terms & conditions

«Módulos adicionales«se refiere a los módulos de software y servicios adicionales a los que un USUARIO puede suscribirse junto con su suscripción al Software Veezi a través del Back Office de Veezi.

»Afiliado» significa con respecto a una parte, cualquier empresa, organización, asociación, persona u otra entidad que directa o indirectamente (a) controle o esté controlada por esa parte; o (b) esté controlada por una empresa, organización, asociación, persona u otra entidad que también controle a esa parte, (cuando»control» significa la posesión del poder de dirigir o provocar la dirección de la administración y/o las políticas de la entidad correspondiente, ya sea directa o indirectamente (mediante la propiedad de valores con derecho a voto, mediante contrato o de otro modo).

«Fecha de suministro«significa la fecha en la que el USUARIO accede por primera vez al Software.

»Legislación de protección de datos» se refiere a la legislación aplicable que protege los datos personales de las personas físicas, que incluye (pero no se limita a):

1. Reglamento (UE) 2016/679 del Parlamento Europeo y del Consejo, de 27 de abril de 2016 (»RGPD DE LA UE«) y la Directiva 2002/58/CE, incluida, cuando proceda, cualquier ley de aplicación local, actualizada periódicamente;
2. el RGPD de la UE, tal como es aplicable como parte de la legislación nacional del Reino Unido en virtud del artículo 3 de la Ley de la Unión Europea (retirada) de 2018 y modificado por el Reglamento de protección de datos, privacidad y comunicaciones electrónicas (enmiendas, etc.) (salida de la UE) de 2019 (en su versión modificada) (»GDPR DEL REINO UNIDO«);
3. la Ley de Privacidad del Consumidor de California de 2018, modificada o reemplazada de vez en cuando (»CCPA»); y
4. directrices vinculantes y códigos de prácticas publicados de vez en cuando por las autoridades supervisoras pertinentes.

»Datos personales de la UE» se refiere a los datos personales a los que se aplicaban las leyes de protección de datos de la Unión Europea, o de un Estado miembro de la Unión Europea o del Espacio Económico Europeo, antes de su procesamiento por parte de VISTA.

«GDPR» significa, en cada caso y en la medida aplicable a las actividades de procesamiento: (i) el RGPD de la UE; y (ii) el RGPD del Reino Unido.

»Datos generados» se refiere a cualquier dato que se derive o genere a partir de los Datos del USUARIO como parte de la prestación de los Servicios, pero excluye cualquier fórmula, cálculo o algoritmo utilizado para derivar o generar esos datos.

»Condiciones de indemnización» significa las siguientes condiciones que una parte debe cumplir para que la otra parte tenga derecho a una defensa o una indemnización en virtud del presente Acuerdo: (i) la parte indemnizada notifica por escrito a la parte indemnizadora cualquier reclamación que pueda ser objeto de indemnización inmediatamente después de que cualquier funcionario ejecutivo de la parte indemnizada o miembro del departamento legal de la parte indemnizada tenga conocimiento por primera vez de la reclamación, siempre que, sin embargo, no notifique a un la parte indemnizadora eximirá a la parte indemnizadora de sus obligaciones en virtud de la Acuerdo, excepto en la medida en que dicho incumplimiento perjudique materialmente la defensa de la reclamación y excepto en la medida en que la parte indemnizadora incurra por los daños y perjuicios sufridos como resultado de la demora; (ii) la parte indemnizadora tiene el control principal sobre la defensa y la liquidación de la reclamación (sin perjuicio de lo anterior, la parte indemnizada puede participar en la defensa por su cuenta y costo exclusivos); (iii) la parte indemnizada no admite responsabilidad (excepto según lo exija la ley aplicable) ni llega a ningún acuerdo sin la indemnización el acuerdo previo por escrito de la parte (no debe retenerse de manera irrazonable); (iv) la parte indemnizada brinda la asistencia en defensa del procedimiento que la parte indemnizadora pueda solicitar razonablemente, a expensas razonables de la parte indemnizadora; y (v) la parte indemnizada hace todos los esfuerzos comercialmente razonables para mitigar sus pérdidas.

»Derechos de propiedad intelectual» significa todos los derechos (incluidos los derechos de propiedad, los derechos o la licencia de uso, los derechos derivados del uso y los derechos objeto de las solicitudes de registro) sobre cualquier nombre comercial, diseño, patente, derecho de autor, conocimiento, proceso, método, invención, base de datos, diseño de circuitos u otra forma de propiedad intelectual (esté o no registrada), y todos los derechos o formas de protección de naturaleza similar o que tengan un efecto equivalente o similar a cualquiera de los de cualquier parte del mundo.

»Área protegida» significa:

1. en el caso de los datos personales de la UE, los estados miembros de la Unión Europea y del Espacio Económico Europeo y cualquier país, territorio, sector u organización internacional respecto del cual esté en vigor una decisión de adecuación en virtud del artículo 45 del RGPD de la UE; y
2. en el caso de los datos personales del Reino Unido, el Reino Unido y cualquier país, territorio, sector u organización internacional respecto del cual esté en vigor una decisión de adecuación en virtud de la normativa de adecuación del Reino Unido.

»Cláusulas contractuales estándar» o»SCC» significa:

1. con respecto a los datos personales de la UE, las cláusulas contractuales estándar para la transferencia de datos personales a terceros países de conformidad con el RGPD de la UE, adoptadas por la Comisión Europea en virtud de la Decisión de Ejecución (UE) 2021/914 de la Comisión; y/o
2. con respecto a los datos personales del Reino Unido, el anexo de transferencia internacional de datos a las cláusulas contractuales estándar de la UE, emitido por el Comisionado de Información de conformidad con la sección 119A de la Ley de Protección de Datos de 2018.

»Módulos adicionales de terceros» se refiere a los Módulos adicionales que pertenecen o tienen licencia de un tercero y que se ofrecen o proporcionan a los USUARIOS a través del Back Office de Veezi.

»Datos personales del Reino Unido» se refiere a los datos personales a los que se aplicaban las leyes de protección de datos del Reino Unido antes de su procesamiento por parte de VISTA.

»Módulos adicionales de VISTA» se refiere a los módulos adicionales propiedad de VISTA o licenciados por VISTA y que se ofrecen o proporcionan a los USUARIOS a través del Back Office de Veezi.

Este Acuerdo puede traducirse a otros idiomas para facilitar su consulta. En caso de que se prepare una traducción de estos términos en cualquier otro idioma, prevalecerán las disposiciones de la versión en inglés. El soporte de Veezi se proporciona en inglés.

A los efectos del presente Acuerdo, los términos «controlador de datos», «procesador de datos», «sujeto de datos», «datos personales», «violación de datos personales», «procesamiento», «datos personales sensibles», «subprocesador», «autoridad supervisora» y «medidas técnicas y organizativas apropiadas» tendrán los significados que se les atribuyen (o cualquier término análogo) en la legislación de protección de datos.

Subject to the terms and conditions hereof, and in consideration of the timely payment of the License Fees, VISTA grants to the USER a limited, personal, non-transferable and non-exclusive license to use and display the Software, use the Documentation and provide access to use the Software (under the terms of this Agreement) to its employees, agents and contractors exclusively for the USER's own lawful internal business purposes relating to the cinema exhibition or entertainment industry (“Permitted Purpose”) for the Term.

The USER shall not make the Software available to and agrees not to permit any other person or entity to use the Software on a timesharing, sublicensed or other basis.

License Fee - A Monthly License Fee ("MLF") is payable monthly in arrears based on the number of admissions processed by the USER using the Software. This is a variable fee as detailed in all pricing pages relating to the Software.

1. El MLF se facturará al USUARIO y se cargará a la tarjeta de crédito del USUARIO al final de cada mes calendario.
2. El pago del MLF debe hacerse al final de cada mes para el uso de ese mes.
3. El USUARIO acepta que VISTA puede suspender o cancelar el acceso del USUARIO al Software si el USUARIO no paga las tarifas pagaderas por el USUARIO a VISTA de conformidad con este Acuerdo en la fecha de vencimiento.

Access conditions - access to the Software and Vista issues system ("Services") are subject to the following conditions:

1. El USUARIO debe asegurarse de que todos los nombres de usuario y contraseñas necesarios para acceder a los Servicios se mantengan seguros y confidenciales. Cualquier uso no autorizado o violación de la seguridad debe notificarse a VISTA inmediatamente después de que el USUARIO lo tenga en cuenta. VISTA puede tomar todas las medidas y acciones que razonablemente considere necesarias para mantener la seguridad de los Servicios y el acceso del USUARIO a los mismos.
2. El USUARIO no debe intentar socavar la seguridad o la integridad de los sistemas/redes informáticas de VISTA o de terceros que alojen los Servicios o redes informáticas.
3. El USUARIO no debe hacer nada al utilizar los Servicios que pueda afectar la funcionalidad de los Servicios o los sistemas utilizados para prestar los Servicios.
4. El USUARIO no debe intentar acceder a materiales distintos de aquellos para los que el USUARIO ha recibido permiso expreso para acceder dentro de los Servicios o en los sistemas en los que están alojados los Servicios.
5. El USUARIO no debe transmitir ni introducir en los Servicios ningún contenido o archivo que pueda resultar ofensivo, infringir cualquier ley, infringir los derechos de autor o el secreto comercial, o que pueda dañar cualquier otro dispositivo informático o software.

In connection with the USER’s use of the Software, the USER may subscribe to Additional Modules by checking the appropriate box in the Veezi Back Office indicating:

1. en el caso de los módulos adicionales de terceros, el consentimiento del USUARIO para que VISTA integre al USUARIO en dicho módulo adicional de terceros;
2. en el caso de los módulos adicionales de VISTA, la aceptación por parte del USUARIO de cualquier término adicional o modificado relacionado con el uso de dicho módulo adicional de VISTA (»Términos específicos del módulo adicional de VISTA»).

The USER agrees that Third Party Additional Modules will not form part of the “Software” and will not be licensed to the USER in accordance with the terms of this Agreement. Third Party Additional Modules will be subject to any terms and conditions entered into between the USER and the relevant Third Party (“Third Party T&Cs”). VISTA will have no liability to the USER in relation to its subscription to any Third Party Additional Modules.

