Terms of Service

INTUIT TERMS OF SERVICE FOR QUICKBOOKS ONLINE AND QUICKBOOKS ONLINE ACCOUNTANT IN REPUBLIC OF IRELAND (“IRELAND”)

Thank you for selecting the Services offered by Intuit Limited and/or its subsidiaries and affiliates (referred to as "Intuit", "we", "our", or "us"). Review these Terms of Service ("Agreement") thoroughly. This Agreement is a legal agreement between you and Intuit. By accepting electronically (for example, clicking "I Agree"), installing, accessing or using the Services, you agree to these terms. If you do not agree to this Agreement, then you may not use the Services. If you are entering into this Agreement on behalf of a company or other legal entity, you represent that you have the authority to bind such entity and its affiliates to these terms and conditions as its authorized representative, in which case the terms “you” or “your” will refer to such entity and its affiliates as well as you. If the legal entity that you represent does not agree with these terms and conditions, you must not accept this Agreement, register, and use or access the Services as an authorized representative. 

If you are an individual located in the European Economic Area (“EEA”) who is accessing or using Intuit services, sites, products, mobile applications, desktop applications, or software directed to the EEA (collectively, “Services”) your relationship is with Intuit Ltd. (referred to as "Intuit", "we", "our", or "us").

 A. GENERAL TERMS
 

1. AGREEMENT
This Agreement describes the terms governing your use of the Intuit Services. It includes by reference:

• Intuit's Privacy Statement
• Additional Terms and Conditions, which may include those from third parties.
• Any terms provided separately to you for the Services, including product or program terms, ordering, activation, payment terms, data processing agreements, etc.

You must be at least 18 years of age to use our Services. By accessing or using our Services you agree that:

• You can form a binding contract with Intuit
• You are not a person who is prohibited from receiving the Services under the laws of the United States, England, Wales, Ireland, or any other applicable jurisdiction; and
• You will comply with this Agreement and all applicable local, state, national, and international laws, rules, and regulations, including import and export regulations.

2. YOUR RIGHTS TO USE THE SERVICES.
2.1 The Services are protected by copyright, trade secret, and other intellectual property laws. You are only granted the right to use the Services and only for the purposes described by Intuit. Intuit reserves all other rights in the Services. Until termination of this Agreement and as long as you meet any applicable payment obligations and comply with this Agreement, Intuit grants to you a personal, limited, nonexclusive, nontransferable right and license to use the Services.
 

2.2 You agree not to use, nor permit any third party to use, the Services or content in a manner that violates any applicable law, regulation or this Agreement. You agree you will not:

• Provide access to or give any part of the Services to any unauthorized third party.
• Reproduce, modify, copy, deconstruct, sell, trade or resell the Services.
• Make the Services available on any file-sharing or application hosting service.

3. PAYMENT. For Services offered on a payment or subscription basis, the following terms apply if you are the User paying for the Services, unless Intuit or its third party affiliate notifies you otherwise in writing. This Agreement also incorporates by reference and includes program ordering and payment terms provided to you on the website for the Services: 

1. Payments may be billed to you by Intuit in euros (€), pounds sterling (£), U.S. Dollars, or other currencies which may be made available (plus any and all applicable taxes, including without limitation VAT and GST) as shown in the product ordering and subscription terms, and your account will be debited when you subscribe and provide your payment information, unless stated otherwise in the program ordering or payment terms on the website for the Services.
2. You must pay with one of the following:
   • A valid credit card acceptable to Intuit
   • A valid debit card acceptable to Intuit
   • Sufficient funds in a checking or savings account to cover an electronic debit of the payment due or
   • By another payment option Intuit provides to you in writing.
3. If your payment and registration information is not accurate, current, and complete and you do not notify us promptly when such information changes, we may suspend or terminate your account and refuse your use of the Services.
4. If you do not notify us of updates to your payment method (e.g., credit card expiration date), to avoid interruption of your service, we may participate in programs supported by your card provider (e.g., updater services, recurring billing programs, etc.) to try to update your payment information, and you authorize us to continue billing your account with the updated information that we obtain.
5. Intuit will automatically renew your monthly, quarterly, or annual Services at the then-current rates, unless the Services are cancelled or terminated under this Agreement.
6. Additional cancellation or renewal terms may be provided to you on the website for the Services.
7. You agree You may receive invoices for the Services in an electronic form.

