Legal, Privacy, Security, and Regulatory

Here you'll find the legal documents, security standards, and policies that are core to our service. You'll also find information about how we comply with regulatory guidance.

Datenschutz

Confirmation Privacy Statement

Effective on: August 30, 2019

This privacy policy applies to www.confirmation.com, and learn.confirmation.com ("Confirmation Website(s)") owned and operated by Confirmation. This privacy policy describes how Confirmation collects, shares, secures and uses the personal information you provide on the Confirmation Website(s). Außerdem beschreibt sie vorhandene Optionen, aus denen Sie bezüglich der Verwendung Ihrer persönlichen Daten wählen können, und wie Sie auf jene Daten zugreifen und sie aktualisieren können.

  1. What personal data and protected health information (PHI) Confirmation collects.
  2. What personal data third parties collect through the Website(s).
  3. Welche Organisation die Daten sammelt.
  4. How Confirmation uses the information.
  5. With whom Confirmation may share user information.
  6. What choices are available to users regarding collection, use, and distribution of the information.
  7. What types of security procedures are in place to protect the loss, misuse or alteration of the information under Confirmation’s control.
  8. Wie Nutzer jegliche fehlerhaften Daten korrigieren können.

INFORMATION COLLECTION AND USE

Registrierung

In order to use the Confirmation website(s), a user must first complete the registration form. During registration, a user is required to give professional and personal contact information (such as name and email address). We use this information to validate our users and to, therefore, grant access to our service. Wir bitten außerdem die Wirtschaftsprüfer unter unseren Kunden, Ihre CPA-Registrierungs-/Qualifikationsdaten zu übermitteln, um ihren/seinen Status überprüfen zu können, inklusive Beschäftigungsüberprüfung.

Bestellung

Wir bitten um die Angabe von Nutzerdaten auf unserem Bestellformular. Ein Nutzer muss Kontaktinformationen (wie Name, E-Mail-Adresse und Versandadresse) sowie finanzielle Informationen (wie Kreditkartennummer, Ablaufdatum) angeben. Diese Information wird zu Abrechungszwecken verwendet und um die Kundenbestellungen durchzuführen. Sollten bei der Bearbeitung einer Bestellung Probleme auftreten, werden diese Informationen zur Kontaktaufnahme mit dem Nutzer benutzt.

Third party information is collected on the site (such as client information entered for the purpose of conducting confirmations of accounts) The following are the types of information that are requested for a client: contact information, client's name, client contact name, client address, client contact's email address. Diese Daten werden benutzt, um die Nutzer dieses Dienstes zu überprüfen. Eine Willkommens-E-Mail an die Kunden wird erstellt, um sie darüber in Kenntnis zu setzen, dass sie von ihrem Wirtschaftsprüfer für diesen Service angemeldet wurden, und um sie über ihren Sicherheits-Zugangscode zu benachrichtigen. Diese E-Mails sind lediglich ein Service der Website und nicht für sonstige Zwecke zu verwenden.

INFORMATION USE

Confirmation, through its online service production website(s), collects three types of information:

  1. General Personal Data
  2. Finanzinformationen der Kunden
  3. Geschützte Gesundheitsinformationen

General Personal Data is used to validate the user, associate transactional confirmation activities including authorization, determine access permissions, and to facilitate communications from the site. Es steht dem Kunden frei, jene Daten jederzeit zu ändern.

Die Finanzinformationen von Kunden umfassen bestimmte Informationen zu Bank-/Firmen-Kontoständen, die in unserer Datenbank vorübergehend gespeichert sind, sowie Kreditkarten-Zahlungsinformationen, die vom Kunden bei der Zahlung für die Service-Erbringung angegeben wurden.

PHI may be stored on Confirmation’s HIPAA compliant system as a document attachment to a legal confirmation request when/if this information is deemed pertinent to the legal confirmation audit.

All Customer Financial information or legal confirmation attachments containing PHI residing within Confirmation's secure processing controls will be maintained and stored according to our stated security and privacy policies. Confirmation takes no responsibility for Customer Financial Information once this data is no longer within Confirmation's control (e.g., data downloaded by the user, or mailed confirmations). The Confirmation website(s) serve the function of an online provider of balance assurance services for its customers. This service is designed for use by accountants in their conducting of audit procedures as described by Generally Accepted Accounting Standards (GAAS).

We process General Personal Data only for so long as is necessary for the purpose(s) for which it was originally collected, after which it will be deleted or archived except to the extent that it is necessary for us to continue to comply with our legal obligations, resolve disputes, and enforce our agreements.

Profil

We store information specifically given to us by our users through the account set up process, and/or the account edit process. In addition, we store the IP address, browser type, Internet Service Provider (ISP) and access times. We do not store the information provided through the use of cookies. A profile has stored information that provides the company with information describing the end user of our service. All such collected information is used only for the conducting of the provision of our service.

Cookies und andere Tracking-Technologien

We, Confirmation, and our analytics or service providers use cookies or similar technologies in analyzing trends, administering the site, tracking users' movements around the site and to gather demographic information about our user base as a whole. Wir erhalten möglicherweise Berichte basierend auf der Verwendung dieser Technologien durch diese Unternehmen, sowohl auf Einzel- als auch auf aggregierter Basis.

We use cookies to remember users' settings (e.g. language preference), for authentication. Die Nutzer können die Verwendung von Cookies in ihrem Browser kontrollieren. Wenn Sie Cookies ablehnen, können Sie die Website weiterhin benutzen, aber Ihre Fähigkeit der Benutzung mancher Funktionen auf unserer Website kann eingeschränkt sein.

Online-Werbung

Wir verwenden Google AdWords, Google Analytics, Google Display Network, Adobe Analytics sowie HubSpot, um Nutzerverhalten nachzuvollziehen und unsere Werbung auf anderen Websites zu verwalten. Our third party partners may use technologies such as cookies to gather information about your activities on this site and other sites in order to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here. Please note this does not opt you out of being served ads. Ihnen werden weiterhin willkürlich ausgewählte Werbeanzeigen angezeigt.

Log-Dateien

Like most standard website(s) servers, we use log files. This includes Internet Protocol (IP) addresses, browser type, and Internet Service Provider (ISP), referring/exit pages, operating system and access time. Confirmation and its production Website(s), use log files only to track errors in the system. Log file information is not tied to a user's personal data.

INFORMATION COLLECTED FOR OUR CLIENTS

Confirmation collects information under the direction of its clients and has no direct relationship with the individuals whose personal data it processes. Wenn Sie ein Kunde einer unserer Kunden sind und Sie nicht weiterhin von einem unserer Kunden kontaktiert werden möchten, die unseren Dienst nutzen, kontaktieren Sie bitte den Kunden, mit dem Sie direkt zu tun haben. Wir dürfen persönliche Daten an Unternehmen übertragen, die uns bei der Bereitstellung unserer Dienste behilflich sind. Übertragungen an weitere Dritte werden über die Service-Vereinbarung mit unseren Kunden geregelt.

An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct his query to the Confirmation's Client (the data controller). Wenn Sie die Löschung von Daten wünschen, antworten wir innerhalb von 30 Tagen. Wir werden persönliche Daten im Auftrag unserer Kunden speichern, solange sie erforderlich sind, um unseren Kunden unsere Dienste bereitstellen zu können. Confirmation will retain this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

COMMUNICATIONS FROM THE SITE

Core Communications

These include email, mail, and call communications to facilitate the processing of audit confirmations, announce new enhancements to the service, aid in common user account administration functions, distribute information on upcoming site maintenance, and to provide notice of various updates to our terms of service or policies. These also include communications designed to educate and provide resources to both new and existing users on how to use the application, welcome emails, training sessions, and Responder Network updates.

Kundenbetreuung

We communicate with users on a regular basis to provide requested services, and in regard to issues relating to their account, we reply via email or phone in accordance with the user’s wishes.

Marketing Communications

We may from time to time send emails or mail to provide you with information regarding new product and service offerings, product and service notifications, and/or complementary resources.

Generally, you may not opt-out of Customer Support or Core Communications. Wenn Sie diese nicht empfangen möchten, haben Sie die Möglichkeit, Ihr Konto zu deaktivieren. If you do not wish to receive marketing communications you can simply not consent to receive them (if your location requires consent), use the "Manage Your Preferences" and "Unsubscribe" links provided within each marketing email message, or contact Customer Support at Customer.Support@confirmation.com.

SHARING

We will share your personal data or legal confirmation attachments containing PHI with third parties only in the ways that are described in this privacy policy. We do not sell your personal data or legal confirmation attachments containing PHI to third parties.

Haftungsausschluss

In certain situations, Confirmation may be required to disclose personal data or legal confirmation attachments containing PHI in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Though we make every effort to preserve user privacy, we may also need to disclose personal data or legal confirmation attachments containing PHI when required by law such as to comply with a subpoena, bankruptcy proceedings, or similar legal process when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Aggregate Information (non-personal data)

Wir teilen keinerlei gesammelte demografische Daten mit unseren Partnern und Werbungstreibenden. These are the instances in which we will share users' personal data or legal confirmation attachments containing PHI:

Zwischenhändler/Mittelspersonen

We use PCI-DSS compliant outside credit card processing companies to bill users for services. These companies do not retain, share, store, or use personal data for any secondary purposes.

Geschäftsumwandlung

In the event Confirmation goes through a business transition, such as a merger, being acquired by another company, or selling a portion of its assets, users' personal data or legal confirmation attachments containing PHI will, in most instances, be part of the assets transferred. Users will be notified via prominent notice on our website(s) for 30 days prior to a change of ownership or control of their personal data or legal confirmation attachments containing PHI. Falls als Ergebnis einer Geschäftsumwandlung identifizierende, persönliche Daten oder gesetzliche Bestätigungsanhänge, die geschützte Gesundheitsinformationen enthalten, in irgendeiner anderen Weise, abweichend von den zum Zeitpunkt der Sammlung angegebenen Bedingungen verwendet werden, haben sie gemäß unseres Abschnitts über die Benachrichtigung über Änderungen die Gelegenheit, sich vor der neuen Verwendung ihrer Informationen dagegen zu entscheiden.

Umfragen und Gewinnspiele

From time to time, our site requests information from users via surveys or contests. Participation in these surveys or contests is completely voluntary and the user, therefore, has a choice whether or not to disclose this information. Die erforderlichen Informationen umfassen üblicherweise Kontaktinformationen (wie Name, E-Mail-Adresse und Versandadresse) sowie demografische Informationen (wie die Postleitzahl). Kontaktinformationen werden verwendet, um die Gewinner zu benachrichtigen und um die Gewinne zukommen zu lassen. Informationen aus Umfragen werden zu Zwecken der Überwachung oder zur Verbesserung der Verwendung und der Zufriedenheit bei der Nutzung dieser Website eingesetzt. Die identifizierenden, persönlichen Daten von Nutzern werden nicht an Dritte weitergegeben, außer wir benachrichtigen sie vorab darüber und geben ihnen vorab die Gelegenheit sich dagegen zu entscheiden. Though we may use an intermediary to conduct these surveys or contests, they may not use users' personal data for any secondary purposes.

SICHERHEIT

This Website(s) takes every precaution to protect our users' information. When users submit sensitive information via the Website(s), their information is protected both online and offline.

The Confirmation Website(s)s are entirely encrypted and protected using 256-bit encryption with a public RSA 2048-bit key for SSL Extended Validation Certificates with Server Gated Cryptography by DigiCert for internet communications. This means that when our registration/order form asks users to enter sensitive information (such as credit card number), that information is encrypted. While we use SSL encryption to protect sensitive information online, we also use appropriate technical and organizational measures to protect user-information offline. Der Zugriff auf sämtliche Nutzerdaten, nicht nur oben angesprochene sensible Informationen, ist in unseren Büros beschränkt. Only employees who need the information to perform a specific job (for example, our billing clerk or a Customer Support representative) are granted access to personal data. The servers that store personal data are in a secure environment, in a hardened hosting facility. Allerdings ist keine Übertragungsmethode über das Internet und keine Methode elektronischer Speicherung 100% sicher. Aus diesem Grund können wir ihre absolute Sicherheit nicht garantieren.

If users have any questions about the security at our Website(s), users can send an email to: Customer.Support@confirmation.com (www.confirmation.com) or learn@confirmation.com (https://learn.confirmation.com/learn).

SUPPLEMENTATION OF INFORMATION

In order for the website(s) to properly fulfill its obligation to users, it is necessary for us to supplement the information we receive with information from 3rd party sources. We use outside sources to verify a user's accounting credentials to validate that user's access to our system. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us.

Personal Data Management and Inquiries

You have the following rights in relation to personal data relating to you that we process:

  1. Upon request, Confirmation will provide you with information about whether we hold any of your personal information. You may also request a copy or access to the personal data concerned.
  2. If your personal data changes (such as zip code, phone, email or postal address) you can update your data by editing your user profile on the Confirmation.com Website(s) or by contacting Customer Support.
  3. Where we are processing personal data relating to you on the basis of your prior consent to that processing, you may withdraw your consent at any time, after which we shall stop the processing concerned.
  4. If you have a complaint about the processing of your personal data by Confirmation, please contact Customer Support. If we are unable to rectify the issue to your satisfaction, you are always able to lodge a formal complaint with the applicable Supervisory Authority.

Personal data inquiries can be submitted by contacting the Confirmation Data Protection Officer at Customer.Support@confirmation.com (www.confirmation.com) or learn@confirmation.com (learn.confirmation.com/learn). We will respond to your request within 30 days.

Social-Media-Widgets

Our website(s) includes social media features, such as the Facebook "Like" button, and Widgets, such as the "Share This" button or interactive mini-programs that run on our website(s). These features may collect your Internet Protocol (IP) address, which page you are visiting on our website(s), and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website(s). Your interactions with these features are governed by the privacy statement of the company providing it.

Referenzen

Zusätzlich zu anderen Empfehlungen veröffentlichen wir auch persönliche Referenzen zufriedener Kunden auf unserer Website. With your consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at Customer.Support@confirmation.com (www.confirmation.com) or learn@confirmation.com (https://learn.confirmation.com/learn).

Links zu Websites Dritter

Our website includes links to other website(s) whose privacy practices may differ from those of Confirmation. If you submit personal data to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy statement of any website(s) you visit.

Änderungsanzeigen

Wenn wir uns für eine Änderung unserer Datenschutzerklärung entscheiden, werden wir diese Änderungen in dieser Datenschutzerklärung, auf der Startseite und anderen Orten, die wir als angemessen erachten, veröffentlichen, sodass unsere Nutzer zu jeder Zeit darüber Bescheid wissen, welche Daten wir sammeln, wie wir sie verwenden und unter welchen Umständen, wenn überhaupt, wir sie veröffentlichen. Wir werden die Daten gemäß der Datenschutzerklärung verwenden, gemäß welcher wir die Daten gesammelt haben.

If, however, we are going to use a user's personal data in a manner different from that stated at the time of collection we will notify users via email prior to the change becoming effective. Nutzer haben dann die Gelegenheit, sich für oder gegen die anderweitige Nutzung ihrer Daten zu entscheiden. However, if users have opted out of all communication with the site through deactivating their account, then they will not be contacted, nor will their personal data be used in this new manner. In addition, if we make any material changes in our privacy practices that do not affect user information already stored in our database, we will post a prominent notice on our website(s) prior to the changes taking effect. In some cases where we post a notice, we will also email users, who have opted to receive communications from us, notifying them of the changes in our privacy practices.

REGIONAL PRIVACY REQUIREMENTS

EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield

The data that we process in relation to you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA") and Switzerland, that may not be subject to equivalent data protection law. It may also be processed by staff situated outside these areas who work for us or for one of our suppliers. This includes staff engaged in activities such as the fulfillment of orders, the processing of payment details, and the provision of support services.

Where personal data is transferred in relation to providing our services, we will take all steps reasonably necessary to ensure that it is protected by appropriate safeguards. Confirmation and its subsidiary companies (Confirmation International LLC, and Confirmation Technology Services LLC) participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S Privacy Shield Framework. Confirmation is committed to subjecting all personal data received from the European Union (EU) member countries and Switzerland, respectively, in reliance on the Privacy Shield Framework, to the Framework's applicable Principles. To learn more about the Privacy Shield Frameworks, and to view our certification, visit the U.S. Department of Commerce's Privacy Shield List (https://www.privacyshield.gov/list).

Confirmation is responsible for the processing of personal data it receives, under the Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Confirmation complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions. With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, Confirmation is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Confirmation may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. Under certain conditions, more fully described on the Privacy Shield Website(s) (https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint), you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

EU General Data Protection Regulation (GDPR)

In providing our services, we act as a data processor on behalf of the users of our services in relation to personal data that is processed using the service, in which case we will process the relevant personal data only for the purpose(s) of providing the service and otherwise in accordance with our agreement with the users and the regulations that apply to us directly as a data processor.

Legal Basis for Personal Data Processing

Collecting, processing, and using personal data by Confirmation occurs under the following legal bases:

  • Legitimate Interest – User validation, transactional confirmation activities including authorization, user access permissions, user account management, core site communications, and customer support.
  • Consent – Marketing communications.

Data Protection Officer

Compliance with Confirmation's privacy policy and applicable data protection laws is verified regularly with internal impact assessments and other controls. The coordination of these activities is the responsibility of the Data Protection Officer, who can be contacted in accordance with the contact information below.

Dan Zangwill
Data Protection Officer
DataInquiries@confirmation.com

Automated Decisions

Personal data processed by Confirmation is never used to make automated decisions that would have negative consequences for its data subjects.

Supervisory Authority

The United Kingdom’s Information Commissioner’s Office is the lead supervisory authority for Confirmation in the EU and can provide further information about your rights and our obligations in relation to personal data, as well as to address any complaints that you have about our processing of your personal data.

Kontaktinformationen

Bei jeglichen Fragen oder Vorschlägen hinsichtlich unserer Datenschutzerklärung durch Nutzer, kontaktieren Sie uns bitte unter:

TRUSTe     

For Requesters of Confirmations

AGB

IM FOLGENDEN WERDEN DIE BEDINGUNGEN AUFGEFÜHRT, ZU DENEN IHNEN CAPITAL CONFIRMATION INC. ZUGANG ZU UNSEREN DIENSTLEISTUNGEN GEWÄHRT.

Welcome to the User Agreement for Capital Confirmation Inc. This Agreement describes the terms and conditions applicable to your use of our services available under the domains and sub-domains of www.confirmation.com, and learn.confirmation.com ("Confirmation Website(s)") owned and operated by Capital Confirmation, and the general principles for the websites of our subsidiaries. Wenn Sie mit den Allgemeinen Geschäftsbedingungen dieser Vereinbarung nicht einverstanden sind, sehen Sie bitte von der Nutzung unserer Dienstleistungen oder dem Zugriff darauf ab. You evidence your acceptance of the terms and conditions of this Agreement by checking the box for the "Yes, I have read and accept the User Agreement." statement and clicking the "Create New Account" button on Capital Confirmation's website and through your use of any of the Confirmation.com services (aka "Confirm" service).

If you have any questions, please email us at customer.support@confirmation.com.

Sie müssen die in dieser Nutzervereinbarung und der Datenschutzerklärung enthaltenen Allgemeinen Geschäftsbedingungen lesen, damit einverstanden sein und diese akzeptieren. Dazu gehören sowohl die Allgemeinen Geschäftsbedingungen, die im Folgenden ausdrücklich aufgeführt sind, als auch diejenigen, auf welche verwiesen wird. Erst dann werden Sie Mitglied bei Capital Confirmation. Wir empfehlen Ihnen dringend, beim Lesen dieser Nutzervereinbarung auch die Informationen aufzurufen und zu lesen, die auf den Seiten und Websites enthalten sind, auf welche in diesem Dokument verwiesen wird, da diese eventuell weitere Geschäftsbedingungen enthalten, die für Sie als Nutzer von Capital Confirmation gelten. Please note: underlined words and phrases are links to these pages and websites. Durch das Akzeptieren dieser Nutzervereinbarung erkennen Sie gleichzeitig an, dass Ihre Nutzung anderer Websites von Capital Confirmation den auf diesen Websites veröffentlichten Allgemeinen Geschäftsbedingungen unterliegt.

Wir können diese Vereinbarung jederzeit durch das Veröffentlichen der geänderten Bedingungen auf unserer Website ändern. Except as stated below, all amended terms shall automatically be effective immediately upon posting on our site. Sie werden von den Änderungen dieser Vereinbarung weder schriftlich noch per E-Mail informiert. Veränderungen dieser Vereinbarung müssen schriftlich erfolgen und von Ihnen und Capital Confirmation Inc. unterzeichnet werden. Diese Vereinbarung tritt am 1. März 2003 in Kraft.

1. Membership Eligibility.
Unsere Dienstleistungen stehen nur Personen zur Verfügung, die unter dem geltenden Recht rechtlich bindende Verträge eingehen können. Ohne Einschränkung des Vorhergesagten können unsere Dienstleistungen weder von Minderjährigen noch von zeitweise oder unbegrenzt gesperrten Mitgliedern von Capital Confirmation in Anspruch genommen werden. Wenn Sie noch minderjährig sind, dürfen Sie diese Dienstleistung nicht nutzen. Falls Sie nicht berechtigt sind, sehen Sie bitte von der Nutzung unserer Dienstleistungen ab. Darüber hinaus dürfen Ihr Konto bei Capital Confirmation (einschließlich Feedback) und die Nutzer-ID nicht an Dritte übertragen oder verkauft werden. Falls Sie sich als Unternehmen registrieren, erklären Sie, dass Sie befugt sind, das Unternehmen an diese Vereinbarung zu binden. Falls Sie sich als Einzelperson registrieren, erklären Sie, dass Sie die Einzelperson sind, die Sie behaupten zu sein.

2. Fees and Service.
Capital Confirmation provides a venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users, (the "Service"). The Service also includes the provision of ancillary services deemed reasonably necessary by Capital Confirmation to run a venue for digital transaction management, including but not limited to customer support, billing, and account management.

Der Beitritt zu unseren Dienstleistungen ist kostenlos. Für die Anforderung und den Empfang von Bestätigungen fällt eine Gebühr an. Our Fees and Credit Policy is available here and is incorporated by reference. Wir können unsere Richtlinien zu Gebühren und Gutschriften sowie die Gebühren für unsere Dienstleistungen gelegentlich ändern. Unsere Änderungen der Richtlinien treten in Kraft, nachdem wir Sie durch die Veröffentlichung der Änderungen in dieser Vereinbarung mindestens vierzehn (14) Tage im Voraus benachrichtigt haben. Eventuell beschließen wir jedoch, unsere Gebührenrichtlinien und die Gebühren für unsere Dienstleistungen aufgrund von Werbeaktionen für einen bestimmten Zeitraum zu ändern, und solche Änderungen treten in Kraft, sobald wir die zeitlich begrenzte Werbeaktion auf der Website www.confirmation.com veröffentlichen. Wenn Sie eine Bestätigung erwerben, haben Sie die Möglichkeit zur Überprüfung und Annahme der Gebühren, die Ihnen für die Nutzung unserer Dienstleistungen berechnet werden. Wir dürfen nach eigenem Ermessen einige oder alle unserer Dienstleistungen jederzeit ändern. Falls wir eine neue Dienstleistung einführen, gelten die Gebühren für diese Dienstleistung ab deren Einführung. Falls nicht anderweitig angegeben, werden sämtliche Gebühren in US-Dollar aufgeführt. Sie tragen die Verantwortung für die Zahlung sämtlicher Gebühren für die Nutzung unserer Dienstleistungen und unserer Website sowie aller anfallenden Steuern.

3. Capital Confirmation is a Venue.
3,1 Capital Confirmation ist weder eine Bank oder Anwaltskanzlei noch ein Bevollmächtigter einer Bank oder Anwaltskanzlei. Stattdessen fungiert unsere Website als Ausführungsort, an dem die Nutzer jederzeit und von jedem Ort aus Bestätigungen anfragen, empfangen und kaufen können. We are not involved in the actual transaction between users of and providers of the confirmation information. Infolgedessen haben wir keine Kontrolle über die Qualität, Genauigkeit, Aktualität oder Rechtmäßigkeit der Anfragen und der Antworten oder der Wahrheit oder Genauigkeit der Anfragen und Antworten. We also cannot ensure that a provider will actually complete a transaction.

3,2 Verifizierung der Identität. Wir verwenden verschiedene Techniken zur Überprüfung der Identität unserer Nutzer, wenn sich diese auf unserer Website registrieren. Da allerdings die Nutzer-Verifizierung im Internet schwierig ist, kann und wird Capital Confirmation nicht die behauptete Identität jedes einzelnen Nutzers bestätigen. Daher haben wir ein vom Nutzer einzuleitendes Kommunikationssystem eingerichtet, um Ihnen bei der Evaluierung der Frage, mit wem Sie zusammenarbeiten, zu helfen. Wir ersuchen Sie, über die auf unserer Seite verfügbaren Tools direkt mit den Einzelpersonen zu kommunizieren.

3,3 Freigabe. Da wir eine Transaktionsplattform sind, entbinden Sie Capital Confirmation (und unsere Führungskräfte, Vorstandsmitglieder, Agenten, Tochtergesellschaften, Joint Ventures und Mitarbeiter) im Fall eines Konflikts mit einem oder mehreren Nutzern von Ansprüchen jeder Art (einschließlich Ansprüchen wegen Folgeschäden), bekannt und unbekannt, vermutet und nicht vermutet, offen gelegt und nicht offen gelegt, die aus derartigen Konflikten entstehen könnten oder in irgendeiner Art mit diesen verbunden sind. If you are a California resident, you waive California Civil Code §1542, which says: “A general release does not extend to claims which the creditor does not know or suspect to exist in his favor at the time of executing the release, which if known by him must have materially affected his settlement with the debtor.”

3.4. Kontrolle der Informationen. Wir kontrollieren die Informationen, die von anderen Nutzern zur Verfügung gestellt und über unser System verfügbar gemacht werden, nicht. Es kann sein, dass Informationen anderer Nutzer unrichtig sind. Handeln Sie bitte vorsichtig und umsichtig, wenn Sie unsere Seite nutzen.

3.5. Kundenbetreuung. Monday through Friday between the hours of 8:00 A.M. and 5:00 P.M. Central Standard Time, customer support shall be available free of charge by telephone or by email at one or more phone numbers or email addresses to be specified on our website located at www.confirmation.com.

4. Authorizing, Requesting and Purchasing.
Durch eine Autorisierung, eine Anforderung oder einen Kauf einer Bestätigung erklären Sie sich mit den Bedingungen dieser Vereinbarung einverstanden. Anforderungen sind nicht widerrufbar. Mit der Entscheidung für eine Autorisierung, eine Anforderung oder einen Kauf einer Bestätigung versichern Sie, dass Sie gesetzlich berechtigt sind, solche Bestätigungen zu autorisieren, anzufordern oder zu kaufen.

5. Address Lookup.
Capital Confirmation erlangt Informationen zur Adresssuche aus öffentlichen und privaten Datenquellen. Die in diesem System verwendeten öffentlichen Verzeichnisse, privaten Aufzeichnungen und kommerziell verfügbaren Datenquellen sind fehlerhaft und unvollständig. Daten werden gelegentlich falsch eingegeben und fehlerhaft verarbeitet. Sie sollten nicht darauf vertrauen, dass dieses System absolut korrekt ist. Bevor Sie sich auf jegliche Daten verlassen, die dieses System liefert, sollten sie anderweitig überprüft werden.