The USER agrees that VISTA Additional Modules will form part of the “Software” and be licensed to the USER in accordance with the terms of this Agreement as supplemented or modified by any VISTA Additional Module Specific Terms.

The USER may terminate its access to all or any of the Additional Modules at any time by un-checking the appropriate box in the Veezi Back Office provided that the USER complies with any termination obligations relating to it in the relevant Third Party T&Cs or VISTA Additional Module Specific Terms. The USER’s access to or use of all or any Additional Modules may be terminated or suspended in conjunction with the termination or suspension of the USER’s access to or use of the Software in accordance with this Agreement.

VISTA shall provide the USER with the support and maintenance for the Software as described in this clause 6, during the Term of this Agreement.

Assistance: VISTA shall provide the USER with access to the VISTA issues system (internet based access) to log issues and faults with the Software. VISTA will attend to these logged issues on a prioritized basis during VISTA's normal business hours Mondays to Fridays (excluding public holidays).

Updates: VISTA shall from time to time make available to the USER amended versions, releases, updates, bug fixes and error correction (as contemplated by clause 6(d) below) and other modifications to the Software which are generally made available by VISTA for access by VISTA’s customers (collectively, "Updates").

Error Correction:

1. VISTA hará todos los esfuerzos razonables para corregir las fallas del software mediante actualizaciones. Las fallas del software se definirán como las funciones de un elemento del Software que no funcionen de acuerdo con las garantías de la cláusula 9 de este Acuerdo.
2. VISTA solo tendrá que corregir los errores del software:
   1. que no sean atribuibles al mal funcionamiento de un equipo o software que no sea el Software suministrado por VISTA;
   2. que no son atribuibles al uso incorrecto del Software por parte del USUARIO;
   3. que no son atribuibles a los intentos del USUARIO de corregir las fallas del Software sin consultar previamente con VISTA; y
   4. que, cuando VISTA lo solicita, el USUARIO informa por escrito a VISTA con información completa y ejemplos completamente documentados de las fallas reportadas.
3. VISTA, según su propio criterio, asesorará al USUARIO sobre la corrección o evitación de las fallas del Software, o pondrá a disposición del USUARIO las actualizaciones apropiadas de manera oportuna.

General Obligations:

1. El USUARIO proporcionará a VISTA acceso a todas las instalaciones de información necesarias del USUARIO según se requiera razonablemente para el cumplimiento de las obligaciones de VISTA en virtud del presente Acuerdo.
2. VISTA garantiza que hará todos los esfuerzos razonables para cumplir con sus obligaciones en virtud del presente documento.
3. Todas las actualizaciones a las que VISTA pueda acceder el USUARIO se considerarán parte del Software licenciado al USUARIO de conformidad con este Acuerdo.
4. Las tarifas pagaderas por el USUARIO a VISTA en virtud del presente documento no incluyen ninguna cantidad pagadera por la asistencia a las instalaciones del USUARIO o por el suministro de nuevas modificaciones o módulos del Software que no sean Actualizaciones. VISTA no asumirá ninguna responsabilidad por las fallas del Software ni tendrá la obligación de proporcionar servicios de corrección de errores, mejoras de mantenimiento o soporte, excepto en los casos establecidos en esta cláusula 6 (»Servicios adicionales»). Cuando el USUARIO solicite que VISTA suministre servicios adicionales, VISTA podrá cobrarle al USUARIO las tarifas de dichos servicios adicionales según la tarifa de VISTA establecida en el momento de la prestación de dichos servicios adicionales, junto con todos los gastos en los que VISTA incurra al prestar dichos servicios adicionales. La prestación de servicios adicionales por parte de VISTA estará sujeta a las condiciones generales de prestación de servicios informáticos de VISTA vigentes en cada momento.

In addition to the warranties set out in clause 11(c), the USER warrants that it:

1. has not relied on any representation made by VISTA, or any other party on behalf of VISTA, which has not been stated expressly in this Agreement; and
2. will use the Software for the Permitted Purpose only.

El USUARIO reconoce que el Software y la Documentación se adquieren con fines comerciales, y las partes acuerdan que las condiciones, garantías y garantías establecidas en la Ley de Garantías al Consumidor de 1993 no se aplicarán y están excluidas de este Acuerdo.

VISTA warrants to the USER that the Software will perform in substantial conformance with the applicable User Manual for the Software.

VISTA warrants to the USER that the Software does not and will not infringe any copyright or trade secret of any third party arising under law.  VISTA's sole obligations in the event of breach of the warranty set out in this clause 9(b) are those specified in this clause.  Subject to the Indemnification Conditions, VISTA hereby indemnifies and holds harmless the USER from costs, expenses, losses, damages, judgments (including reasonable attorneys and accounting fees) (“Liabilities”) arising out of any breach or alleged breach of the warranty in this clause 9(b) to the limit of the liability established in clause 10; If in VISTA's determination the USER's use of the Software is or is likely to be enjoined by any action or proceeding, VISTA shall have the right, at its expense, to:

Cuando VISTA ponga dichos recursos a disposición del USUARIO, dichos recursos sustituirán a la obligación de indemnización de VISTA establecida en la tercera oración de esta cláusula 9 (b). Sin perjuicio de las disposiciones anteriores de esta cláusula 9 (b), VISTA no estará obligada a indemnizar al USUARIO en la medida en que dicha infracción, presunta infracción o supuesta infracción se deba a:

1. obtener el derecho del USUARIO a seguir utilizando el Software tal como se contempla a continuación; y/o
2. modificar el Software para evitar cualquier infracción o violación de los derechos de terceros tal como se establece en la primera oración de esta cláusula 9 (b); y/o
3. crear/obtener para el USUARIO el derecho a utilizar un sustituto para las partes del Software que eviten cualquier infracción o infracción real o supuesta.

1. uso del Software en combinación, por cualquier medio y de cualquier forma, con software o sistemas informáticos, incluido, entre otros, el hardware, no aprobado o recomendado específicamente por VISTA, si tal reclamación no se hubiera producido de no ser por dicha combinación;
2. el uso del Software para un propósito que no sea el permitido; o
3. modificación/alteración del Software sin el consentimiento previo por escrito de VISTA, si tal reclamación no se hubiera producido de no haber sido por dicha modificación/alteración.

c. A excepción de las garantías expresas incluidas en este Acuerdo o en cualquier otro acuerdo celebrado por escrito entre las partes, VISTA NO OFRECE NINGUNA DECLARACIÓN NI GARANTÍA, EXPRESA O IMPLÍCITA, CON RESPECTO AL SOFTWARE O AL SOPORTE Y EL MANTENIMIENTO, Y CUALQUIER GARANTÍA IMPLÍCITA DE OTRO MODO POR LA LEY O LA LEY CONSUETUDINARIA O QUE SURJA DE LA COSTUMBRE, EL CURSO DE LAS TRANSACCIONES O EL USO COMERCIAL, INCLUIDAS, ENTRE OTRAS, LAS GARANTÍAS DE COMERCIABILIDAD O IDONEIDAD PARA UN PROPÓSITO PARTICULAR, ESTÁN EXCLUIDAS DE ESTE ACUERDO EN SU TOTALIDAD PERMITIDO POR LA LEY. SIN PERJUICIO DE LO ANTERIOR, SALVO LO DISPUESTO EXPRESAMENTE EN ESTE ACUERDO, VISTA NO DECLARA, GARANTIZA NI GARANTIZA QUE LAS FUNCIONES CONTENIDAS EN EL SOFTWARE CUMPLAN CON LOS REQUISITOS O NECESIDADES DEL USUARIO, O QUE EL SOFTWARE FUNCIONE SIN ERRORES O DE MANERA ININTERRUMPIDA, O QUE CUALQUIER DEFECTO O ERROR EN EL SOFTWARE SE CORRIJA, O QUE EL SOFTWARE SEA COMPATIBLE CON CUALQUIER PLATAFORMA EN PARTICULAR.

The USER agrees that VISTA's cumulative liability for damages under or in connection with this Agreement, regardless of the form of action, is limited to the fees paid by the USER to VISTA in the 12 months preceding the warranty/claim event. IN NO EVENT SHALL VISTA BE LIABLE (REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT, OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, ANY ACTION FOR NEGLIGENCE) FOR ANY INDIRECT, SPECIAL, INCIDENTAL, EXEMPLARY, PUNITIVE OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT LIMITATION, ANY LOSS OF DATA OR RECORDS, LOST PROFITS OR OTHER ECONOMIC LOSS) ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT AND/OR ANY OBLIGATION OF CONFIDENTIALITY, EVEN IF VISTA HAD BEEN ADVISED OF THE POSSIBILITY OF, OR COULD HAVE FORESEEN, SUCH DAMAGES OR LOSSES. The USER acknowledges and agrees that the amount of the fees payable under this Agreement is related to the foregoing limitations on VISTA's liability and that the fees would be greater if VISTA's liability were not so limited.

VISTA will have no liability to the USER in respect of any use of the Software or the Services in combination by any means and in any form with computer programs, systems and or operating systems not specifically approved or recommended by VISTA.

The USER will have sole responsibility for the legality, reliability, integrity, accuracy and quality of the data stored by the Software (which may include personal data) (“User Data”). The USER will arrange all consents and approvals necessary under applicable laws for VISTA to access, process and use the User Data as described in this Agreement, including in relation to any personal data contained within the User Data.

The USER acknowledges and agrees that VISTA and its Affiliates may use, store and otherwise process the USER Data and Generated Data for the purposes of:

1. cumplir con las obligaciones de VISTA en virtud de este Acuerdo;
2. asegurarse de que el USUARIO cumple con los términos y condiciones de este Acuerdo;
3. mejorar o mejorar el Software o los Servicios, y cualquier Servicio proporcionado por una filial de VISTA;
4. comprender cómo el USUARIO utiliza los Servicios;
5. realizar análisis de datos (incluidos análisis de información, tendencias, optimización y/o evaluación comparativa) de forma agregada y/o anónima («análisis de datos») y compartir los resultados de dicho análisis de datos con cualquiera de las filiales de VISTA y sus clientes, siempre que VISTA cumpla con sus obligaciones de confidencialidad en virtud del presente Acuerdo y no divulgue ningún dato de usuario o dato personal como parte del intercambio de los resultados de dicho análisis de datos; y
6. cualquier otro propósito que las partes acuerden,
   siempre que VISTA cumpla con sus obligaciones en virtud de esta cláusula 11.