4. USE WITH YOUR MOBILE DEVICE. Use of these Services may be available through a compatible mobile device, the Internet, and may require software. You agree that you are solely responsible for these requirements, including any applicable changes, updates and fees as well as the terms of your agreement with your mobile device and telecommunications provider. 

INTUIT MAKES NO WARRANTIES OR REPRESENTATIONS OF ANY KIND, EXPRESS, STATUTORY OR IMPLIED AS TO: 

1. THE AVAILABILITY OF TELECOMMUNICATION SERVICES FROM YOUR PROVIDER AND ACCESS TO THE SERVICES AT ANY TIME OR FROM ANY LOCATION
2. ANY LOSS, DAMAGE, OR OTHER SECURITY INTRUSION OF THE TELECOMMUNICATION SERVICES; AND
3. ANY DISCLOSURE OF INFORMATION TO THIRD PARTIES OR FAILURE TO TRANSMIT ANY DATA, COMMUNICATIONS OR SETTINGS CONNECTED WITH THE SERVICES.

5. DATA PROCESSING AND PRIVACY.

5.1. Data Processing and Privacy. Intuit is the controller of the personal information it processes about you when you use the Services. You acknowledge that Intuit will process your personal information as described in our Privacy Statement when you use our Services. 

6. CONTENT

6.1 You are responsible for your content. You are responsible for all materials, data, and personal information ("Content") uploaded, posted or stored through your use of the Services. You grant Intuit a worldwide, royalty-free, non-exclusive license to host and use any Content provided through your use of the Services. Archive your Content frequently. You are responsible for any lost or unrecoverable Content. You must provide all required and appropriate warnings, information and disclosures. Intuit is not responsible for the Content or data you submit through the Services. You agree not to use, nor permit any third party to use, the Services to upload, post, distribute, link to, publish, reproduce, engage in or transmit any of the following, including but not limited to: 

1. Illegal, fraudulent, defamatory, obscene, pornographic, profane, threatening, abusive, hateful, harassing, offensive, inappropriate or objectionable information or communications of any kind, including without limitation conduct that would encourage "flaming" others, or criminal or civil liability under any local, state, federal or foreign law
2. Content that would impersonate someone else or falsely represent your identity or qualifications, or that constitutes a breach of any individual’s privacy
3. Except as permitted by Intuit in writing, investment opportunities, solicitations, chain letters, pyramid schemes, other unsolicited commercial communication or engage in spamming or flooding
4. Virus, trojan horse, worm or other disruptive or harmful software or data; and
5. Any information, software or Content which is not legally yours and without permission from the copyright owner or intellectual property rights owner.

6.2 Community forums. The Services may include a community forum or other social features to exchange Content and information with other users of the Services and the public (“Community Forum”). Intuit does not support and is not responsible for the content in these Community Forums. Please use respect when you interact with other users in a Community Forum. Do not reveal confidential or other information that you do not want to make public. Users may post hypertext links to content of third parties for which Intuit is not responsible. 

6.3 Intuit may freely use feedback you provide. You agree that Intuit may use your feedback, suggestions, or ideas in any way, including in future modifications of the Services, other products or services, advertising or marketing materials. You grant Intuit a perpetual, worldwide, fully transferable, sublicensable, non-revocable, fully paid-up, royalty free license to use the feedback you provide to Intuit in any way.

6.4 Intuit may monitor your Content. Intuit may, but has no obligation to, monitor content on the Services. We may disclose any information necessary to satisfy our legal obligations, protect Intuit or its customers, or operate the Services properly. Intuit, in its sole discretion, may refuse to post, remove, or refuse to remove any Content, in whole or in part, alleged to be unacceptable, undesirable, inappropriate, or in violation of this Agreement. 

7. ADDITIONAL TERMS

7.1 Intuit does not give professional advice. Unless specifically included with the Services, Intuit is not in the business of providing legal, financial, accounting, tax, health care, real estate or other professional services or advice. Consult the services of a competent professional when you need this type of assistance.

7.2 We may tell you about other Intuit services. You may be offered other services, products, or promotions by Intuit (other "Intuit Services"). Additional terms and conditions and fees may apply. With some Intuit Services you may upload or enter data from your account(s) such as names, addresses and phone numbers, purchases, etc., to the Internet. 

7.3 Communications. Intuit may be required by law to send you communications about the Services or third party products. You agree that Intuit may send these communications to you via email or by posting them on our websites.