6. Out-of-Network Confirmations.
The Out-of-Network confirmation service requires the requestor to enter the contact information for the responder and the responder’s company. Das Sie als Anforderer bestimmen, an wen und welches Unternehmen sich eine Bestätigung außerhalb des Netzwerks richtet, und daher auch festlegen, wer in diesem Unternehmen der Responder ist, akzeptieren Sie die alleinige Verantwortung für die Verifikation und Überprüfung der Identität des einzelnen Responders und des Unternehmens, das er vertritt. Sie nehmen zur Kenntnis, dass Capital Confirmation die Identität des Responders oder des Unternehmens, das er zu vertreten vorgibt, nicht überprüft. You release and hold harmless Capital Confirmation from any and all claims related to the responder’s identity and/or the identity of the company the responder claims to represent if you request confirmations through www.confirmation.com using the Out-of-Network confirmation service.

7. Fraud.
Ohne Einschränkung anderer zur Verfügung stehender Rechtsmittel kann Capital Confirmation Ihr Konto sperren oder löschen, wenn wir den Verdacht haben, dass Sie (aufgrund einer Verurteilung, eines Vergleichs, einer Ermittlung wegen Versicherungsbetrugs oder aus anderen Gründen) an betrügerischen Aktivitäten in Zusammenhang mit unserer Seite beteiligt waren.

8. Your Information.
8,1 Definition. “Your Information” is defined as any information you provide to us or other users in the registration or confirmation process, in any message area or through any email feature. Sie sind alleine verantwortlich für Ihre Informationen und wir agieren als passive Plattform für die Online-Distribution und Veröffentlichung Ihrer Informationen.

8,2 Unzulässige Aktivitäten. Your Information (or any items listed) and your activities on the site shall not: (a) be false, inaccurate or misleading; (b) be fraudulent; (c) infringe any third party’s copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy; (d) violate any law, statute, ordinance or regulation (including, but not limited to, those governing consumer protection or antidiscrimination); (e) be defamatory, trade libelous, unlawfully threatening or unlawfully harassing; (f) be obscene or contain child pornography; (g) contain any viruses, Trojan horses, worms, time bombs, cancelbots, easter eggs or other computer programming routines that may damage, detrimentally interfere with, surreptitiously intercept or expropriate any system, data or personal information; and (h) create liability for us or cause us to lose (in whole or in part) the services of our ISPs or other suppliers. Zudem sind Sie nicht dazu berechtigt, eine Bestätigung auf der Seite zu autorisieren oder anzufordern (oder jegliche Transaktion zu vollziehen, die durch die Nutzung unseres Dienstes ausgelöst wurde), die durch die Autorisierung, die Zahlung der Nutzungsgebühr oder der finalen Wertgebühr an uns eine Verletzung anwendbaren Rechts, einer Verordnung oder eines Regelwerks unsererseits zur Folge hätte.

8,3 Lizenz. Ausschließlich, um es Capital Confirmation zu ermöglichen, die Informationen zu nutzen, die Sie uns zur Verfügung stellen, und um keinerlei Rechte zu verletzen, die Sie an diesen Informationen haben, erklären Sie, uns ein nicht-exklusives, weltweites, unbefristetes, unwiderrufliches, gebührenfreies, unterlizenzierbares (über mehrere Stufen) Recht einzuräumen, die Urheberrechte, Werbungsrechte und Datenbank-Rechte (aber keine weiteren Rechte) in allen Medien, die derzeit bekannt oder noch nicht bekannt sind, auszuüben, die Sie an Ihren Informationen innehaben. Capital Confirmation wird Ihre Informationen nur in Übereinstimmung mit unserer Datenschutzerklärung verwenden.

9. Ownership of Intellectual Property.
Capital Confirmation besitzt und behält alle Rechte, Titel und Interessen an sämtlichem geistigen Eigentum in Verbindung mit der Dienstleistung oder mit der Beziehung, die in dieser Vereinbarung beschrieben ist. „Geistiges Eigentum“ bezeichnet alle Ideen, Entdeckungen, Erfindungen, Entwicklungen, Designs, Verbesserungen, Handelsmarken, Dienstleistungsmarken, Handelsgeheimnisse, geschützte Informationen, Programme, Quellcodes, Objektcodes, Patentanmeldungen, Patente, Copyrights (für die Dauer derselben, einschließlich Verlängerungen und Rechterückfall), urheberrechtlich schützbare Werke und die damit verbundenen Geschäftswerte, einschließlich Erweiterungen, Verbesserungen und abgeleiteter Werke, die aktuell bestehen oder hieraus entstehen. You hereby assign and transfer to Capital Confirmation any and all rights in any such Intellectual Property, either presently existing or hereinafter arising, and agree to take such actions (at Capital Confirmation's expense) as Capital Confirmation may reasonably request to secure such rights for Capital Confirmation. Solange Sie registrierter Nutzer unserer Dienstleistungen sind sowie für einen Zeitraum von zwei (2) Jahren nach dem Datum Ihres letzten Logins erklären Sie sich einverstanden, keine Dienstleistungen anzubieten oder andere beim Angebot von Dienstleistungen zu unterstützen, die in Wettbewerb mit den von Capital Confirmation angebotenen Dienstleistungen stehen können. Unsolicited ideas or product feedback will automatically become our property, without any compensation to you and we may use or distribute such submissions and their contents for any purpose and in any way without any obligations of confidentiality or otherwise.

9,1 Lizenz. You agree to grant us a non-exclusive, worldwide, perpetual, irrevocable, royalty-free, sublicensable (through multiple tiers) right to use your company name, registered trademark, word mark, service mark, and logo in correspondence with Clients and Users related to the Service.

10. Access and Interference.
Sie erklären sich einverstanden, keine Robots, Spiders oder andere automatische Geräte oder manuelle Prozesse zu verwenden, um unsere Webseiten oder deren Inhalte ohne vorherige ausdrückliche schriftliche Genehmigung zu überwachen oder zu vervielfältigen. You agree that you will not reverse engineer, disassemble, decompile, decode, adapt, develop, or modify the website or Service, or otherwise attempt to derive or gain access to the source code of the website or Service, in whole or in part. Sie erklären sich einverstanden, keine Geräte, Software oder Routinen zu verwenden, um unsere Sicherheitsfunktionen zu umgehen oder die korrekte Funktion der Capital Confirmation Website oder anderer Aktivitäten auf unserer Website zu beeinträchtigen oder dies zu versuchen. Sie erklären sich einverstanden, keine Aktionen zu unternehmen, die unsere Netzwerkinfrastruktur unverhältnismäßig stark belasten. Viele Informationen auf unserer Seite werden in Echtzeit aktualisiert und stehen im Eigentum von Capital Confirmation oder werden uns von unseren Nutzern oder Dritten lizenziert. Sie erklären sich einverstanden, Inhalte unserer Webseite (mit Ausnahme Ihrer Informationen) ohne ausdrückliche vorherige, schriftliche Genehmigung von Capital Confirmation oder des entsprechenden Dritten nicht zu kopieren, zu reproduzieren, zu verändern, zu modifizieren, abgeleitete Werke zu erstellen oder öffentlich darzustellen. You must ensure that all information you supply to us through our website or Service, or in relation to our website or Service, is true, accurate, complete and not misleading. You shall have sole responsibility for the legality, reliability, integrity, accuracy, and quality of this information. You shall not access all or any part of our website or Service to build a product or service which competes with the Service. You shall not attempt to obtain, or assist third parties in obtaining, access to our website or Service, other than as provided under this Agreement. You shall not make, nor permit any party to make, any use of our website or Service other than to avail of the Service. You shall not make alterations to, or permit our website or Service or any part of it to be combined with, or become incorporated into, any other programs. You shall not provide or otherwise make available our website or the Service in whole or in part (including object and source code), in any form, to any person without our prior written consent. You shall not infringe on our licensors' intellectual property rights or those of any third party in relation to your use of our website or Service. We may make available to you certain Application Programming Interfaces (an "API" or "APIs") to achieve additional functionality for users, and provide capabilities or integrations that leverage one or more of our products or services available at www.confirmation.com or provided by our affiliates, which you may use where applicable, subject to our then current fees (if any) for such APIs. Unless previously authorized by us, or our affiliates, you must not automatically connect (whether through APIs or otherwise) any Service to other data, software, services or networks.

11. Breach.
Without limiting other remedies, we may immediately remove you, warn our community of your actions, issue a warning, temporarily suspend, indefinitely suspend or terminate your membership and refuse to provide our services to you if: (a) you breach this Agreement or the documents it incorporates by reference; (b) we are unable to verify or authenticate any information you provide to us; or (c) we believe that your actions may cause financial loss or legal liability for you, our users or us.

12. Electronic Communications; Identifiers and Passwords; Binding Effect.
Sie erhalten und übertragen Informationen an/von uns über das Internet mittels SSL-Technologie und 2048-Bit-Verschlüsselung. You must use Internet browsers that will support the use of 2048-bit encryption. In order to initiate a session where information is transmitted, you will select and use an identification code (such as a "log-in ID") and a password. Sie verpflichten sich, diesen Identifikationscode und das Passwort zu schützen und zu sichern und deren Nutzung in Verbindung mit dem Service nur autorisierten Mitarbeitern zu gestatten. Wir und alle anderen Personen, die Informationen von Ihnen erhalten haben, die über den Identifikationscode und das Passwort übertragen wurden, sind berechtigt, in allen Instanzen darauf zu vertrauen, dass die derart übertragenen Informationen von Ihnen übertragen wurden, dass diese Informationen in jeder Hinsicht richtig, genau und vollständig sind, mit demselben Effekt und Zweck, als ob diese Informationen schriftlich und mit Ihrer handschriftlichen Unterschrift unterzeichnet übertragen wurden. Wenn Sie glauben, dass Ihr Identifikationscode verloren, gestohlen oder durch Unbefugte abgerufen wurde, benachrichtigen Sie uns bitte umgehend unter 1-866-325-72011. Kommunikationen, die nach unserer Antwort auf Ihre Mitteilung mit dem Identifikationscode und dem Passwort übermittelt wurden, werden nicht gültig oder wirksam.

13. Privacy.
We do not sell or rent your personal information to third parties and only use your information as described in the Privacy Statement available at https://www.confirmation.com/legal-security-privacy/index.html. We take the protection of our users' privacy seriously. We store and process your information on computers located in Ireland and the United States that are protected with security measures.

Customer Financial information residing within Confirmation.com's processing controls will be maintained and stored according to our security and privacy policies. Confirmation.com takes no responsibility for Customer Financial information once this data is no longer within Confirmation.com's control (e.g., data downloaded by a user or mailed confirmations).

If you object to your information being collected, used, transferred, or otherwise processed in this way, please do not use our services.

13,1 Data Protection Legislation. When using our Services or otherwise providing Personally Identifiable Information to us, you agree to comply with all applicable laws governing or relating to the processing of that Personally Identifiable Information (“Data Protection Laws”). “Personally Identifiable Information” shall mean any information relating to an identified or identifiable natural person whose information you provide to us and that we process as part of the Service or in connection with this Agreement. You confirm that any Personally Identifiable Information that has been provided by you has been collected and disclosed in accordance with Data Protection Laws. When using the Service, you shall not input, upload, maintain or disclose any irrelevant or unnecessary information about individuals.

13.2. Personal Data transferred outside of your home country. Without limiting the foregoing and for clarity, you agree that we may transfer your personal information outside of your home country to another country where the laws may not provide an equivalent level of protection and you confirm that we may so transfer any Personally Identifiable Information that has been provided by you.

Where the provision of Service by us to you involves any transfer of Personally Identifiable Information that has been provided by you outside of the European Economic Area or Switzerland (by way of direct or indirect transfer), the parties agree that the transfers will be done in accordance with Schedule 1 attached hereto. If any other Data Protection Laws require you and us to implement appropriate safeguards to legitimize the transfer of Personally Identifiable Information to a third country, you will let us know and we will negotiate in good faith to implement the required safeguards.

14. Client Authentication.
You certify that any and all subject(s) set up as your client(s) on the Confirmation.com service are authorized representatives of your client.

15. Authorization.
You certify that any confirmations requested are with the subject(s) prior written permission. You agree to keep the authorization on file for a minimum of 5 years. Üblicherweise erfolgt diese schriftliche Genehmigung in Form eines schriftlichen Antrags durch den Kunden. You warrant that the release of the subject information will not result in a breach of any applicable Data Protection Laws.

16. Audit Rights.
Capital Confirmation may, from time to time, conduct various audits of your practices and procedures to determine your compliance with this Agreement. You will reasonably cooperate in all those audits. Capital Confirmation may conduct on-site and/or off-site audits of your facilities as Capital Confirmation determines during normal business hours, and upon reasonable notice.

17. No Warranty.
WE, OUR SUBSIDIARIES, EMPLOYEES AND OUR SUPPLIERS PROVIDE OUR WEB SITE AND SERVICES, INCLUDING BUT NOT LIMITED TO ANY APIS, ON AN "AS IS" BASIS WITHOUT ANY WARRANTIES OF ANY KIND. WE, TO THE FULLEST EXTENT PERMITTED BY LAW, DISCLAIMS ALL WARRANTIES, INCLUDING THE WARRANTY OF MERCHANTABILITY, NON-INFRINGEMENT OF THIRD-PARTIES' RIGHTS, AND THE WARRANTY OF FITNESS FOR A PARTICULAR PURPOSE. WE MAKE NO WARRANTIES ABOUT THE ACCURACY, RELIABILITY, COMPLETENESS, OR TIMELINESS OF THE SERVICES OR ANY CONTENT THEREIN. WE MAKE NO WARRANTIES THAT THE WEBSITE OR SERVICE WILL REMAIN AVAILABLE. WE RESERVE THE RIGHT TO DISCONTINUE OR ALTER ANY OR ALL OF THE WEBSITE OR SERVICE, AND TO STOP PUBLISHING OUR WEBSITE OR SERVICE AT ANY TIME AND IN OUR SOLE DISCRETION WITHOUT NOTICE OR EXPLANATION, AND YOU WILL NOT BE ENTITLED TO ANY COMPENSATION OR OTHER PAYMENT UPON THE DISCONTINUANCE OR ALTERATION OF OUR WEBSITE OR SERVICES. FOR THE AVOIDANACE OF ALL DOUBT, WE DO NOT WARRANT, NOR WILL BE RESPONSIBLE FOR, ANY PRODUCTS, SERVICES, FUNCTIONALITY, OR INTERFACES THAT ARE PROVIDED BY YOU OR ANY THIRD PARTY.

18. Liability Limit.
IN NO EVENT SHALL WE, OUR SUBSIDIARIES, EMPLOYEES OR OUR SUPPLIERS BE LIABLE FOR LOST PROFITS OR ANY SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION WITH OUR SITE, OUR SERVICES, INCLUDING WITHOUT LIMITATION USE OF ANY APIS, OR THIS AGREEMENT (HOWEVER ARISING, INCLUDING NEGLIGENCE). DER NUTZER TRÄGT KEINE HAFTUNG FÜR FOLGESCHÄDEN, EXEMPLARISCHE, BESONDERE, ZUFÄLLIGE SCHÄDEN ODER STRAFSCHADENERSATZ IN ZUSAMMENHANG MIT DEM SERVICE, SELBST WENN ER AUF DIE MÖGLICHKEIT SOLCHER SCHÄDEN HINGEWIESEN WURDE.

IN NO EVENT SHALL WE, OUR SUBSIDIARIES, EMPLOYEES OR OUR SUPPLIERS BE LIABLE WITH RESPECT TO THE ACCURACY OR RELIABILITY OF INFORMATION PROVIDED BY THE AUDITOR, WHETHER INPUTTED INTO THE CAPITAL CONFIRMATION WEBSITE OR ANY ASSOCIATED PLATFORMS BY US CAPITAL CONFIRMATION OR BY THE AUDITOR. THE AUDITOR MAINTAINS THE SOLE RESPONSIBILITY AND LIABILITY FOR REVIEWING AND APPROVING THE INFORMATION POPULATED INTO THE CAPITAL CONFIRMATION WEBSITE AND ASSOCIATED PLATFORMS.
UNSERE HAFTUNG SOWIE DIE HAFTUNG UNSERER TOCHTERFIRMEN, MITARBEITER UND LIEFERANTEN IHNEN ODER JEGLICHEN DRITTEN PARTEIEN GEGENÜBER IST IN JEDEM FALL BEGRENZT AUF ENTWEDER (A) DIE GEBÜHREN, DIE SIE UNS IN DEN ZWÖLF MONATEN VOR DEM TAG, AN DEM DIE HAFTUNG ENTSTAND, AN UNS GEZAHLT HABEN, ODER (B) 12 USD, JE NACHDEM WELCHER BETRAG NIEDRIGER IST. NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN YOUR SOLE AND EXCLUSIVE REMEDY FOR ANY FAILURE OR NONPERFORMANCE OF ANY APIS PROVIDED BY CAPITAL CONFIRMATION SHALL BE FOR CAPITAL CONFIRMATION TO USE COMMERCIALLY REASONABLE EFFORTS TO ADJUST OR REPAIR THE NONPERFORMING APIS.

19. Fair Credit Reporting Disclosure.
The parties acknowledge that CCI is not a consumer reporting agency as such term is defined in the federal Fair Credit Reporting Act, 15 U.S.C. 1581 et seq. ("FCRA") and therefore, is not subject to the requirements or provisions of the FCRA. Any reports accessed through the Services or Sites do not constitute consumer reports as such term is defined in the FCRA, and accordingly, such reports may not be used to determine eligibility for credit, employment, insurance underwriting, tenant screening or for any other purpose provided for in the FCRA. CCI makes no representations or warranties as to its compliance or certifications with respect to the Fair Credit Reporting Act or its regulatory requirements. However, other Users, including banking institutions, financial organizations, credit reporting agencies, and other entities with which the User may interact through the Services or Sites may be subject to the Fair Credit Reporting Act. CCI makes no representations or warranties about such other User's compliance or certifications with respect to the Fair Credit Reporting Act or its regulatory requirements. CCI shall not be deemed a guarantor of the accuracy or completeness of information provided by other Users.

20. Indemnity.
You shall indemnify and hold Capital Confirmation and (as applicable) our parent, subsidiaries, affiliates, officers, directors, agents, and employees and the financial institutions harmless from any and all third-party claims, losses and damages, liability, and costs, including attorney’s fees, against, or incurred by, Capital Confirmation to the extent such claims, damages, liability and costs result directly or indirectly from: (a) your negligence or intentional conduct; (b) your breach of your obligations under this Agreement including, but not limited to, any breach which results in the unauthorized and/or non-permissible use of information obtained via Capital Confirmation’s Confirmation.com service or any other such service under this Agreement; (c) any claim that our website or Service or the use thereof infringes upon, misappropriates, or violates any intellectual property rights of any third party, provided that such claim results from or is related to (i) an unauthorized modification of our website or Service; (ii) the combination of the website or Service with software, hardware, or equipment not provided by us if our website or Service alone would not be the subject of such claim; or (iii) your unauthorized use of the website or Service; (d) any data breach suffered by you, your vendor or processor, or by a vendor or processor for Capital Confirmation; or (e) any claim, action, audit, investigation, regulatory action, inquiry, or other proceeding that arises out of or relates to your failure to comply with any applicable laws and regulations in connection with the transfer of personal data to or outside the EU/EEA including any applicable Data Protection Laws.

21. Confidentiality.
You may be given access to our confidential information or confidential information from other authorized Users in relation to your use of our website or Service. Information and knowledge related to the operation and processes of the website and Service are also considered confidential information. You shall hold confidential information in confidence and, unless required by law, not make confidential information available to any third party, or use confidential information for any purpose other than as provided for in using our website or Service. You shall take all reasonable steps to ensure that confidential information to which you have access is not disclosed or distributed by any person in violation of this Agreement. You acknowledge that details of the Service constitute our confidential information.

22. Legal Compliance.
You represents and warrants that you have read, understand and shall comply with all laws, regulations and judicial actions including, but not limited to, the Identity Theft and Assumption Deterrence Act, the Fraud and False Statements Act, the USA Freedom Act, the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Gramm-Leach-Bliley Act and the Fair Credit Reporting Act (15 U.S.C. 1681 et seq.), including without limitation, all amendments thereto, and all other applicable federal or state legislation, regulations and judicial actions, as now or as may become effective.

You certify that you will use the service and the information received for no other purpose than is legally permissible. You understand that if the system is used improperly by company personnel, or if its access codes are made available to any unauthorized personnel due to carelessness on the part of you or any other, you may be held responsible for financial losses, fees or monetary charges that may be incurred and that its access privileges may be terminated. You will not obtain, retain, use, or provide access to the Service to an affiliate or any third party in a manner that may breach any applicable export control or economic sanctions laws and regulations for any jurisdiction, including the United States of America, the United Kingdom and the European Union and its Member States. You warrant that neither you, nor any affiliate to which you provide access to the Service, is affiliated with a specially designated or sanctioned entity under any of those laws and that, in any transaction relating to Confirmation or the Service, such transactions will not involve sanctioned parties, including without limitation through the use of bank accounts at banks that are sanctioned parties. Further, the parties represent and warrant that they have read, understand and shall comply with all applicable laws, regulations and judicial actions including, but not limited to, anti-bribery laws, anti-corruption laws, anti-slavery laws, anti-human trafficking, tax laws, any applicable law aimed at preventing the facilitation of criminal behavior.

23. British Banker’s Association, BBA Enterprises Limited plus any other group company of the British Banker’s Association (Together the “BBA”)
Kein Bestandteil dieser Vereinbarung beschränkt die Haftung der BBA für Todesfälle oder Personenschäden, die durch ihre Fahrlässigkeit oder jene ihrer Mitarbeiter verursacht werden; für Betrug oder betrügerische Falschdarstellungen; oder andere Haftungen, die nach englischem Recht nicht ausgeschlossen werden können, selbst wenn andere Bestimmungen dieser Vereinbarung auf das Gegenteil hindeuten.

You expressly acknowledge and agree that the BBA: (a) is not a part to this Agreement and is not involved in the design, supply or support of Capital Confirmation Inc’s services including the service promoted to UK banks as “BBA Confirmations”; (b) makes no representation or warranty that the services will be adequate or appropriate for you and its requirements and any BBA trademarks or logos present in marketing materials or other documents o not represent and endorsement of the service; (c) shall not be responsible for providing any of the services; and (d) shall have no liability to you whatsoever whether direct or indirect and whether in contact, tort (including negligence), misrepresentation or for any other reason in respect of any of the services provided under this agreement.

24. No Agency.
Sie und Capital Confirmation sind unabhängige Vertragsparteien und durch diese Vereinbarung wird keine Agentur, Partnerschaft, kein Joint Venture und keine arbeits- oder franchiserechtliche Beziehung beabsichtigt oder begründet.

25. Notices.
Except as explicitly stated otherwise, any notices shall be given by postal mail to Capital Confirmation Inc. Attn: Legal Department 214 Centerview Drive, Suite 100, Brentwood, TN 37027 (in the case of Capital Confirmation) or to the email address you provide to Capital Confirmation during the registration process (in your case). Eine Mitteilung gilt 24 Stunden nach dem Absenden der E-Mail als abgegeben, es sei denn, die sendende Partei wurde darüber benachrichtigt, dass die E-Mail-Adresse ungültig ist. Alternativ können wir Ihnen Mitteilungen durch ein korrekt frankiertes Einschreiben mit Rückschein an die Capital Confirmation bei der Anmeldung zur Verfügung gestellte Adresse zukommen lassen. In diesem Fall gilt die Mitteilung 3 Tage nach dem Versanddatum als abgegeben.

26. Arbitration.
Jeder Rechtsstreit bzw. Rechtsanspruch, der sich in Verbindung mit dieser Vereinbarung oder unseren Services ergibt, ausgenommen Rechtsverfahren von Capital Confirmation, um Gebühren einzutreiben und/oder Schadensersatz oder eine einstweilige Verfügung in Verbindung mit dem Betrieb, dem geistigen Eigentum und den Services von Capital Confirmation zu erwirken, sind im Rahmen einer verbindlichen Schlichtung gemäß den Vorschriften der Handelsschiedsgerichtsbarkeit der American Arbitration Association zu entscheiden. Jeder derartige Rechtsstreit oder Anspruch wird auf individueller Basis verhandelt und kann nicht in Verbindung mit einem Streitfall oder einem Anspruch einer anderen Partei entschieden werden. Das Schlichtungsverfahren wird in Nashville, Tennessee, durchgeführt und die Entscheidung des Schiedsgerichts kann von einem zuständigen Gericht für vollstreckbar erklärt werden. Entweder Sie selbst oder Capital Confirmation kann vor einem zuständigen Gericht in Nashville, Tennessee, um zwischenzeitliche oder vorläufige Entlastung ersuchen, um die Rechte oder den Besitz von Ihnen oder Capital Confirmation zu schützen, während die Schlichtung bearbeitet wird. Wenn eine Partei entgegen diesen Bestimmungen Klage erhebt, ist die andere Partei berechtigt, Anwaltsgebühren und Kosten bis zu 1000.00,{[#2]} USD zu verlangen.

27. Additional Terms.
Die folgenden Richtlinien werden durch Bezugnahme in diese Vereinbarung integriert und stellen weitere Bedingungen in Hinblick auf die spezifischen, auf unserer Seite angebotenen Services dar.

Datenschutzerklärung:
https://www.confirmation.com/legal-security-privacy/index.html.

Fee and Credit Policy:
https://www.confirmation.com/resources/uncategorized/fees-and-credit-policy/

Jede dieser Richtlinien kann von Zeit zu Zeit geändert werden und die entsprechenden Änderungen treten unmittelbar nach deren Veröffentlichung auf unserer Seite in Kraft, mit Ausnahme der Datenschutzerklärung, über deren Änderung Sie dreißig Tage vorher informiert werden. Wenn Sie darüber hinaus spezielle Services auf unserer Seite nutzen, unterliegen Sie den veröffentlichten Richtlinien oder Regeln zu den Services, die Sie über unsere Seite nutzen, die von Zeit zu Zeit veröffentlicht werden können. Alle diese veröffentlichten Richtlinien oder Regeln werden hiermit durch Bezugnahme in diese Vereinbarung integriert.

You acknowledge and agree that: (a) members of Capital Confirmation's Group may be retained as sub-processors; and (b) Capital Confirmation and members of Capital Confirmation's Group respectively may engage third-party sub-processors in connection with the provision of the Services. We do not guarantee and shall not be liable for the performance of any sub-processor or sub-contractor.

28. Governing Law.
This Agreement shall be governed in all respects by the laws of the State of Tennessee, without reference to conflict of laws principles. You further consent to exclusive jurisdiction by the United States District Court for the Middle District of Tennessee.

29. Assignment.
Sie erklären sich einverstanden, dass diese Vereinbarung und alle darin enthaltenen Vereinbarungen im Falle einer Zusammenlegung oder Übernahme automatisch und nach eigenem Ermessen von Capital Confirmation einer anderen Partei zugewiesen werden können. You may not, without our prior written consent, assign, transfer, sub-contract or otherwise deal with any of your rights and/or obligations under this Agreement.