The USER warrants that:

1. posee o ha obtenido todos los derechos, títulos e intereses necesarios sobre los Datos del USUARIO (incluidos los datos personales contenidos en ellos) y todos los derechos de propiedad intelectual y otros derechos contenidos en los mismos, así como el consentimiento de cualquier interesado necesario para que las partes cumplan con sus obligaciones en virtud del presente Acuerdo.
2. El uso de los Datos del USUARIO por parte de VISTA de conformidad con este Acuerdo no constituirá una infracción de los derechos de propiedad intelectual, la publicidad o la privacidad de otros derechos de propiedad de un tercero, ni la violación de ninguna ley, norma o reglamento aplicable (incluidas las leyes de protección de datos) ni una violación de cualquier política de privacidad o términos y condiciones aplicables;
3. ha revelado a los interesados, de conformidad con las leyes de protección de datos aplicables, cómo recopilará, utilizará y divulgará sus datos personales; y
4. a menos que se indique lo contrario en este Acuerdo, no cargará ningún dato personal confidencial ni indicará a VISTA que cargue, incluya o procese ningún dato personal confidencial en el Software o los Servicios.

The USER, subject to the Indemnification Conditions, indemnifies, defends and holds harmless VISTA from and against all Liabilities arising out of or in connection with the USER’s breach of any of the warranties in clause 11(c).

As between the parties, all copyrights and all other Intellectual Property Rights in or related to the Software,  Documentation, the Services provided by or on behalf of VISTA and the Feedback (as defined in clause 11(j) below) shall remain at all times the property of VISTA and/or its licensors and the USER shall acquire no rights in any of the foregoing  except as expressly provided in this Agreement. The USER agrees that it will not, and will not permit others to, use, copy, reproduce, display, deploy, perform, distribute, transmit, make available, create derivative works of the Software or Documentation or to decompile or reverse engineer any of the Software or other software code provided by or on behalf of VISTA.

Title to, and all Intellectual Property Rights in the USER Data remains with the USER. However access to the User Data in the Software is contingent on having a current license and all MLF's and other fees being paid in full and on time.

USER grants (or will procure that its relevant licensor grants) to VISTA a non-exclusive royalty free worldwide irrevocable, non-transferable, non-sublicensable, fully paid up, royalty free and limited right and license to access, collect, compile, store, use and otherwise process the User Data solely for the purposes of providing the Services in accordance with this Agreement, including for the purposes set out in clause 11(b).

USER further grants (or will procure that its relevant licensor grants) to VISTA a non-exclusive royalty free worldwide license for VISTA (or its affiliates) to distribute the USER’s ticketing links for VISTA’s (and its affiliates’ or their customers’) own purposes. USER may revoke such license by providing written notice to VISTA at any time.

The parties acknowledge and agree that the Generated Data in whatever form and on whatever media remains at all times jointly owned by the parties and each party grants to the other party an  unrestricted, royalty free, transferable, sub-licensable, perpetual and irrevocable license, without the need for the approval of the other party, to use, copy, modify and in the case of VISTA only, distribute and commercialize, the Generated Data provided that, neither party may use the Generated Data for any purpose where that use discloses any Confidential Information of that other party.

The USER acknowledges and agrees that VISTA may use and incorporate royalty free and worldwide in the Services any suggestions, enhancement requested, recommendations and other feedback provided by the USER (“Feedback”) and on such use or incorporation into the Services VISTA will own all necessary Intellectual Property Rights in such Feedback to the extent used or incorporated into the Services

Numero (Aust) Pty Limited (Numero), Maccs International B.V. (Maccs) and MovieXchange Limited (MX) (all VISTA Affiliates) will provide the following box office reporting and showtimes services to the USER and its affiliates at no additional cost to the USER:

1. Servicios numéricos: servicios de reportaje de taquilla descritos en el sitio web de Numero, www.numero.co, a través de su plataforma SaaS basada en la nube, que permiten al USUARIO (y a cada una de sus filiales) proporcionar sus datos brutos de taquilla diarios (recopilados por película y por cine) que figuran en el anexo 3 (Datos de taquilla) a los Servicios de Numero, a los que pueden acceder los estudios y distribuidores de películas cinematográficas que utilizan los Servicios de Numero y otros exhibidores de cine que proporcionan datos de taquilla a los Servicios de Numero.
2. Servicios de MaccsBox: los servicios electrónicos de devolución y retención de datos de taquilla descritos en su sitio web www.maccs.com a través de su plataforma basada en archivos MaccsBox, que permiten al USUARIO (y a cada una de sus filiales) proporcionar los datos de sus recibos de taquilla semanales (recopilados por película y por cine) que figuran en el Anexo 3 (Datos EBOR) al servicio MacCSBox, al que pueden acceder el estudio y/o el distribuidor de la película cinematográfica correspondiente.
3. MX Services: servicios de datos de Showtimes descritos en su sitio web www.moviexchange.com a través de su plataforma SaaS basada en la nube, que permiten al USUARIO (y a cada una de sus filiales) proporcionar sus datos de horarios (recopilados por película y por cine) que figuran en el Anexo 3 (Datos de horarios) a los Servicios MX.

In consideration for the provision of the Veezi Software, the Numero Services, the MaccsBox Services, and the MX Services, with effect from the Date of Supply the USER (including its affiliates) agrees to supply, and authorises VISTA to supply via the Veezi Software, the Box Office Data to the Numero Services, its EBOR Data to the MaccsBox Services and its Showtimes Data to the MX Services.

The USER will be solely responsible for the use, supervision, management and control of the Software and Documentation. The USER will ensure that the Software is protected at all times from access, use or misuse, damage or destruction by any person not authorized by VISTA for that purpose.

USER must maintain copies of all User Data input to the Software.
(c) Subject to clause 13, USER acknowledges that if it enables third party applications for use in conjunction with the Services that VISTA may allow the providers of those third party applications access to USER's User Data as required for use of the third party applications. VISTA shall not be responsible for any disclosure, modification or deletion of USER's User Data resulting from such use and/or access by a third party application provider.

Each party will take appropriate technical and organizational security measures including in accordance with Data Protection Laws against unauthorized or unlawful processing of USER Data or Generated Data, or their accidental loss, destruction or damage and VISTA will, as part of these measures, use reasonable endeavours to back-up USER Data and Generated Data. The USER acknowledges that if there is any loss or damage to USER Data or Generated Data as a result of VISTA’s negligence or breach of this paragraph, the USER’s sole and exclusive remedy will be for VISTA to use reasonable commercial endeavours to restore such lose or damaged data from the latest back-up of the USER Data or Generated Data that VISTA has maintained. Subject to VISTA’s use of sub-processors in accordance with clause 14(c)(vii) and applicable Data Protection Laws where related solely to personal data, and VISTA’s compliance with its obligations under this clause 13(c) VISTA will not be responsible for any loss, destruction, alteration or disclosure of USER Data or Generated Data caused by VISTA, USER or any third party.

Each party acknowledges and agrees that it will comply with all Data Protection Laws applicable to such party in carrying out its obligations under this Agreement. The parties acknowledge and agree that the USER is the data controller in respect of any personal data that VISTA may process in the course of providing the Software and Services in accordance with this Agreement (other than business contact data processed by VISTA to allow it to manage the USER’s account).

1. VISTA acepta que
   1. procesar los datos personales del USUARIO únicamente en el marco de este Acuerdo y siguiendo las instrucciones del USUARIO o según lo exijan las leyes aplicables. Si la ley aplicable exige que VISTA procese los datos personales para cualquier otro propósito, VISTA informará primero al USUARIO de este requisito, a menos que dicha ley lo prohíba por motivos importantes de interés público;
   2. notificar al USUARIO de inmediato si, en opinión de VISTA, una instrucción para el procesamiento de datos personales impartida por el USUARIO infringe las leyes de protección de datos aplicables, reconociendo que VISTA no estará obligada a realizar ningún trabajo adicional para determinar si las instrucciones del USUARIO cumplen con las instrucciones del USUARIO;
   3. remitir sin demora al USUARIO cualquier solicitud, notificación u otra comunicación de los interesados o de cualquier autoridad supervisora, para que el USUARIO resuelva y, con sujeción a la cláusula 14 (f), brinde asistencia razonable al USUARIO para ayudarlo a responder a dicha comunicación;
   4. proporcionar al USUARIO la información que el USUARIO pueda necesitar razonablemente, y dentro de los plazos razonablemente especificados por el USUARIO, para que el USUARIO pueda cumplir con los derechos de los interesados, incluidos los derechos de acceso del sujeto, o con las notificaciones notificadas por cualquier autoridad supervisora;
   5. dentro de los 90 días siguientes a la fecha de finalización de este Acuerdo, devuelva al USUARIO o elimine todos los datos personales procesados en virtud de este Acuerdo, a menos que VISTA deba continuar procesando los datos de acuerdo con la ley aplicable;
   6. implementar las medidas técnicas y organizativas apropiadas para garantizar un nivel de seguridad adecuado al riesgo asociado con el procesamiento de los datos personales por parte de VISTA, incluidos los establecidos en el Anexo 2 de este Acuerdo; y
   7. notificar inmediatamente al USUARIO cuando tenga conocimiento de cualquier violación de datos personales

To the extent VISTA processes personal data relating to individuals who reside in the Protected Area, VISTA will comply with the following additional obligations relating to such processing of personal data:

1. En la medida en que VISTA procese datos personales relacionados con una persona física que sea residente de California de conformidad con el cumplimiento de sus obligaciones en virtud del presente Acuerdo, VISTA no deberá:
   1. «vender» (según se define en la CCPA) dichos datos personales;
   2. retener, usar o divulgar dichos datos personales para cualquier propósito que no sea proporcionar el Software o prestar los Servicios especificados en este Acuerdo (o según lo permita la CCPA), lo que incluye, entre otros, retener, usar o divulgar dichos datos personales para cualquier «propósito comercial» (tal como se define en la CCPA) que no sea el suministro del Software o la prestación de los Servicios especificados en este Acuerdo; o
   3. retener, usar o divulgar dichos datos personales fuera de la relación comercial directa entre el USUARIO y VISTA.
      VISTA certifica que tanto ella como cada uno de sus empleados, agentes y representantes que recibirán dichos datos personales comprenden y deben cumplir con las restricciones establecidas en esta cláusula 14.