7.4 You will manage your passwords and accept updates. You are responsible for securely managing your password(s) for the Services and to contact Intuit if you become aware of any unauthorized access to your account. The Services may periodically be updated with tools, utilities, improvements, third party applications, or general updates to improve the Services. You agree to receive these updates. 

7.5 Retention of records. You are responsible to retain, as required under any applicable law or standard, all of Your documents. Except to the extent required by law, Intuit has no obligation to store, maintain or provide to you any information or documents you provide to Intuit.

8. DISCLAIMER OF WARRANTIES 

8.1 YOUR USE OF THE SERVICES, SOFTWARE, AND CONTENT IS ENTIRELY AT YOUR OWN RISK. EXCEPT AS DESCRIBED IN THIS AGREEMENT, THE SERVICES ARE PROVIDED "AS IS." TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, INTUIT, ITS AFFILIATES, AND ITS THIRD PARTY PROVIDERS, LICENSORS, DISTRIBUTORS OR SUPPLIERS (COLLECTIVELY,"SUPPLIERS") DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING ANY WARRANTY THAT THE SERVICES ARE FIT FOR A PARTICULAR PURPOSE, TITLE, MERCHANTABILITY, DATA LOSS, NON-INTERFERENCE WITH OR NON-INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHTS, OR THE ACCURACY, RELIABILITY, QUALITY OR CONTENT IN OR LINKED TO THE SERVICES. INTUIT AND ITS AFFILIATES AND SUPPLIERS DO NOT WARRANT THAT THE SERVICES ARE SECURE, FREE FROM BUGS, VIRUSES, INTERRUPTION, ERRORS, THEFT OR DESTRUCTION. TO THE EXTENT PERMITTED BY THE APPLICABLE LAWS OF ENGLAND AND WALES ANY IMPLIED WARRANTIES IN RESPECT TO THE SERVICES, SOFTWARE, AND CONTENT ARE LIMITED TO 60 DAYS FROM THE DATE OF PURCHASE OR DELIVERY OF THE SERVICES, WHICHEVER IS SOONER. 

8.2 INTUIT, ITS AFFILIATES AND SUPPLIERS DISCLAIM ANY REPRESENTATIONS OR WARRANTIES THAT YOUR USE OF THE SERVICES WILL SATISFY OR ENSURE COMPLIANCE WITH ANY LEGAL OBLIGATIONS OR LAWS OR REGULATIONS.

YOU ARE SOLELY RESPONSIBLE FOR ENSURING THAT YOUR USE OF THE SERVICES IS IN ACCORDANCE WITH APPLICABLE LAW. 

9. LIMITATION OF LIABILITY AND INDEMNITY. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE ENTIRE LIABILITY OF INTUIT, ITS AFFILIATES AND SUPPLIERS FOR ALL CLAIMS RELATING TO THIS AGREEMENT SHALL BE LIMITED TO THE AMOUNT YOU PAID FOR THE SERVICES DURING THE TWELVE (12) MONTHS PRIOR TO SUCH CLAIM. SUBJECT TO APPLICABLE LAW, INTUIT, ITS AFFILIATES AND SUPPLIERS ARE NOT LIABLE FOR ANY OF THE FOLLOWING: (A) INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE OR CONSEQUENTIAL DAMAGES; (B) DAMAGES RELATING TO FAILURES OF TELECOMMUNICATIONS, THE INTERNET, ELECTRONIC COMMUNICATIONS, CORRUPTION, SECURITY, LOSS OR THEFT OF DATA, VIRUSES, SPYWARE, LOSS OF BUSINESS, REVENUE, PROFITS OR INVESTMENT, OR USE OF SOFTWARE OR HARDWARE THAT DOES NOT MEET INTUIT SYSTEMS REQUIREMENTS. THE ABOVE LIMITATIONS APPLY EVEN IF INTUIT AND ITS AFFILIATES AND SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS AGREEMENT SETS FORTH THE ENTIRE LIABILITY OF INTUIT, ITS AFFILIATES AND YOUR EXCLUSIVE REMEDY WITH RESPECT TO THE SERVICES AND ITS USE. NOTWITHSTANDING THE FOREGOING, NO PROVISION OF THIS AGREEMENT SHALL EXCLUDE OR LIMIT LIABILITY TO THE EXTENT THAT SUCH EXCLUSION OR LIMITATION IS PROHIBITED BY THE APPLICABLE LAWS OF ENGLAND AND WALES AND FOR THE AVOIDANCE OF DOUBT INTUIT DOES NOT EXCLUDE LIABILITY FOR: (I) DEATH OR PERSONAL INJURY CAUSED BY ITS NEGLIGENCE OR THE NEGLIGENCE OF ITS OFFICERS, EMPLOYEES, CONTRACTORS OR AGENTS; (II) FRAUD OR FRAUDULENT MISREPRESENTATION; (III) ANY OTHER LIABILITY WHICH CANNOT BE LAWFULLY EXCLUDED BY CONTRACTUAL AGREEMENT OF THE PARTIES.