30. General.
Wir garantieren keinen dauerhaften, ununterbrochenen oder sicheren Zugang zu unseren Services und der Betrieb unserer Seite kann durch zahlreiche Faktoren, die außerhalb unserer Kontrolle liegen, beeinträchtigt werden. Sollte eine Bestimmung dieser Vereinbarung ungültig oder nicht durchsetzbar sein, so gilt sie als gestrichen, was die Gültigkeit der übrigen Bestimmungen nicht berührt. Überschriften gelten lediglich als Referenz und dienen nicht dazu, den Umfang oder das Ausmaß eines Abschnittes zu definieren, zu begrenzen, auszulegen oder zu beschreiben. Mit der Unterlassung unsererseits, einen Verstoß durch Sie oder andere zu ahnden, verzichten wir nicht auf unser Recht, bei späteren oder ähnlichen Verstößen zu handeln. Die offiziell für Inhalte auf der Webseite Confirmation.com verwendete Sprache ist Englisch. Über einen Drittanbieter ermöglicht es Confirmation.com Personen mit begrenzten Englischkenntnissen, auf Informationen auf der Seite zuzugreifen. Durch diesen automatischen Prozess durchgeführte Übersetzungen sollten nicht als exakt angesehen werden, insbesondere hinsichtlich technischer und rechtlicher Begriffe. Zudem können einige Dateien wie Grafiken, Fotos und PDFs im Zuge dieses Prozesses nicht übersetzt werden. Capital Confirmation Inc. garantiert nicht die Genauigkeit und Verlässlichkeit der durch dieses System übersetzten Informationen und haftet nicht für Verluste, die durch ein derartiges Vertrauen auf die Genauigkeit und Verlässlichkeit dieser Informationen entstanden sind. Obwohl jeder Versuch unternommen wird, die Genauigkeit der Übersetzung zu gewährleisten, können Teile davon fehlerhaft sein. Jede Person oder jedes Unternehmen, das auf die im System erhaltenen Informationen vertraut, tut dies auf eigene Gefahr. Diese Vereinbarung stellt die gesamte Übereinkunft und Vereinbarung zwischen den Parteien in Bezug auf den Gegenstand derselben dar. Die Abschnitte 2 (Dienstleistungen und Gebühren) im Hinblick auf die Gebühren, die Sie für unsere Dienstleistungen, 3,3 (Freigabe), 8,3 (Lizenz), 10 (Zugang und Eingriff), 18 (Haftungsbegrenzung), 19 (Schadenersatz) und 23 (Schiedsgerichtsbarkeit) überdauern jede Kündigung bzw. jeden Ablauf dieser Vereinbarung.

31. Disclosures.
Die hierin genannten Services werden erbracht von Capital Confirmation Inc. mit Sitz in 214 Centerview Drive, Suite 100, Brentwood, Tennessee 37027. Gebühren für unsere Dienste sind oben in Abschnitt 2 (Dienstleistungen und Gebühren) aufgeführt.

32. Disputes.
Sie können sich mit Streitfragen zwischen Ihnen und Capital Confirmation hinsichtlich unserer Services schriftlich an unsere Kundenbetreuung wenden: Capital Confirmation, Customer Support, 214 Centerview Drive, Suite 100, Brentwood, TN 37027. Wir ermutigen Sie, alle Streitfälle zwischen Nutzern an Ihre örtliche Strafverfolgungsbehörde, den Leiter der Poststelle oder eine zertifizierte Mediations- oder Schiedsgerichtsstelle weiterzuleiten.

33. Your Acceptance of this User Agreement.
You evidence your acceptance of this User Agreement by clicking on "Accept User Agreement and Add Account" button on the Capital Confirmation website or by using the Confirmation.com service. Ein derartiges Einverständnis hat dieselbe rechtliche Wirkung wie Ihre handschriftliche Unterschrift auf einem Schriftstück, das die Bedingungen dieser Nutzervereinbarung enthält.

Anlage 1
EUROPÄISCHE DATENÜBERTRAGUNG

We process Personally Identifiable Information outside of the European Economic Area (EEA) and Switzerland including in third countries which may not be recognized by the European Commission or the Swiss Federal Data Protection and Information Commission as providing an adequate level of privacy protection, such as in the United States.

Capital Confirmation will enter into the Standard Contractual Clauses approved by the European Commission to legitimize the transfers of Personally Identifiable Information outside of the EEA and/or Switzerland to an inadequate third country. If we are required to enter into the Standard Contractual Clauses to legitimize the transfer of Personally Identifiable Information outside of the EEA and/or Switzerland, then the parties hereby agree to the Standard Contractual Clauses set forth in Attachment 1 (for those cases where we act as a processor with respect to personal data) below, and you evidence your acceptance of the Standard Contractual Clauses by clicking on "Accept User Agreement and Add Account" button on the Capital Confirmation website or by using the Confirmation.com service.

Notwithstanding the foregoing, if the Standard Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personally Identifiable Information outside of the EEA to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer agreements), then you shall procure the appropriate consent of any data subject whose Personally Identifiable Information is transferred to us to enable us to transfer that Personally Identifiable Information to the United States (or such other third country).

Attachment 1: Standard Contractual Clauses (Processor)

For the transfer of personal data outside of the EEA and/or Switzerland to processors established in third countries which do not ensure an adequate level of data protection, the data exporter and the data importer have agreed on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.

Notwithstanding the foregoing, if the following Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personal Data outside of the EEA and/or Switzerland to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer Clauses), you shall procure the appropriate consent of any data subject whose Personal Data is transferred to us to enable the Parties to transfer that Personal Data to the United States (or such other third country).

Clause 1
Begriffsbestimmungen.

Im Rahmen der Vertragsklauseln gelten folgende Begriffsbestimmungen:
(a) ‘personal data’, ‘special categories of data’, ‘process/processing’, ‘controller’, ‘processor’, ‘data subject’ and ‘supervisory authority’ shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;

(b) ‘the data exporter’ means the party who transfers the personal data;

(c) ‘the data importer’ means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country’s system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC;

(d) ‘the sub-processor’ means any processor engaged by the data importer or by any other sub-processor of the data importer who agrees to receive from the data importer or from any other sub-processor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract;

(e) ‘the applicable data protection law’ means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established;

(f) ‘technical and organisational security measures’ means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

Clause 2
Einzelheiten der Übermittlung

Die Einzelheiten der Übermittlung, insbesondere die besonderen Kategorien personenbezogener Daten, sofern vorhanden, werden in Anhang 1 erläutert, der Bestandteil dieser Klauseln ist.

Clause 3
Drittbegünstigtenklausel

(a) The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary.

(b) The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity.

(c) The data subject can enforce against the sub-processor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.

(d) The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law.

Clause 4
Pflichten des Datenexporteurs

Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;

(b) that it has instructed and throughout the duration of the personal data-processing services will instruct the data importer to process the personal data transferred only on the data exporter’s behalf and in accordance with the applicable data protection law and the Clauses;

(c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 to this contract;

(d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;

(e) that it will ensure compliance with the security measures;

(f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;

(g) to forward any notification received from the data importer or any sub-processor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;

(h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for sub-processing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;

(i) that, in the event of sub-processing, the processing activity is carried out in accordance with Clause 11 by a sub-processor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and

(j) that it will ensure compliance with Clause 4(a) to (i).

Clause 5
Pflichten des Datenimporteurs

Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;

(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;

(c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred;

(d) that it will promptly notify the data exporter about:

(e) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation;
i. any accidental or unauthorised access; and
ii. any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so;
iii. to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;

(f) at the request of the data exporter to submit its data-processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority. The data importer has included the security requirements detailed in Appendix 2 at the request of the data exporter, and the data exporter agrees that such security requirements and the audit obligations and rights under the Master Agreement will be deemed to fully satisfy the audit rights granted to the data exporter under Clauses 5(f) and 12,2;

(g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for sub-processing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;

(h) that, in the event of sub-processing, it has previously informed the data exporter and obtained its prior written consent (whether under or in connection with the Master Agreement or otherwise);

(i) that the processing services by the sub-processor will be carried out in accordance with Clause 11;

(j) to send promptly, on request, a copy of any sub-processor agreement it concludes under the Clauses to the data exporter.

Clause 6
Verbindlichkeit

1. The parties agree that any data subject, who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or sub-processor is entitled to receive compensation from the data exporter for the damage suffered.

2. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his sub-processor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity.
a. The data importer may not rely on a breach by a sub-processor of its obligations in order to avoid its own liabilities.

3. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the sub-processor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the sub-processor agrees that the data subject may issue a claim against the data sub-processor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. Eine solche Haftung des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach diesen Klauseln beschränkt.

Clause 7
Schlichtung und Gerichtsstand

(a) The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject:

(b) to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority;

(c) to refer the dispute to the courts in the Member State in which the data exporter is established.

(d) The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law.

Clause 8
Cooperation with supervisory authorities

1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law.

2. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any sub-processor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law.

3. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any sub-processor preventing the conduct of an audit of the data importer, or any sub-processor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5(b).

Clause 9
Anwendbares Recht

Für diese Klauseln gilt das Recht des Mitgliedstaats, in dem der Datenexporteur niedergelassen ist.

Clause 10
Änderung des Vertrags

Die Parteien verpflichten sich, die Klauseln nicht zu verändern. Es steht den Parteien allerdings frei, erforderlichenfalls weitere, geschäftsbezogene Klauseln aufzunehmen, sofern diese nicht im Widerspruch zu der Klausel stehen.

Clause 11
Vergabe eines Unterauftrags

1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Bei der Weitervergabe seiner Verpflichtungen gemäß den Klauseln durch den Datenimporteur, kann dies, mit Einverständniserklärung des Datenexporteurs, geschehen, jedoch nur basierend auf einer schriftlichen Vereinbarung mit dem externen Dienstleister, die den Dienstleister die selben Verpflichtungen auferlegt wie sie der Datenimporteur gemäß den Klauseln hat. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor's obligations under such agreement.

2. The prior written contract between the data importer and the sub-processor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.

3. The provisions relating to data protection aspects for sub-processing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established.

4. The data exporter shall keep a list of sub-processing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5(j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority.

Clause 12
Pflichten nach Beendigung der Datenverarbeitungsdienste

1. The parties agree that on the termination of the provision of data-processing services, the data importer and the sub-processor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In diesem Fall garantiert der Datenimporteur, dass er die Vertraulichkeit der übermittelten personenbezogenen Daten gewährleistet und diese Daten nicht mehr aktiv weiterverarbeitet.

2. The data importer and the sub-processor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data-processing facilities for an audit of the measures referred to in paragraph 1.

On behalf of the data exporter:
Name (written out in full):
Position:
Adresse:
Other information necessary in order for the contract to be binding (if any): (stamp of organisation)
Unterschrift

On behalf of the data importer:
Capital Confirmation, Inc.
Name (written out in full): Diana Flanders
Position: VP, Business Integrations
Address: Capital Confirmation, Inc. 214 Centerview Drive, Suite 100, Brentwood, TN 37027
Other information necessary in order for the contract to be binding (if any): N/A
Unterschrift

Anhang 1
zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden

Die Mitgliedstaaten sind in der Lage gemäß ihren nationalen Gesetzen sämtliche zusätzliche, erforderliche Informationen in diesem Anhang hinzufügen oder ausdrücken

Datenexporteur

The data exporter is (please specify briefly your activities relevant to the transfer):

The data exporter will export the personal data contained in the client's documentation to the responders via the Confirmation.com platform. Exported data will concern personal data of data exporter's employees with access given to the online platform handled by the data importer. Also, data exporter's client data for the purposes of forwarding data exporter's audit requests to responders by the data importer.

Datenimporteur

The data importer is (please specify briefly activities relevant to the transfer):
Capital Confirmation Inc.

The data importer provides an online venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users. Processed data will concern data exporter's employees for which accounts in the platform handled by the data importer will be created. Also, data exporter's client data for the purposes of forwarding data exporter's audit requests to responders by the data importer.

Betroffene Personen

The personal data transferred concern the following categories of data subjects (please specify):

Data exporter’s employees and personal data of data exporter’s client’s representatives and other subjects mentioned in the documentation, which is sent to the responder

Datenkategorien

The personal data transferred concern the following categories of data (please specify):

The categories of data are: names, surnames, addresses, account numbers, financial information, PESEL number and other personal data of the subjects mentioned in the documentation sent to the responder. Employees, partners, principals, directors, former employees, former partners, former principals, former directors, new hires, individual contractors and temporary staff of the data exporter, as well as applicants, dependants, contractors / subcontractors, clients, suppliers/vendors of the data exporter

Besondere Kategorien personenbezogener Daten (wenn zutreffend)

Not applicable

Verarbeitung

The personal data transferred will be subject to the following basic processing activities (please specify):

The platform Confirmation.com is internet-based system, that allows the data exporter to send documentation to auditors for the needs of the audit. The documentation will be encrypted by the data importer while uploading it to the platform, so the data importer should not get access to the contents of the documentation and personal data contained in the documentation beyond the scope necessary to perform the encryption process.

DATA EXPORTER
Name:
Authorised Signature

DATA IMPORTER
Capital Confirmation Inc.
Name: Diana Flanders
Authorised Signature

Anhang 2
zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden.

Beschreibung der technischen oder organisatorischen Sicherheitsmaßnahmen, die der Datenimporteur gemäß Klausel 4 Buchstabe d und Klausel 5 Buchstabe c eingeführt hat (oder Dokument/Rechtsvorschrift beigefügt):

Data Importer has implemented the technical and organisation security measures set out in the Agreements and incorporated herein by reference.

DATA EXPORTER
Name:
Authorised Signature
Capital Confirmation Inc.
Name: Diana Flanders
Authorised Signature

For Responders of Confirmations

AGB

IM FOLGENDEN WERDEN DIE BEDINGUNGEN AUFGEFÜHRT, ZU DENEN IHNEN CAPITAL CONFIRMATION INC. ZUGANG ZU UNSEREN DIENSTLEISTUNGEN GEWÄHRT.

Welcome to the User Agreement for Capital Confirmation Inc. This Agreement describes the terms and conditions applicable to your use of our services available under the domains and sub-domains of www.confirmation.com, and learn.confirmation.com ("Confirmation Website(s)") owned and operated by Capital Confirmation, and the general principles for the websites of our subsidiaries. Wenn Sie mit den Allgemeinen Geschäftsbedingungen dieser Vereinbarung nicht einverstanden sind, sehen Sie bitte von der Nutzung unserer Dienstleistungen oder dem Zugriff darauf ab. You evidence your acceptance of the terms and conditions of this Agreement through your use of any of the Confirmation.com services (aka "Confirm" service).

Bei jeglichen Fragen schreiben Sie uns bitte eine E-Mail an customer.support@confirmation.com.

Sie müssen die in dieser Nutzervereinbarung und der Datenschutzerklärung enthaltenen Allgemeinen Geschäftsbedingungen lesen, damit einverstanden sein und diese akzeptieren. Dazu gehören sowohl die Allgemeinen Geschäftsbedingungen, die im Folgenden ausdrücklich aufgeführt sind, als auch diejenigen, auf welche verwiesen wird. Erst dann werden Sie Mitglied bei Capital Confirmation. Wir empfehlen Ihnen dringend, beim Lesen dieser Nutzervereinbarung auch die Informationen aufzurufen und zu lesen, die auf den Seiten und Websites enthalten sind, auf welche in diesem Dokument verwiesen wird, da diese eventuell weitere Geschäftsbedingungen enthalten, die für Sie als Nutzer von Capital Confirmation gelten. Please note: underlined words and phrases are links to these pages and websites. Durch das Akzeptieren dieser Nutzervereinbarung erkennen Sie gleichzeitig an, dass Ihre Nutzung anderer Websites von Capital Confirmation den auf diesen Websites veröffentlichten Allgemeinen Geschäftsbedingungen unterliegt.

Wir können diese Vereinbarung jederzeit durch das Veröffentlichen der geänderten Bedingungen auf unserer Website ändern. Except as stated below, all amended terms shall automatically be effective immediately upon posting on our site. Sie werden von den Änderungen dieser Vereinbarung weder schriftlich noch per E-Mail informiert. Veränderungen dieser Vereinbarung müssen schriftlich erfolgen und von Ihnen und Capital Confirmation Inc. unterzeichnet werden. Diese Vereinbarung tritt am 1. März 2003 in Kraft.

1. Membership Eligibility.
Unsere Dienstleistungen stehen nur Personen zur Verfügung, die unter dem geltenden Recht rechtlich bindende Verträge eingehen können. Ohne Einschränkung des Vorhergesagten können unsere Dienstleistungen weder von Minderjährigen noch von zeitweise oder unbegrenzt gesperrten Mitgliedern von Capital Confirmation in Anspruch genommen werden. Wenn Sie noch minderjährig sind, dürfen Sie diese Dienstleistung nicht nutzen. Falls Sie nicht berechtigt sind, sehen Sie bitte von der Nutzung unserer Dienstleistungen ab. Darüber hinaus dürfen Ihr Konto bei Capital Confirmation (einschließlich Feedback) und die Nutzer-ID nicht an Dritte übertragen oder verkauft werden. Falls Sie sich als Unternehmen registrieren, erklären Sie, dass Sie befugt sind, das Unternehmen an diese Vereinbarung zu binden. Falls Sie sich als Einzelperson registrieren, erklären Sie, dass Sie die Einzelperson sind, die Sie behaupten zu sein.

2. Fees and Service.
Capital Confirmation provides a venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users (the "Service"). Die Anmeldung und Nutzung unseres Dienstes für Revisionsbestätigungen ist kostenlos. Unsere Änderungen der Richtlinien treten in Kraft, nachdem wir Sie durch die Veröffentlichung der Änderungen in dieser Vereinbarung mindestens vierzehn (14) Tage im Voraus benachrichtigt haben. Falls wir eine neue Dienstleistung einführen, gelten die Gebühren für diese Dienstleistung ab deren Einführung. The Service also includes the provision of ancillary services deemed reasonably necessary by Capital Confirmation to run a venue for digital transaction management, including but not limited to customer support, billing, and account management.

3. Capital Confirmation is a Venue.
3,1 Capital Confirmation ist weder ein Wirtschaftsprüfungsunternehmen oder ein Client User noch sind wir ein autorisierter Vertreter eines Wirtschaftsprüfungsunternehmens oder eines Client Users. Stattdessen fungiert unsere Website als Transaktionsplattform, die es unseren Nutzern ermöglicht, auf Revisionsbestätigungen zu reagieren. We are not involved in the actual transaction between users of and providers of the confirmation information. Infolgedessen haben wir keine Kontrolle über die Qualität, Genauigkeit, Aktualität oder Rechtmäßigkeit der Anfragen und der Antworten oder der Wahrheit oder Genauigkeit der Anfragen und Antworten.

3,2 Verifizierung der Identität. Wir verwenden verschiedene Techniken zur Überprüfung der Identität unserer Nutzer, wenn sich diese auf unserer Website registrieren. Da allerdings die Nutzer-Verifizierung im Internet schwierig ist, kann und wird Capital Confirmation nicht die behauptete Identität jedes einzelnen Nutzers bestätigen. Daher haben wir ein vom Nutzer einzuleitendes Kommunikationssystem eingerichtet, um Ihnen bei der Evaluierung der Frage, mit wem Sie zusammenarbeiten, zu helfen. Wir ersuchen Sie, über die auf unserer Seite verfügbaren Tools direkt mit den Einzelpersonen zu kommunizieren.

3,3 Freigabe. Da wir eine Transaktionsplattform sind, entbinden Sie Capital Confirmation (und unsere Führungskräfte, Vorstandsmitglieder, Agenten, Tochtergesellschaften, Joint Ventures und Mitarbeiter) im Fall eines Konflikts mit einem oder mehreren Nutzern von Ansprüchen jeder Art (einschließlich Ansprüchen wegen Folgeschäden), bekannt und unbekannt, vermutet und nicht vermutet, offen gelegt und nicht offen gelegt, die aus derartigen Konflikten entstehen könnten oder in irgendeiner Art mit diesen verbunden sind. If you are a California resident, you waive California Civil Code §1542, which says: “A general release does not extend to claims which the creditor does not know or suspect to exist in his favor at the time of executing the release, which if known by him must have materially affected his settlement with the debtor.”

3.4. Kontrolle der Informationen. Wir kontrollieren die Informationen, die von anderen Nutzern zur Verfügung gestellt und über unser System verfügbar gemacht werden, nicht. Es kann sein, dass Informationen anderer Nutzer unrichtig sind. Handeln Sie bitte vorsichtig und umsichtig, wenn Sie unsere Seite nutzen.

3.5. Kundenbetreuung. Monday through Friday between the hours of 8:00 A.M. and 5:00 P.M. Central Standard Time, customer support shall be available free of charge by telephone or by email at one or more phone numbers or email addresses to be specified on our website located at www.confirmation.com.

4. Responding.
Durch die Reaktion auf eine Bestätigungsanforderung erklären Sie sich mit den Bedingungen dieser Vereinbarung einverstanden. Reaktionen sind nicht widerrufbar. Indem Sie sich entscheiden, auf eine Bestätigung zu reagieren, bestätigen Sie, dass Sie gesetzlich berechtigt sind, auf solche Bestätigungen im Auftrag Ihres Unternehmens, das Sie vorgeben zu vertreten und für das Sie arbeiten, zu reagieren oder im Falle, dass Sie eine Einzelperson sind, die reagiert, bestätigen Sie, dass Sie die Person sind, die Sie vorgeben zu sein.

5. Fraud.
Ohne Einschränkung anderer zur Verfügung stehender Rechtsmittel kann Capital Confirmation Ihr Konto sperren oder löschen, wenn wir den Verdacht haben, dass Sie (aufgrund einer Verurteilung, eines Vergleichs, einer Ermittlung wegen Versicherungsbetrugs oder aus anderen Gründen) an betrügerischen Aktivitäten in Zusammenhang mit unserer Seite beteiligt waren.

6. Your Information.
6,1 Definition. “Your Information” is defined as any information you provide to us or other users in the registration or confirmation process, in any message area or through any email feature. Sie sind alleine verantwortlich für Ihre Informationen und wir agieren als passive Plattform für die Online-Distribution und Veröffentlichung Ihrer Informationen.

6,2 Restricted Activities. Your Information (or any items listed) and your activities on the site shall not: (a) be false, inaccurate or misleading; (b) be fraudulent; (c) infringe any third party’s copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy; (d) violate any law, statute, ordinance or regulation (including, but not limited to, those governing consumer protection or antidiscrimination); (e) be defamatory, trade libelous, unlawfully threatening or unlawfully harassing; (f) be obscene or contain child pornography; (g) contain any viruses, Trojan horses, worms, time bombs, cancelbots, easter eggs or other computer programming routines that may damage, detrimentally interfere with, surreptitiously intercept or expropriate any system, data or personal information; and (h) create liability for us or cause us to lose (in whole or in part) the services of our ISPs or other suppliers. Zudem sind Sie nicht dazu berechtigt eine Bestätigung auf unserer Website zu autorisieren oder auf eine solche zu antworten (oder jegliche Transaktion zu vollziehen, die durch die Nutzung unseres Dienstes ausgelöst wurde), bei der die Autorisierung oder Anforderung dazu führen könnte, dass wir geltendes Recht, eine Verordnung oder ein Regelwerk verletzen.

6,3 Lizenz. Ausschließlich, um es Capital Confirmation zu ermöglichen, die Informationen zu nutzen, die Sie uns zur Verfügung stellen, und um keinerlei Rechte zu verletzen, die Sie an diesen Informationen haben, erklären Sie, uns ein nicht-exklusives, weltweites, unbefristetes, unwiderrufliches, gebührenfreies, unterlizenzierbares (über mehrere Stufen) Recht einzuräumen, die Urheberrechte, Werbungsrechte und Datenbank-Rechte (aber keine weiteren Rechte) in allen Medien, die derzeit bekannt oder noch nicht bekannt sind, auszuüben, die Sie an Ihren Informationen innehaben. Capital Confirmation wird Ihre Informationen nur in Übereinstimmung mit unserer Datenschutzerklärung verwenden.

7. Ownership of Intellectual Property.
Capital Confirmation besitzt und behält alle Rechte, Titel und Interessen an sämtlichem geistigen Eigentum in Verbindung mit der Dienstleistung oder mit der Beziehung, die in dieser Vereinbarung beschrieben ist. „Geistiges Eigentum“ bezeichnet alle Ideen, Entdeckungen, Erfindungen, Entwicklungen, Designs, Verbesserungen, Handelsmarken, Dienstleistungsmarken, Handelsgeheimnisse, geschützte Informationen, Programme, Quellcodes, Objektcodes, Patentanmeldungen, Patente, Copyrights (für die Dauer derselben, einschließlich Verlängerungen und Rechterückfall), urheberrechtlich schützbare Werke und die damit verbundenen Geschäftswerte, einschließlich Erweiterungen, Verbesserungen und abgeleiteter Werke, die aktuell bestehen oder hieraus entstehen. You hereby assign and transfer to Capital Confirmation any and all rights in any such Intellectual Property, either presently existing or hereinafter arising, and agree to take such actions (at Capital Confirmation's expense) as Capital Confirmation may reasonably request to secure such rights for Capital Confirmation. Solange Sie registrierter Nutzer unserer Dienstleistungen sind sowie für einen Zeitraum von zwei (2) Jahren nach dem Datum Ihres letzten Logins erklären Sie sich einverstanden, keine Dienstleistungen anzubieten oder andere beim Angebot von Dienstleistungen zu unterstützen, die in Wettbewerb mit den von Capital Confirmation angebotenen Dienstleistungen stehen können. Unsolicited ideas or product feedback will automatically become our property, without any compensation to you and we may use or distribute such submissions and their contents for any purpose and in any way without any obligations of confidentiality or otherwise.

8. Access and Interference.
Sie erklären sich einverstanden, keine Robots, Spiders oder andere automatische Geräte oder manuelle Prozesse zu verwenden, um unsere Webseiten oder deren Inhalte ohne vorherige ausdrückliche schriftliche Genehmigung zu überwachen oder zu vervielfältigen. You agree that you will not reverse engineer, disassemble, decompile, decode, adapt, develop, or modify the website or Service, or otherwise attempt to derive or gain access to the source code of the website or Service, in whole or in part. Sie erklären sich einverstanden, keine Geräte, Software oder Routinen zu verwenden, um unsere Sicherheitsfunktionen zu umgehen oder die korrekte Funktion der Capital Confirmation Website oder anderer Aktivitäten auf unserer Website zu beeinträchtigen oder dies zu versuchen. Sie erklären sich einverstanden, keine Aktionen zu unternehmen, die unsere Netzwerkinfrastruktur unverhältnismäßig stark belasten. Viele Informationen auf unserer Seite werden in Echtzeit aktualisiert und stehen im Eigentum von Capital Confirmation oder werden uns von unseren Nutzern oder Dritten lizenziert. Sie erklären sich einverstanden, Inhalte unserer Webseite (mit Ausnahme Ihrer Informationen) ohne ausdrückliche vorherige, schriftliche Genehmigung von Capital Confirmation oder des entsprechenden Dritten nicht zu kopieren, zu reproduzieren, zu verändern, zu modifizieren, abgeleitete Werke zu erstellen oder öffentlich darzustellen. You must ensure that all information you supply to us through our website or Service, or in relation to our website or Service, is true, accurate, complete and not misleading. You shall have sole responsibility for the legality, reliability, integrity, accuracy, and quality of this information. You shall not access all or any part of our website or Service to build a product or service which competes with the Service. You shall not attempt to obtain, or assist third parties in obtaining, access to our website or Service, other than as provided under this Agreement. You shall not make, nor permit any party to make, any use of our website or Service other than to avail of the Service. You shall not make alterations to, or permit our website or Service or any part of it to be combined with, or become incorporated into, any other programs. You shall not provide or otherwise make available our website or the Service in whole or in part (including object and source code), in any form, to any person without our prior written consent. You shall not infringe on our licensors' intellectual property rights or those of any third party in relation to your use of our website or Service. We may make available to you certain Application Programming Interfaces (an "API" or "APIs") to achieve additional functionality for users, and provide capabilities or integrations that leverage one or more of our products or services available at www.confirmation.com or provided by our affiliates, which you may use where applicable, subject to our then current fees (if any) for such APIs. Unless previously authorized by us, or our affiliates, you must not automatically connect (whether through APIs or otherwise) any Service to other data, software, services or networks.