The USER authorizes VISTA to appoint third party sub-processors to assist in the management and provision of the Software and the Services provided VISTA has entered into an agreement with the sub-processor which imposes obligations on the sub-processor no less onerous than as are imposed on VISTA under this clause 14. VISTA's use of sub-processors shall not relieve it of any liability, and VISTA shall remain fully liable to the USER for the performance of the sub-processors obligations. The list of current sub-processors is maintained at Sub-processors | Veezi. VISTA will notify the USER of any additional sub-processor 10 days in advance. If the USER reasonably objects to a new sub-processor within such notice period, the USER may inform VISTA in writing of the reasons for the USER’s objections.  If the USER objects to such additional sub-processors(s), USER should stop using the Services and providing data to VISTA and may terminate this Agreement by providing written notice to VISTA with immediate effect and the parties’ obligations on termination will apply in accordance with clause 16. The USER hereby specifically consents to VISTA's appointment of its Affiliates as sub-processors.

1. procesar solo los tipos de datos personales relacionados con las categorías de interesados y de la manera requerida para entregar el Software y los Servicios, como se describe con más detalle en el Anexo 1 de este Acuerdo;
2. solo transfiera datos personales fuera del Área Protegida de acuerdo con los párrafos (vi) y (vii) siguientes, o con el consentimiento previo por escrito del USUARIO. Las partes reconocen que VISTA puede procesar datos personales de Nueva Zelanda y el Reino Unido, y que Nueva Zelanda y el Reino Unido son países que se encuentran dentro del Área Protegida;
3. tomar medidas razonables para garantizar la fiabilidad de cualquier miembro del personal que pueda tener acceso a los datos personales y su tratamiento confidencial de los datos personales;
4. con una antelación razonable, proporcionar al USUARIO información que demuestre el cumplimiento de las obligaciones de VISTA en virtud del presente Acuerdo y, a cargo del USUARIO y sujeto a un aviso por escrito con al menos diez días de antelación, someterse a las auditorías realizadas por el USUARIO en virtud del RGPD (cuando corresponda) de conformidad con la política de auditoría estándar de VISTA; y
5. previa solicitud y con sujeción a la cláusula 14 (f), proporcionar al USUARIO una asistencia razonable para cumplir con las obligaciones del USUARIO en virtud de los artículos 32 a 36 del RGPD (cuando corresponda).
6. VISTA no transferirá, accederá ni utilizará datos personales de la UE o el Reino Unido fuera del Área Protegida sin la autorización previa del USUARIO, ni se asegurará de que ninguno de sus afiliados o subprocesadores. El USUARIO se compromete a autorizar las transferencias a los subprocesadores tal como se indica en Subprocesadores | Veezi y VISTA confirma que ha establecido un mecanismo para la transferencia legal y, cuando sea necesario, se compromete a garantizar que sus filiales o subprocesadores (según corresponda) cumplan con las obligaciones establecidas en las cláusulas contractuales estándar, con VISTA como el «exportador de datos» y el afiliado o subprocesador de Vista correspondiente (según corresponda) como el «importador de datos». Si el USUARIO proporciona los datos personales descritos en el Anexo Uno a uno de los subprocesadores de afiliados de Vista autorizados en virtud del presente Acuerdo con el fin de que VISTA pueda cumplir con sus obligaciones en virtud del presente Acuerdo, el USUARIO y VISTA acuerdan que dicha transferencia se considerará una transferencia del USUARIO a través de VISTA a dicho afiliado de Vista y que VISTA será el «exportador de datos» y el afiliado de Vista será el «importador de datos» en relación con dichas transferencias.
7. A los efectos de la cláusula 14 (c) (ii) anterior, en caso de que una decisión relevante de la Comisión Europea u otro método de adecuación válido en virtud de las leyes de protección de datos aplicables en el que las partes se hayan basado como base para cualquier transferencia de datos se considere inválida, o de que cualquier autoridad supervisora exija la suspensión de las transferencias de datos personales realizadas en virtud de dicha decisión, las partes acuerdan discutir de buena fe y facilitar el uso de un mecanismo de transferencia alternativo.

Unless stated otherwise in this Agreement, VISTA reserves its right to charge additional reasonable fees for any assistance provided by VISTA to USER to assist USER to comply with its obligations under applicable Data Protection Laws which VISTA considers go beyond a reasonable level of support and/or assistance, provided that such fees will be pre-agreed by the parties in writing.

If the USER is required by law to make any deduction or withholding from any amount paid or payable by the USER under this Agreement or VISTA is required by law to make any payment on account of tax (other than tax on the overall net income of VISTA) or otherwise, on or in relation to any amount received or receivable by it under this Agreement then the amount payable by the USER in respect of which such deduction, withholding or payment is required to be made shall be increased to the extent necessary to ensure that, after the making of such deduction, withholding or payment, VISTA receives and retains (free from any liability in respect of any such deduction, withholding or payment) a net amount equal to the amount which VISTA would have received and so retained had no such deduction, withholding or payment been made; and

The License Fees do not include New Zealand goods and services tax ("GST") chargeable in accordance with the Goods & Services Tax Act 1985 ("Act"), or any value added, sales or similar taxes.  In addition to the License Fees, the Customer shall pay to Vista the amount of all GST, value added, sales or similar taxes chargeable (if any) by Vista under this Agreement

Term - This Agreement shall become effective on the Date of Supply of the Software and shall remain in effect unless and until terminated pursuant to the terms hereof.

Termination

1. VISTA puede rescindir este Acuerdo y los derechos del USUARIO a usar el Software si el USUARIO no paga las tarifas pagaderas por el USUARIO a VISTA en virtud de este Acuerdo dentro de los 30 días de la fecha de vencimiento. VISTA puede suspender el acceso del USUARIO a la totalidad o a una parte del Software o los Servicios para impedir o terminar cualquier uso prohibido o cuando VISTA tenga el derecho de rescindir este Acuerdo.
2. VISTA, además de todos los demás derechos y recursos que pueda tener en virtud de este Acuerdo o por ley o equidad, tendrá derecho a rescindir este Acuerdo y todos los derechos de licencia otorgados al USUARIO en virtud del presente documento mediante notificación por escrito al USUARIO si:
   1. El USUARIO incumple cualquier término material de este Acuerdo; o
   2. El USUARIO se declara insolvente o en quiebra, o entra en liquidación o administración judicial o cualquier administración análoga en virtud de la ley de cualquier jurisdicción, ya sea obligatoria o voluntaria; o
   3. El USUARIO es adquirido por un competidor de VISTA, se fusiona con, pasa a ser controlado o afiliado a un competidor de VISTA.
3. El USUARIO puede rescindir este Acuerdo y su derecho a usar el Software, con o sin causa, en cualquier momento con 30 días de antelación por escrito a VISTA
4. Inmediatamente después de la rescisión de los derechos del USUARIO a usar el Software, el USUARIO dejará de usarlo, devolverá todas las copias del Software y la Documentación y certificará a VISTA que lo ha hecho. Cualquier cláusula que, por su naturaleza, sobreviva a la rescisión del presente Acuerdo sobrevivirá a dicha rescisión.

The parties undertake to use all reasonable efforts in good faith to resolve any dispute which arises between them in connection with this Agreement. This provides for a form of alternative dispute resolution and is not a reference to arbitration.

A party will, as soon as reasonably practicable, give the other party notice of any dispute in connection with this Agreement.

Any dispute will be referred initially to a designated representative of VISTA and the designated representative of the USER, who will endeavour to resolve the dispute within 10 days of the giving of the notice; and if the dispute is not resolved within the 10 days, to the Chief Executive of the USER and the Chief Executive of VISTA who will endeavour to resolve the dispute within a further 10 days.

If, following the dispute resolution procedures set out in (a) to (c) above, the parties fail to resolve the dispute then the parties will try to settle their dispute by mediation before resorting to litigation.  Either party may initiate mediation by giving written notice to the other party.  The mediator shall be agreed by the parties but if the parties cannot agree on one within 5 days after the mediation has been initiated, then the mediator shall be selected by the Chairperson for the time being of the Arbitrator’s and Mediators’ Institute of New Zealand (or his or her nominee) or its successor.

No formal proceedings for the judicial resolution of any dispute between the parties may be commenced until a dispute has proceeded through the dispute resolution processes set out in (a) to (d) above; PROVIDED THAT, with respect to any claim by VISTA of actual or alleged infringement of any confidentiality or Intellectual Property Right of, or licensed to, VISTA, VISTA, in its sole discretion, may at any time seek judicial resolution with or without resorting to the dispute resolution and mediation processes set out in (a) to (d) above; and

All dispute resolution procedures will be held in Auckland, New Zealand, unless otherwise agreed in writing

No waiver of any breach of any provisions of this Agreement shall constitute a waiver of a prior, concurrent or subsequent breach of the same or any other provision hereof, and no waiver shall be effective unless made in writing.

VISTA intends that the Services will be available to the fullest extent possible. There will be occasions that the Services may be unavailable to allow for maintenance or development activities to take place. VISTA will endeavour to publish in advance to USER when such activity will take place when VISTA considers that the non-availability will be longer than normally expected.

This Agreement contains the entire agreement between VISTA and USER with respect to the subject matter hereof, including, but not limited to, the licensing of the Software and provision of the support and maintenance specified in clause 6.

This Agreement shall be interpreted without reference to its headings (which are included for convenience only).

This Agreement shall be governed by New Zealand law and the parties submit to the non-exclusive jurisdiction of the courts of New Zealand in respect of any dispute or proceeding arising out of this Agreement.

This Agreement does not make either party the employee, agent or legal representative of the other for any purpose whatsoever.  Neither party is granted any right or authority to assume or to create any obligation or responsibility, express or implied, on behalf of or in the name of the other party.  Each party is acting as an independent contractor.

Whenever possible, each provision of this Agreement will be interpreted in such manner as to be effective and valid under applicable law, but if any provision of this Agreement is held to be prohibited by or invalid under applicable law, such provision will be ineffective only to the extent of such prohibition or invalidity, without invalidating the remainder of such provision or the remaining provisions of this Agreement.