You agree to indemnify and hold Intuit and its affiliates and Suppliers harmless from any and all claims, liability and expenses, including reasonable attorneys' fees and costs, arising out of your use of the Services or breach of this Agreement (collectively referred to as "Claims"). Intuit reserves the right, in its sole discretion and at its own expense, to assume the exclusive defense and control of any Claims. You agree to reasonably cooperate as requested by Intuit in the defense of any Claims. 

10. CHANGES. We reserve the right to change this Agreement at any time, and the changes will be effective when posted through the Services, on our website for the Services or when we notify you by other means. We may also change or discontinue the Services, in whole or in part. Your continued use of the Services indicates your agreement to the changes. 

11. TERMINATION. Intuit may immediately, in its sole discretion and without notice terminate this Agreement or suspend the Services if you fail to comply with this Agreement or if you no longer agree to receive electronic communications. Upon termination you must immediately stop using the Services and any outstanding payments will become due. Any termination of this Agreement shall not affect Intuit’s rights to any payments due to it. Intuit may terminate a free account at any time. Sections 2.2, 3 through 16 will survive and remain in effect even if the Agreement is terminated.

12. EXPORT AND TRADE RESTRICTIONS. You acknowledge that the Services, including the mobile application, and the underlying software may include U.S. technical data subject to restrictions under export control laws and regulations administered by the United States government. You agree that you and your personnel who use the Services are not prohibited from receiving the Services under the laws of the United States, England, Wales, Ireland, or other applicable jurisdiction. For example, you are not on the U.S. Treasury Department’s list of Specially Designated Nationals, the United Kingdom HM Treasury Financial Sanctions List, the European Union Consolidated Financial Sanctions List, the UN Sanctions Committees List relating to terrorism, or are subject to any other similar prohibition. You will not export or re-export any part of the Services, in violation of these laws and regulations, directly or indirectly.

13. GOVERNING LAW AND JURISDICTION. This Agreement will be governed by the laws of England and Wales, without regard to its conflicts of law principles. Notwithstanding the foregoing, you acknowledge that your breach (or an apprehension of breach) of any provisions of this Agreement, or any infringement (or apprehension of infringement) of Intuit’s or its Suppliers’ intellectual property rights may cause Intuit irreparable damage for which recovery of money damages would be inadequate. Accordingly, you agree that Intuit shall be entitled, in addition to any other remedies available to it, to seek (in any court of competent jurisdiction, notwithstanding the previous sentence) any relief (whether equitable or otherwise) to prevent or restrain any such breach or apprehended breach by you or otherwise to protect Intuit’s rights under this Agreement. The parties hereby submit to the exclusive jurisdiction of the courts of England and Wales and you agree that you will procure that any third party making a claim against Intuit arising out of this Agreement shall bring such claim exclusively in the English courts and subject to the limitations and exclusions of liabilities provided for in this Agreement.

Intuit does not represent that the Services and/or content within the Services is appropriate or available for use in all jurisdictions or countries.  Intuit prohibits accessing content from within countries or states where such content is illegal.  You are responsible for compliance with all applicable laws pertaining to your use and access to the Services in your jurisdiction.

14. COMPLIANCE WITH PRESERVATION ORDERS. You agree that we may preserve data where and to the extent required for compliance with any order or notice, whether issued to Intuit or to you, and whether issued by any court, tribunal, regulatory authority, arbitral tribunal or any body or authority exercising judicial, quasi-judicial, regulatory, or arbitral power or authority, requiring the preservation of any data, information documents or Content (a "Preservation Order"). To the extent that a Preservation Order has been issued to you, you acknowledge that you are solely responsible for your compliance with it.