9. Breach.
Without limiting other remedies, we may immediately remove you, warn our community of your actions, issue a warning, temporarily suspend, indefinitely suspend or terminate your membership and refuse to provide our services to you if: (a) you breach this Agreement or the documents it incorporates by reference; (b) we are unable to verify or authenticate any information you provide to us; or (c) we believe that your actions may cause financial loss or legal liability for you, our users or us.

10. Electronic Communications; Identifiers and Passwords; Binding Effect.
Sie erhalten und übertragen Informationen an/von uns über das Internet mittels SSL-Technologie und 2048-Bit-Verschlüsselung. You must use Internet browsers that will support the use of 2048-bit encryption. In order to initiate a session where information is transmitted, you will either select and use an identification code (such as a "log-in ID") and a password or will be prompted to click a link to log-in. You shall protect and safeguard identification codes, passwords, log-in links/emails, and shall only permit authorized employees or yourself to use the identification code and password, or to click the log-in link, in connection with the service. Wir und alle andere Personen, die Informationen von Ihnen erhalten haben und die anhand Identifikationscode und Passwort bzw. per Login-Link/E-Mail übertragen wurden, sind berechtigt, in allen Instanzen darauf zu vertrauen, dass die derart übertragen Informationen von Ihnen übertragen wurden und dass diese Informationen in jeder Hinsicht richtig, genau und vollständig sind, mit demselben Effekt und Zweck, als ob diese Informationen schriftlich und mit Ihrer handschriftlichen Unterschrift unterzeichnet übertragen wurden. Wenn Sie glauben, dass Ihr Identifikationscode verloren, gestohlen oder durch Unbefugte abgerufen wurde, benachrichtigen Sie uns bitte umgehend unter 1-866-325-7201. Kommunikationen, die nach unserer Antwort auf Ihre Mitteilung mit dem Identifikationscode und dem Passwort übermittelt wurden, werden nicht gültig oder wirksam.

11. Privacy.
We do not sell or rent your personal information to third parties and only use your information as described in the Privacy Statement available at https://www.confirmation.com/legal-security-privacy/index.html. We take the protection of our users' privacy seriously. We store and process your information on computers located in Ireland and the United States that are protected with security measures.

Customer Financial information residing within Confirmation.com's processing controls will be maintained and stored according to our security and privacy policies. Confirmation.com takes no responsibility for Customer Financial information once this data is no longer within Confirmation.com's control (e.g., data downloaded by a user or mailed confirmations).

If you object to your information being collected, used, transferred, or otherwise processed in this way, please do not use our services.

11,1 Data Protection Legislation. When using our Services or otherwise providing Personally Identifiable Information to us, you agree to comply with all applicable laws governing or relating to the processing of that Personally Identifiable Information (“Data Protection Laws”). “Personally Identifiable Information” shall mean any information relating to an identified or identifiable natural person whose information you provide to us and that we process as part of the Service or in connection with this Agreement. You confirm that any Personally Identifiable Information that has been provided by you has been collected and disclosed in accordance with Data Protection Laws. When using the Service, you shall not input, upload, maintain or disclose any irrelevant or unnecessary information about individuals.

11,2 Personal Data transferred outside of your home country. Without limiting the foregoing and for clarity, you agree that we may transfer your personal information outside of your home country to another country where the laws may not provide an equivalent level of protection and you confirm that we may so transfer any Personally Identifiable Information that has been provided by you.

Where the provision of Service by us to you involves any transfer of Personally Identifiable Information that has been provided by you outside of the European Economic Area or Switzerland (by way of direct or indirect transfer), the parties agree that the transfers will be done in accordance with Schedule 1 attached hereto. If any other Data Protection Laws require you and us to implement appropriate safeguards to legitimize the transfer of Personally Identifiable Information to a third country, you will let us know and we will negotiate in good faith to implement the required safeguards.

12. Supervisor, Secretary, Coordinator and Clerk Authentication.
You certifies that any and all subject(s) set up as your supervisor(s), secretary(s), coordinator(s) and/or clerk(s) on the Confirm service are your authorized and employed representatives of the .

13. Audit Rights.
Capital Confirmation may, from time to time, conduct various audits of your practices and procedures to determine your compliance with this Agreement. You will reasonably cooperate in all those audits. Capital Confirmation may conduct on-site and/or off-site audits of your facilities as Capital Confirmation determines during normal business hours, and upon reasonable notice.

14. No Warranty.
WE, OUR SUBSIDIARIES, EMPLOYEES AND OUR SUPPLIERS PROVIDE OUR WEB SITE AND SERVICES, INCLUDING BUT NOT LIMITED TO ANY APIS, ON AN "AS IS" BASIS WITHOUT ANY WARRANTIES OF ANY KIND. WE, TO THE FULLEST EXTENT PERMITTED BY LAW, DISCLAIMS ALL WARRANTIES, INCLUDING THE WARRANTY OF MERCHANTABILITY, NON-INFRINGEMENT OF THIRD-PARTIES' RIGHTS, AND THE WARRANTY OF FITNESS FOR A PARTICULAR PURPOSE. WE MAKE NO WARRANTIES ABOUT THE ACCURACY, RELIABILITY, COMPLETENESS, OR TIMELINESS OF THE SERVICES OR ANY CONTENT THEREIN. WE MAKE NO WARRANTIES THAT THE WEBSITE OR SERVICE WILL REMAIN AVAILABLE. WE RESERVE THE RIGHT TO DISCONTINUE OR ALTER ANY OR ALL OF THE WEBSITE OR SERVICE, AND TO STOP PUBLISHING OUR WEBSITE OR SERVICE AT ANY TIME AND IN OUR SOLE DISCRETION WITHOUT NOTICE OR EXPLANATION, AND YOU WILL NOT BE ENTITLED TO ANY COMPENSATION OR OTHER PAYMENT UPON THE DISCONTINUANCE OR ALTERATION OF OUR WEBSITE OR SERVICES. FOR THE AVOIDANACE OF ALL DOUBT, WE DO NOT WARRANT, NOR WILL BE RESPONSIBLE FOR, ANY PRODUCTS, SERVICES, FUNCTIONALITY, OR INTERFACES THAT ARE PROVIDED BY YOU OR ANY THIRD PARTY.

15. Liability Limit.
IN NO EVENT SHALL WE, OUR SUBSIDIARIES, EMPLOYEES OR OUR SUPPLIERS BE LIABLE FOR LOST PROFITS OR ANY SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION WITH OUR SITE, OUR SERVICES, INCLUDING WITHOUT LIMITATION USE OF ANY APIS, OR THIS AGREEMENT (HOWEVER ARISING, INCLUDING NEGLIGENCE). DER NUTZER TRÄGT KEINE HAFTUNG FÜR FOLGESCHÄDEN, EXEMPLARISCHE, BESONDERE, ZUFÄLLIGE SCHÄDEN ODER STRAFSCHADENERSATZ IN ZUSAMMENHANG MIT DEM SERVICE, SELBST WENN ER AUF DIE MÖGLICHKEIT SOLCHER SCHÄDEN HINGEWIESEN WURDE.

IN NO EVENT SHALL WE, OUR SUBSIDIARIES, EMPLOYEES OR OUR SUPPLIERS BE LIABLE WITH RESPECT TO THE ACCURACY OR RELIABILITY OF INFORMATION PROVIDED BY THE AUDITOR, WHETHER INPUTTED INTO THE CAPITAL CONFIRMATION WEBSITE OR ANY ASSOCIATED PLATFORMS BY US CAPITAL CONFIRMATION OR BY THE AUDITOR. THE AUDITOR MAINTAINS THE SOLE RESPONSIBILITY AND LIABILITY FOR REVIEWING AND APPROVING THE INFORMATION POPULATED INTO THE CAPITAL CONFIRMATION WEBSITE AND ASSOCIATED PLATFORMS.

UNSERE HAFTUNG SOWIE DIE HAFTUNG UNSERER TOCHTERFIRMEN, MITARBEITER UND LIEFERANTEN IHNEN ODER JEGLICHEN DRITTEN PARTEIEN GEGENÜBER IST IN JEDEM FALL AUF ENTWEDER (A) DIE GEBÜHREN, DIE SIE UNS IN DEN ZWÖLF MONATEN VOR DEM TAG, AN DEM DIE HAFTUNG ENTSTAND, GEZAHLT HABEN ODER (B) 12 USD BEGRENZT, JE NACHDEM WELCHER BETRAG HÖHER IST. NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN YOUR SOLE AND EXCLUSIVE REMEDY FOR ANY FAILURE OR NONPERFORMANCE OF ANY APIS PROVIDED BY CAPITAL CONFIRMATION SHALL BE FOR CAPITAL CONFIRMATION TO USE COMMERCIALLY REASONABLE EFFORTS TO ADJUST OR REPAIR THE NONPERFORMING APIS.

16. Fair Credit Reporting Disclosure.
The parties acknowledge that CCI is not a consumer reporting agency as such term is defined in the federal Fair Credit Reporting Act, 15 U.S.C. 1581 et seq. ("FCRA") and therefore, is not subject to the requirements or provisions of the FCRA. Any reports accessed through the Services or Sites do not constitute consumer reports as such term is defined in the FCRA, and accordingly, such reports may not be used to determine eligibility for credit, employment, insurance underwriting, tenant screening or for any other purpose provided for in the FCRA. CCI makes no representations or warranties as to its compliance or certifications with respect to the Fair Credit Reporting Act or its regulatory requirements. However, other Users, including banking institutions, financial organizations, credit reporting agencies, and other entities with which the User may interact through the Services or Sites may be subject to the Fair Credit Reporting Act. CCI makes no representations or warranties about such other User's compliance or certifications with respect to the Fair Credit Reporting Act or its regulatory requirements. CCI shall not be deemed a guarantor of the accuracy or completeness of information provided by other Users.

17. Indemnity.
You shall indemnify and hold Capital Confirmation and (as applicable) our parent, subsidiaries, affiliates, officers, directors, agents, and employees and the financial institutions harmless from any and all third-party claims, losses and damages, liability, and costs, including attorney’s fees, against, or incurred by, Capital Confirmation to the extent such claims, damages, liability and costs result directly or indirectly from: (a) your negligence or intentional conduct; (b) your breach of its obligations under this Agreement including, but not limited to, any breach which results in the unauthorized and/or non-permissible use of information obtained via Capital Confirmation’s Confirmation.com service or any other such service under this Agreement; (c) any claim that our website or Service or the use thereof infringes upon, misappropriates, or violates any intellectual property rights of any third party, provided that such claim results from or is related to (i) an unauthorized modification of our website or Service; (ii) the combination of the website or Service with software, hardware, or equipment not provided by us if our website or Service alone would not be the subject of such claim; or (iii) your unauthorized use of the website or Service; (d) any data breach suffered by you, your vendor or processor, or by a vendor or processor for Capital Confirmation; or (e) any claim, action, audit, investigation, regulatory action, inquiry, or other proceeding that arises out of or relates to your failure to comply with any applicable laws and regulations in connection with the transfer of personal data to or outside the EU/EEA including any applicable data protection legislation.

18. Confidentiality.
You may be given access to our confidential information or confidential information from other authorized Users in relation to your use of our website or Service. Information and knowledge related to the operation and processes of the website and Service are also considered confidential information. You shall hold confidential information in confidence and, unless required by law, not make confidential information available to any third party, or use confidential information for any purpose other than as provided for in using our website or Service. You shall take all reasonable steps to ensure that confidential information to which you have access is not disclosed or distributed by any person in violation of this Agreement. You acknowledge that details of the Service constitute our confidential information.

19. Legal Compliance.
You represents and warrants that it has read, understands and shall comply with all laws, regulations and judicial actions including, but not limited to, the Identity Theft and Assumption Deterrence Act, the Fraud and False Statements Act, the USA Freedom Act, the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Gramm-Leach-Bliley Act and the Fair Credit Reporting Act (15 U.S.C. 1681 et seq.), including without limitation, all amendments thereto, and all other applicable federal or state legislation, regulations and judicial actions, as now or as may become effective.

You certify that you will use the service and the information received for no other purpose than is legally permissible. You understand that if the system is used improperly by your personnel, or if its access codes are made available to any unauthorized personnel due to carelessness on your part or any other, you may be held responsible for financial losses, fees or monetary charges that may be incurred and that its access privileges may be terminated. You will not obtain, retain, use, or provide access to the Service to an affiliate or any third party in a manner that may breach any applicable export control or economic sanctions laws and regulations for any jurisdiction, including the United States of America, the United Kingdom and the European Union and its Member States. You warrant that neither you, nor any affiliate to which you provide access to the Service, is affiliated with a specially designated or sanctioned entity under any of those laws and that, in any transaction relating to Confirmation or the Service, such transactions will not involve sanctioned parties, including without limitation through the use of bank accounts at banks that are sanctioned parties. Further, the parties represent and warrant that they have read, understand and shall comply with all applicable laws, regulations and judicial actions including, but not limited to, anti-bribery laws, anti-corruption laws, anti-slavery laws, anti-human trafficking, tax laws, any applicable law aimed at preventing the facilitation of criminal behavior.

20. British Banker’s Association, BBA Enterprises Limited plus any other group company of the British Banker’s Association (Together the “BBA”)
Kein Bestandteil dieser Vereinbarung beschränkt die Haftung der BBA für Todesfälle oder Personenschäden, die durch ihre Fahrlässigkeit oder jene ihrer Mitarbeiter verursacht werden; für Betrug oder betrügerische Falschdarstellungen; oder andere Haftungen, die nach englischem Recht nicht ausgeschlossen werden können, selbst wenn andere Bestimmungen dieser Vereinbarung auf das Gegenteil hindeuten.

You expressly acknowledge and agree that the BBA: (a) is not a party to this Agreement and is not involved in the design, supply or support of Capital Confirmation Inc’s services including the service promoted to UK banks as “BBA Confirmations”; (b) makes no representation or warranty that the services will be adequate or appropriate for you and its requirements and any BBA trademarks or logos present in marketing materials or other documents do not represent an endorsement of the service; (c) shall not be responsible for providing any of the services; and (d) shall have no liability to you whatsoever whether direct or indirect and whether in contact, tort (including negligence), misrepresentation or for any other reason in respect of any of the services provided under this agreement.

21. No Agency.
Sie und Capital Confirmation sind unabhängige Vertragsparteien und durch diese Vereinbarung wird keine Agentur, Partnerschaft, kein Joint Venture und keine arbeits- oder franchiserechtliche Beziehung beabsichtigt oder begründet.

22. Notices.
Except as explicitly stated otherwise, any notices shall be given by postal mail to Capital Confirmation Inc. Attn: Legal Department 214 Centerview Drive, Suite 100, Brentwood, TN 37027 (in the case of Capital Confirmation) or to the email address you provide to Capital Confirmation during the registration process (in your case). Eine Mitteilung gilt 24 Stunden nach dem Absenden der E-Mail als abgegeben, es sei denn, die sendende Partei wurde darüber benachrichtigt, dass die E-Mail-Adresse ungültig ist. Alternativ können wir Ihnen Mitteilungen durch ein korrekt frankiertes Einschreiben mit Rückschein an die Capital Confirmation bei der Anmeldung zur Verfügung gestellte Adresse zukommen lassen. In diesem Fall gilt die Mitteilung 3 Tage nach dem Versanddatum als abgegeben.

23. Arbitration.
Jeder Rechtsstreit bzw. Rechtsanspruch, der sich in Verbindung mit dieser Vereinbarung oder unseren Services ergibt, ausgenommen Rechtsverfahren von Capital Confirmation, um Gebühren einzutreiben und/oder Schadensersatz oder eine einstweilige Verfügung in Verbindung mit dem Betrieb, dem geistigen Eigentum und den Services von Capital Confirmation zu erwirken, sind im Rahmen einer verbindlichen Schlichtung gemäß den Vorschriften der Handelsschiedsgerichtsbarkeit der American Arbitration Association zu entscheiden. Jeder derartige Rechtsstreit oder Anspruch wird auf individueller Basis verhandelt und kann nicht in Verbindung mit einem Streitfall oder einem Anspruch einer anderen Partei entschieden werden. Das Schlichtungsverfahren wird in Nashville, Tennessee, durchgeführt und die Entscheidung des Schiedsgerichts kann von einem zuständigen Gericht für vollstreckbar erklärt werden. Entweder Sie selbst oder Capital Confirmation kann vor einem zuständigen Gericht in Nashville, Tennessee, um zwischenzeitliche oder vorläufige Entlastung ersuchen, um die Rechte oder den Besitz von Ihnen oder Capital Confirmation zu schützen, während die Schlichtung bearbeitet wird. Wenn eine Partei entgegen diesen Bestimmungen Klage erhebt, ist die andere Partei berechtigt, Anwaltsgebühren und Kosten bis zu 1000.00,{[#2]} USD zu verlangen.

24. Governing Law.
This Agreement shall be governed in all respects by the laws of the State of Tennessee, without reference to conflict of laws principles. You further consent to exclusive jurisdiction by the United States District Court for the Middle District of Tennessee.

25. Assignment.
Sie erklären sich einverstanden, dass diese Vereinbarung und alle darin enthaltenen Vereinbarungen im Falle einer Zusammenlegung oder Übernahme automatisch und nach eigenem Ermessen von Capital Confirmation einer anderen Partei zugewiesen werden können. You may not, without our prior written consent, assign, transfer, sub-contract or otherwise deal with any of your rights and/or obligations under this Agreement.

26. Additional Terms.
Die folgenden Richtlinien werden durch Bezugnahme in diese Vereinbarung integriert und stellen weitere Bedingungen in Hinblick auf die spezifischen, auf unserer Seite angebotenen Services dar.

Datenschutzerklärung:
https://www.confirmation.com/legal-security-privacy/index.html

Jede dieser Richtlinien kann von Zeit zu Zeit geändert werden und die entsprechenden Änderungen treten unmittelbar nach deren Veröffentlichung auf unserer Seite in Kraft, mit Ausnahme der Datenschutzerklärung, über deren Änderung Sie dreißig Tage vorher informiert werden. Wenn Sie darüber hinaus spezielle Services auf unserer Seite nutzen, unterliegen Sie den veröffentlichten Richtlinien oder Regeln zu den Services, die Sie über unsere Seite nutzen, die von Zeit zu Zeit veröffentlicht werden können. Alle diese veröffentlichten Richtlinien oder Regeln werden hiermit durch Bezugnahme in diese Vereinbarung integriert.

You acknowledge and agree that: (a) members of Capital Confirmation’s Group may be retained as sub-processors; and (b) Capital Confirmation and members of Capital Confirmation’s Group respectively may engage third-party sub-processors in connection with the provision of the Services.

27. General.
Wir garantieren keinen dauerhaften, ununterbrochenen oder sicheren Zugang zu unseren Services und der Betrieb unserer Seite kann durch zahlreiche Faktoren, die außerhalb unserer Kontrolle liegen, beeinträchtigt werden. Sollte eine Bestimmung dieser Vereinbarung ungültig oder nicht durchsetzbar sein, so gilt sie als gestrichen, was die Gültigkeit der übrigen Bestimmungen nicht berührt. Überschriften gelten lediglich als Referenz und dienen nicht dazu, den Umfang oder das Ausmaß eines Abschnittes zu definieren, zu begrenzen, auszulegen oder zu beschreiben. Mit der Unterlassung unsererseits, einen Verstoß durch Sie oder andere zu ahnden, verzichten wir nicht auf unser Recht, bei späteren oder ähnlichen Verstößen zu handeln. Die offiziell für Inhalte auf der Webseite Confirmation.com verwendete Sprache ist Englisch. Über einen Drittanbieter ermöglicht es Confirmation.com Personen mit begrenzten Englischkenntnissen, auf Informationen auf der Seite zuzugreifen. Durch diesen automatischen Prozess durchgeführte Übersetzungen sollten nicht als exakt angesehen werden, insbesondere hinsichtlich technischer und rechtlicher Begriffe. Zudem können einige Dateien wie Grafiken, Fotos und PDFs im Zuge dieses Prozesses nicht übersetzt werden. Capital Confirmation Inc. garantiert nicht die Genauigkeit und Verlässlichkeit der durch dieses System übersetzten Informationen und haftet nicht für Verluste, die durch ein derartiges Vertrauen auf die Genauigkeit und Verlässlichkeit dieser Informationen entstanden sind. Obwohl jeder Versuch unternommen wird, die Genauigkeit der Übersetzung zu gewährleisten, können Teile davon fehlerhaft sein. Jede Person oder jedes Unternehmen, das auf die im System erhaltenen Informationen vertraut, tut dies auf eigene Gefahr. Diese Vereinbarung stellt die gesamte Übereinkunft und Vereinbarung zwischen den Parteien in Bezug auf den Gegenstand derselben dar. Die Abschnitte 2 (Dienstleistungen und Gebühren) im Hinblick auf die Gebühren, die Sie für unsere Dienstleistungen, 3,3 (Freigabe), 6,3 (Lizenz), 8 (Zugang und Eingriff), 15 (Haftungsbegrenzung), 16 (Schadenersatz) und 20 (Schiedsgerichtsbarkeit) überdauern jede Kündigung bzw. jeden Ablauf dieser Vereinbarung.

28. Disclosures.
Die hierin genannten Services werden erbracht von Capital Confirmation Inc. mit Sitz in 214 Centerview Drive, Suite 100, Brentwood, Tennessee 37027. Gebühren für unsere Dienste sind oben in Abschnitt 2 (Dienstleistungen und Gebühren) aufgeführt.

29. Disputes.
Sie können sich mit Streitfragen zwischen Ihnen und Capital Confirmation hinsichtlich unserer Services schriftlich an unsere Kundenbetreuung wenden: Capital Confirmation, Customer Support, 214 Centerview Drive, Suite 100, Brentwood, TN 37027. Wir ermutigen Sie, alle Streitfälle zwischen Nutzern an Ihre örtliche Strafverfolgungsbehörde, den Leiter der Poststelle oder eine zertifizierte Mediations- oder Schiedsgerichtsstelle weiterzuleiten.

30. Your Acceptance of this User Agreement.
Sie bestätigen Ihr Einverständnis mit dieser Nutzervereinbarung durch Ihre Nutzung des Services von Confirmation.com. Ein derartiges Einverständnis hat dieselbe rechtliche Wirkung wie Ihre handschriftliche Unterschrift auf einem Schriftstück, das die Bedingungen dieser Nutzervereinbarung enthält.

Anlage 1

EUROPEAN PERSONAL DATA TRANSFERS

We process Personally Identifiable Information outside of the European Economic Area (EEA) and Switzerland including in third countries which may not be recognized by the European Commission or the Swiss Federal Data Protection and Information Commission as providing an adequate level of privacy protection, such as in the United States.

Capital Confirmation will enter into the Standard Contractual Clauses approved by the European Commission to legitimize the transfers of Personally Identifiable Information outside of the EEA and/or Switzerland to an inadequate third country.

If we are required to enter into the Standard Contractual Clauses to legitimize the transfer of Personally Identifiable Information outside of the EEA and/or Switzerland, then the parties hereby agree to the Standard Contractual Clauses set forth in Attachment 1 (for those cases where we act as a processor with respect to personal data) below, and you evidence your acceptance of the Standard Contractual Clauses by clicking on “Accept User Agreement and Add Account” button on the Capital Confirmation website or by using the Confirmation.com service.

Notwithstanding the foregoing, if the Standard Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personally Identifiable Information outside of the EEA to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer agreements), then you shall procure the appropriate consent of any data subject whose Personally Identifiable Information is transferred to us to enable us to transfer that Personally Identifiable Information to the United States (or such other third country).

Attachment 1: Standard Contractual Clauses (Processor)

For the transfer of personal data outside of the EEA and/or Switzerland to processors established in third countries which do not ensure an adequate level of data protection, the data exporter and the data importer have agreed on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.

Notwithstanding the foregoing, if the following Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personal Data outside of the EEA and/or Switzerland to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer Clauses), you shall procure the appropriate consent of any data subject whose Personal Data is transferred to us to enable the Parties to transfer that Personal Data to the United States (or such other third country).

Clause 1
Begriffsbestimmungen.

Im Rahmen der Vertragsklauseln gelten folgende Begriffsbestimmungen:
(a) ‘personal data’, ‘special categories of data’, ‘process/processing’, ‘controller’, ‘processor’, ‘data subject’ and ‘supervisory authority’ shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;
(b) ‘the data exporter’ means the party who transfers the personal data;
(c) ‘the data importer’ means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country’s system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC;
(d) ‘the sub-processor’ means any processor engaged by the data importer or by any other sub-processor of the data importer who agrees to receive from the data importer or from any other sub-processor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract;
(e) ‘the applicable data protection law’ means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established;
(f) ‘technical and organisational security measures’ means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

Clause 2
Einzelheiten der Übermittlung

Die Einzelheiten der Übermittlung, insbesondere die besonderen Kategorien personenbezogener Daten, sofern vorhanden, werden in Anhang 1 erläutert, der Bestandteil dieser Klauseln ist.

Clause 3
Drittbegünstigtenklausel

(a) The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary.
(b) The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity.
(c) The data subject can enforce against the sub-processor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.
(d) The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law.

Clause 4
Pflichten des Datenexporteurs

Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;
(b) that it has instructed and throughout the duration of the personal data-processing services will instruct the data importer to process the personal data transferred only on the data exporter’s behalf and in accordance with the applicable data protection law and the Clauses;
(c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 to this contract;
(d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;
(e) that it will ensure compliance with the security measures;
(f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;
(g) to forward any notification received from the data importer or any sub-processor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;
(h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for sub-processing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;
(i) that, in the event of sub-processing, the processing activity is carried out in accordance with Clause 11 by a sub-processor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and
(j) that it will ensure compliance with Clause 4(a) to (i).

Clause 5
Pflichten des Datenimporteurs

Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
(c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred;
(d) that it will promptly notify the data exporter about:
(e) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation;
i. any accidental or unauthorised access; and
ii. any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so;
iii. to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;
(f) at the request of the data exporter to submit its data-processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority. The data importer has included the security requirements detailed in Appendix 2 at the request of the data exporter, and the data exporter agrees that such security requirements and the audit obligations and rights under the Master Agreement will be deemed to fully satisfy the audit rights granted to the data exporter under Clauses 5(f) and 12,2;
(g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for sub-processing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;
(h) that, in the event of sub-processing, it has previously informed the data exporter and obtained its prior written consent (whether under or in connection with the Master Agreement or otherwise);
(i) that the processing services by the sub-processor will be carried out in accordance with Clause 11;
(j) to send promptly, on request, a copy of any sub-processor agreement it concludes under the Clauses to the data exporter.

