Get called
Demonstration
To process your request, we need to process your personal data. Find out more about the processing of your personal data here.
Dipeeo SAS, registered with the Bobigny Trade and Companies Register under number 897 692 315, with capital of €12,400.00, represented by Raphaël Buchard and whose registered office is located at 95 avenue du Président Wilson, 93100 Montreuil (hereinafter "Dipeeo"), provides an outsourced Data Protection Officer service outsourced to the supervisory authorities (hereinafter the "Service").
The terms used in the Agreement have the following meanings:
The purpose of the GTC is to set out the rules that Clients comply with when using the Service. Any use of the Service implies unconditional acceptance of these GTC.
Clients they have read the Terms and Conditions prior to using the Service and that they have all the information and skills necessary to ensure that the Service meets their needs.
The commercial relationship between Dipeeo and the Client governed by all of the following contractual documents, presented in descending order of legal value:
are available upon request atcontact@dipeeo.com;
The DPA and its appendices, the ToU , and the Platform's Privacy Policy are available at any time atapp.dipeeo.fr.
The Parties agree that all provisions of these contractual documents shall apply mutatis mutandis.
In the event of any conflict between one or more provisions contained in any of the above documents, the provisions contained in the document of higher hierarchical rank shall prevail.
The commercial relationship between Dipeeo and the Client into effect upon signature of the quote by the Client the duration specified in the quote.
The contract is concluded for a fixed term of at least twelve (12) months and is tacitly renewable for the monthly or annual term initially specified in the quote on the anniversary date of the contract, according to the following terms and conditions:
Any termination of the contract must be notified by the Client (1) month before the contract anniversary date.
The Service is provided on a subscription basis. Billing may be monthly or annual as described in the quote.
The prices of the service are indicated inclusive of tax and in euros, and the duties and taxes borne by the Client are those applicable on the date of invoicing in accordance with the legislation of Client country.
Unless otherwise specified, invoices are payable by default on the date of invoicing by direct debit.
The price of the Service is automatically and automatically reevaluated on each anniversary date of the Service based on the SYNTEC index, with the reevaluated price being obtained by the following calculation: PR = PI x S/SI, where: "PR" refers to the Reevaluated Price, i.e., the price reevaluated based on the SYNTEC index.
"PI" refers to the Initial Price, i.e., the price applicable during the year in which the price reassessment takes place and prior to said reassessment; "S" refers to the latest SYNTEC index known on the date of the price reassessment. "SI" refers to the initial SYNTEC index, i.e., in the event that the price reassessment takes place in the year immediately following the first calendar year, SI corresponds to the latest SYNTEC index publicly available on the date the Service comes into effect.
In the event that the price reassessment takes place in any year other than the year immediately following the first calendar year, SI corresponds to the latest SYNTEC index publicly available on the anniversary date of the Service immediately preceding the date on which the price reassessment of the Service takes place.
The signed quote is binding and cannot be contested by the Client. However, in the event of disagreement over part of an invoice, the Client pay the uncontested part of the disputed invoice without delay. Disputes over invoices must be detailed with documented evidence and communicated within 15 days of receipt of the invoices and are dealt with on a case-by-case basis.
It is agreed that the issuance of a new invoice, in the event of staggered invoicing or regular billing, extinguishes the client ability client dispute the previous invoice. Any overpayment on the part of Dipeeo will result in an adjustment on the next invoice.
Any delay in payment by Client result in the suspension of the Service pending rectification of the situation as described in the article "Suspension of service." Dipeeo may suspend billing and issue an invoice for the outstanding balance.
In the absence of regularization by the Client, Dipeeo reserves the right to take any action necessary to protect its interests.
With the exception of supervisory authority control procedures (e.g complaints, formal notices, requests for explanations, etc.), Dipeeo does not handle legal proceedings with supervisory authorities or partners, nor does it handle pre-litigation proceedings.
For disputes, Dipeeo may provide an additional quote that must be accepted by the Client any processing takes place. Dipeeo also reserves the right to exclude assistance in the event of pre-litigation, particularly in the event of misuse of the Service by the Client e.g omission, non-application, misapplication, etc.).
In this case, Dipeeo reserves the right to provide an additional quote as part of the pre-litigation process.