15. LANGUAGE.  Any translation of this Agreement is done for local requirements and in the event of a dispute between the English and any non-English version, the English version of this Agreement shall govern. In the event of a dispute the parties confirm that they have requested that this Agreement and all related documents be drafted in English.

16. GENERAL. This Agreement, including the Additional Terms below, is the entire agreement between you and Intuit and replaces all prior understandings, communications and agreements, oral or written, regarding its subject matter. If any court of law, having jurisdiction, rules that any part of this Agreement is invalid, that section will be removed without affecting the remainder of the Agreement. The remaining terms will be valid and enforceable. The United Nations Convention on Contracts for the International Sale of Goods does not apply to this Agreement. You cannot assign or transfer ownership of this Agreement to anyone without written approval of Intuit. However, Intuit may assign or transfer it without your consent to (a) an affiliate, (b) a company through a sale of assets by Intuit or (c) a successor by merger. Any assignment in violation of this Section shall be void. If you want to request a transfer of this Agreement, contact Intuit via an email to: transfer_license@intuit.com.
 

May 2020 

______________________

B. ADDITIONAL TERMS AND CONDITIONS FOR QUICKBOOKS ONLINE AND QUICKBOOKS ONLINE ACCOUNTANT  

Your use of the following Services provided by Intuit are subject to the General Terms of Service above and these Additional Terms and Conditions.  These Additional Terms and Conditions will prevail over any conflict or inconsistency with the General Terms of Service.

1. SERVICES. Each of the following products and services are referred to in this Agreement as a “Service” and together as the “Services”:

2. USERS. 

3. SUBSCRIPTION.

4. ACCOUNT FEATURES. 

5. PERSONAL INFORMATION.

6. OTHER PRODUCTS AND SERVICES. 

7. COMMUNICATION SERVICES. We may provide you with the opportunity to communicate with other Users within the Services, or with other third parties through the Services (“Communication Services”). You may choose whether or not you would like to use the Communication Services. You agree that you have received permission to communicate with any third parties who are not Users through the Communication Services, and that such third parties have agreed to Intuit’s use and disclosure of data available in the Communication Services in accordance with this Agreement. Users who you communicate with may have access in the future to the data provided through the Communication Services, and you may not have the ability to restrict that access. Intuit’s systems may extract certain data (e.g., numbers, names, or attachments) from the Communication Services and provide it to you in other parts of the Services.

8. ACCOUNT INFORMATION SERVICES 

9. APPLE REQUIREMENTS. If you downloaded the Services from the Apple iTunes Store the following apply:

Last updated December 2020

ANNEX 1 – STANDARD CONTRACTUAL CLAUSES

Data transfer agreement

Definitions

For the purposes of the clauses:

1. “personal data,” “special categories of data/sensitive data,” “process/processing,”“controller,” “processor,” “data subject” and “supervisory authority/authority” shall have the same meaning as in Directive 95/46/EC of 24 October 1995 (whereby “the authority” shall mean the competent Data Protection Authority in the territory in which the data exporter is established);

2. “the data exporter” shall mean the controller who transfers the personal data;

3. “the data importer” shall mean the controller who agrees to receive from the data exporter personal data for further processing in accordance with the terms of these clauses and who is not subject to a third country’s system ensuring adequate protection;

4. “clauses” shall mean these contractual clauses, which are a free-standing document that does not incorporate commercial business terms established by the parties under separate commercial arrangements.

The details of the transfer (as well as the personal data covered) are specified in Annex B, which forms an integral part of the clauses.

1. Obligations of the data exporter
   The data exporter warrants and undertakes that:

   1. The personal data have been collected, processed and transferred in accordance with the laws applicable to the data exporter.

   2. It has used reasonable efforts to determine that the data importer is able to satisfy its legal obligations under these clauses.

   3. It will provide the data importer, when so requested, with copies of relevant data protection laws or references to them (where relevant, and not including legal advice) of the country in which the data exporter is established.

   4. It will respond to enquiries from data subjects and the authority concerning processing of the personal data by the data importer, unless the parties have agreed that the data importer will so respond, in which case the data exporter will still respond to the extent reasonably possible and with the information reasonably available to it if the data importer is unwilling or unable to respond. Responses will be made within a reasonable time.

   5. It will make available, upon request, a copy of the clauses to data subjects who are third-party beneficiaries under clause III, unless the clauses contain confidential information, in which case it may remove such information. Where information is removed, the data exporter shall inform data subjects in writing of the reason for removal and of their right to draw the removal to the attention of the authority. However, the data exporter shall abide by a decision of the authority regarding access to the full text of the clauses by data subjects, as long as data subjects have agreed to respect the confidentiality of the confidential information removed. The data exporter shall also provide a copy of the clauses to the authority where required.