Clause 6
Verbindlichkeit

1. The parties agree that any data subject, who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or sub-processor is entitled to receive compensation from the data exporter for the damage suffered.
2. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his sub-processor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity.
a. The data importer may not rely on a breach by a sub-processor of its obligations in order to avoid its own liabilities.
3. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the sub-processor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the sub-processor agrees that the data subject may issue a claim against the data sub-processor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. Eine solche Haftung des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach diesen Klauseln beschränkt.

Clause 7
Schlichtung und Gerichtsstand

1. The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject:
2. to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority;
3. to refer the dispute to the courts in the Member State in which the data exporter is established.
4. The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law.

Clause 8
Cooperation with supervisory authorities

1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law.
2. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any sub-processor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law.
3. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any sub-processor preventing the conduct of an audit of the data importer, or any sub-processor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5(b).

Clause 9
Anwendbares Recht

Für diese Klauseln gilt das Recht des Mitgliedstaats, in dem der Datenexporteur niedergelassen ist.

Clause 10
Änderung des Vertrags

Die Parteien verpflichten sich, die Klauseln nicht zu verändern. Es steht den Parteien allerdings frei, erforderlichenfalls weitere, geschäftsbezogene Klauseln aufzunehmen, sofern diese nicht im Widerspruch zu der Klausel stehen.

Clause 11
Vergabe eines Unterauftrags

1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Bei der Weitervergabe seiner Verpflichtungen gemäß den Klauseln durch den Datenimporteur, kann dies, mit Einverständniserklärung des Datenexporteurs, geschehen, jedoch nur basierend auf einer schriftlichen Vereinbarung mit dem externen Dienstleister, die den Dienstleister die selben Verpflichtungen auferlegt wie sie der Datenimporteur gemäß den Klauseln hat. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor's obligations under such agreement.
2. The prior written contract between the data importer and the sub-processor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.
3. The provisions relating to data protection aspects for sub-processing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established.
4. The data exporter shall keep a list of sub-processing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5(j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority.

Clause 12
Pflichten nach Beendigung der Datenverarbeitungsdienste

1. The parties agree that on the termination of the provision of data-processing services, the data importer and the sub-processor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In diesem Fall garantiert der Datenimporteur, dass er die Vertraulichkeit der übermittelten personenbezogenen Daten gewährleistet und diese Daten nicht mehr aktiv weiterverarbeitet.
2. The data importer and the sub-processor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data-processing facilities for an audit of the measures referred to in paragraph 1.

On behalf of the data exporter:
Name (written out in full): [Insert name of the authorised signatory]
Position: [Insert position of the authorised signatory]
Adresse:
Other information necessary in order for the contract to be binding (if any): (stamp of organisation)
Unterschrift

On behalf of the data importer:
Capital Confirmation, Inc.
Name (written out in full): Diana Flanders
Position: VP, Business Integrations
Address: Capital Confirmation, Inc. 214 Centerview Drive, Suite 100, Brentwood, TN 37027
Other information necessary in order for the contract to be binding (if any): N/A
Unterschrift

Anhang 1
zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden

Die Mitgliedstaaten sind in der Lage gemäß ihren nationalen Gesetzen sämtliche zusätzliche, erforderliche Informationen in diesem Anhang hinzufügen oder ausdrücken

Datenexporteur

The data exporter is (please specify briefly your activities relevant to the transfer):

The data exporter will export the personal data contained in the client's documentation to the requestors via the Confirmation.com platform. Exported data will concern personal data of data exporter's employees with access given to the online platform handled by the data importer. Also, data exporter's customers data for the purposes of forwarding data exporter's audits to requestors by the Importer.

Datenimporteur

The data importer is (please specify briefly activities relevant to the transfer):

Capital Confirmation Inc.

The data importer provides an online venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users. Processed data will concern data exporter's employees for which accounts in the platform handled by the data importer will be created. Also, data exporter's customers data for the purposes of forwarding data exporters confirmations to requestors by the data importer.

Betroffene Personen

The personal data transferred concern the following categories of data subjects (please specify):

Data exporter’s employees and personal data of data exporter’s client’s representatives and other subjects mentioned in the documentation, which is sent to the requestor

Datenkategorien

The personal data transferred concern the following categories of data (please specify):
-names, surnames, names of authorized representatives of the data exporter’s clients
-including but not limited to: names, surnames, addresses, account numbers, financial information, PESEL number and other personal data of the subjects mentioned in the documentation sent to the requestor.

Besondere Kategorien personenbezogener Daten (wenn zutreffend)

Not applicable

Verarbeitung

The personal data transferred will be subject to the following basic processing activities (please specify):

The platform Confirmation.com is internet-based system, that allows the data exporter to send documentation to auditors for the needs of the audit. The documentation will be encrypted by the data importer while uploading it to the platform, so the data importer should not get access to the contents of the documentation and personal data contained in the documentation beyond the scope necessary to perform the encryption process.

DATA EXPORTER
Name:
Authorised Signature

DATA IMPORTER
Capital Confirmation, Inc.
Name: Diana Flanders
Authorised Signature

Anhang 2
zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden.

Beschreibung der technischen oder organisatorischen Sicherheitsmaßnahmen, die der Datenimporteur gemäß Klausel 4 Buchstabe d und Klausel 5 Buchstabe c eingeführt hat (oder Dokument/Rechtsvorschrift beigefügt):

Data Importer has implemented the technical and organisation security measures set out in the Agreements and incorporated herein by reference.

DATA EXPORTER
Name:
Authorised Signature
Capital Confirmation Inc.
Name: Diana Flanders
Authorised Signature

For Clients

AGB

IM FOLGENDEN WERDEN DIE BEDINGUNGEN AUFGEFÜHRT, ZU DENEN IHNEN CAPITAL CONFIRMATION INC. ZUGANG ZU UNSEREN DIENSTLEISTUNGEN GEWÄHRT.

Welcome to the User Agreement for Capital Confirmation Inc. This Agreement describes the terms and conditions applicable to your use of our services available under the domains and sub-domains of www.confirmation.com, and learn.confirmation.com ("Confirmation Website(s)") owned and operated by Capital Confirmation, and the general principles for the websites of our subsidiaries. Wenn Sie mit den Allgemeinen Geschäftsbedingungen dieser Vereinbarung nicht einverstanden sind, sehen Sie bitte von der Nutzung unserer Dienstleistungen oder dem Zugriff darauf ab. You evidence your acceptance of the terms and conditions of this Agreement through your use of any of the Confirmation.com services (aka "Confirm™" service).

If you have any questions, please email us at customer.support@confirmation.com.

Sie müssen die in dieser Nutzervereinbarung und der Datenschutzerklärung enthaltenen Allgemeinen Geschäftsbedingungen lesen, mit ihnen einverstanden sein und diese akzeptieren, einschließlich den Allgemeinen Geschäftsbedingungen, die im Folgenden ausdrücklich aufgeführt sind, und diejenigen, auf welche verwiesen wird. Ansonsten dürfen Sie unsere Dienste nicht nutzen. Wir empfehlen Ihnen dringend, beim Lesen dieser Nutzervereinbarung auch die Informationen aufzurufen und zu lesen, die auf den Seiten und Websites enthalten sind, auf welche in diesem Dokument verwiesen wird, da diese eventuell weitere Geschäftsbedingungen enthalten, die für Sie als Nutzer von Capital Confirmation gelten. Please note: underlined words and phrases are links to these pages and websites. Durch das Akzeptieren dieser Nutzervereinbarung erkennen Sie gleichzeitig an, dass Ihre Nutzung anderer Websites von Capital Confirmation den auf diesen Websites veröffentlichten Allgemeinen Geschäftsbedingungen unterliegt.

Wir können diese Vereinbarung jederzeit durch das Veröffentlichen der geänderten Bedingungen auf unserer Website ändern. Except as stated below, all amended terms shall automatically be effective immediately upon posting on our site. Sie werden von den Änderungen dieser Vereinbarung weder schriftlich noch per E-Mail informiert. Veränderungen dieser Vereinbarung müssen schriftlich erfolgen und von Ihnen und Capital Confirmation Inc. unterzeichnet werden. Diese Vereinbarung tritt am 1. März 2003 in Kraft.

1. Membership Eligibility.

Unsere Dienstleistungen stehen nur Personen zur Verfügung, die unter dem geltenden Recht rechtlich bindende Verträge eingehen können. Ohne Einschränkung des Vorhergesagten können unsere Dienstleistungen weder von Minderjährigen noch von zeitweise oder unbegrenzt gesperrten Mitgliedern von Capital Confirmation in Anspruch genommen werden. Wenn Sie noch minderjährig sind, dürfen Sie diese Dienstleistung nicht nutzen. Falls Sie nicht berechtigt sind, sehen Sie bitte von der Nutzung unserer Dienstleistungen ab. Darüber hinaus dürfen Ihr Konto bei Capital Confirmation (einschließlich Feedback) und die Nutzer-ID nicht an Dritte übertragen oder verkauft werden. Falls Sie sich als Unternehmen registrieren, erklären Sie, dass Sie befugt sind, das Unternehmen an diese Vereinbarung zu binden. Falls Sie sich als Einzelperson registrieren, erklären Sie, dass Sie die Einzelperson sind, die Sie behaupten zu sein.

2. Fees and Service.

Capital Confirmation provides a venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users (the "Service"). Joining and using our Service to respond to audit confirmations is free. Wir dürfen nach eigenem Ermessen einige oder alle unserer Dienstleistungen jederzeit ändern. Falls wir eine neue Dienstleistung einführen, gelten die Gebühren für diese Dienstleistung ab deren Einführung. The Service also includes the provision of ancillary services deemed reasonably necessary by Capital Confirmation to run a venue for digital transaction management, including but not limited to customer support, billing, and account management.

3. Capital Confirmation is a Venue.

3,1 Capital Confirmation ist weder eine Bank oder Anwaltskanzlei noch ein Bevollmächtigter einer Bank oder Anwaltskanzlei. Stattdessen fungiert unsere Website als Transaktionsplattform, auf der Nutzer jederzeit und von überall Bestätigungen anfragen und empfangen können. We are not involved in the actual transaction between users of and providers of the confirmation information. Infolgedessen haben wir keine Kontrolle über die Qualität, Genauigkeit, Aktualität oder Rechtmäßigkeit der Anfragen und der Antworten oder der Wahrheit oder Genauigkeit der Anfragen und Antworten. We also cannot ensure that a provider will actually complete a transaction.

3,2 Verifizierung der Identität. Wir verwenden verschiedene Techniken zur Überprüfung der Identität unserer Nutzer, wenn sich diese auf unserer Website registrieren. Da allerdings die Nutzer-Verifizierung im Internet schwierig ist, kann und wird Capital Confirmation nicht die behauptete Identität jedes einzelnen Nutzers bestätigen. Daher haben wir ein vom Nutzer einzuleitendes Kommunikationssystem eingerichtet, um Ihnen bei der Evaluierung der Frage, mit wem Sie zusammenarbeiten, zu helfen. Wir ersuchen Sie, über die auf unserer Seite verfügbaren Tools direkt mit den Einzelpersonen zu kommunizieren.

3,3 Freigabe. Da wir eine Transaktionsplattform sind, entbinden Sie Capital Confirmation (und unsere Führungskräfte, Vorstandsmitglieder, Agenten, Tochtergesellschaften, Joint Ventures und Mitarbeiter) im Fall eines Konflikts mit einem oder mehreren Nutzern von Ansprüchen jeder Art (einschließlich Ansprüchen wegen Folgeschäden), bekannt und unbekannt, vermutet und nicht vermutet, offen gelegt und nicht offen gelegt, die aus derartigen Konflikten entstehen könnten oder in irgendeiner Art mit diesen verbunden sind. If you are a California resident, you waive California Civil Code §1542, which says: “A general release does not extend to claims which the creditor does not know or suspect to exist in his favor at the time of executing the release, which if known by him must have materially affected his settlement with the debtor.”

3.4. Kontrolle der Informationen. Wir kontrollieren die Informationen, die von anderen Nutzern zur Verfügung gestellt und über unser System verfügbar gemacht werden, nicht. Es kann sein, dass Informationen anderer Nutzer unrichtig sind. Handeln Sie bitte vorsichtig und umsichtig, wenn Sie unsere Seite nutzen.

3.5. Kundenbetreuung. Monday through Friday between the hours of 8:00 A.M. and 5:00 P.M Central Standard Time, customer support shall be available free of charge by telephone or by email at one or more phone numbers or email addresses to be specified on our website located at www.confirmation.com.

4. Authorizing and Requesting.

Durch die Autorisierung bzw. die Anforderung einer Bestätigung erklären Sie sich mit den Verpflichtungen gemäß den Bedingungen dieses Vertrages einverstanden. Autorisierungen und Anforderungen sind nicht widerruflich. Mit der Entscheidung für die Autorisierung bzw. die Anforderung einer Bestätigung bestätigen Sie, dass Sie gesetzlich berechtigt sind, solche Bestätigungen zu autorisieren, anzufordern bzw. zu beantworten.

5. Address Lookup.

Capital Confirmation erlangt Informationen zur Adresssuche aus öffentlichen und privaten Datenquellen. Die in diesem System verwendeten öffentlichen Verzeichnisse, privaten Aufzeichnungen und kommerziell verfügbaren Datenquellen sind fehlerhaft und unvollständig. Daten werden gelegentlich falsch eingegeben und fehlerhaft verarbeitet. Sie sollten nicht darauf vertrauen, dass dieses System absolut korrekt ist. Bevor Sie sich auf jegliche Daten verlassen, die dieses System liefert, sollten sie anderweitig überprüft werden.

6. Fraud.

Ohne Einschränkung anderer zur Verfügung stehender Rechtsmittel kann Capital Confirmation Ihr Konto sperren oder löschen, wenn wir den Verdacht haben, dass Sie (aufgrund einer Verurteilung, eines Vergleichs, einer Ermittlung wegen Versicherungsbetrugs oder aus anderen Gründen) an betrügerischen Aktivitäten in Zusammenhang mit unserer Seite beteiligt waren.

7. Your Information.

 7,1 Definition. “Your Information” is defined as any information you provide to us or other users in the registration or confirmation process, in any message area or through any email feature. Sie sind alleine verantwortlich für Ihre Informationen und wir agieren als passive Plattform für die Online-Distribution und Veröffentlichung Ihrer Informationen.

7,2 Unzulässige Aktivitäten. Your Information (or any items listed) and your activities on the site shall not: (a) be false, inaccurate or misleading; (b) be fraudulent; (c) infringe any third party’s copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy; (d) violate any law, statute, ordinance or regulation (including, but not limited to, those governing consumer protection or antidiscrimination); (e) be defamatory, trade libelous, unlawfully threatening or unlawfully harassing; (f) be obscene or contain child pornography; (g) contain any viruses, Trojan horses, worms, time bombs, cancelbots, easter eggs or other computer programming routines that may damage, detrimentally interfere with, surreptitiously intercept or expropriate any system, data or personal information; and (h) create liability for us or cause us to lose (in whole or in part) the services of our ISPs or other suppliers. Zudem sind Sie nicht dazu berechtigt eine Bestätigung zu autorisieren oder anzufordern (oder jegliche Transaktion zu vollziehen, die durch die Nutzung unseres Dienstes ausgelöst wurde), bei der die Autorisierung oder Anforderung dazu führen könnte, dass wir geltendes Recht, eine Verordnung oder ein Regelwerk verletzen.

7,3 Lizenz. Ausschließlich, um es Capital Confirmation zu ermöglichen, die Informationen zu nutzen, die Sie uns zur Verfügung stellen, und um keinerlei Rechte zu verletzen, die Sie an diesen Informationen haben, erklären Sie, uns ein nicht-exklusives, weltweites, unbefristetes, unwiderrufliches, gebührenfreies, unterlizenzierbares (über mehrere Stufen) Recht einzuräumen, die Urheberrechte, Werbungsrechte und Datenbank-Rechte (aber keine weiteren Rechte) in allen Medien, die derzeit bekannt oder noch nicht bekannt sind, auszuüben, die Sie an Ihren Informationen innehaben. Capital Confirmation wird Ihre Informationen nur in Übereinstimmung mit unserer Datenschutzerklärung verwenden.

8. Ownership of Intellectual Property.

Capital Confirmation besitzt und behält alle Rechte, Titel und Interessen an sämtlichem geistigen Eigentum in Verbindung mit der Dienstleistung oder mit der Beziehung, die in dieser Vereinbarung beschrieben ist. „Geistiges Eigentum“ bezeichnet alle Ideen, Entdeckungen, Erfindungen, Entwicklungen, Designs, Verbesserungen, Handelsmarken, Dienstleistungsmarken, Handelsgeheimnisse, geschützte Informationen, Programme, Quellcodes, Objektcodes, Patentanmeldungen, Patente, Copyrights (für die Dauer derselben, einschließlich Verlängerungen und Rechterückfall), urheberrechtlich schützbare Werke und die damit verbundenen Geschäftswerte, einschließlich Erweiterungen, Verbesserungen und abgeleiteter Werke, die aktuell bestehen oder hieraus entstehen. You hereby assign and transfer to Capital Confirmation any and all rights in any such Intellectual Property, either presently existing or hereinafter arising, and agree to take such actions (at Capital Confirmation's expense) as Capital Confirmation may reasonably request to secure such rights for Capital Confirmation. Solange Sie registrierter Nutzer unserer Dienstleistungen sind sowie für einen Zeitraum von zwei (2) Jahren nach dem Datum Ihres letzten Logins erklären Sie sich einverstanden, keine Dienstleistungen anzubieten oder andere beim Angebot von Dienstleistungen zu unterstützen, die in Wettbewerb mit den von Capital Confirmation angebotenen Dienstleistungen stehen können. Unsolicited ideas or product feedback will automatically become our property, without any compensation to you and we may use or distribute such submissions and their contents for any purpose and in any way without any obligations of confidentiality or otherwise.

9. Access and Interference.

Sie erklären sich einverstanden, keine Robots, Spiders oder andere automatische Geräte oder manuelle Prozesse zu verwenden, um unsere Webseiten oder deren Inhalte ohne vorherige ausdrückliche schriftliche Genehmigung zu überwachen oder zu vervielfältigen. You agree that you will not reverse engineer, disassemble, decompile, decode, adapt, develop, or modify the website or Service, or otherwise attempt to derive or gain access to the source code of the website or Service, in whole or in part. Sie erklären sich einverstanden, keine Geräte, Software oder Routinen zu verwenden, um unsere Sicherheitsfunktionen zu umgehen oder die korrekte Funktion der Capital Confirmation Website oder anderer Aktivitäten auf unserer Website zu beeinträchtigen oder dies zu versuchen. Sie erklären sich einverstanden, keine Aktionen zu unternehmen, die unsere Netzwerkinfrastruktur unverhältnismäßig stark belasten. Viele Informationen auf unserer Seite werden in Echtzeit aktualisiert und stehen im Eigentum von Capital Confirmation oder werden uns von unseren Nutzern oder Dritten lizenziert. Sie erklären sich einverstanden, Inhalte unserer Webseite (mit Ausnahme Ihrer Informationen) ohne ausdrückliche vorherige, schriftliche Genehmigung von Capital Confirmation oder des entsprechenden Dritten nicht zu kopieren, zu reproduzieren, zu verändern, zu modifizieren, abgeleitete Werke zu erstellen oder öffentlich darzustellen. You must ensure that all information you supply to us through our website or Service, or in relation to our website or Service, is true, accurate, complete and not misleading. You shall have sole responsibility for the legality, reliability, integrity, accuracy, and quality of this information. You shall not access all or any part of our website or Service to build a product or service which competes with the Service. You shall not attempt to obtain, or assist third parties in obtaining, access to our website or Service, other than as provided under this Agreement. You shall not make, nor permit any party to make, any use of our website or Service other than to avail of the Service. You shall not make alterations to, or permit our website or Service or any part of it to be combined with, or become incorporated into, any other programs. You shall not provide or otherwise make available our website or the Service in whole or in part (including object and source code), in any form, to any person without our prior written consent. You shall not infringe on our licensors' intellectual property rights or those of any third party in relation to your use of our website or Service. We may make available to you certain Application Programming Interfaces (an "API" or "APIs") to achieve additional functionality for users, and provide capabilities or integrations that leverage one or more of our products or services available at www.confirmation.com or provided by our affiliates, which you may use where applicable, subject to our then current fees (if any) for such APIs. Unless previously authorized by us, or our affiliates, you must not automatically connect (whether through APIs or otherwise) any Service to other data, software, services or networks.

10. Breach.
Without limiting other remedies, we may immediately remove you, warn our community of your actions, issue a warning, temporarily suspend, indefinitely suspend or terminate your membership and refuse to provide our services to you if: (a) you breach this Agreement or the documents it incorporates by reference; (b) we are unable to verify or authenticate any information you provide to us; or (c) we believe that your actions may cause financial loss or legal liability for you, our users or us.

11. Electronic Communications; Identifiers and Passwords; Binding Effect.

Sie erhalten und übertragen Informationen an/von uns über das Internet mittels SSL-Technologie und 2048-Bit-Verschlüsselung. You must use Internet browsers that will support the use of 2048-bit encryption. In order to initiate a session where information is transmitted, you will select and use an identification code (such as a "log-in ID") and a password. Sie verpflichten sich, diesen Identifikationscode und das Passwort zu schützen und zu sichern und deren Nutzung in Verbindung mit dem Service nur autorisierten Mitarbeitern zu gestatten. Wir und alle anderen Personen, die Informationen von Ihnen erhalten haben, die über den Identifikationscode und das Passwort übertragen wurden, sind berechtigt, in allen Instanzen darauf zu vertrauen, dass die derart übertragenen Informationen von Ihnen übertragen wurden, dass diese Informationen in jeder Hinsicht richtig, genau und vollständig sind, mit demselben Effekt und Zweck, als ob diese Informationen schriftlich und mit Ihrer handschriftlichen Unterschrift unterzeichnet übertragen wurden. Wenn Sie glauben, dass Ihr Identifikationscode verloren, gestohlen oder durch Unbefugte abgerufen wurde, benachrichtigen Sie uns bitte umgehend unter 1-866-325-7201. Kommunikationen, die nach unserer Antwort auf Ihre Mitteilung mit dem Identifikationscode und dem Passwort übermittelt wurden, werden nicht gültig oder wirksam.

12. Privacy.
We do not sell or rent your personal information to third parties and only use your information as described in the Privacy Statement available at https://www.confirmation.com/legal-security-privacy/index.html. We take the protection of our users' privacy seriously. We store and process your information on computers located in Ireland and the United States that are protected with security measures.

Customer Financial information residing within Confirmation.com’s processing controls will be maintained and stored according to our security and privacy policies. Confirmation.com takes no responsibility for Customer Financial information once this data is no longer within Confirmation.com’s control (e.g., data downloaded by a user or mailed confirmations).

If you object to your information being collected, used, transferred, or otherwise processed in this way, please do not use our services.

12,1    Data Protection Legislation.  When using our Services or otherwise providing Personally Identifiable Information to us, you agree to comply with all applicable laws governing or relating to the processing of that Personally Identifiable Information (“Data Protection Laws”). “Personally Identifiable Information” shall mean any information relating to an identified or identifiable natural person whose information you provide to us and that we process as part of the Service or in connection with this Agreement. You confirm that any Personally Identifiable Information that has been provided by you has been collected and disclosed in accordance with Data Protection Laws. When using the Service, you shall not input, upload, maintain or disclose any irrelevant or unnecessary information about individuals.

12,2 Personal Data transferred outside of your home country.

Without limiting the foregoing and for clarity, you agree that we may transfer your personal information outside of your home country to another country where the laws may not provide an equivalent level of protection and you confirm that we may so transfer any Personally Identifiable Information that has been provided by you.

Where the provision of Service by the us to you involves any transfer of Personally Identifiable Information that has been provided by you outside of the European Economic Area or Switzerland (by way of direct or indirect transfer), the parties agree that the transfers will be done in accordance with Schedule 1 attached hereto. If any other Data Protection Laws require you and us to implement appropriate safeguards to legitimize the transfer of Personally Identifiable Information to a third country, you will let us know and we will negotiate in good faith to implement the required safeguards.

13. No Warranty.

WE, OUR SUBSIDIARIES, EMPLOYEES AND OUR SUPPLIERS PROVIDE OUR WEB SITE AND SERVICES, INCLUDING BUT NOT LIMITED TO ANY APIS, ON AN "AS IS" BASIS WITHOUT ANY WARRANTIES OF ANY KIND. WE, TO THE FULLEST EXTENT PERMITTED BY LAW, DISCLAIM ALL WARRANTIES, INCLUDING THE WARRANTY OF MERCHANTABILITY, NON-INFRINGEMENT OF THIRD-PARTIES' RIGHTS, AND THE WARRANTY OF FITNESS FOR A PARTICULAR PURPOSE. WE MAKE NO WARRANTIES ABOUT THE ACCURACY, RELIABILITY, COMPLETENESS, OR TIMELINESS OF THE SERVICES OR ANY CONTENT THEREIN. WE MAKE NO WARRANTIES THAT THE WEBSITE OR SERVICE WILL REMAIN AVAILABLE. WE RESERVE THE RIGHT TO DISCONTINUE OR ALTER ANY OR ALL OF THE WEBSITE OR SERVICE, AND TO STOP PUBLISHING OUR WEBSITE OR SERVICE AT ANY TIME AND IN OUR SOLE DISCRETION WITHOUT NOTICE OR EXPLANATION, AND YOU WILL NOT BE ENTITLED TO ANY COMPENSATION OR OTHER PAYMENT UPON THE DISCONTINUANCE OR ALTERATION OF OUR WEBSITE OR SERVICES. FOR THE AVOIDANACE OF ALL DOUBT, WE DO NOT WARRANT, NOR WILL BE RESPONSIBLE FOR, ANY PRODUCTS, SERVICES, FUNCTIONALITY, OR INTERFACES THAT ARE PROVIDED BY YOU OR ANY THIRD PARTY.

14. Liability Limit.

IN NO EVENT SHALL WE, OUR SUBSIDIARIES, EMPLOYEES OR OUR SUPPLIERS BE LIABLE FOR LOST PROFITS OR ANY SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION WITH OUR SITE, OUR SERVICES, INCLUDING WITHOUT LIMITATION USE OF ANY APIS, OR THIS AGREEMENT (HOWEVER ARISING, INCLUDING NEGLIGENCE). DER NUTZER TRÄGT KEINE HAFTUNG FÜR FOLGESCHÄDEN, EXEMPLARISCHE, BESONDERE, ZUFÄLLIGE SCHÄDEN ODER STRAFSCHADENERSATZ IN ZUSAMMENHANG MIT DEM SERVICE, SELBST WENN ER AUF DIE MÖGLICHKEIT SOLCHER SCHÄDEN HINGEWIESEN WURDE.