A party must not assign, transfer or grant a security interest in its rights under this Agreement except if approved in writing by the other party.

All notices shall be in writing and delivered by email, personally (including by recognised overnight courier) or properly mailed, registered first class mail, postage prepaid to the parties set out at the beginning of this Agreement.

VISTA has a responsibility to maintain versions of the Software that are PA-DSS compliant and will ensure that its operations and processes satisfy PA-DSS compliance requirements. VISTA shall on request by the USER provide links to the reporting website showing VISTA’s level of accreditation under the PA-DSS standards. VISTA acknowledges that it has a responsibility to the USER to ensure that its Services and products will not affect the USER’s ability to be compliant with the Payment Card Industry standards for merchants.

Because of the unique and trade secret nature of VISTA's confidential information, Vista's Intellectual Property Rights and the valuable proprietary interest of VISTA in the same, it is understood and agreed by the parties that VISTA's remedies at law may be inadequate and that VISTA shall be entitled to apply for and obtain injunctive and other equitable relief, in addition to all remedies available to it at law, in equity or here under without the necessity of the posting of a bond, in any court of competent jurisdiction to restrain the breach or threatened breach of, or otherwise to specifically enforce, any of the terms of this Agreement

Descripción e instrucciones para el procesamiento de datos personales

Objeto y duración del procesamiento de los datos personales

El objeto y la duración del procesamiento de los datos personales se establecen en este Acuerdo.

Description of the nature of processing

The processing of personal data by VISTA shall be that which is necessary to comply with VISTA’s obligations under this Agreement (if applicable) and the provision of Services.

Duration of processing

The duration of the processing shall be the term of this Agreement.

Categories of data subjects

The personal data concerns the following categories of data subjects: USER’s employees, patrons and business contacts.

Purposes of the processing

VISTA may access, collect and otherwise process USER’s personal data under this Agreement for the purposes of:

providing support services to USER in conjunction with USER’s licensing and use of Software and Services pursuant to this Agreement, including where USER provides VISTA with access to USER’s systems for such purpose;
performing Vista’s obligations under this Agreement;
ensuring that the USER is complying with the terms and conditions of this Agreement;
improving, testing or enhancing the Services; and
such other purposes as the parties may agree from time to time.  

Where possible, the parties will work together to ensure that personal data is anonymised by USER prior to any transfer to VISTA for processing.

Categories of Data

The personal data processed falls within the following categories of data:

Name
Address
Email
Telephone numbers

USER’s employee account information including username, ID and transaction history
Loyalty scheme member information - this is highly configurable by USER but may include member’s name, member’s ID, gender, DOB, email, address, phone number, preferences for contact, movie genres, locations etc.
Payment card information including credit cards and gift cards (first six and last four digits of a credit card number, cardholder’s name as recorded on the card and card expiry date).

The obligations and rights of the USER

The obligations and rights of the USER are set out in this Agreement.

Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures

None.

Frequency of transfer (e.g. whether on a one-off or continuous basis) (EU standard contractual clauses only):

Continuous (ad-hoc)

Este anexo 2 establece las medidas de seguridad que VISTA adoptará para garantizar un nivel de seguridad de los datos personales adecuado al nivel del riesgo.

Veezi is a cloud-based application which allows multiple cinemas across the world to run their cinemas. It has a multi-tenant central database, known as Client Management, as well as a collection of single-tenant databases for each individual cinema. The Client Management database contains data for all Veezi customers, whereas the cinema databases contain data for each cinema.  Veezi hosts all components including the databases in Microsoft Azure datacentres which have industry-leading physical and network security practices in place.  See https://docs.microsoft.com/en-us/azure/security/ for more details.  A key benefit here is that Microsoft roll out critical security patches across their environments globally when new exploits are identified.

The cinema databases are hosted in a datacentre region near the cinemas themselves. Currently, these are:

• Oeste de EE. UU. (Washington) y Este de EE. UU. (Virginia)
• Europa occidental (Países Bajos)
• Australia Oriental (Sídney)

The Client Management database is hosted in the South Central US (Texas) data centre.

Veezi is secured using the ASP.NET Identity system.  See https://docs.microsoft.com/en-us/aspnet/identity/ for more details.

Veezi Services personnel have login accounts to the Veezi application and Veezi databases which enables such personnel to access customer data, only where necessary e.g. for occasional troubleshooting as well as to aid customers with various setup and configuration tasks.

Vista employees who access Veezi data are subject to all of the normal vetting required of any Vista employee, including reviewing and complying with Vista’s internal information security and data protection policies.
Veezi is accessed over https which means that all data is encrypted in flight. User Data stored in the Veezi database is encrypted at rest.  In addition, firewall rules allow access to the database only from authorized IP addresses

The following terms apply only to those Users who have an Order Form in place for Veezi Payments.

Agreement Framework

For the purposes of VeeziPayments (as defined below), the License Agreement for Veezi Software (“Agreement”) is amended to incorporate by reference:

• Any order form entered into between User and the Vista entity specified on the order form relating to the provision of Veezi Payments (“Order Form”); and
• The “Terms” comprising:
  
  • These Veezi Payments Terms and all terms and conditions referenced herein;
  • The Veezi Payments Device Terms in Schedule 5; and
  • The Veezi Payments Data Processing Terms in Schedule 6.

Vista may update or modify these Terms at any time, in its reasonable discretion. Any changes will become effective upon posting the updated Terms on Vista’s website or by providing notice to User by other reasonable means. By continuing to use Veezi Payments after the updated Terms become effective, User agrees to be bound by the revised Terms. If User does not agree to the updated Terms, it should cease using Veezi Payments.

Background

Vista provides services, including software-as-a-service, that supports businesses to (among other things) sell cinema tickets, vouchers, and food and beverages both online and in-venue (“Veezi Services”).

Vista has integrated theVeezi Services the payment processing and acquiring services for both online (aka Card Not Present (“CNP”)) and in-venue (aka Point of Sale (“POS”)) transactions (the “Stripe Services”) provided by Stripe LLC and/or its affiliates (“Stripe”), to provide Users the ability to complete sales ofgoods and services to its customers, both CNP and at POS, through the Veezi Services (“Veezi Payments”).

Stripe must contract directly with User to perform the payment processing and acquiring services (including providing the Stripe Dashboard and handling Chargebacks), and Know Your Customer (KYC) and Anti-Money Laundering and Anti-Terrorist Financing (AML) verifications (collectively, the “Stripe Veezi Payments Services”). Vista provides User with the commercial and customer service relationship (including first line technical support), to the extent allowed under applicable laws and Scheme Rules (as defined below) (the “Veezi Payments Services”).

For a visual explanation of these relationships, please see the diagram in Annex 1.

Relationship between Stripe & User

The Stripe Veezi Payments Services are subject to and exclusively governed by the Stripe Connected Account Agreement (located at https://stripe.com/[insert country code]/legal/connect-account), including:

• the Stripe Services Agreement (located at: https://stripe.com/[insert country code]/legal/ssa); and
• all other terms referenced in the Stripe Connected Account Agreement or in force between Stripe and User

(collectively, the “Stripe – User Agreement”).

Vista is not a party to the Stripe – User Agreement, but User acknowledges that: (i) any representation, warranty, covenant or obligation, including any indemnification obligation, made by User to Stripe is also made by User to Vista and Vista has the right to enforce such representation, warranty, covenant and obligation against User; and (ii) any disclaimer, limitation on liability or other restriction made for the benefit of Stripe is also made for the benefit of Vista and Vista has the right to enforce such disclaimer, limitation on liability or other restriction for Vista’s own benefit.

Stripe, and not Vista, is solely responsible for the provision of the Stripe Veezi Payments Services. Vista has no responsibility for and expressly disclaims any and all damages and liabilities for Stripe’s provision or failure to provide the Stripe Veezi Payments Services or Stripe’s breach of any of obligations with respect to User, including any breach of the Stripe – User Agreement.

Veezi Payments Service

In relation to the Veezi Payments Services, the parties agree as follows:

Framework and Communication: User agrees that it will not communicate directly with Stripe unless requested by Vista, and acknowledges that communication from Stripe to User will also occur via Vista. This means that, unless shared via User’s Stripe Dashboard, notices from either party under the Stripe - User Agreement are to be passed by Vista to User or Stripe, as applicable.

Enrollment: Prior to User’s enrollment in the Veezi Payments Services, User must be approved by both Vista and Stripe. User will provide to Vista and/or Stripe all information required to confirm that User meets requirements under applicable law, including the rules and requirements of any card network or other payments scheme that apply to Transactions (as defined below) (“Scheme Rules”) and Know-Your-Customer requirements, and consents to Vista sharing this information with Stripe, who may in turn share it with any card network or other payments scheme as necessary for the purpose of obtaining permission to provide the relevant Payment Methods to User.

User represents and warrants that: (a) the information submitted in connection with the enrollment process is complete, truthful and accurate, and (b) if any such information later becomes incomplete, untruthful or inaccurate, User will notify Vista of the changed information. Any such changed information may mean that Vista and/or Stripe suspend or terminate access to Veezi Payments. User will provide Vista with at least three (3) business days prior written notice of any change in their company details, which User consents to Vista sharing with Stripe.

Integration: Vista will be responsible for integrating the Stripe Services with the Veezi Services generally and as it relates to User, including setting up and managing the settings and configurations for User within the Stripe platform. User may under no circumstances adjust these settings and configurations without Vista’s express permission, and Vista will have no liability for events arising from settings or configurations adjusted by User.

Vista is Authorized Representative of User. User hereby designates Vista as its authorized representative in connection with Veezi Payments, including submitting binding settlement instructions to Stripe on behalf of User. User authorizes Vista to access, process and use User’s data in connection with Veezi Payments and for the purposes outlined in the Agreement, Order Form and/or these Terms, and acknowledges that this may also include sharing of data to, and processing by, Stripe.

Fraud Control: All payments, refunds, reversals, or chargebacks processed or attempted via Stripe in connection with Veezi Payments (each a “Transaction”) will be screened by Stripe fraud control tool(s) (“Fraud Control Tool”). Vista may configure the scoring values for the Fraud Control Tool on behalf of User to determine how the Fraud Control Tool will judge Transactions. Vista disclaims all liability associated with the failure or inaccuracy of the Fraud Control Tool, including where arising from the configuration of the scoring values for the Fraud Control Tool or any decision User makes with respect to the Fraud Control Tool.