2. Obligations of the data importer

   The data importer warrants and undertakes that:

   1. It will have in place appropriate technical and organizational measures to protect the personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, and which provide a level of security appropriate to the risk represented by the processing and the nature of the data to be protected.

   2. It will have in place procedures so that any third-party it authorizes to have access to the personal data, including processors, will respect and maintain the confidentiality and security of the personal data. Any person acting under the authority of the data importer, including a data processor, shall be obligated to process the personal data only on instructions from the data importer. This provision does not apply to persons authorized or required by law or regulation to have access to the personal data.

   3. It has no reason to believe, at the time of entering into these clauses, in the existence of any local laws that would have a substantial adverse effect on the guarantees provided for under these clauses, and it will inform the data exporter (which will pass such notification on to the authority where required) if it becomes aware of any such laws.

   4. It will process the personal data for purposes described in Annex B, and has the legal authority to give the warranties and fulfil the undertakings set out in these clauses.

   5. It will identify to the data exporter a contact point within its organization authorized to respond to enquiries concerning processing of the personal data, and will cooperate in good faith with the data exporter, the data subject and the authority concerning all such enquiries within a reasonable time. In case of legal dissolution of the data exporter, or if the parties have so agreed, the data importer will assume responsibility for compliance with the provisions of clause I(e).

   6. At the request of the data exporter, it will provide the data exporter with evidence of financial resources sufficient to fulfil its responsibilities under clause III (which may include insurance coverage).

   7. Upon reasonable request of the data exporter, it will submit its data processing facilities, data files and documentation needed for processing to reviewing, auditing and/or certifying by the data exporter (or any independent or impartial inspection agents or auditors, selected by the data exporter and not reasonably objected to by the data importer) to ascertain compliance with the warranties and undertakings in these clauses, with reasonable notice and during regular business hours. The request will be subject to any necessary consent or approval from a regulatory or supervisory authority within the country of the data importer, which consent or approval the data importer will attempt to obtain in a timely fashion.

   8. It will process the personal data, in accordance with the data processing principles set forth in Annex A.

      1. It will not disclose or transfer the personal data to a third-party data controller located outside the European Economic Area (EEA) unless it notifies the data exporter about the transfer and

      2. the third-party data controller processes the personal data in accordance with a Commission decision finding that a third country provides adequate protection, or

      3. the third-party data controller becomes a signatory to these clauses or another data transfer agreement approved by a competent authority in the EU, or

      4. data subjects have been given the opportunity to object, after having been informed of the purposes of the transfer, the categories of recipients and the fact that the countries to which data is exported may have different data protection standards, or

      5. with regard to onward transfers of sensitive data, data subjects have given their unambiguous consent to the onward transfer.

3. Liability and third-party rights

   1. Each party shall be liable to the other parties for damages it causes by any breach of these clauses. Liability as between the parties is limited to actual damage suffered. Punitive damages (i.e., damages intended to punish a party for its outrageous conduct) are specifically excluded. Each party shall be liable to data subjects for damages it causes by any breach of third-party rights under these clauses. This does not affect the liability of the data exporter under its data protection law.

   2. The parties agree that a data subject shall have the right to enforce as a third-party beneficiary this clause and clauses I(b), I(d), I(e), II(a), II(c), II(d), II(e), II(h), II(i), III(a), V, VI(d) and VII against the data importer or the data exporter, for their respective breach of their contractual obligations, with regard to his personal data, and accept jurisdiction for this purpose in the data exporter’s country of establishment. In cases involving allegations of breach by the data importer, the data subject must first request the data exporter to take appropriate action to enforce his rights against the data importer; if the data exporter does not take such action within a reasonable period (which under normal circumstances would be one month), the data subject may then enforce his rights against the data importer directly. A data subject is entitled to proceed directly against a data exporter that has failed to use reasonable efforts to determine that the data importer is able to satisfy its legal obligations under these clauses (the data exporter shall have the burden to prove that it took reasonable efforts).

4. Law applicable to the clauses

   These clauses shall be governed by the law of the country in which the data exporter is established, with the exception of the laws and regulations relating to processing of the personal data by the data importer under clause II(h), which shall apply only if so selected by the data importer under that clause.