IN NO EVENT SHALL WE, OUR SUBSIDIARIES, EMPLOYEES OR OUR SUPPLIERS BE LIABLE WITH RESPECT TO THE ACCURACY OR RELIABILITY OF INFORMATION PROVIDED BY THE AUDITOR, WHETHER INPUTTED INTO THE CAPITAL CONFIRMATION WEBSITE OR ANY ASSOCIATED PLATFORMS BY US CAPITAL CONFIRMATION OR BY THE AUDITOR. THE AUDITOR MAINTAINS THE SOLE RESPONSIBILITY AND LIABILITY FOR REVIEWING AND APPROVING THE INFORMATION POPULATED INTO THE CAPITAL CONFIRMATION WEBSITE AND ASSOCIATED PLATFORMS.

UNSERE HAFTUNG SOWIE DIE HAFTUNG UNSERER TOCHTERFIRMEN, MITARBEITER UND LIEFERANTEN IHNEN ODER JEGLICHEN DRITTEN PARTEIEN GEGENÜBER IST IN JEDEM FALL AUF ENTWEDER (A) DIE GEBÜHREN, DIE SIE UNS IN DEN ZWÖLF MONATEN VOR DEM TAG, AN DEM DIE HAFTUNG ENTSTAND, GEZAHLT HABEN ODER (B) 12 USD BEGRENZT, JE NACHDEM WELCHER BETRAG HÖHER IST. NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN YOUR SOLE AND EXCLUSIVE REMEDY FOR ANY FAILURE OR NONPERFORMANCE OF ANY APIS PROVIDED BY CAPITAL CONFIRMATION SHALL BE FOR CAPITAL CONFIRMATION TO USE COMMERCIALLY REASONABLE EFFORTS TO ADJUST OR REPAIR THE NONPERFORMING APIS.

15. Fair Credit Reporting Disclosure.

The parties acknowledge that CCI is not a consumer reporting agency as such term is defined in the federal Fair Credit Reporting Act, 15 U.S.C. 1581 et seq. ("FCRA") and therefore, is not subject to the requirements or provisions of the FCRA. Any reports accessed through the Services or Sites do not constitute consumer reports as such term is defined in the FCRA, and accordingly, such reports may not be used to determine eligibility for credit, employment, insurance underwriting, tenant screening or for any other purpose provided for in the FCRA. CCI makes no representations or warranties as to its compliance or certifications with respect to the Fair Credit Reporting Act or its regulatory requirements. However, other Users, including banking institutions, financial organizations, credit reporting agencies, and other entities with which the User may interact through the Services or Sites may be subject to the Fair Credit Reporting Act. CCI makes no representations or warranties about such other User's compliance or certifications with respect to the Fair Credit Reporting Act or its regulatory requirements. CCI shall not be deemed a guarantor of the accuracy or completeness of information provided by other Users.

16. Indemnity.

You shall indemnify and hold Capital Confirmation and (as applicable) our parent, subsidiaries, affiliates, officers, directors, agents, and employees and the financial institutions harmless from any and all third-party claims, losses and damages, liability, and costs, including attorney’s fees, against, or incurred by, Capital Confirmation to the extent such claims, damages, liability and costs result directly or indirectly from: (a) Your negligence or intentional conduct; (b) Your breach of its obligations under this Agreement including, but not limited to, any breach which results in the unauthorized and/or non-permissible use of information obtained via Capital Confirmation’s Confirmation.com service or any other such service under this Agreement; (c) any claim that our website or Service or the use thereof infringes upon, misappropriates, or violates any intellectual property rights of any third party, provided that such claim results from or is related to (i) an unauthorized modification of our website or Service; (ii) the combination of the website or Service with software, hardware, or equipment not provided by us if our website or Service alone would not be the subject of such claim; or (iii) your unauthorized use of the website or Service; (d) any data breach suffered by You, Your vendor or processor, or by a vendor or processor for Capital Confirmation; or (e) any claim, action, audit, investigation, regulatory action, inquiry, or other proceeding that arises out of or relates to your failure to comply with any applicable laws and regulations in connection with the transfer of personal data to or outside the EU/EEA including any applicable data protection legislation.

17. Confidentiality.

You may be given access to our confidential information or confidential information from other authorized Users in relation to your use of our website or Service. Information and knowledge related to the operation and processes of the website and Service are also considered confidential information. You shall hold confidential information in confidence and, unless required by law, not make confidential information available to any third party, or use confidential information for any purpose other than as provided for in using our website or Service. You shall take all reasonable steps to ensure that confidential information to which you have access is not disclosed or distributed by any person in violation of this Agreement. You acknowledge that details of the Service constitute our confidential information.

18. Legal Compliance.

You represent and warrant that you have read, understand and shall comply with all laws, regulations and judicial actions including, but not limited to, the Identity Theft and Assumption Deterrence Act, the Fraud and False Statements Act, the USA Freedom Act, the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Gramm-Leach-Bliley Act and the Fair Credit Reporting Act (15 U.S.C. 1681 et seq.), including without limitation, all amendments thereto, and all other applicable federal or state legislation, regulations and judicial actions, as now or as may become effective.

You certify that you will use the service and the information received for no other purpose than is legally permissible. You understand that if the system is used improperly by your personnel, or if your access codes are made available to any unauthorized personnel due to carelessness your part or any other, you may be held responsible for financial losses, fees or monetary charges that may be incurred and that your access privileges may be terminated. You will not obtain, retain, use, or provide access to the Service to an affiliate or any third party in a manner that may breach any applicable export control or economic sanctions laws and regulations for any jurisdiction, including the United States of America, the United Kingdom and the European Union and its Member States. You warrant that neither you, nor any affiliate to which you provide access to the Service, is affiliated with a specially designated or sanctioned entity under any of those laws and that, in any transaction relating to Confirmation or the Service, such transactions will not involve sanctioned parties, including without limitation through the use of bank accounts at banks that are sanctioned parties. Further, the parties represent and warrant that they have read, understand and shall comply with all applicable laws, regulations and judicial actions including, but not limited to, anti-bribery laws, anti-corruption laws, anti-slavery laws, anti-human trafficking, tax laws, any applicable law aimed at preventing the facilitation of criminal behavior.

19. British Banker’s Association, BBA Enterprises Limited plus any other group company of the British Banker’s Association (Together the “BBA”).
Kein Bestandteil dieser Vereinbarung beschränkt die Haftung der BBA für Todesfälle oder Personenschäden, die durch ihre Fahrlässigkeit oder jene ihrer Mitarbeiter verursacht werden; für Betrug oder betrügerische Falschdarstellungen; oder andere Haftungen, die nach englischem Recht nicht ausgeschlossen werden können, selbst wenn andere Bestimmungen dieser Vereinbarung auf das Gegenteil hindeuten.

You expressly acknowledge and agree that the BBA: (a) is not a part to this   Agreement and is not involved in the design, supply or support of Capital Confirmation Inc.’s services including the service promoted to UK banks as “BBA Confirmations”; (b) makes no representation or warranty that the services will be adequate or appropriate for you and its requirements and any BBA trademarks or    logos present in marketing materials or other documents do not represent an endorsement of the service; (c) shall not be responsible for providing any of the services; and (d) shall have no liability to you whatsoever whether direct or indirect and whether in contact, tort (including negligence), misrepresentation or for any other reason in respect of any of the services provided under this agreement.

20. No Agency.

Sie und Capital Confirmation sind unabhängige Vertragsparteien und durch diese Vereinbarung wird keine Agentur, Partnerschaft, kein Joint Venture und keine arbeits- oder franchiserechtliche Beziehung beabsichtigt oder begründet.

21. Notices.
Except as explicitly stated otherwise, any notices shall be given by postal mail to Capital Confirmation Inc. Attn: Legal Department Centerview Drive, Suite 100, Brentwood, TN 37027 (in the case of Capital Confirmation) or to the email address you provide to Capital Confirmation during the registration process (in your case). Eine Mitteilung gilt 24 Stunden nach dem Absenden der E-Mail als abgegeben, es sei denn, die sendende Partei wurde darüber benachrichtigt, dass die E-Mail-Adresse ungültig ist. Alternativ können wir Ihnen Mitteilungen durch ein korrekt frankiertes Einschreiben mit Rückschein an die Capital Confirmation bei der Anmeldung zur Verfügung gestellte Adresse zukommen lassen. In diesem Fall gilt die Mitteilung 3 Tage nach dem Versanddatum als abgegeben.

22. Arbitration.
Jeder Rechtsstreit bzw. Rechtsanspruch, der sich in Verbindung mit dieser Vereinbarung oder unseren Diensten ergibt, außer Rechtsverfahren von Capital Confirmation, um Schadensersatz, oder eine einstweilige Verfügung in Verbindung mit dem Betrieb, dem geistigen Eigentum und den Diensten von Capital Confirmation zu erwirken, ist im Rahmen einer verbindlichen Schlichtung gemäß den Vorschriften der Handelsschiedsgerichtsbarkeit der American Arbitration Association zu entscheiden. Jeder derartige Rechtsstreit oder Anspruch wird auf individueller Basis verhandelt und kann nicht in Verbindung mit einem Streitfall oder einem Anspruch einer anderen Partei entschieden werden. Das Schlichtungsverfahren wird in Nashville, Tennessee, durchgeführt und die Entscheidung des Schiedsgerichts kann von einem zuständigen Gericht für vollstreckbar erklärt werden. Entweder Sie selbst oder Capital Confirmation kann vor einem zuständigen Gericht in Nashville, Tennessee, um zwischenzeitliche oder vorläufige Entlastung ersuchen, um die Rechte oder den Besitz von Ihnen oder Capital Confirmation zu schützen, während die Schlichtung bearbeitet wird. Wenn eine Partei entgegen diesen Bestimmungen Klage erhebt, ist die andere Partei berechtigt, Anwaltsgebühren und Kosten bis zu 1000.00,{[#2]} USD zu verlangen.

23. Additional Terms.
Die folgenden Richtlinien werden durch Bezugnahme in diese Vereinbarung integriert und stellen weitere Bedingungen in Hinblick auf die spezifischen, auf unserer Seite angebotenen Services dar.

Datenschutzerklärung:

https://www.confirmation.com/legal-security-privacy/index.html

Jede dieser Richtlinien kann von Zeit zu Zeit geändert werden und die entsprechenden Änderungen treten unmittelbar nach deren Veröffentlichung auf unserer Seite in Kraft, mit Ausnahme der Datenschutzerklärung, über deren Änderung Sie dreißig Tage vorher informiert werden. Wenn Sie darüber hinaus spezielle Services auf unserer Seite nutzen, unterliegen Sie den veröffentlichten Richtlinien oder Regeln zu den Services, die Sie über unsere Seite nutzen, die von Zeit zu Zeit veröffentlicht werden können. Alle diese veröffentlichten Richtlinien oder Regeln werden hiermit durch Bezugnahme in diese Vereinbarung integriert.

You acknowledge and agree that: (a) members of Capital Confirmation’s Group may be retained as sub-processors; and (b) Capital Confirmation and members of Capital Confirmation’s Group respectively may engage third-party sub-processors in connection with the provision of the Services.

We do not guarantee and shall not be liable for the performance of any sub-processor or sub-contractor.

24. Governing Law.

This Agreement shall be governed in all respects by the laws of the State of Tennessee, without reference to conflict of laws principles. You further consent to exclusive jurisdiction by the United States District Court for the Middle District of Tennessee.

25. Assignment.

Sie erklären sich einverstanden, dass diese Vereinbarung und alle darin enthaltenen Vereinbarungen im Falle einer Zusammenlegung oder Übernahme automatisch und nach eigenem Ermessen von Capital Confirmation einer anderen Partei zugewiesen werden können. You may not, without our prior written consent, assign, transfer, sub-contract or otherwise deal with any of your rights and/or obligations under this Agreement.

26. General.

Wir garantieren keinen dauerhaften, ununterbrochenen oder sicheren Zugang zu unseren Services und der Betrieb unserer Seite kann durch zahlreiche Faktoren, die außerhalb unserer Kontrolle liegen, beeinträchtigt werden. Sollte eine Bestimmung dieser Vereinbarung ungültig oder nicht durchsetzbar sein, so gilt sie als gestrichen, was die Gültigkeit der übrigen Bestimmungen nicht berührt. Überschriften gelten lediglich als Referenz und dienen nicht dazu, den Umfang oder das Ausmaß eines Abschnittes zu definieren, zu begrenzen, auszulegen oder zu beschreiben. Mit der Unterlassung unsererseits, einen Verstoß durch Sie oder andere zu ahnden, verzichten wir nicht auf unser Recht, bei späteren oder ähnlichen Verstößen zu handeln. Die offiziell für Inhalte auf der Webseite Confirmation.com verwendete Sprache ist Englisch. Über einen Drittanbieter ermöglicht es Confirmation.com Personen mit begrenzten Englischkenntnissen, auf Informationen auf der Seite zuzugreifen. Durch diesen automatischen Prozess durchgeführte Übersetzungen sollten nicht als exakt angesehen werden, insbesondere hinsichtlich technischer und rechtlicher Begriffe. Zudem können einige Dateien wie Grafiken, Fotos und PDFs im Zuge dieses Prozesses nicht übersetzt werden. Capital Confirmation Inc. garantiert nicht die Genauigkeit und Verlässlichkeit der durch dieses System übersetzten Informationen und haftet nicht für Verluste, die durch ein derartiges Vertrauen auf die Genauigkeit und Verlässlichkeit dieser Informationen entstanden sind. Obwohl jeder Versuch unternommen wird, die Genauigkeit der Übersetzung zu gewährleisten, können Teile davon fehlerhaft sein. Jede Person oder jedes Unternehmen, das auf die im System erhaltenen Informationen vertraut, tut dies auf eigene Gefahr. Diese Vereinbarung stellt die gesamte Übereinkunft und Vereinbarung zwischen den Parteien in Bezug auf den Gegenstand derselben dar. Sections 2 (Fees and Service) with respect to fees owed for our services, 3,3 (Release), 7,3 (License), 9 (Access and Interference), 14 (Liability Limit), 15 (Indemnity) and 19 (Arbitration) shall survive any termination or expiration of this Agreement.

27. Disclosures.

Die hierin genannten Services werden erbracht von Capital Confirmation Inc. mit Sitz in 214 Centerview Drive, Suite 100, Brentwood, Tennessee 37027. Fees for our services are described above in Section 2 (Fees and Service).

28. Disputes.

Sie können sich mit Streitfragen zwischen Ihnen und Capital Confirmation hinsichtlich unserer Dienste schriftlich an unsere Kundenbetreuung wenden: Capital Confirmation, Kundenbetreuung, Centerview Drive, Suite 100, Brentwood, TN 37027. Wir ermutigen Sie, alle Streitfälle zwischen Nutzern an Ihre örtliche Strafverfolgungsbehörde, den Leiter der Poststelle oder eine zertifizierte Mediations- oder Schiedsgerichtsstelle weiterzuleiten.

29. Your Acceptance of this User Agreement.

Sie bestätigen Ihr Einverständnis mit dieser Nutzervereinbarung durch Ihre Nutzung des Services von Confirmation.com. Ein derartiges Einverständnis hat dieselbe rechtliche Wirkung wie Ihre handschriftliche Unterschrift auf einem Schriftstück, das die Bedingungen dieser Nutzervereinbarung enthält.

30. Release.

You have the right to and do certify and agree to the following:

    • I have read and agree to the User’s Agreement and all information provided.
    • I have the right to and do hereby authorize my financial institution, trade creditor, bank, trading partner, debtor and other business partners to use Capital Confirmation’s Confirmation.com service to respond to and release the requested information to my Accountant.
    • Außerdem erkenne ich an, dass diese bestätigenden juristischen Personen für die Bereitstellung der Informationen eine Vergütung von Capital Confirmation erhalten können.

Im Auftrag meines Unternehmens, für welches ich berechtigt bin, es zu repräsentieren und dies auch tue:

An unsere Finanzinstitute, Warenkreditgeber, Banken, Handelspartner, Debitoren und andere Geschäftspartner:

Wir haben die in der elektronischen Bestätigung geforderten Information über unsere Guthaben- und Kreditsalden zum Geschäftsabschluss am auf der elektronischen Bestätigung angeforderten Datum an unsere Buchhaltung übergeben. Bitte bestätigen Sie die Genauigkeit der Informationen und teilen Sie uns Ausnahmen bezüglich der zur Verfügung gestellten Daten mit. Falls die Salden nicht angegeben sind, füllen Sie bitte dieses Formular aus, indem Sie den Saldo in das entsprechende Feld im elektronischen Formular eingeben. Obwohl wir es weder von Ihnen fordern noch erwarten, dass Sie eine umfassende, detaillierte Prüfung Ihrer Unterlagen durchführen, bitten wir Sie trotzdem, sollten Sie beim Ausfüllen dieser Bestätigung über zusätzliche Informationen zu weiteren Einlagekonten oder Darlehnskonten verfügen, jene Informationen in das elektronische Formular einzugeben. Bitte nutzen Sie den Confirmation.com-Dienst von Capital Confirmation, um die elektronische Bestätigung direkt an unsere Buchhalter zu schicken.

Anlage 1

European Data Transfers

We process Personally Identifiable Information outside of the European Economic Area (EEA) and Switzerland including in third countries which may not be recognized by the European Commission or the Swiss Federal Data Protection and Information Commission as providing an adequate level of privacy protection, such as in the United States.

Capital Confirmation will enter into the Standard Contractual Clauses approved by the European Commission to legitimize the transfers of Personally Identifiable Information outside of the EEA and/or Switzerland to an inadequate third country.

If we are required to enter into the Standard Contractual Clauses to legitimize the transfer of Personally Identifiable Information outside of the EEA and/or Switzerland, then the parties hereby agree to the Standard Contractual Clauses set forth in Attachment 1 (for those cases where we act as a processor with respect to personal data) below, and you evidence your acceptance of the Standard Contractual Clauses by clicking on “Accept User Agreement and Add Account” button on the Capital Confirmation website or by using the Confirmation.com service.

Notwithstanding the foregoing, if the Standard Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personally Identifiable Information outside of the EEA to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer agreements), then you shall procure the appropriate consent of any data subject whose Personally Identifiable Information is transferred to us to enable us to transfer that Personally Identifiable Information to the United States (or such other third country).

Attachment 1: Standard Contractual Clauses (Processor)

For the transfer of Personal Data outside of the EEA and/or Switzerland to processors established in third countries which do not ensure an adequate level of data protection, the data exporter and the data importer have agreed on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the Personal Data specified in Appendix 1.

Notwithstanding the foregoing, if the following Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personal Data outside of the EEA and/or Switzerland to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer Clauses), you shall procure the appropriate consent of any data subject whose Personal Data is transferred to us to enable the Parties to transfer that Personal Data to the United States (or such other third country).

Clause 1

Begriffsbestimmungen.

Im Rahmen der Vertragsklauseln gelten folgende Begriffsbestimmungen:

(a)‘personal data’, ‘special categories of data’, ‘process/processing’, ‘controller’, ‘processor’, ‘data subject’ and ‘supervisory authority’ shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;

(b)‘the data exporter’ means the party who transfers the personal data;

(c)‘the data importer’ means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country’s system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC;

(d)‘the sub-processor’ means any processor engaged by the data importer or by any other sub-processor of the data importer who agrees to receive from the data importer or from any other sub-processor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract;

(e)‘the applicable data protection law’ means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established;

(f)‘technical and organisational security measures’ means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

Clause 2

Einzelheiten der Übermittlung

Die Einzelheiten der Übermittlung, insbesondere die besonderen Kategorien personenbezogener Daten, sofern vorhanden, werden in Anhang 1 erläutert, der Bestandteil dieser Klauseln ist.

Clause 3

Drittbegünstigtenklausel
(a)The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary.

(b)The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity.

(c)The data subject can enforce against the sub-processor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.

(d)The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law.

Clause 4

Pflichten des Datenexporteurs

Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a)that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;

(b)that it has instructed and throughout the duration of the personal data-processing services will instruct the data importer to process the personal data transferred only on the data exporter’s behalf and in accordance with the applicable data protection law and the Clauses;

(c)that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 to this contract;

(d)that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;

(e)that it will ensure compliance with the security measures;

(f)that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;

(g)to forward any notification received from the data importer or any sub-processor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;

(h)to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for sub-processing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;

(i)that, in the event of sub-processing, the processing activity is carried out in accordance with Clause 11 by a sub-processor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and

(j)that it will ensure compliance with Clause 4(a) to (i).

Clause 5

Pflichten des Datenimporteurs

Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a)to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;

(b)that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;

(c)that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred;

(d)that it will promptly notify the data exporter about:

(e)any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation;
i. any accidental or unauthorised access; and
ii. any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so;
iii. to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;

(f)at the request of the data exporter to submit its data-processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority. The data importer has included the security requirements detailed in Appendix 2 at the request of the data exporter, and the data exporter agrees that such security requirements and the audit obligations and rights under the Master Agreement will be deemed to fully satisfy the audit rights granted to the data exporter under Clauses 5(f) and 12,2;

(g)to make available to the data subject upon request a copy of the Clauses, or any existing contract for sub-processing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;

(h)that, in the event of sub-processing, it has previously informed the data exporter and obtained its prior written consent (whether under or in connection with the Master Agreement or otherwise);

(i)that the processing services by the sub-processor will be carried out in accordance with Clause 11;

(j)to send promptly, on request, a copy of any sub-processor agreement it concludes under the Clauses to the data exporter.

Clause 6

Verbindlichkeit

1. The parties agree that any data subject, who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or sub-processor is entitled to receive compensation from the data exporter for the damage suffered.

2. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his sub-processor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity.

a. The data importer may not rely on a breach by a sub-processor of its obligations in order to avoid its own liabilities.

3. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the sub-processor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the sub-processor agrees that the data subject may issue a claim against the data sub-processor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. Eine solche Haftung des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach diesen Klauseln beschränkt.

Clause 7

Schlichtung und Gerichtsstand

(a) The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject:
(b)to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority;
(c)to refer the dispute to the courts in the Member State in which the data exporter is established.
(d)The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law.

Clause 8

Cooperation with supervisory authorities

1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law.

2. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any sub-processor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law.

3. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any sub-processor preventing the conduct of an audit of the data importer, or any sub-processor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5(b).

Clause 9

Anwendbares Recht

Für diese Klauseln gilt das Recht des Mitgliedstaats, in dem der Datenexporteur niedergelassen ist.

Clause 10

Änderung des Vertrags

Die Parteien verpflichten sich, die Klauseln nicht zu verändern. Es steht den Parteien allerdings frei, erforderlichenfalls weitere, geschäftsbezogene Klauseln aufzunehmen, sofern diese nicht im Widerspruch zu der Klausel stehen.

Clause 11

Vergabe eines Unterauftrags

1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Bei der Weitervergabe seiner Verpflichtungen gemäß den Klauseln durch den Datenimporteur, kann dies, mit Einverständniserklärung des Datenexporteurs, geschehen, jedoch nur basierend auf einer schriftlichen Vereinbarung mit dem externen Dienstleister, die den Dienstleister die selben Verpflichtungen auferlegt wie sie der Datenimporteur gemäß den Klauseln hat. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor's obligations under such agreement.

2. The prior written contract between the data importer and the sub-processor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.

3. The provisions relating to data protection aspects for sub-processing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established.

4. The data exporter shall keep a list of sub-processing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5(j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority.

Clause 12

Pflichten nach Beendigung der Datenverarbeitungsdienste

1. The parties agree that on the termination of the provision of data-processing services, the data importer and the sub-processor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In diesem Fall garantiert der Datenimporteur, dass er die Vertraulichkeit der übermittelten personenbezogenen Daten gewährleistet und diese Daten nicht mehr aktiv weiterverarbeitet.

2. The data importer and the sub-processor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data-processing facilities for an audit of the measures referred to in paragraph 1.

On behalf of the data exporter:

Name (written out in full):

Position:

Address:………………………………………………………………………………………………………………………

Other information necessary in order for the contract to be binding (if any): (stamp of organisation)

Signature ………………………………………………………………………………………………………………………

On behalf of the data importer:

Capital Confirmation, Inc.

Name (written out in full): Diana Flanders

Position: VP, Business Integrations

Address: Capital Confirmation Inc. Centerview Drive, Suite 100, Brentwood, TN 37027

Other information necessary in order for the contract to be binding (if any): N/A

Signature ………………………………………………………………………………………………………………………

Anhang 1

zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden

Die Mitgliedstaaten sind in der Lage gemäß ihren nationalen Gesetzen sämtliche zusätzliche, erforderliche Informationen in diesem Anhang hinzufügen oder ausdrücken

Datenexporteur

The data exporter is (please specify briefly your activities relevant to the transfer):

The data exporter will export the personal data contained in the client's documentation to the requestors via the Confirmation.com platform. Exported data will concern personal data of data exporter's employees with access given to the online platform handled by the data importer. Also, data exporter's customers data for the purposes of forwarding data exporter's audits to requestors by the Importer.

Datenimporteur

The data importer is (please specify briefly activities relevant to the transfer):

Capital Confirmation Inc.

The data importer provides an online venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users. Processed data will concern data exporter's employees for which accounts in the platform handled by the data importer will be created. Also, data exporter's customers data for the purposes of forwarding data exporters confirmations to requestors by the data importer.

Betroffene Personen

The personal data transferred concern the following categories of data subjects (please specify):

Data exporter’s employees and personal data of data exporter’s client’s representatives and other subjects mentioned in the documentation, which is sent to the requestor

Datenkategorien

The personal data transferred concern the following categories of data (please specify):

-names, surnames, names of authorized representatives of the data exporter’s clients

-including but not limited to: names, surnames, addresses, account numbers, financial information, PESEL number and other personal data of the subjects mentioned in the documentation sent to the requestor.

Besondere Kategorien personenbezogener Daten (wenn zutreffend)

Not applicable

Verarbeitung

The personal data transferred will be subject to the following basic processing activities (please specify):

The platform Confirmation.com is internet-based system, that allows the data exporter to send documentation to auditors for the needs of the audit. The documentation will be encrypted by the data importer while uploading it to the platform, so the data importer should not get access to the contents of the documentation and personal data contained in the documentation beyond the scope necessary to perform the encryption process.

DATA EXPORTER

Name:………………………………………………………………………………………………………………………

Authorised Signature………………………………………………………………………………………………………………………

DATA IMPORTER

Capital Confirmation, Inc.

Name: Diana Flanders

Authorised Signature………………………………………………………………………………………………………………………

Anhang 2

zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden.

Beschreibung der technischen oder organisatorischen Sicherheitsmaßnahmen, die der Datenimporteur gemäß Klausel 4 Buchstabe d und Klausel 5 Buchstabe c eingeführt hat (oder Dokument/Rechtsvorschrift beigefügt):

Data Importer has implemented the technical and organisation security measures set out in the Agreements and incorporated herein by reference.

DATA EXPORTER

Name:

Authorised Signature

Capital Confirmation Inc.

Name: Diana Flanders

Authorised Signature:

For Law Firms

Confirmation.comSM Service Agreement – Law Firm User*

This Confirmation.com Service Agreement - Law Firm User (this "Agreement") is between Capital Confirmation, Inc., a Delaware corporation (the "Provider"), and the law firm accessing and using the Confirmation.com Service (as defined below) (the "Law Firm"), and sets forth the terms and conditions under which the Law Firm shall have the right to use the Provider's Confirmation.com Service. This Agreement shall be effective as of the date of its electronic acceptance by the Law Firm (the "Effective Date").