Merchant of Record: User is the merchant of record for all Transactions, will ensure it is registered with the card network or other payments scheme as such, and is fully responsible for compliance with all applicable Scheme Rules, laws and regulations pursuant to such position.

Taxes: User is solely responsible for all tax obligations on its products and/or services sold through Veezi Payments (including reporting obligations) and will defend, hold harmless and indemnify Vista from any taxes or levies due on any of User’s products or services and any costs or damages related to such taxes.

Additional Stripe Services

Vista may integrate certain additional Stripe services with Veezi Payments during the Term, including Smart Disputes, Instant Payout and Faster Payout. Vista specifically disclaims any warranty or liability in relation to such services, and User expressly acknowledges that additional fees may be charged for any additional services used.

Payments & Fees

Unless otherwise communicated by Vista, Vista will direct Stripe to deposit User’s payment Transactions (“Transaction Funds”) which Stripe settles into User’s Stripe Dashboard (less applicable deductions (see below)) directly to User’s designated bank account. Vista will have no responsibility for the timely settlement or deposit of funds to User.

Deductions will include: (i) all applicable fees set out in the Order Form (“Fees”), which are provided on an blended basis (meaning any card network or other payments scheme fees are included); and (ii) any other deductions made known to User by Vista (including payments for terminals, reversals, refunds and chargebacks).

Reserve. Stripe and/or Vista may require a reserve to secure User’s obligations under these Veezi Payments Terms and the Stripe–User Agreement (“Reserve”). A Reserve may not be required if User meets certain financial criteria communicated by Vista, however, if there is a material change in User’s financial standing, Vista and/or Stripe may apply a Reserve on written notice to User.

If Stripe holds the reserve, Vista has no responsibility for it. If Vista holds the reserve, Vista may set and adjust the reserve level (acting reasonably) based on User’s risk profile and financial information, and may fund it by withholding from settlements. If settlements are insufficient, Vista may debit User’s linked bank account, set off amounts owed, or require User to top-up funds. User grants Vista a security interest/lien over reserve funds (whether held by Stripe or Vista) and will execute documents reasonably required to perfect it.

Scheme Rules

User agrees that it will be solely responsible for fines levied by card networks or other payments schemes for User’s violation of the Scheme Rules. Where Vista becomes aware of and/or receives notice of a potential exposure to a fine related to User, User will provide all reasonable co-operation to help investigate the relevant circumstances and remedy the relevant violation.

Security & Updates

Payment data is encrypted and processed through Stripe’s infrastructure, and neither Vista nor Stripe stores sensitive payment credentials beyond regulatory requirements. User will comply with the PCI security standards applicable to its use of Veezi Payments, will not store any Sensitive Authentication Data (including CVV) at any time, and will provide reasonable evidence of compliance on request.

If Stripe requires an update, Vista will notify User and User must install it immediately and confirm to Vista that this has been completed. Vista specifically disclaims any responsibility in relation to uptime and maintenance of the payment interface, or Stripe’s encryption and security.

Term and Termination

These Terms shall remain in force and binding on the Parties so long as there is an applicable Order Form in place between them, unless terminated in accordance with the below. These Terms shall automatically terminate in the event that the Stripe - User Agreement or the Agreement is terminated for any reason.

At any time during the Term, Vista may: (i) terminate any Order Form with immediate effect; and/or (ii) suspend access to the Veezi Payments Services with immediate effect, for the following reasons: (a) Stripe ceases to deliver all or part of the Stripe Services to either User or Vista; (b) a threat to the technical security or technical integrity of the Veezi Payments Service; (c) User’s breach or violation of applicable law, including the Scheme Rules, or any contractual obligation, including a breach of the Stripe – User Agreement; (d) any suspected or actual breach by User of these Veezi Payments Terms; or (e) any card network or other payments scheme suspends provision of all or part of their offering to Vista or Stripe blocks Vista’s access to a payment method.

Warranties

In addition to those warranties noted elsewhere in these Terms or provided under the Agreement, User represents and warrants that it shall:

• Comply with the Stripe-User Agreement and all applicable laws;
• Only use the Veezi Payments Services for payment of those User products and/or services agreed with Vista to be offered through Vista’s Services, and not for any use contained on Stripe’s restricted businesses or activities list (as updated from time to time) available at https://stripe.com/[insert country code]/legal/restricted-businesses;
• Not engage in fraudulent, misleading, or illegal transactions, including unauthorized attempts to circumvent payment rules and security protocols;
• Comply with the Stripe Payments Terms (forming part of the Stripe Services Agreement – Services Terms) available at https://stripe.com/[insert country code]/legal/ssa-services-terms#stripe-payments, which are incorporated into and made part of the Terms;
• Take full responsibility for any customer disputes (including Chargebacks) and ensure customers can easily find User’s dispute/refund contact details (before checkout and on receipts), that consent is obtained and retained for each Transaction, that recurring charges are disclosed with a clear cancellation method before the first charge, and that receipts/confirmations and the trading name/descriptor allow customers to identify the charge; and
• Implement appropriate security measures to protect customer data and payment information, adhering to industry best practices.

Liability & Indemnity‍

Third Party Liability: Vista will only be liable for its own acts or omissions and not for acts or omissions of third parties, including Stripe, any card network or other payments scheme, or for events or activities originating outside the Veezi Services (such as internet disturbances or malfunctions in third party systems), except in case such events were caused by the willful misconduct or gross negligence of Vista. User expressly agrees that it shall not join Vista in any claim or proceeding it may initiate against Stripe, however arising, related to Stripe’s role in Veezi Payments, or performance of the Stripe Services or Stripe Veezi Payments Services.

Limitation of Liability: To the maximum extent permitted by applicable law, the aggregate liability of Vista under the Order Form or Terms to User for breach of contract, tort or any other legal theory in any calendar year is limited to an amount equal to the Fees actually received for the Veezi Payments Services by Vista from User in the six (6) months immediately preceding the event which gave rise to the liability in question. To the maximum extent permitted by applicable law, Vista will not be liable for any special, indirect, or consequential damages (including any loss of profit, business, contracts, revenues or anticipated savings, or damage to good name) as a result of breach of contract, tort, interruption to services, use of or damage arising from Payment Devices, or under any other legal theory, even if such damages are foreseeable. The above provisions do not limit or exclude liability for death, bodily injury, fraud or wilful misconduct to the extent that doing so would contravene applicable law.

Indemnity User will indemnify, defend and hold harmless Vista, Vista Affiliates and their respective directors, officers, employees and representatives, from and against any and all losses, charges or fines arising out of: (i) breach of any of the User’s obligations under an Order Form, the Terms, applicable law, the Scheme Rules, or the Stripe-User Agreement; (ii) any User act or omission related to Veezi Payments (including Transactions, refunds, reversals, fraud) or Stripe’s services or technology; (iii) any fines applied to Stripe or Vista by any card network or other payments scheme connected with User’s violation of the Scheme Rules; (iv) any negative balances on User’s Stripe Dashboard or similar losses; (v) any disputes or legal proceedings initiated by User’s customers or regulatory authorities related to User’s use of Veezi Payments; (vi) gross negligence, willful misconduct or fraud; and/or (vii) contractual or other relationships between User and any third party, including User’s customers.

Audits

Vista may undertake compliance audits once per calendar year upon five (5) days’ written notice. At any time, where Vista has identified a reasonable concern regarding User’s compliance with these Terms, Vista may conduct an additional audit on five (5) days’ notice. Audits shall be conducted so as to minimise disruption to User’s business operations. User will provide reasonable access to personnel, systems and records necessary to verify compliance.

Marketing

Vista may use the User’s name and logo on its website and in marketing materials indicating that User is using Veezi Payments.

Order of Precedents

If there is any conflict or inconsistency between the documents forming the Terms for Veezi Payments, the following order of precedence applies (in descending order): (1) the applicable Order Form; (2) the Terms; and (3) the Agreement.

To the extent a matter relates to the provision of the Stripe Veezi Payments Services, payment processing/acquiring, chargebacks/disputes processing, or compliance with any Scheme Rules, the Stripe–User Agreement (and the applicable Scheme Rules) will prevail to the extent required to give effect to those requirements.

Annex 1

The following terms apply only to those Users who have an Order Form in place for Veezi Payments.

Background

For POS Transactions, User must use payment terminals or other payment processing devices provided by Stripe to User via Vista (each a Payment Device) to submit transactions for processing by Stripe. User must comply with these Payment Device Terms and the then-current version of:

• Stripe’s Terminal Device Software License Agreement (located at: https://stripe.com/[insert country code]/legal/terminal-device-eula);
• The Stripe Terminal Services Terms (located at: https://stripe.com/[insert country code]/legal/ssa-services-terms#stripe-terminal); and
• Stripe’s Terminal Purchase Terms (located at: https://stripe.com/[insert country code]/legal/terminal-purchase),

together, the Stripe Terminals Terms.

User acknowledges that: (i) any representation, warranty, covenant or obligation, including any indemnification obligation, made by User to Stripe in the Stripe Terminals Terms is also made by User to Vista and Vista has the right to enforce such representation, warranty, covenant and obligation against User; and (ii) any disclaimer, limitation on liability or other restriction made for the benefit of Stripe in the Stripe Terminals Terms is also made for the benefit of Vista and Vista has the right to enforce such disclaimer, limitation on liability or other restriction for Vista’s own benefit.

To the extent of any inconsistency between the Stripe Terminals Terms and these Payment Device Terms, these Payment Device Terms will prevail.

All capitalized terms not defined herein are as defined in the Veezi Payments Terms, the Stripe Terminals Terms, or the License Agreement for Veezi Software. These Payment Device Terms are governed and controlled by the Order Form, Veezi Payments Terms and License Agreement for Veezi Software, as set out in such documents.

Vista may update or modify these Payment Device Terms at any time, in its reasonable discretion. Any changes will be effective upon posting the updated Payment Device Terms on Vista’s website or by providing notice to User by other reasonable means. By continuing to use the Payment Device(s) after the updated Terms become effective, User agrees to be bound by the revised Payment Device Terms. If User does not agree to the updated Payment Device Terms, it should cease using the Payment Device(s).

