of written notification of the dispute.
In the event of failure in the search for an amicable solution, any dispute relating to the conclusion, interpretation, execution or termination of the General Conditions will be submitted to the Paris Judicial Court, including in summary proceedings, notwithstanding the warranty claim or the plurality of defendants.