1. Confirmation.com Service. During the Term of this Agreement, the Law Firm shall have the right to access and use the Provider’s Confirmation.comSM Service (the “Confirmation.com Service”). For purposes of this Agreement, the Confirmation.com Service shall mean the Provider’s electronic communications platform operated for purposes of delivering communications between the Law Firm and other Confirmation.com Service users, including, but not limited to, accounting firms (“Auditors”) engaged from time to time by the Law Firm’s clients (“Clients”). Der Confirmation.com Service ermöglicht die Übermittlung von Prüfungsanfragen von Kunden an die Anwaltskanzlei sowie die Übermittlung von Prüfungsantwortschreiben von der Anwaltskanzlei an die Prüfer, jeweils im Zusammenhang mit für Kunden ausgeführten Prüfungsdiensten, für welche der jeweilige Kunde die Nutzung des Confirmation.com Service ausdrücklich genehmigt hat. For the avoidance of doubt, (i) the Confirmation.com Service is a communication platform, and the Law Firm’s transmission of information via the Confirmation.com Service shall have the same effect and intent as if such information had been transmitted in written form; and (ii) the Confirmation.com Service shall include the provision of ancillary services deemed reasonably necessary by Provider to run an electronic communications platform as outlined herein, including but not limited to customer support, billing, and account management..

2. APIs. Provider may make available to the Law Firm certain Application Programming Interfaces (an “API” or “APIs”) to achieve additional functionality for users, and provide capabilities or integrations that leverage one or more of our products or services available at www.confirmation.com or provided by our affiliates, which the Law Firm may use where applicable, subject to Provider’s then current fees (if any) for such APIs. Unless previously authorized by Provider, or Provider’s affiliates, the Law Firm must not automatically connect (whether through APIs or otherwise) any Confirmation.com Service to other data, software, services or networks. NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN, THE LAW FIRM’S SOLE AND EXCLUSIVE REMEDY FOR ANY FAILURE OR NONPERFORMANCE OF ANY APIS PROVIDED, PURSUANT TO THIS AGREEMENT BY THE PROVIDER, SHALL BE FOR THE PROVIDER TO USE COMMERCIALLY REASONABLE EFFORTS TO ADJUST OR REPAIR THE NONPERFORMING APIS. FOR THE AVOIDANCE OF ALL DOUBT, THE PROVIDER DOES NOT WARRANT, NOR WILL THE PROVIDER BE RESPONSIBLE FOR, ANY PRODUCTS, SERVICES, FUNCTIONALITY, OR INTERFACES THAT ARE PROVIDED BY THE LAW FIRM OR ANY THIRD PARTY.

3. Term. This Agreement shall be effective from the Effective Date until it is terminated in accordance with the provisions of this Agreement (the “Term”).

4. Termination. Jede der Parteien hat das Recht, diesen Vertrag jederzeit zu kündigen. Die Kündigung tritt bei Erhalt einer schriftlichen Kündigung durch die jeweils andere Partei sofort in Kraft. Without limiting any other remedies, the Provider may suspend or terminate the Law Firm’s account if the Provider reasonably suspects that the Law Firm (by conviction, settlement, insurance investigation or otherwise) has engaged in fraudulent activity in connection with the Provider’s site.

5. Electronic Communications; Identifiers and Passwords; Binding Effect. In order to initiate a session where information is transmitted, the Law Firm will select and use an identification code (such as a “log-in ID”) and a password. The Law Firm shall protect and safeguard its identification codes and passwords and shall permit only authorized officials, employees or agents of the Law Firm (“Authorized Persons”) to use the identification codes and passwords in connection with the Confirmation.com Service. The Provider and all other persons receiving information from the Law Firm (“Law Firm Information”) that has been transmitted using the Law Firm’s identification codes and passwords selected by the Law Firm shall be entitled to rely (absent a breach of the Provider’s physical and technological security safeguards) that the information so transmitted has been transmitted by Authorized Persons and has been duly authorized by a Client with the same effect and intent as if such information had been transmitted in written form bearing the written signature of an Authorized Person. Der Anbieter wird die Anwaltskanzlei umgehend informieren, falls der Anbieter Grund zu der Annahme hat, dass eine Verletzung der Systeme des Anbieters vorliegt, unter anderem und ohne Einschränkung seiner physischen und technischen Sicherheitsvorkehrungen. If the Law Firm believes that the Law Firm’s identification codes and passwords have been lost, stolen or compromised in any respect, the Law Firm shall promptly notify the Provider’s Customer Support team at 1-866-325-72011.

6. Ownership of Intellectual Property. Der Anbieter besitzt und behält alle Rechte, Titel und Interessen an sämtlichem geistigen Eigentum in Verbindung mit dem Confirmation.com Service oder mit der Beziehung, die in dieser Vereinbarung beschrieben ist, jeweils wie vom Anbieter entwickelt. Der Anbieter hat keinerlei Recht, Eigentum oder Anspruch auf die Informationen, die durch die Anwaltskanzlei von oder im Namen von Kunden über den Confirmation.com Service an Kunden oder Prüfer übermittelt werden. Dieser Abschnitt 5 gilt über die Beendigung dieses Vertrages hinaus. Unsolicited ideas or product feedback will automatically become our property, without any compensation to you and we may use or distribute such submissions and their contents for any purpose and in any way without any obligations of confidentiality or otherwise.

7. Notices. Alle Bekanntgaben im Rahmen dieses Vertrages müssen schriftlich abgefasst und per E-Mail verschickt werden. Sie treten in Kraft, sobald sie von der betreffenden Partei unter der jeweils folgenden Adresse oder anderen betreffenden Adressen, die schriftlich bekanntgegeben wurden, empfangen werden.

For the Provider, such notice shall be sent to:
Capital Confirmation, Inc.
Customer.Support@Confirmation.com

For the Law Firm, such notice shall be sent to the email address(es) provided by the Law Firm to the Provider.

7. Custom Development Requests. Custom development requests for the Provider’s applications must be requested in writing, reviewed by the Provider and mutually agreed to by both parties in writing. Custom development fees are charged at the Provider’s standard development rate and paid in accordance with the terms set forth within a Statement of Work (SOW) to be agreed upon by the parties in writing.

8. Confidentiality of Law Firm Information.
a. The Law Firm’s transmittal of Law Firm Information to Auditors through the Confirmation.com Service shall not be deemed to constitute a waiver of any attorney-client privilege, work product doctrine or any other applicable privilege that applies to such Law Firm Information.

b. The Provider represents and warrants to the Law Firm that the Confirmation.com Service is an electronic conduit to facilitate the delivery of requests for information and responses thereto in connection with audit services conducted for the Law Firm's Clients by Auditors. In accordance with the Provider's stated security and privacy policies, the Provider shall maintain physical and technological security safeguards to protect the confidentiality of all Law Firm Information transmitted via the Confirmation.com Service.

c. The Provider agrees that all Law Firm Information is to be treated confidentially and that, except as required by law, the Provider shall not provide any Law Firm Information to any person, other than Auditors within the scope of the relevant Client’s authorization, without the prior written consent of the Law Firm.

d. If the Provider is requested or required (by oral questions, interrogatories, requests for information or documents in legal proceedings, subpoena, civil investigative demand or other similar process) to disclose any of the Law Firm Information, the Provider shall provide the Law Firm with prompt written notice of any such request or requirement so that the Law Firm may seek a protective order or other appropriate remedy and/or waive compliance with the provisions of this Agreement. If, in the absence of a protective order or other appropriate remedy or the receipt of a waiver from the Law Firm, the Provider is nonetheless legally compelled to disclose the Law Firm Information to any tribunal or other entity or else stand liable for contempt or suffer other censure or penalty, the Provider may, without liability hereunder, disclose to such tribunal or other entity only that portion of the Law Firm Information which the Provider is legally required to be disclosed, provided that the Provider exercises its best efforts to preserve the confidentiality of the Law Firm Information, including, without limitation, by cooperating with the Law Firm without expense to the Provider, to obtain an appropriate protective order or other reliable assurance that confidential treatment will be accorded the Law Firm Information by such tribunal or other entity.

9. Privacy. Provider does not sell or rent your personal information to third parties and only use your information as described in the Privacy Statement available at https://www.confirmation.com/legal-security-privacy/index.html . Provider take the protection of our users' privacy seriously. Provider stores and processes your information on computers located in Ireland and the United States that are protected with security measures.

If you object to your personal information being collected, used, transferred, or otherwise processed in this way, please do not use our services.

9,1 Data Protection Legislation. When using Provider’s Services or otherwise providing Personally Identifiable Information to Provider, the Law Firm agrees to comply with all applicable laws governing or relating to the processing of that Personally Identifiable Information (“Data Protection Laws”). “Personally Identifiable Information” shall mean any information relating to an identified or identifiable natural person whose information the Law Firm provides to Provider and that Provider process as part of the Service or in connection with this Agreement. The Law Firm confirms that any Personally Identifiable Information that has been provided by the Law Firm has been collected and disclosed in accordance with Data Protection Laws. When using the Service, The Law Firm shall not input, upload, maintain or disclose any irrelevant or unnecessary information about individuals.

9,2 Personal Data Transferred Outside of the Law Firm’s Home Country. Without limiting the foregoing and for clarity, the Firm agrees that Provider may transfer the Law Firm’s personal information outside of Law Firm’s home country to another country where the laws may not provide an equivalent level of protection and the Law Firm confirm that Provider may so transfer any Personally Identifiable Information that has been provided by the Law Firm.
Where the provision of Service by Provider to the Law Firm involves any transfer of Personally Identifiable Information that has been provided by the Law Firm outside of the European Economic Area or Switzerland (by way of direct or indirect transfer), the Law Firm and Provider agree that the transfers will be done in accordance with Exhibit A attached hereto. If any other Data Protection Laws require the Law Firm and Provider to implement appropriate safeguards to legitimize the transfer of Personally Identifiable Information to a third country, you will let the Provider know and the parties will negotiate in good faith to implement the required safeguards.

10. Compliance. The Law Firm will not obtain, retain, use, or provide access to the Confirmation.com Service to an affiliate or any third party in a manner that may breach any applicable export control or economic sanctions laws and regulations for any jurisdiction, including the United States of America, the United Kingdom and the European Union and its Member States. The Law Firm warrants that neither the Law Firm, nor any affiliate to which the Law Firm provides access to the Confirmation.com Service, is affiliated with a specially designated or sanctioned entity under any of those laws and that, in any transaction relating to Provider or the Confirmation.com Service, such transactions will not involve sanctioned parties, including without limitation through the use of bank accounts at banks that are sanctioned parties. Further, the parties represent and warrant that they have read, understand and shall comply with all applicable laws, regulations and judicial actions including, but not limited to, anti-bribery laws, anti-corruption laws, anti-slavery laws, anti-human trafficking, tax laws, any applicable law aimed at preventing the facilitation of criminal behavior.

11. Entire Agreement; Amendment. This Agreement represents the entire agreement between the Law Firm and the Provider with respect to the Confirmation.com Service, and it takes the place of all other agreements, writings and negotiations, including any other user agreement that is either posted on the Provider’s website or deemed to be accepted by the Law Firm upon the Law Firm’s usage of the Confirmation.com Service at any time prior or subsequent to the date of this Agreement.

12. Acceptance. You evidence your acceptance of this Agreement by using the Confirmation.com Service. Such acceptance shall have the same legal effect as your written signature set forth on a written document containing the terms and conditions of this Agreement.

EXHIBIT A

EUROPEAN PERSONAL DATA TRANSFERS

Provider processes Personally Identifiable Information outside of the European Economic Area (EEA) and Switzerland including in third countries which may not be recognized by the European Commission or the Swiss Federal Data Protection and Information Commission as providing an adequate level of privacy protection, such as in the United States.

Provider will enter into the Standard Contractual Clauses approved by the European Commission to legitimize the transfers of Personally Identifiable Information outside of the EEA and/or Switzerland to an inadequate third country.

If the Provider is required to enter into the Standard Contractual Clauses to legitimize the transfer of Personally Identifiable Information outside of the EEA and/or Switzerland, then the parties hereby agree to the Standard Contractual Clauses set forth in Attachment 1 (for those cases where Provider acts as a processor with respect to personal data) below, and the Firm evidences its acceptance of the Standard Contractual Clauses by clicking on “Accept User Agreement and Add Account” button on the Provider website or by using the Provider’s Service.

Notwithstanding the foregoing, if the Standard Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personally Identifiable Information outside of the EEA to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer agreements), then the Law Firm shall procure the appropriate consent of any data subject whose Personally Identifiable Information is transferred to the Provider to enable the Provider to transfer that Personally Identifiable Information to the United States (or such other third country).

Attachment 1: Standard Contractual Clauses (Processor)

For the transfer of personal data outside of the EEA and/or Switzerland to processors established in third countries which do not ensure an adequate level of data protection, the data exporter and the data importer have agreed on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.

Notwithstanding the foregoing, if the following Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personal Data outside of the EEA and/or Switzerland to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer Clauses), you shall procure the appropriate consent of any data subject whose Personal Data is transferred to us to enable the Parties to transfer that Personal Data to the United States (or such other third country).

Clause 1
Begriffsbestimmungen.

Im Rahmen der Vertragsklauseln gelten folgende Begriffsbestimmungen:
(a) ‘personal data’, ‘special categories of data’, ‘process/processing’, ‘controller’, ‘processor’, ‘data subject’ and ‘supervisory authority’ shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;

(b) ‘the data exporter’ means the party who transfers the personal data;

(c) ‘the data importer’ means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country’s system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC;

(d) ‘the sub-processor’ means any processor engaged by the data importer or by any other sub-processor of the data importer who agrees to receive from the data importer or from any other sub-processor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract;

(e) ‘the applicable data protection law’ means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established;

(f) ‘technical and organisational security measures’ means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

Clause 2
Einzelheiten der Übermittlung

Die Einzelheiten der Übermittlung, insbesondere die besonderen Kategorien personenbezogener Daten, sofern vorhanden, werden in Anhang 1 erläutert, der Bestandteil dieser Klauseln ist.

Clause 3
Drittbegünstigtenklausel

(a) The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary.

(b) The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity.

(c) The data subject can enforce against the sub-processor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.

(d) The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law.

Clause 4
Pflichten des Datenexporteurs

Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;

(b) that it has instructed and throughout the duration of the personal data-processing services will instruct the data importer to process the personal data transferred only on the data exporter’s behalf and in accordance with the applicable data protection law and the Clauses;

(c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 to this contract;

(d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;

(e) that it will ensure compliance with the security measures;

(f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;

(g) to forward any notification received from the data importer or any sub-processor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;

(h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for sub-processing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;

(i) that, in the event of sub-processing, the processing activity is carried out in accordance with Clause 11 by a sub-processor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and

(j) that it will ensure compliance with Clause 4(a) to (i).

Clause 5
Pflichten des Datenimporteurs

Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;

(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;

(c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred;

(d) that it will promptly notify the data exporter about:

(e) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation;
i. any accidental or unauthorised access; and
ii. any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so;
iii. to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;

(f) at the request of the data exporter to submit its data-processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority. The data importer has included the security requirements detailed in Appendix 2 at the request of the data exporter, and the data exporter agrees that such security requirements and the audit obligations and rights under the Master Agreement will be deemed to fully satisfy the audit rights granted to the data exporter under Clauses 5(f) and 12,2;

(g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for sub-processing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;

(h) that, in the event of sub-processing, it has previously informed the data exporter and obtained its prior written consent (whether under or in connection with the Master Agreement or otherwise);

(i) that the processing services by the sub-processor will be carried out in accordance with Clause 11;

(j) to send promptly, on request, a copy of any sub-processor agreement it concludes under the Clauses to the data exporter.

Clause 6
Verbindlichkeit

1. The parties agree that any data subject, who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or sub-processor is entitled to receive compensation from the data exporter for the damage suffered.

2. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his sub-processor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity.
a. The data importer may not rely on a breach by a sub-processor of its obligations in order to avoid its own liabilities.

3. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the sub-processor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the sub-processor agrees that the data subject may issue a claim against the data sub-processor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. Eine solche Haftung des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach diesen Klauseln beschränkt.

Clause 7
Schlichtung und Gerichtsstand

(a) The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject:

(b) to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority;

(c) to refer the dispute to the courts in the Member State in which the data exporter is established.

(d) The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law.

Clause 8
Cooperation with supervisory authorities

1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law.

2. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any sub-processor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law.

3. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any sub-processor preventing the conduct of an audit of the data importer, or any sub-processor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5(b).

Clause 9
Anwendbares Recht

Für diese Klauseln gilt das Recht des Mitgliedstaats, in dem der Datenexporteur niedergelassen ist.

Clause 10
Änderung des Vertrags

Die Parteien verpflichten sich, die Klauseln nicht zu verändern. Es steht den Parteien allerdings frei, erforderlichenfalls weitere, geschäftsbezogene Klauseln aufzunehmen, sofern diese nicht im Widerspruch zu der Klausel stehen.

Clause 11
Vergabe eines Unterauftrags

1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Bei der Weitervergabe seiner Verpflichtungen gemäß den Klauseln durch den Datenimporteur, kann dies, mit Einverständniserklärung des Datenexporteurs, geschehen, jedoch nur basierend auf einer schriftlichen Vereinbarung mit dem externen Dienstleister, die den Dienstleister die selben Verpflichtungen auferlegt wie sie der Datenimporteur gemäß den Klauseln hat. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor's obligations under such agreement.

2. The prior written contract between the data importer and the sub-processor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.

3. The provisions relating to data protection aspects for sub-processing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established.

4. The data exporter shall keep a list of sub-processing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5(j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority.

Clause 12
Pflichten nach Beendigung der Datenverarbeitungsdienste

1. The parties agree that on the termination of the provision of data-processing services, the data importer and the sub-processor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In diesem Fall garantiert der Datenimporteur, dass er die Vertraulichkeit der übermittelten personenbezogenen Daten gewährleistet und diese Daten nicht mehr aktiv weiterverarbeitet.

2. The data importer and the sub-processor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data-processing facilities for an audit of the measures referred to in paragraph 1.

On behalf of the data exporter:
Name (written out in full):
Position:
Adresse:
Other information necessary in order for the contract to be binding (if any): (stamp of organisation)
Unterschrift

On behalf of the data importer:
Capital Confirmation, Inc.
Name (written out in full): Diana Flanders
Position: VP, Business Integrations
Address: Capital Confirmation, Inc. 214 Centerview Drive, Suite 100, Brentwood, TN 37027
Other information necessary in order for the contract to be binding (if any): N/A
Unterschrift

Anhang 1
zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden

Die Mitgliedstaaten sind in der Lage gemäß ihren nationalen Gesetzen sämtliche zusätzliche, erforderliche Informationen in diesem Anhang hinzufügen oder ausdrücken

Datenexporteur

The data exporter is (please specify briefly your activities relevant to the transfer):

The data exporter will export the personal data contained in the client's documentation to the requestors via the Confirmation.com platform. Exported data will concern personal data of data exporter's employees with access given to the online platform handled by the data importer. Also, data exporter's customers data for the purposes of forwarding data exporter's audits to requestors by the Importer.

Datenimporteur

The data importer is (please specify briefly activities relevant to the transfer):
Capital Confirmation Inc.

The data importer provides an online venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users. Processed data will concern data exporter's employees for which accounts in the platform handled by the data importer will be created. Also, data exporter's customers data for the purposes of forwarding data exporters confirmations to requestors by the data importer.

Betroffene Personen

The personal data transferred concern the following categories of data subjects (please specify):

Data exporter’s employees and personal data of data exporter’s client’s representatives and other subjects mentioned in the documentation, which is sent to the requestor

Datenkategorien

The personal data transferred concern the following categories of data (please specify):
-names, surnames, names of authorized representatives of the data exporter’s clients
-including but not limited to: names, surnames, addresses, account numbers, financial information, PESEL number and other personal data of the subjects mentioned in the documentation sent to the requestor.

Besondere Kategorien personenbezogener Daten (wenn zutreffend)

Not applicable

Verarbeitung

The personal data transferred will be subject to the following basic processing activities (please specify):

The platform Confirmation.com is internet-based system, that allows the data exporter to send documentation to auditors for the needs of the audit. The documentation will be encrypted by the data importer while uploading it to the platform, so the data importer should not get access to the contents of the documentation and personal data contained in the documentation beyond the scope necessary to perform the encryption process.

DATA EXPORTER
Name:
Authorised Signature

DATA IMPORTER
Capital Confirmation Inc.
Name: Diana Flanders
Authorised Signature

Anhang 2
zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden.

Beschreibung der technischen oder organisatorischen Sicherheitsmaßnahmen, die der Datenimporteur gemäß Klausel 4 Buchstabe d und Klausel 5 Buchstabe c eingeführt hat (oder Dokument/Rechtsvorschrift beigefügt):

Data Importer has implemented the technical and organisation security measures set out in the Agreements and incorporated herein by reference.

DATA EXPORTER
Name:
Authorised Signature
Capital Confirmation Inc.
Name: Diana Flanders
Authorised Signature

*This Agreement incorporates the input of members of the American Bar Association Business Law Section Audit Responses Committee, which takes no position regarding whether individual law firms should employ the services contemplated by this Agreement or should accept its terms and conditions.

For Asset Verification Users

AGB

IM FOLGENDEN WERDEN DIE BEDINGUNGEN AUFGEFÜHRT, ZU DENEN IHNEN CAPITAL CONFIRMATION INC. ZUGANG ZU UNSEREN DIENSTLEISTUNGEN GEWÄHRT.

Welcome to the User Agreement for Capital Confirmation Inc. This Agreement describes the terms and conditions applicable to your use of our services available under the domains and sub-domains of www.confirmation.com, and learn.confirmation.com ("Confirmation Website(s)") owned and operated by Capital Confirmation, and the general principles for the websites of our subsidiaries. Wenn Sie mit den Allgemeinen Geschäftsbedingungen dieser Vereinbarung nicht einverstanden sind, sehen Sie bitte von der Nutzung unserer Dienstleistungen oder dem Zugriff darauf ab. You evidence your acceptance of the terms and conditions of this Agreement by checking the box for the "Yes, I have read and accept the User Agreement." statement and clicking the "Create New Account" button on Capital Confirmation's website and through your use of any of the Confirmation.com services (aka "Confirm" service).

If you have any questions, please email us at customer.support@confirmation.com.

Sie müssen die in dieser Nutzervereinbarung und der Datenschutzerklärung enthaltenen Allgemeinen Geschäftsbedingungen lesen, damit einverstanden sein und diese akzeptieren. Dazu gehören sowohl die Allgemeinen Geschäftsbedingungen, die im Folgenden ausdrücklich aufgeführt sind, als auch diejenigen, auf welche verwiesen wird. Erst dann werden Sie Mitglied bei Capital Confirmation. Wir empfehlen Ihnen dringend, beim Lesen dieser Nutzervereinbarung auch die Informationen aufzurufen und zu lesen, die auf den Seiten und Websites enthalten sind, auf welche in diesem Dokument verwiesen wird, da diese eventuell weitere Geschäftsbedingungen enthalten, die für Sie als Nutzer von Capital Confirmation gelten. Please note: underlined words and phrases are links to these pages and websites. Durch das Akzeptieren dieser Nutzervereinbarung erkennen Sie gleichzeitig an, dass Ihre Nutzung anderer Websites von Capital Confirmation den auf diesen Websites veröffentlichten Allgemeinen Geschäftsbedingungen unterliegt.

Wir können diese Vereinbarung jederzeit durch das Veröffentlichen der geänderten Bedingungen auf unserer Website ändern. Except as stated below, all amended terms shall automatically be effective immediately upon posting on our site. Sie werden von den Änderungen dieser Vereinbarung weder schriftlich noch per E-Mail informiert. Veränderungen dieser Vereinbarung müssen schriftlich erfolgen und von Ihnen und Capital Confirmation Inc. unterzeichnet werden. Diese Vereinbarung tritt am 1. März 2003 in Kraft.

1. Membership Eligibility.
Unsere Dienstleistungen stehen nur Personen zur Verfügung, die unter dem geltenden Recht rechtlich bindende Verträge eingehen können. Ohne Einschränkung des Vorhergesagten können unsere Dienstleistungen weder von Minderjährigen noch von zeitweise oder unbegrenzt gesperrten Mitgliedern von Capital Confirmation in Anspruch genommen werden. Wenn Sie noch minderjährig sind, dürfen Sie diese Dienstleistung nicht nutzen. Falls Sie nicht berechtigt sind, sehen Sie bitte von der Nutzung unserer Dienstleistungen ab. Darüber hinaus dürfen Ihr Konto bei Capital Confirmation (einschließlich Feedback) und die Nutzer-ID nicht an Dritte übertragen oder verkauft werden. Falls Sie sich als Unternehmen registrieren, erklären Sie, dass Sie befugt sind, das Unternehmen an diese Vereinbarung zu binden. Falls Sie sich als Einzelperson registrieren, erklären Sie, dass Sie die Einzelperson sind, die Sie behaupten zu sein.

2. Fees and Service.
Capital Confirmation provides a venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users (the "Service"). The Service also includes the provision of ancillary services deemed reasonably necessary by Capital Confirmation to run a venue for digital transaction management, including but not limited to customer support, billing, and account management.

Joining and using our service is free. Für die Anforderung und den Empfang von Bestätigungen fällt eine Gebühr an. Our Fees and Credit Policy is available here and is incorporated by reference. Wir können unsere Richtlinien zu Gebühren und Gutschriften sowie die Gebühren für unsere Dienstleistungen gelegentlich ändern. Unsere Änderungen der Richtlinien treten in Kraft, nachdem wir Sie durch die Veröffentlichung der Änderungen in dieser Vereinbarung mindestens vierzehn (14) Tage im Voraus benachrichtigt haben. Eventuell beschließen wir jedoch, unsere Gebührenrichtlinien und die Gebühren für unsere Dienstleistungen aufgrund von Werbeaktionen für einen bestimmten Zeitraum zu ändern, und solche Änderungen treten in Kraft, sobald wir die zeitlich begrenzte Werbeaktion auf der Website www.confirmation.com veröffentlichen. Wenn Sie eine Bestätigung erwerben, haben Sie die Möglichkeit zur Überprüfung und Annahme der Gebühren, die Ihnen für die Nutzung unserer Dienstleistungen berechnet werden. Wir dürfen nach eigenem Ermessen einige oder alle unserer Dienstleistungen jederzeit ändern. Falls wir eine neue Dienstleistung einführen, gelten die Gebühren für diese Dienstleistung ab deren Einführung. Falls nicht anderweitig angegeben, werden sämtliche Gebühren in US-Dollar aufgeführt. Sie tragen die Verantwortung für die Zahlung sämtlicher Gebühren für die Nutzung unserer Dienstleistungen und unserer Website sowie aller anfallenden Steuern.