Pricing

Notwithstanding anything to the contrary in the Stripe Terminal Purchase Terms, prices for Payment Devices are as agreed between Vista and User in the Order Form and not set by Stripe. Payment for Payment Devices must occur in accordance with the Order Form, and any invoices for Payment Devices are due upon receipt.

The price for each Payment Device includes the following:

• Payment Device hardware equipped with the relevant Payment Device software, Stripe key, basic functionality testing, and secure packaging;
• Cables and initial supplies necessary to operate the Payment Device (excluding docking stations, which are sold separately);
• Registration of the Payment Devices in the User’s account under the Veezi Payments Services;
• Shipment to one designated address per country via Stripe’s selected delivery services;
• Support for Payment Device software; and
• Support for additional services provided for Payment Devices.

The sales price for each Payment Device excludes the following:

• Out-of-warranty repairs or replacement;
• Shipping Fees;
• Any additional optional services that may be made available by Vista or Stripe during the Term;
• Optional accessories and additional supplies (including docking stations); and
• Federal, state, and local sales, use, excise or similar taxes or tax-like charges.

Orders, Shipping & Returns

Orders: Notwithstanding anything to the contrary in the Stripe Terminal Purchase Terms, User must place order for Payment Devices and request returns or recycling via Vista, rather than Stripe directly. Vista will place orders with Stripe for the volume and types of devices agreed with User. Delivery is managed by Stripe and Vista will have no liability for delayed delivery, shortages, orders cancelled by Stripe, or incomplete or inaccurate orders.

Vista will invoice User for Payment Devices or deduct from Transaction Funds, as set out in the Order Form. User acknowledges that Vista may offset any unpaid invoices against Transaction Funds or any Reserve. Where applicable law recognises purchase money security interests (or a like concept), you grant to Vista, and Vista reserves, a purchase money security interest in all Payment Devices sold to you to secure payments of amounts due. Vista may file a copy of the Terms and any Order Form with any appropriate authority to perfect its security interest. User may be required to provide Vista and/or Stripe with its sales tax identity number for the relevant territory in order for accurate sales taxes to be applied.

Shipping: Title and risk of loss, theft or damage for Payment Devices, regardless of cause, pass to User upon delivery. User is responsible for providing accurate delivery details and for any costs or issues arising from failed or delayed delivery due to incorrect details or inability to accept delivery.

Returns: User may return a Payment Device to Vista in its original packaging and condition (including all accessories and components) within 30 days of the date of purchase. Subject to compliance with requirements communicated by Vista, Vista will cover the cost of the return & refund the purchase price. We will not take title to any returned Payment Device until the item arrives at the facility to which we instruct you to return the Payment Device. Returns may be subject to a restocking fee. You will be the exporter and importer of record on all returns transactions and will be directly responsible for ensuring that your returns comply with all export and import regulations. This clause does not limit any rights that you might have to seek a refund under applicable law.

Recycling of devices pursuant to Stripe’s free recycling program may be available to User. User must contact Vista to arrange recycling, or other end-of-life device handling, which may be subject to additional terms and conditions. Vista shall not be liable for any data (including personal data) on Payment Devices returned to it or Stripe.

Device Use

User must ensure proper use of Payment Devices in accordance with the applicable specifications, instructions, technical requirements, and guidelines set out in any documentation provided by Stripe and/or Vista. User must comply with all PCI DSS, data security and personal data obligations under the Agreement in its use of Payment Devices. Vista will not be responsible for disruptions to Transactions using the Payment Device(s) and/or performance issues resulting from Payment Device misuse and/or erroneous integration by User.

User may only use Payment Devices within the country the device was originally shipped to, except that a Payment Device that was shipped to the European Economic Area or Switzerland may be used in another country in the European Economic Area or Switzerland if Stripe support the relevant Payment Device in that country.

To the extent permitted by applicable law, as required by Stripe, User may not resell, rent, lease or otherwise distribute Payment Devices, including to a person or entity who intends to engage in unlawful conduct or use the Payment Device for benchmarking or similar testing purposes. User expressly acknowledges that the Stripe Terminal Reseller Terms do not apply to User, irrespective of their inclusion in the Stripe Terminal Purchase Terms.

User must not attempt to enter into any legally binding obligation on behalf of Vista or Stripe with respect to the Payment Devices, or remove or change any copyright, trademark, trade name, logo, or other notice, legend, symbol or label appearing on or in the Payment Device, unless approved by Vista and/or Stripe in writing.

Payment Device Software

Stripe will make updates, patches and releases available from time to time for the Payment Device software for all supported Payment Devices, which may include emergency updates to repair urgent issues. If Stripe informs Vista that an update is available, Vista will communicate this to User and User must immediately install the update and confirm to Vista that this has been completed.

Stripe, and not Vista, is solely responsible for the provision of the Payment Device software. Vista has no responsibility for and expressly disclaims any and all damages and liabilities for Stripe’s provision or failure to provide the software or Stripe’s breach of any of obligations with respect to User, including any breach of the Stripe Terminals Terms.

Support Responsibilities

First Line Support. User will provide first-line support for the Payment Devices, including:

• General triage and troubleshooting with respect to the Payment Device:
• User network issues;
• Hardware and accessory issues;
• Basic account and Payment Device configuration;
• Theft, fraud, or misplacement issues;
• Transaction support (troubleshooting with regard to particular Transactions);
• Payment statuses: refunds and refusal reasons;
• Payment retries; and
• Ability to perform payments over the phone in case of network outage.

Second Line Support. User’s support team can, at no additional charge, contact Vista's second-line support helpdesk in case of an issue occurring in a Payment Device which cannot be resolved by First Line Support using the documentation and tools provided by Vista and/or Stripe.

Notwithstanding anything to the contrary in the Stripe Terminal Terms, in no event shall User contact Stripe directly for First Line Support or Second Line Support.

End User and Onsite Support. User must:

• Be available to accept delivery of Payment Devices at the designated address during regular business hours;
• Install and configure Payment Devices on site (including connecting to cash registers) in accordance with the instructions provided for the Payment Device.

Warranty

User acknowledges that Payment Devices are supplied “as-is” and the warranty set out in Stripe’s Terminal Purchase Terms is not available directly from Stripe to User.

Vista provides a one-year limited warranty against defective materials and faulty workmanship in a Payment Device (excluding cables and other accessories, and consumables, cosmetic damage and normal wear and tear). The warranty period begins on the date of your purchase of the Payment Device. Claims within this period that follow Vista’s instructions for submission and are within the scope of the limited warranty, will, at Vista’s option, be eligible for repair of the Payment Device or replacement of the Payment Device with a new or refurbished Payment Device.

This limited warranty applies only to unaltered hardware components of the Payment Device that are used in accordance with the Stripe Terminals Terms and these Payment Device Terms, and not subject to accident, misuse, or neglect. This limited warranty is personal to you and may not be transferred. All other warranties and liabilities are expressly disclaimed by Vista. User acknowledges that Stripe’s manufacturer warranty is co-extensive with Vista’s warranty to User.

Additional Services

The following terms apply to additional services available from Stripe in connection with Payment Devices:

Dynamic Currency Conversion. User may offer Dynamic Currency Conversion (DCC), giving Shoppers the opportunity to pay a Transaction either in User’s local currency or in the currency of the Shopper’s Card. A currency exchange rate will be applied, which may differ from public exchange rates or other Stripe exchange rates, and Stripe may apply individualised exchange rates to any Transaction, settlement of Transaction funds, or refund. User is fully liable for the accuracy of the DCC prices it presents to its customers, exchange rates, fees charged, and any actions or failure to act as a result of any directions or recommendations User receives related to DCC. Stripe may add or remove currencies from DCC at any time without notice. User must:

1. not use DCC except in conjunction with Veezi Payments;
2. not offer conversion optionality to its customers except in connection with the acceptance of payments made in exchange for goods or services in connection with its business;
3. not represent, either explicitly or implicitly, any point during the DCC Transaction process that its use of DCC is a service provided by the relevant card network;
4. provide customers all necessary information relating to DCC as required by law or Scheme Rules, including that DCC may include a mark-up on the prevailing currency exchange rate; and
5. ensure customers are offered the free choice to accept or decline the conversion option, and DCC is not used to convert a Transaction without customer consent.

Offline Payments. Neither Stripe nor Vista will be liable to User for any losses incurred in connection with User’s use of a Payment Device in “offline mode”, including any losses arising in connection with User’s inability to successfully complete a Transaction (i.e. there is an error in processing the attempted Transaction, or the Transaction is declined for any reason once the Payment Device is taken out of “offline mode”).

The following terms apply only to those Users who have an Order Form in place for Veezi Payments.

Background

The data processing terms set out in the License Agreement for Veezi Software (“Agreement”) shall be supplemented by incorporating these Veezi Payment Data Processing Terms by reference.

Except as expressly modified by this Schedule 6, the terms of the Agreement (including any data processing terms incorporated therein) continue to apply.

Vista may update or modify these Veezi Payments Data Processing Terms at any time in accordance with the Veezi Payments Terms and the change mechanism set out in the Agreement.

Purpose of Processing

Personal Data will be Processed by Vista and its Sub Processors (including Stripe and its Sub Processors) for the purpose of delivering Veezi Payments to User. This includes:

1. enabling and processing payment transactions (including authorisation, capture, settlement, refunds and reversals);
2. dispute andchargeback management and related support;
3. fraud detection, monitoring and prevention;
4. risk management, compliance reporting and audit support;
5. operational support, reporting and reconciliation; and
6. security, troubleshooting and platform servicing activities required to provide Veezi Payments.

Stripe may also Process Personal Data as an independent Data Controller for its own purposes, including:

1. complying with applicable legal and regulatory obligations and requirements (including Anti-Money Laundering and Anti-Terrorist Financing (“AML”) / Know Your Customer (“KYC”) requirements and related screening / monitoring);
2. managing billing and invoicing and Stripe’s internal administration in connection with the Services;
3. preventing, detecting and investigating fraud and other misuse, and mitigating financial loss, security risks and other harm; and
4. analyzing, improving and developing Stripe’s products and services, subject to Stripe’s compliance with applicable data protection laws.