The Client make every effort to provide Dipeeo with any audit or analysis requests Client within a reasonable processing time and, if possible, within 72 hours before the deadline. Failing this, Dipeeo reserves the right to refuse to assist the Client to guarantee the quality of our deliverables.
The Client solely responsible for the use of the Service by its Users. Dipeeo shall in no event be held liable for any misuse or use ToU Platform ToU does not comply with ToU by the Client by the Users.
Dipeeo is also not responsible, without this list being exhaustive, for the content, videos, texts, drawings, Client Property, used through the Platform or the use of any other feature of the Platform, which remains Accountability sole Accountability Client , without this list being exhaustive, for errors, mishandling, malicious or accidental acts carried out by Users via the Platform, or, without this list being exhaustive, malicious or illegal deletion, destruction, alteration, or modification of personal data or other data, or of the Client Property Client by Users of the Platform.
Dipeeo makes every effort to provide a high-quality Service, accessible 24/7, free from any risk of technical failure. However, as there is no such thing as "zero risk" in IT, Accountability cannot be held Accountability for any damage that may occur as a result of using the Service, and Dipeeo cannot be held responsible for any errors, unavailability, or interruptions that may occur on our Platform.
Dipeeo shall also not be liable for any delays or inability to fulfill its obligations under the Terms and Conditions if the delay or inability results from a cause beyond its reasonable control or from hacking, errors, or viruses that may be installed on Users' devices and that may affect the Platform or steps or actions taken or omitted by Users.
Dipeeo shares Accountability GDPR compliance GDPR the Client with its obligations as Data Protection Officer appointed by the supervisory authorities. The compliance audit questionnaires and information provided by the Client prevail. Dipeeo must ensure that it has identified the Client data processing operations Client through the questionnaire available via the Platform and through additional questions from the lawyers handling the case. Dipeeo is not responsible for incorrect answers to the questionnaire or omissions made by the Client for Client response times. Dipeeo shall not be liable for any direct or indirect damages (e.g loss of opportunity to earn income) in the event of incorrect answers or omissions on the part of Client. Dipeeo is also not responsible for delays in the provision of responses by Client teams Client the accuracy of the responses provided Client or the non-application of the recommendations made by Dipeeo.
Dipeeo is only bound by the applicable duties as an outsourced Data Protection Officer outsourced therefore only related to GDPR. Any tasks that do not fall within the legal remit of the Data Protection Officer as defined by the CNIL (National Commission for Information Technology and Civil Liberties) the GDPR e.g intellectual property, contract law, consumer law, etc.) will not be handled.
In any event, it is expressly agreed that Dipeeo is subject only to an obligation of means with respect to the provision of the Service and the performance of its obligations in accordance with Articles 24 et seq. of GDPR. Clients that Accountability shall only be held Accountability in the event of proven and established fault, provided that such Accountability apply Accountability to direct and foreseeable damages, indirect damages being excluded, and that Dipeeo is not liable for commercial losses (including loss of profit, revenue, contracts, anticipated savings, data, customers, or unnecessary expenses) that were not foreseeable when the Clients using the Platform. Indirect damages include, in particular, loss of data, time, profits, revenue, margins, orders, clients, operations, income, commercial activities, or damage to brand image, expected results, and the actions of third parties, as well as, generally speaking, any commercial disruption whatsoever. Similarly, any action by a third party against the Customer is considered indirect. In the event that Accountability is established under the conditions set forth above, the amount of compensation shall not exceed the sum paid by the Client a maximum period of 12 months.
Regarding third-party certifications displayed in the Trust Center, the Client enter and publish certifications (such as ISO 27001, SOC 2, HDS, etc.) based on the information and documents it provides.
These certifications are displayed solely under the Client Accountability . Dipeeo is not required to verify their authenticity, validity, or compliance.
Consequently, Dipeeo shall not be held liable for any inaccurate, incomplete, outdated, or erroneous information regarding the certifications declared by the Client, nor for any consequences that may result therefrom.