5. Resolution of disputes with data subjects or the authority

   1. In the event of a dispute or claim brought by a data subject or the authority concerning the processing of the personal data against either or both of the parties, the parties will inform each other about any such disputes or claims, and will cooperate with a view to settling them amicably in a timely fashion.

   2. The parties agree to respond to any generally available non-binding mediation procedure initiated by a data subject or by the authority. If they do participate in the proceedings, the parties may elect to do so remotely (such as by telephone or other electronic means). The parties also agree to consider participating in any other arbitration, mediation or other dispute resolution proceedings developed for data protection disputes.

   3. Each party shall abide by a decision of a competent court of the data exporter’s country of establishment or of the authority which is final and against which no further appeal is possible.

6. Termination

   1. In the event that the data importer is in breach of its obligations under these clauses, then the data exporter may temporarily suspend the transfer of personal data to the data importer until the breach is repaired or the contract is terminated.

   2. In the event that:

      1. the transfer of personal data to the data importer has been temporarily suspended by the data exporter for longer than one month pursuant to paragraph (a);

      2. compliance by the data importer with these clauses would put it in breach of its legal or regulatory obligations in the country of import;

      3. the data importer is in substantial or persistent breach of any warranties or undertakings given by it under these clauses;

      4. a final decision against which no further appeal is possible of a competent court of the data exporter’s country of establishment or of the authority rules that there has been a breach of the clauses by the data importer or the data exporter; or

      5. a petition is presented for the administration or winding up of the data importer, whether in its personal or business capacity, which petition is not dismissed within the applicable period for such dismissal under applicable law; a winding up order is made; a receiver is appointed over any of its assets; a trustee in bankruptcy is appointed, if the data importer is an individual; a company voluntary arrangement is commenced by it; or any equivalent event in any jurisdiction occurs then the data exporter, without prejudice to any other rights which it may have against the data importer, shall be entitled to terminate these clauses, in which case the authority shall be informed where required. In cases covered by (i), (ii), or (iv) above the data importer may also terminate these clauses.

   3. Either party may terminate these clauses if (i) any Commission positive adequacy decision under Article 25(6) of Directive 95/46/EC (or any superseding text) is issued in relation to the country (or a sector thereof) to which the data is transferred and processed by the data importer, or (ii) Directive 95/46/EC (or any superseding text) becomes directly applicable in such country.

   4. The parties agree that the termination of these clauses at any time, in any circumstances and for whatever reason (except for termination under clause VI(c)) does not exempt them from the obligations and/or conditions under the clauses as regards the processing of the personal data transferred.

7. Variation of these clauses

   The parties may not modify these clauses except to update any information in Annex B, in which case they will inform the authority where required. This does not preclude the parties from adding additional commercial clauses where required.

8. Description of the Transfer

   The details of the transfer and of the personal data are specified in Annex B. The parties agree that Annex B may contain confidential business information which they will not disclose to third parties, except as required by law or in response to a competent regulatory or government agency, or as required under clause I(e). The parties may execute additional annexes to cover additional transfers, which will be submitted to the authority where required. Annex B may, in the alternative, be drafted to cover multiple transfers.

ANNEX A

DATA PROCESSING PRINCIPLES

1. Purpose limitation: Personal data may be processed and subsequently used or further communicated only for purposes described in Annex B or subsequently authorized by the data subject.

2. Data quality and proportionality: Personal data must be accurate and, where necessary, kept up-to-date. The personal data must be adequate, relevant and not excessive in relation to the purposes for which they are transferred and further processed.

3. Transparency: Data subjects must be provided with information necessary to ensure fair processing (such as information about the purposes of processing and about the transfer), unless such information has already been given by the data exporter.

4. Security and confidentiality: Technical and organizational security measures must be taken by the data controller that are appropriate to the risks, such as against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, presented by the processing. Any person acting under the authority of the data controller, including a processor, must not process the data except on instructions from the data controller.