Categories of Data

The types of Personal Data processed for Veezi Payments include the categories listed in the Agreement (to the extent applicable) and, where relevant to Veezi Payments, may also include:

• Payment and transaction details: cardholder name, tokenised/encrypted card number, expiry date, transaction amount, currency, transaction date/time, order/receipt identifiers, and related payment method details. (For clarity, CVV is not stored and payment credentials are protected consistent with PCI DSS.)
• Customer and merchant data: billing/shipping address, email address, name, unique customer identifier, and merchant/business contact details where required for onboarding and account management.
• Fraud/telemetry data: device ID/device fingerprint, IP address/location, browser language, persistent cookies/identifiers and activity signals used for fraud detection and prevention.
• Disputes/chargebacks: information submitted to support dispute/chargeback handling or defence.
• AML/KYC/verification data (where applicable): identity information including government issued documents (e.g., driver’s licence, passport or national ID) and related verification information required for legal/regulatory compliance.

Roles and Responsibilities

1. User as Data Controller; Vista as Processor. User is the Data Controller of Personal Data Processed in connection with User’s use of Veezi Payments (including User’s customers’ Personal Data). Vista acts as Data Processor for such Processing when providing Veezi Payments and related support, except where Stripe (or another payment partner) acts as an independent Data Controller as described below.
2. Stripe as Sub Processor. Where Stripe Processes Personal Data in connection with User’s use of Veezi Payments to deliver Veezi Payments to User (including to enable and process payment transactions and to service the payments platform), Stripe acts as Vista’s Sub Processor appointed by Vista, except to the extent Stripe acts as independent Data Controller for the independent Data Controller purposes identified in the Purposes of Processing section above.
3. Stripe as independent Data Controller. Stripe may Process Personal Data as an independent Data Controller for the independent Data Controller purposes set out in the Purpose of Processing section above.  For that Processing, Stripe determines the purposes and means of Processing and is responsible for compliance with applicable data protection law.  No joint controllership is created between Stripe and User, Vista or User’s customers by reason of Stripe’s independent Data Controller Processing.  For all other Processing of Personal Data under Veezi Payments, Stripe acts as Vista’s Sub-Processor and Processes Personal Data only on Vista’s documented instructions.
4. User instructions must be lawful; data minimisation. User warrants that it (and anyone acting on its behalf) will only provide Vista (and, via Vista, Stripe) with lawful instructions and will ensure Personal Data provided for Veezi Payments is necessary, relevant and limited to what is required for the Services.  User further warrants that it (and anyone acting on its behalf): (a) will comply with applicable data protection law in connection with its use of Veezi Payments; (b) has, and will maintain for the duration of its use of Veezi Payments, a valid legal basis (and any required rights, permissions and consents) to provide Personal Data to Vista (and, via Vista, to Stripe) for the purposes described in these Veezi Payments Data Processing Terms; (c) will ensure any Personal Data it provides is accurate and up to date (to the extent within its control) and is not excessive; and (d) will not provide any Special Category/Sensitive Data unless Vista expressly agrees in writing and such Processing is permitted by applicable law.
5. Transparency and Permissions. User warrants that it will provide and maintain all required privacy and cookie notices, and obtain any required rights, permissions and consents, to enable Processing of Personal Data by Vista, Stripe and their respective Sub Processors for the purposes described in these Veezi Payments Data Processing Terms (including Stripe’s independent controller Processing). User will ensure its notices describe Stripe’s role and link to Stripe’s Privacy Centre/Policy, and will provide reasonable cooperation/information to Vista on request to support transparency compliance.
6. Required Stripe Disclosures (User Privacy Notice + Cookie Notice)
   
   1. User warranty. Without limiting paragraph 5 above (Transparency and Permissions), User warrants that it will incorporate the Recommended Stripe disclosure language set out in the Disclosure section below, or equivalent text that achieves the same purpose, into its customer privacy notice (and cookie notice/banner where applicable), and keep that disclosure language up to date as further explained in the Disclosures section.
   2. Evidence on request. On Vista’s written request, User must promptly provide evidence of compliance (e.g., the URL link(s) to the relevant notice(s) and/or screenshots) and must re attest to ongoing compliance at reasonable intervals notified by Vista.
   3. Remediation. If Vista notifies User that the disclosure is missing or incomplete (including because Stripe updates its guidance/materials), User must remedy within the timeframe specified by Vista (acting reasonably).
   4. Suspension right. If User fails to comply with this clause or refuses to remedy, Vista may suspend Veezi Payments (or disable Stripe enabled functionality) until compliance is restored.

Sub-Processor Engagement

Vista may engage Sub Processors (including Stripe and Stripe’s Sub Processors) to deliver Veezi Payments. Stripe’s current list of service providers/Sub processors and affiliates is available at https://stripe.com/legal/service-providers (the “Stripe Sub processors List”), and User may subscribe to updates in accordance with the instructions made available by Stripe. User authorises Stripe’s engagement of its the Sub Processors included in the Stripe Sub-Processors List.

In all other respects, the Sub Processor appointment terms set out in the Agreement (including any data processing terms incorporated therein) continue to apply.

International Transfers

User authorises Vista’s transfer of Personal Data to Stripe (including to Stripe, LLC in the United States) and to Stripe’s affiliates and service providers/Sub‑Processors globally, as necessary to provide Veezi Payments.

Where such transfers involve Personal Data that requires a data transfer mechanism under applicable data protection law (including EU/UK/Swiss transfer regimes), the Data Transfers Addendum (available at www.stripe.com/legal/dta, as updated from time to time) will apply to those transfers.

The Data Transfers Addendum describes the transfer mechanisms Stripe may rely on for applicable international transfers (including the Data Privacy Framework and the EU/UK standard contractual clauses/addendum).

Security Measures

Vista will use reasonable efforts to ensure that, when Stripe acts as a Sub Processor for the purpose of delivering Veezi Payments, Stripe maintains appropriate technical and organisational measures to protect Personal Data, including maintaining a written information security program and making available, on request, relevant third-party assurance reports (such as SOC 1 / SOC 2) and evidence of PCI DSS Level 1 compliance.  

User will comply with the PCI security standards applicable to its use of Veezi Payments and will not store Sensitive Authentication Data (including CVV) at any time.

Audit

Any audit / assurance rights in respect of Stripe’s Processing for the purpose of delivering Veezi Payments are satisfied by the provision of those reports and / or a completed security questionnaire (of reasonable scope, no more than annually).

Retention and Deletion

User acknowledges that Stripe retains certain transaction and related Personal Data to comply with legal and regulatory obligations (including anti money laundering and financial regulatory requirements) and for fraud monitoring, detection and prevention, and that such Personal Data may be retained for five (5) or more years from the later of: (i) termination or expiry of the User’s Veezi Payments Order Form; (ii) termination of the Stripe-Vista Agreement; or (iii) the date of the last Transaction processed for User through Veezi Payments, or such longer period as required by applicable law.

To the extent Stripe is not required to retain such Personal Data, Stripe will delete or return it within a reasonable time following termination.  Where deletion is not feasible or not permitted due to legal/regulatory retention requirements, the data will be retained/archived in accordance with Stripe’s retention practices and not processed for unrelated purposes.

Indemnity

User shall indemnify, defend and hold harmless Vista and its Affiliates from and against all losses, liabilities, fines, costs and expenses (including reasonable legal fees) arising out of any third party claim or regulatory action (including claims by Stripe, a Data Subject, or a Supervisory Authority) to the extent caused by User’s (or its agents’) breach of this Schedule 6 or applicable data protection law, including any failure to provide required privacy and/or cookie notices, obtain required rights, permissions or consents, maintain a valid legal basis, or provide lawful instructions in relation to User’s use of Veezi Payments.

Disclosures

User responsibility / Vista support: User is solely responsible for ensuring that all required privacy and cookie notices are provided, that any required rights / permissions / consents are obtained, and that the content of those notices is legally compliant in User’s circumstances.  Vista provides the suggested disclosure text and links below as a convenience only, to support User’s compliance.  User should obtain its own advice on what disclosures are required and how best to present them to customers.  

Updates: Stripe’s privacy and cookie materials are published online and may change over time.  User should review Stripe’s Privacy Centre / Policy and (where relevant) Stripe’s Cookie Settings Dashboard periodically to ensure User’s disclosures (including any cookie disclosures) remain accurate and up to date for the way User has integrated Stripe.

Recommended disclosure text:

• Include in User’s customer-facing privacy notice
  Payments and Stripe. We use Vista (Veezi Payments) to enable payment processing and Stripe to process card and other payment transactions. For fraud prevention, security, compliance with card network rules, and legal/regulatory checks (including AML/KYC), Stripe acts as an independent data controller. During checkout, Stripe may collect and process transaction information and identifying information about devices that connect to its services, including via cookies and similar technologies, to detect and prevent fraud, help secure transactions, and operate and improve the services it provides (including performance analytics). Your personal data may be transferred to the United States and other countries where Stripe and its service providers operate. For more information about how Stripe processes personal data (including international transfers and your rights in relation to Stripe’s independent processing), see Stripe’s Privacy Centre: https://stripe.com/legal/privacy-center and Stripe’s Privacy Policy: https://stripe.com/privacy. Stripe may also process personal data to comply with legal and regulatory obligations (including AML/KYC) and to manage billing and invoicing.
• Include in User’s cookie banner / cookie notice (where consent is required)
  Payment security cookies: When you check out, Stripe may set cookies and similar technologies for fraud prevention and detection and to help secure payment transactions. For details, see Stripe’s Cookies Policy .https://stripe.com/legal/cookies-policy
• Just-in-time banner / footnote (short disclosure at point of payment) (optional)
  Payments are powered by Stripe. Stripe may act as an independent controller for fraud prevention and regulatory checks and may collect device/usage data and set cookies/identifiers during checkout. See https://stripe.com/legal/privacy-center.

Resources

For further information about Stripe’s privacy practices (including cookies, where relevant), see:

• Stripe Privacy Policy: https://stripe.com/privacy
• Stripe Privacy Centre: https://stripe.com/legal/privacy-center
• Stripe Cookie Policy: https://stripe.com/legal/cookies-policy
• Stripe Cookie Settings Dashboard: https://stripe.com/cookie-settings