Dipeeo reserves the right to limit, restrict, suspend, or permanently terminate all or part of the User or Client accounts Client the Service and to report to the supervisory authorities, at any time, with 7 days' notice, without compensation and without prior formalities, in the event of a breach of their duties and obligations under the Contract, at the express request of an administrative or judicial authority, in the event of an actual or alleged infringement of any right by a User, or in the event of non-payment of sums due within the specified time limits or omission or insult on the part of a Client, all without this measure being considered a breach of our obligations.
Any closure of a User or Client account Client the archiving of the information and documents provided when opening or updating that account, all documents and other items stored via the Platform, and, where applicable, any documents or content that Users or the Client published, downloaded, or made available on the Platform for a period of 5 years. Access to the Platform will also be suspended.
In the event of closure of a User or Client account Client the initiative of a Client, no refund, either total or partial, of sums already paid will be made. In the event of closure of said account at the initiative of Dipeeo for non-compliance with these GTC, no refund, either total or partial, of sums already paid will be made.
Access to the Service may occasionally be suspended or limited to allow for repairs, maintenance, or the addition of new features or Services.
Dipeeo shall do its best to inform the Client a reasonable time frame regarding the implementation of maintenance. No compensation of any kind may be claimed from Dipeeo for maintenance, which is at Dipeeo's discretion.
Dipeeo is the exclusive owner of the intellectual property rights to the Service and Dipeeo's Property (including logos, domain names, designs, texts, sounds, models, databases, graphic charter, etc.), its methods, and its know-how.
However, Dipeeo never holds ownership rights over the Client Property, Client in particular over content produced by Users via the Service, which remains the exclusive property of Client.
The commercial relationship between Dipeeo and the Client does Client constitute a transfer or assignment of ownership rights to the Service.
The Client only a non-exclusive, worldwide, unlimited license to use the Service for strictly professional purposes and solely in the context of its activities.
The Client therefore Client to translate, communicate, market, or transfer, free of charge or for a fee, the Service, in whole or in part, to a third party, including within its group of companies (e.g subsidiary, parent company, etc.), without prior written authorization. Any translation, transfer, communication, or marketing of the Service not authorized by Dipeeo is prohibited and would constitute a breach of contractual obligations and an infringement punishable under Articles L335-2 et seq. of the Intellectual Property Code and Articles L713-2 et seq. of the same code.
It is strictly prohibited to use Dipeeo's Property, in any way whatsoever, in whole or in part, without Dipeeo's prior written authorization. Any Client use by the Client constitutes an infringement punishable under Articles L335-2 et seq. of the Intellectual Property Code and Articles L713-2 et seq. of the same code.
The Platform may also mention, for various reasons, other logos, trademarks, or registered trademarks belonging to Dipeeo or Dipeeo's partners. Third-party Property is also protected by intellectual property law and is subject to the same rules as Dipeeo's Property.
In accordance with the provisions of Law No. 98-536 of July 1, 1998, transposing Directive 96/9 EC of March 11, 1996, on the legal protection of databases into the Intellectual Property Code, Dipeeo is the "producer" and owner of all or part of the databases used via the Platform. Consequently, any extraction and/or reuse of the databases within the meaning of Articles L342-1 and L342-2 of the Intellectual Property Code is prohibited and constitutes an infringement.
Throughout the term of the Contract and for a period of 12 months following the termination of commercial relations, for any reason whatsoever, the Client expressly Client to solicit, hire, or employ, directly or indirectly, in any capacity whatsoever (employee, freelancer, consultant, processor), any member of Dipeeo's staff or collaborators who participated in the performance of the Service, or with whom the Client been in contact in connection therewith.
This prohibition applies even in cases of indirect solicitation, through a third party, or through advertisements to which the employee concerned responds following a specific initiative by the Client.
In the event of a breach of this clause, the Client liable to Dipeeo for a lump sum compensation equal to 12 months' gross remuneration of the employee concerned, without prejudice to Dipeeo's right to seek compensation for any additional damage actually suffered, in particular in terms of imbalance in the context of its business.
The Client Dipeeo to engage any processor its choice. Dipeeo undertakes to ensure that the processor complies with the confidentiality obligations set forth herein. Dipeeo remains fully liable to the Client proper performance of the tasks carried out by the processor.