5. Rights of access, rectification, deletion and objection: As provided in Article 12 of Directive 95/46/EC, data subjects must, whether directly or via a third-party, be provided with the personal data about them that an organization holds, except for requests which are manifestly abusive, based on unreasonable intervals or their number or repetitive or systematic nature, or for which access need not be granted under the law of the country of the data exporter. Provided that the authority has given its prior approval, access need also not be granted when doing so would be likely to seriously harm the interests of the data importer or other organizations dealing with the data importer and such interests are not overridden by the interests for fundamental rights and freedoms of the data subject. The sources of the personal data need not be identified when this is not possible by reasonable efforts, or where the rights of persons other than the individual would be violated. Data subjects must be able to have the personal information about them rectified, amended, or deleted where it is inaccurate or processed against these principles. If there are compelling grounds to doubt the legitimacy of the request, the organization may require further justifications before proceeding to rectification, amendment or deletion. Notification of any rectification, amendment or deletion to third parties to whom the data have been disclosed need not be made when this involves a disproportionate effort. A data subject must also be able to object to the processing of the personal data relating to him if there are compelling legitimate grounds relating to his particular situation. The burden of proof for any refusal rests on the data importer, and the data subject may always challenge a refusal before the authority.

6. Sensitive data: The data importer shall take such additional measures (e.g., relating to security) as are necessary to protect such sensitive data in accordance with its obligations under clause II.

7. Data used for marketing purposes: Where personal data are processed for the purposes of direct marketing, effective procedures should exist allowing the data “opt-out” from having his/her personal data used for such purposes.

8. Automated decisions: For purposes hereof, “automated decision” shall mean a decision by the data exporter or the data importer which produces legal effects concerning a data subject or significantly affects a data subject and which is based solely on automated processing of personal data intended to evaluate certain personal aspects relating to him, such as his performance at work, creditworthiness, reliability, conduct, etc. The data importer shall not make any automated decisions concerning data subjects, except when:

   1. 1. such decisions are made by the data importer in entering into or performing a contract with the data subject, and

      2. he data subject is given an opportunity to discuss the results of a relevant automated decision with a representative of the parties making such decision or otherwise to make representations to that parties.

   2. where otherwise provided by the law of the data exporter.

ANNEX B

DESCRIPTION OF THE TRANSFER

Data subjects

The personal data transferred concern the following categories of data subjects:

· Customers (for example, where such persons are themselves private individuals or sole traders or sole proprietors, regardless of the need for this schedule to apply as a matter of applicable laws to such personal data);

· employees of the Customer;

· customers of the Customer;

· employees or other representatives of customers of the Customer;

· vendors of the Customer; and

· other person in respect of whom personal data is transmitted by the Customer to Intuit in connection with this agreement,

in each case, if any and to the extent that the relevant data is "personal data" for purposes of the General Data Protection Regulation.

Purposes of the transfer(s)

The transfer is made for the following purposes:

To enable the Services requested by the Customer in accordance with the applicable Terms of Service and Global Privacy Statement. 

Categories of data

The personal data transferred concern the following categories of data:

Subject to the Services utilized by the Customer, the Customer shall determine the data transferred to Intuit. Please refer to the Intuit Privacy Statement for a list of categories of data that may be collected and processed. 

Recipients

The personal data transferred may be disclosed only to the following recipient or categories of recipients:

· the Financial Conduct Authority (FCA), Prudential Supervision and Resolution Authority (ACPR), European Banking Authority (EBA) and any other financial regulatory or supervisory authority

· Her Majesty's Revenue and Customs (HMRC), the French Ministry of Economy and Finance, Internal Revenue Service (IRS) and any other tax authority;

· the Information Commissioner’s Office (ICO), the Commission Nationale de l’Informatique et des Libertés (CNIL) and any other data protection authority;

· any other public or enforcement authority in order to comply with a subpoena, court order, or other applicable law, regulation or legal process;

· Intuit Inc. and its subsidiaries and affiliates;

· entities providing mutual or related services to the customer, upon the customer's request and with their consent; 

· third-party service providers used by Intuit to enable it to provide its services to the Customer under this Agreement; and

· as otherwise disclosed in the Intuit Privacy Statement.

Sensitive data (if appropriate)

The personal data transferred concern the following categories of sensitive data:

· Biometric information 

Data protection registration information of data exporter (where applicable)

n/a

Additional useful information (storage limits and other relevant information)

Intuit’s Global Privacy Statement and Intuit’s Data Stewardship Principles provide additional information relating to Intuit’s privacy and data protection practices. 

Contact Points for data protection enquiries

Data importer

Intuit Limited

Attention: Intuit Data Protection Administration

Cardinal Place, 80 Victoria Street, London, SW1E 5JL

United Kingdom, 

privacy@intuit.com

Data exporter

As provided by the Customer and maintained in your account information.