Dipeeo does not provide any functionality for reversing personal data, Client Property, Client any content used via the Platform. The removal of this information is the sole Accountability Client. Dipeeo undertakes to provide an export of Client data Client request for a period of 12 months, except in the event of non-payment by Client. The fate of personal data is detailed in the Data Protection Agreement.
In the event of a proven and documented breach of the Contract by Client Dipeeo, which is not remedied within 30 days of the sending of a formal notice by registered letter with acknowledgment of receipt, the Client Dipeeo may automatically terminate the Service without prejudice to any damages that the Client Dipeeo may claim hereunder. Termination may also be declared without notice or compensation by the Client Dipeeo in the event of the commencement of collective proceedings (receivership or liquidation).
Dipeeo undertakes to comply with applicable data protection rules and, in particular, Law No. 78-17 of January 6, 1978, as amended, known as the "Data Protection Act," and Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data GDPR known as the " GDPR
Dipeeo is classified as processor the meaning of Article 28 of GDPR the Client classified as controller. Under no circumstances may Dipeeo be considered jointly responsible in connection with the service.
The applicable obligations regarding subcontracting are described in the data protection agreement attached hereto.
Dipeeo may be required to process Client data Client e.g employee data) in the context of providing the service as controller. For any information in this regard, the Client consult Dipeeo's Privacy Policy, which is accessible at any time via its Platform. The Client inform Users of this Privacy Policy.
The Client informed that any case of force majeure immediately and automatically suspends the performance of the Service. If the force majeure lasts for more than two months, Dipeeo reserves the right to suspend or terminate the Service without notice or compensation.
In particular, events beyond Dipeeo's control, which could not reasonably have been foreseen when the Service was made available and whose effects cannot be avoided by appropriate measures, preventing its use, are considered cases of force majeure.
In particular, these are those usually recognized by French courts and tribunals, such as war, riots, fire, internal or external strikes, lockouts, occupation of premises, bad weather, earthquakes, floods, water damage, legal or governmental restrictions, legal or regulatory changes, accidents of any kind, epidemics, pandemics, illnesses affecting more than 10% of Dipeeo's staff over a period of two consecutive months, power outages, partial or total shutdown of the Internet and, more generally, of private or public telecommunications networks, road blockages and inability to obtain supplies, and any other event beyond Dipeeo's control preventing the normal performance of the Service.
Dipeeo guarantees that it is insured for any harmful consequences and actions carried out in the course of its business.
Dipeeo provides the Service as a legally and financially independent entity, acting in its own name and under its own Accountability. The performance of the Service shall not constitute a mandate nor be deemed to constitute an association, partnership, or joint venture between the client Dipeeo. Unless expressly provided otherwise, the Client from making any commitment in the name and on behalf of Dipeeo.
Dipeeo and the Client to collaborate closely within the framework of their relationship.
All information, documents, data, and elements communicated by the Client connection with the Service are presumed to be confidential, including all information relating to Client know-how, methods, and experiences, whether such information, documents, or data have been delivered in writing, orally, or by any other means, and regardless of their form or medium.
The Client that any document or correspondence in electronic form exchanged with Dipeeo, as well as the logs, records, and computer connection logs of the information systems of the Dipeeo Platform, its service providers, or processors, shall be validly considered as proof of the communications that have taken place.
The Client these GTC are sincere. As such, the Client they have no knowledge of any information which, if disclosed, would have altered the consent of the other party.
Dipeeo may cite the Client name Client a commercial reference in accordance with commercial practices, unless the Client requests otherwise in writing.
The Contract may not be transferred in whole or in part, for consideration or free of charge, by one Party to the Contract without the prior written consent of the other Party. Neither Party to the Contract may transfer all or part of the rights and obligations arising hereunder or be replaced by a third party of its choice.
If one or more provisions of these Terms and Conditions are held to be invalid or declared as such in accordance with a final decision by a competent court, the Client this shall not invalidate the Contract as a whole.
These terms and conditions are governed by French law. This applies to both substantive and procedural rules, regardless of where the substantive or ancillary obligations are performed.
In the event of a dispute, jurisdiction is expressly assigned to the Commercial Court of Bobigny, notwithstanding any plurality of defendants or third-party proceedings, even for emergency proceedings or protective measures, in summary proceedings or by petition.
Date of last update: February 16, 2026