3. Capital Confirmation is a Venue.

3,1 Capital Confirmation ist weder eine Bank oder Anwaltskanzlei noch ein Bevollmächtigter einer Bank oder Anwaltskanzlei. Stattdessen fungiert unsere Website als Ausführungsort, an dem die Nutzer jederzeit und von jedem Ort aus Bestätigungen anfragen, empfangen und kaufen können. We are not involved in the actual transaction between users of and providers of the confirmation information. Infolgedessen haben wir keine Kontrolle über die Qualität, Genauigkeit, Aktualität oder Rechtmäßigkeit der Anfragen und der Antworten oder der Wahrheit oder Genauigkeit der Anfragen und Antworten. We also cannot ensure that a provider will actually complete a transaction.
3,2 Verifizierung der Identität. Wir verwenden verschiedene Techniken zur Überprüfung der Identität unserer Nutzer, wenn sich diese auf unserer Website registrieren. Da allerdings die Nutzer-Verifizierung im Internet schwierig ist, kann und wird Capital Confirmation nicht die behauptete Identität jedes einzelnen Nutzers bestätigen. Daher haben wir ein vom Nutzer einzuleitendes Kommunikationssystem eingerichtet, um Ihnen bei der Evaluierung der Frage, mit wem Sie zusammenarbeiten, zu helfen. Wir ersuchen Sie, über die auf unserer Seite verfügbaren Tools direkt mit den Einzelpersonen zu kommunizieren.
3,3 Freigabe. Da wir eine Transaktionsplattform sind, entbinden Sie Capital Confirmation (und unsere Führungskräfte, Vorstandsmitglieder, Agenten, Tochtergesellschaften, Joint Ventures und Mitarbeiter) im Fall eines Konflikts mit einem oder mehreren Nutzern von Ansprüchen jeder Art (einschließlich Ansprüchen wegen Folgeschäden), bekannt und unbekannt, vermutet und nicht vermutet, offen gelegt und nicht offen gelegt, die aus derartigen Konflikten entstehen könnten oder in irgendeiner Art mit diesen verbunden sind. If you are a California resident, you waive California Civil Code §1542, which says: “A general release does not extend to claims which the creditor does not know or suspect to exist in his favor at the time of executing the release, which if known by him must have materially affected his settlement with the debtor.”
3.4. Kontrolle der Informationen. Wir kontrollieren die Informationen, die von anderen Nutzern zur Verfügung gestellt und über unser System verfügbar gemacht werden, nicht. Es kann sein, dass Informationen anderer Nutzer unrichtig sind. Handeln Sie bitte vorsichtig und umsichtig, wenn Sie unsere Seite nutzen.
3.5. Kundenbetreuung. Monday through Friday between the hours of 8:00 A.M. and 5:00 P.M. Central Standard Time, customer support shall be available free of charge by telephone or by email at one or more phone numbers or email addresses to be specified on our website located at www.confirmation.com.

4. Authorizing, Requesting and Purchasing.
Durch eine Autorisierung, eine Anforderung oder einen Kauf einer Bestätigung erklären Sie sich mit den Bedingungen dieser Vereinbarung einverstanden. Anforderungen sind nicht widerrufbar. Mit der Entscheidung für eine Autorisierung, eine Anforderung oder einen Kauf einer Bestätigung versichern Sie, dass Sie gesetzlich berechtigt sind, solche Bestätigungen zu autorisieren, anzufordern oder zu kaufen.

5. Address Lookup.
Capital Confirmation erlangt Informationen zur Adresssuche aus öffentlichen und privaten Datenquellen. Die in diesem System verwendeten öffentlichen Verzeichnisse, privaten Aufzeichnungen und kommerziell verfügbaren Datenquellen sind fehlerhaft und unvollständig. Daten werden gelegentlich falsch eingegeben und fehlerhaft verarbeitet. Sie sollten nicht darauf vertrauen, dass dieses System absolut korrekt ist. Bevor Sie sich auf jegliche Daten verlassen, die dieses System liefert, sollten sie anderweitig überprüft werden.

6. Out-of-Network Confirmations.
The Out-of-Network confirmation service requires the requestor to enter the contact information for the responder and the responder’s company. Das Sie als Anforderer bestimmen, an wen und welches Unternehmen sich eine Bestätigung außerhalb des Netzwerks richtet, und daher auch festlegen, wer in diesem Unternehmen der Responder ist, akzeptieren Sie die alleinige Verantwortung für die Verifikation und Überprüfung der Identität des einzelnen Responders und des Unternehmens, das er vertritt. Sie nehmen zur Kenntnis, dass Capital Confirmation die Identität des Responders oder des Unternehmens, das er zu vertreten vorgibt, nicht überprüft. You release and hold harmless Capital Confirmation from any and all claims related to the responder’s identity and/or the identity of the company the responder claims to represent if you request confirmations through www.confirmation.com using the Out-of-Network confirmation service.

7. Fraud.
Ohne Einschränkung anderer zur Verfügung stehender Rechtsmittel kann Capital Confirmation Ihr Konto sperren oder löschen, wenn wir den Verdacht haben, dass Sie (aufgrund einer Verurteilung, eines Vergleichs, einer Ermittlung wegen Versicherungsbetrugs oder aus anderen Gründen) an betrügerischen Aktivitäten in Zusammenhang mit unserer Seite beteiligt waren.

8. Your Information.

8,1 Definition. “Your Information” is defined as any information you provide to us or other users in the registration or confirmation process, in any message area or through any email feature. Sie sind alleine verantwortlich für Ihre Informationen und wir agieren als passive Plattform für die Online-Distribution und Veröffentlichung Ihrer Informationen.
8,2 Unzulässige Aktivitäten. Your Information (or any items listed) and your activities on the site shall not: (a) be false, inaccurate or misleading; (b) be fraudulent; (c) infringe any third party’s copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy; (d) violate any law, statute, ordinance or regulation (including, but not limited to, those governing consumer protection or antidiscrimination); (e) be defamatory, trade libelous, unlawfully threatening or unlawfully harassing; (f) be obscene or contain child pornography; (g) contain any viruses, Trojan horses, worms, time bombs, cancelbots, easter eggs or other computer programming routines that may damage, detrimentally interfere with, surreptitiously intercept or expropriate any system, data or personal information; and (h) create liability for us or cause us to lose (in whole or in part) the services of our ISPs or other suppliers. Zudem sind Sie nicht dazu berechtigt, eine Bestätigung auf der Seite zu autorisieren oder anzufordern (oder jegliche Transaktion zu vollziehen, die durch die Nutzung unseres Dienstes ausgelöst wurde), die durch die Autorisierung, die Zahlung der Nutzungsgebühr oder der finalen Wertgebühr an uns eine Verletzung anwendbaren Rechts, einer Verordnung oder eines Regelwerks unsererseits zur Folge hätte.
8,3 Lizenz. Ausschließlich, um es Capital Confirmation zu ermöglichen, die Informationen zu nutzen, die Sie uns zur Verfügung stellen, und um keinerlei Rechte zu verletzen, die Sie an diesen Informationen haben, erklären Sie, uns ein nicht-exklusives, weltweites, unbefristetes, unwiderrufliches, gebührenfreies, unterlizenzierbares (über mehrere Stufen) Recht einzuräumen, die Urheberrechte, Werbungsrechte und Datenbank-Rechte (aber keine weiteren Rechte) in allen Medien, die derzeit bekannt oder noch nicht bekannt sind, auszuüben, die Sie an Ihren Informationen innehaben. Capital Confirmation wird Ihre Informationen nur in Übereinstimmung mit unserer Datenschutzerklärung verwenden.

9. Ownership of Intellectual Property.
Capital Confirmation besitzt und behält alle Rechte, Titel und Interessen an sämtlichem geistigen Eigentum in Verbindung mit der Dienstleistung oder mit der Beziehung, die in dieser Vereinbarung beschrieben ist. „Geistiges Eigentum“ bezeichnet alle Ideen, Entdeckungen, Erfindungen, Entwicklungen, Designs, Verbesserungen, Handelsmarken, Dienstleistungsmarken, Handelsgeheimnisse, geschützte Informationen, Programme, Quellcodes, Objektcodes, Patentanmeldungen, Patente, Copyrights (für die Dauer derselben, einschließlich Verlängerungen und Rechterückfall), urheberrechtlich schützbare Werke und die damit verbundenen Geschäftswerte, einschließlich Erweiterungen, Verbesserungen und abgeleiteter Werke, die aktuell bestehen oder hieraus entstehen. You hereby assign and transfer to Capital Confirmation any and all rights in any such Intellectual Property, either presently existing or hereinafter arising, and agree to take such actions (at Capital Confirmation's expense) as Capital Confirmation may reasonably request to secure such rights for Capital Confirmation. Solange Sie registrierter Nutzer unserer Dienstleistungen sind sowie für einen Zeitraum von zwei (2) Jahren nach dem Datum Ihres letzten Logins erklären Sie sich einverstanden, keine Dienstleistungen anzubieten oder andere beim Angebot von Dienstleistungen zu unterstützen, die in Wettbewerb mit den von Capital Confirmation angebotenen Dienstleistungen stehen können. Unsolicited ideas or product feedback will automatically become our property, without any compensation to you and we may use or distribute such submissions and their contents for any purpose and in any way without any obligations of confidentiality or otherwise.

10. Access and Interference.
Sie erklären sich einverstanden, keine Robots, Spiders oder andere automatische Geräte oder manuelle Prozesse zu verwenden, um unsere Webseiten oder deren Inhalte ohne vorherige ausdrückliche schriftliche Genehmigung zu überwachen oder zu vervielfältigen. You agree that you will not reverse engineer, disassemble, decompile, decode, adapt, develop, or modify the website or Service, or otherwise attempt to derive or gain access to the source code of the website or Service, in whole or in part. Sie erklären sich einverstanden, keine Geräte, Software oder Routinen zu verwenden, um unsere Sicherheitsfunktionen zu umgehen oder die korrekte Funktion der Capital Confirmation Website oder anderer Aktivitäten auf unserer Website zu beeinträchtigen oder dies zu versuchen. Sie erklären sich einverstanden, keine Aktionen zu unternehmen, die unsere Netzwerkinfrastruktur unverhältnismäßig stark belasten. Viele Informationen auf unserer Seite werden in Echtzeit aktualisiert und stehen im Eigentum von Capital Confirmation oder werden uns von unseren Nutzern oder Dritten lizenziert. Sie erklären sich einverstanden, Inhalte unserer Webseite (mit Ausnahme Ihrer Informationen) ohne ausdrückliche vorherige, schriftliche Genehmigung von Capital Confirmation oder des entsprechenden Dritten nicht zu kopieren, zu reproduzieren, zu verändern, zu modifizieren, abgeleitete Werke zu erstellen oder öffentlich darzustellen. You must ensure that all information you supply to us through our website or Service, or in relation to our website or Service, is true, accurate, complete and not misleading. You shall have sole responsibility for the legality, reliability, integrity, accuracy, and quality of this information. You shall not access all or any part of our website or Service to build a product or service which competes with the Service. You shall not attempt to obtain, or assist third parties in obtaining, access to our website or Service, other than as provided under this Agreement. You shall not make, nor permit any party to make, any use of our website or Service other than to avail of the Service. You shall not make alterations to, or permit our website or Service or any part of it to be combined with, or become incorporated into, any other programs. You shall not provide or otherwise make available our website or the Service in whole or in part (including object and source code), in any form, to any person without our prior written consent. You shall not infringe on our licensors' intellectual property rights or those of any third party in relation to your use of our website or Service. We may make available to you certain Application Programming Interfaces (an "API" or "APIs") to achieve additional functionality for users, and provide capabilities or integrations that leverage one or more of our products or services available at www.confirmation.com or provided by our affiliates, which you may use where applicable, subject to our then current fees (if any) for such APIs. Unless previously authorized by us, or our affiliates, you must not automatically connect (whether through APIs or otherwise) any Service to other data, software, services or networks

11. Breach.
Without limiting other remedies, we may immediately remove you, warn our community of your actions, issue a warning, temporarily suspend, indefinitely suspend or terminate your membership and refuse to provide our services to you if: (a) you breach this Agreement or the documents it incorporates by reference; (b) we are unable to verify or authenticate any information you provide to us; or (c) we believe that your actions may cause financial loss or legal liability for you, our users or us.

12. Electronic Communications; Identifiers and Passwords; Binding Effect.
Sie erhalten und übertragen Informationen an/von uns über das Internet mittels SSL-Technologie und 2048-Bit-Verschlüsselung. You must use Internet browsers that will support the use of 2048-bit encryption. In order to initiate a session where information is transmitted, you will select and use an identification code (such as a "log-in ID") and a password. Sie verpflichten sich, diesen Identifikationscode und das Passwort zu schützen und zu sichern und deren Nutzung in Verbindung mit dem Service nur autorisierten Mitarbeitern zu gestatten. Wir und alle anderen Personen, die Informationen von Ihnen erhalten haben, die über den Identifikationscode und das Passwort übertragen wurden, sind berechtigt, in allen Instanzen darauf zu vertrauen, dass die derart übertragenen Informationen von Ihnen übertragen wurden, dass diese Informationen in jeder Hinsicht richtig, genau und vollständig sind, mit demselben Effekt und Zweck, als ob diese Informationen schriftlich und mit Ihrer handschriftlichen Unterschrift unterzeichnet übertragen wurden. Wenn Sie glauben, dass Ihr Identifikationscode verloren, gestohlen oder durch Unbefugte abgerufen wurde, benachrichtigen Sie uns bitte umgehend unter 1-866-325-72011. Kommunikationen, die nach unserer Antwort auf Ihre Mitteilung mit dem Identifikationscode und dem Passwort übermittelt wurden, werden nicht gültig oder wirksam.

13. Privacy.
Wir verkaufen oder vermieten Ihre personenbezogenen Daten nicht an Dritte und wir verwenden Ihre Informationen nur für die in der Datenschutzerklärung bestimmten Zwecke. Wir erachten den Schutz der Privatsphäre unserer Nutzer als einen sehr wesentlichen gemeinschaftlichen Grundsatz. We take the protection of our users’ privacy seriously. We store and process your information on computers located in Ireland and the United States that are protected with security measures.

Customer Financial information residing within Confirmation.com's processing controls will be maintained and stored according to our security and privacy policies. Confirmation.com takes no responsibility for Customer Financial information once this data is no longer within Confirmation.com's control (e.g., data downloaded by a user or mailed confirmations).

If you object to your Information being collected, used, transferred, or otherwise processed in this way, please do not use our services.

13,1 Data Protection Legislation. When using our Services or otherwise providing Personally Identifiable Information to us, you agree to comply with all applicable laws governing or relating to the processing of that Personally Identifiable Information (“Data Protection Laws”). “Personally Identifiable Information” shall mean any information relating to an identified or identifiable natural person whose information you provide to us and that we process as part of the Service or in connection with this Agreement. You confirm that any Personally Identifiable Information that has been provided by you has been collected and disclosed in accordance with Data Protection Laws. When using the Service, you shall not input, upload, maintain or disclose any irrelevant or unnecessary information about individuals.
13,2 Personal Data transferred outside of your home country. Without limiting the foregoing and for clarity, you agree that we may transfer your personal information outside of your home country to another country where the laws may not provide an equivalent level of protection and you confirm that we may so transfer any Personally Identifiable Information that has been provided by you.
Where the provision of Service by us to the you involves any transfer of Personally Identifiable Information that has been provided by you outside of the European Economic Area or Switzerland (by way of direct or indirect transfer), the parties agree that the transfers will be done in accordance with Schedule 1 attached hereto. If any other Data Protection Laws require you and us to implement appropriate safeguards to legitimize the transfer of Personally Identifiable Information to a third country, you will let us know and we will negotiate in good faith to implement the required safeguards.

14. Client Authentication.
You certify that any and all subject(s) set up as your client(s) on the Confirmation.com service are authorized representatives of your client(s).

15. Authorization.
You certify that any confirmations requested are with the subject(s)' prior written permission. You agree to keep the authorization on file for a minimum of 5 years. Üblicherweise erfolgt diese schriftliche Genehmigung in Form eines schriftlichen Antrags durch den Kunden. You warrant that the release of the subject(s)' information will not result in a breach of any applicable data privacy legislation.

16. Audit Rights.
Capital Confirmation may, from time to time, conduct various audits of your practices and procedures to determine your compliance with this Agreement. You agree to reasonably cooperate in all those audits. Capital Confirmation may conduct on-site and/or off-site audits of your facilities as Capital Confirmation determines during normal business hours, and upon reasonable notice.

17. No Warranty.
WE, OUR SUBSIDIARIES, EMPLOYEES AND OUR SUPPLIERS PROVIDE OUR WEB SITE AND SERVICES, INCLUDING BUT NOT LIMITED TO ANY APIS, ON AN "AS IS" BASIS WITHOUT ANY WARRANTIES OF ANY KIND. WE, TO THE FULLEST EXTENT PERMITTED BY LAW, DISCLAIMS ALL WARRANTIES, INCLUDING THE WARRANTY OF
MERCHANTABILITY, NON-INFRINGEMENT OF THIRD-PARTIES' RIGHTS, AND THE WARRANTY OF FITNESS FOR A PARTICULAR PURPOSE. THE WE MAKE NO WARRANTIES ABOUT THE ACCURACY, RELIABILITY, COMPLETENESS, OR TIMELINESS OF THE SERVICES OR ANY CONTENT THEREIN. WE MAKE NO WARRANTIES THAT THE WEBSITE OR SERVICE WILL REMAIN AVAILABLE. WE RESERVE THE RIGHT TO DISCONTINUE OR ALTER ANY OR ALL OF THE WEBSITE OR SERVICE, AND TO STOP PUBLISHING OUR WEBSITE OR SERVICE AT ANY TIME AND IN OUR SOLE DISCRETION WITHOUT NOTICE OR EXPLANATION, AND YOU WILL NOT BE ENTITLED TO ANY COMPENSATION OR OTHER PAYMENT UPON THE DISCONTINUANCE OR ALTERATION OF OUR WEBSITE OR SERVICES. FOR THE AVOIDANACE OF ALL DOUBT, WE DO NOT WARRANT, NOR WILL BE RESPONSIBLE FOR, ANY PRODUCTS, SERVICES, FUNCTIONALITY, OR INTERFACES THAT ARE PROVIDED BY YOU OR ANY THIRD PARTY.

18. Liability Limit.
IN NO EVENT SHALL WE, OUR SUBSIDIARIES, EMPLOYEES OR OUR SUPPLIERS BE LIABLE FOR LOST PROFITS OR ANY SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION WITH OUR SITE, OUR SERVICES, INCLUDING WITHOUT LIMITATION USE OF ANY APIS, OR THIS AGREEMENT (HOWEVER ARISING, INCLUDING NEGLIGENCE). DER NUTZER TRÄGT KEINE HAFTUNG FÜR FOLGESCHÄDEN, EXEMPLARISCHE, BESONDERE, ZUFÄLLIGE SCHÄDEN ODER STRAFSCHADENERSATZ IN ZUSAMMENHANG MIT DEM SERVICE, SELBST WENN ER AUF DIE MÖGLICHKEIT SOLCHER SCHÄDEN HINGEWIESEN WURDE.

IN NO EVENT SHALL WE, OUR SUBSIDIARIES, EMPLOYEES OR OUR SUPPLIERS BE LIABLE WITH RESPECT TO THE ACCURACY OR RELIABILITY OF INFORMATION PROVIDED BY THE AUDITOR, WHETHER INPUTTED INTO THE CAPITAL CONFIRMATION WEBSITE OR ANY ASSOCIATED PLATFORMS BY US CAPITAL CONFIRMATION OR BY THE AUDITOR. THE AUDITOR MAINTAINS THE SOLE RESPONSIBILITY AND LIABILITY FOR REVIEWING AND APPROVING THE INFORMATION POPULATED INTO THE CAPITAL CONFIRMATION WEBSITE AND ASSOCIATED PLATFORMS.

OUR LIABILITY, AND THE LIABILITY OF OUR SUBSIDIARIES, EMPLOYEES, AND SUPPLIERS, TO YOU OR ANY THIRD PARTIES IN ANY CIRCUMSTANCE IS LIMITED TO THE LESSOR OF (A) THE AMOUNT OF FEES YOU PAY TO US
IN THE 12 MONTHS PRECEDING THE FIRST DATE ON WHICH SUCH
LIABILITY AROSE, OR (B) $100. NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN YOUR SOLE AND EXCLUSIVE REMEDY FOR ANY FAILURE OR NONPERFORMANCE OF ANY APIS PROVIDED BY CAPITAL CONFIRMATION SHALL BE FOR CAPITAL CONFIRMATION TO USE COMMERCIALLY REASONABLE EFFORTS TO ADJUST OR REPAIR THE NONPERFORMING APIS.

19. Fair Credit Reporting Disclosure.
The parties acknowledge that CCI is not a consumer reporting agency as such term is defined in the federal Fair Credit Reporting Act, 15 U.S.C. 1581 et seq. ("FCRA") and therefore, is not subject to the requirements or provisions of the FCRA. Any reports accessed through the Services or Sites do not constitute consumer reports as such term is defined in the FCRA, and accordingly, such reports may not be used to determine eligibility for credit, employment, insurance underwriting, tenant screening or for any other purpose provided for in the FCRA. CCI makes no representations or warranties as to its compliance or certifications with respect to the Fair Credit Reporting Act or its regulatory requirements. However, other Users, including banking institutions, financial organizations, credit reporting agencies, and other entities with which the User may interact through the Services or Sites may be subject to the Fair Credit Reporting Act. CCI makes no representations or warranties about such other User's compliance or certifications with respect to the Fair Credit Reporting Act or its regulatory requirements. CCI shall not be deemed a guarantor of the accuracy or completeness of information provided by other Users.

20. Indemnity.
You shall indemnify and hold Capital Confirmation and (as applicable) our parent, subsidiaries, affiliates, officers, directors, agents, and employees and the financial institutions harmless from any and all third-party claims, losses and damages, liability, and costs, including attorney’s fees, against, or incurred by, Capital Confirmation to the extent such claims, damages, liability and costs result directly or indirectly from: (a) your negligence or intentional conduct; and/or (b) your breach of your obligations under this Agreement including, but not limited to, any breach which results in the unauthorized and/or non-permissible use of information obtained via Capital Confirmation’s Confirmation.com service or any other such service under this Agreement; (c) any claim that our website or Service or the use thereof infringes upon, misappropriates, or violates any intellectual property rights of any third party, provided that such claim results from or is related to (i) an unauthorized modification of our website or Service; (ii) the combination of the website or Service with software, hardware, or equipment not provided by us if our website or Service alone would not be the subject of such claim; or (iii) your unauthorized use of the website or Service; (d) any data breach suffered by you, your vendor or processor, or by a vendor or processor for Capital Confirmation; or (e) any claim, action, audit, investigation, regulatory action, inquiry, or other proceeding that arises out of or relates to your failure to comply with any applicable laws and regulations in connection with the transfer of personal data to or outside the EU/EEA including any applicable data protection legislation.

21. Confidentiality.
You may be given access to our confidential information or confidential information from other authorized Users in relation to your use of our website or Service. Information and knowledge related to the operation and processes of the website and Service are also considered confidential information. You shall hold confidential information in confidence and, unless required by law, not make confidential information available to any third party, or use confidential information for any purpose other than as provided for in using our website or Service. You shall take all reasonable steps to ensure that confidential information to which you have access is not disclosed or distributed by any person in violation of this Agreement. You acknowledge that details of the Service constitute our confidential information.

22. Legal Compliance.
You represent and warrant that you have read, understand, and shall comply with all laws, regulations and judicial actions including, but not limited to, the Identity Theft and Assumption Deterrence Act, the Fraud and False Statements Act, the USA Freedom Act, the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Gramm-Leach-Bliley Act and the Fair Credit Reporting Act (15 U.S.C. 1681 et seq.), including without limitation, all amendments thereto, and all other applicable federal or state legislation, regulations and judicial actions, as now or as may become effective.

You certify that you will use the service and the information received for no other purpose than is legally permissible. You understand that if the system is used improperly by company personnel, or if its access codes are made available to any unauthorized personnel due to carelessness on your part or any other, you may be held responsible for financial losses, fees or monetary charges that may be incurred and that its access privileges may be terminated. You will not obtain, retain, use, or provide access to the Service to an affiliate or any third party in a manner that may breach any applicable export control or economic sanctions laws and regulations for any jurisdiction, including the United States of America, the United Kingdom and the European Union and its Member States. You warrant that neither you, nor any affiliate to which you provide access to the Service, is affiliated with a specially designated or sanctioned entity under any of those laws and that, in any transaction relating to Confirmation or the Service, such transactions will not involve sanctioned parties, including without limitation through the use of bank accounts at banks that are sanctioned parties. Further, the parties represent and warrant that they have read, understand and shall comply with all applicable laws, regulations and judicial actions including, but not limited to, anti-bribery laws, anti-corruption laws, anti-slavery laws, anti-human trafficking, tax laws, any applicable law aimed at preventing the facilitation of criminal behavior.

23. British Banker’s Association, BBA Enterprises Limited plus any other group company of the British Banker’s Association (Together the “BBA”)
Kein Bestandteil dieser Vereinbarung beschränkt die Haftung der BBA für Todesfälle oder Personenschäden, die durch ihre Fahrlässigkeit oder jene ihrer Mitarbeiter verursacht werden; für Betrug oder betrügerische Falschdarstellungen; oder andere Haftungen, die nach englischem Recht nicht ausgeschlossen werden können, selbst wenn andere Bestimmungen dieser Vereinbarung auf das Gegenteil hindeuten.
You expressly acknowledge and agree that the BBA: (a) is not a part to this Agreement and is not involved in the design, supply or support of Capital Confirmation Inc’s services including the service promoted to UK banks as “BBA Confirmations”; (b) makes no representation or warranty that the services will be adequate or appropriate for you and its requirements and any BBA trademarks or logos present in marketing materials or other documents o not represent and endorsement of the service; (c) shall not be responsible for providing any of the services; and (d) shall have no liability to you whatsoever whether direct or indirect and whether in contact, tort (including negligence), misrepresentation or for any other reason in respect of any of the services provided under this agreement.

24. No Agency.
Sie und Capital Confirmation sind unabhängige Vertragsparteien und durch diese Vereinbarung wird keine Agentur, Partnerschaft, kein Joint Venture und keine arbeits- oder franchiserechtliche Beziehung beabsichtigt oder begründet.

25. Notices.
Except as explicitly stated otherwise, any notices shall be given by postal mail to
Capital Confirmation Inc. Attn: Legal Department 214 Centerview Drive, Suite 100, Brentwood, TN 37027 (in the case of Capital Confirmation) or to the email address you provide to Capital Confirmation during the registration process (in your case). Eine Mitteilung gilt 24 Stunden nach dem Absenden der E-Mail als abgegeben, es sei denn, die sendende Partei wurde darüber benachrichtigt, dass die E-Mail-Adresse ungültig ist. Alternativ können wir Ihnen Mitteilungen durch ein korrekt frankiertes Einschreiben mit Rückschein an die Capital Confirmation bei der Anmeldung zur Verfügung gestellte Adresse zukommen lassen. In diesem Fall gilt die Mitteilung 3 Tage nach dem Versanddatum als abgegeben.

26. Arbitration.
Jeder Rechtsstreit bzw. Rechtsanspruch, der sich in Verbindung mit dieser Vereinbarung oder unseren Services ergibt, ausgenommen Rechtsverfahren von Capital Confirmation, um Gebühren einzutreiben und/oder Schadensersatz oder eine einstweilige Verfügung in Verbindung mit dem Betrieb, dem geistigen Eigentum und den Services von Capital Confirmation zu erwirken, sind im Rahmen einer verbindlichen Schlichtung gemäß den Vorschriften der Handelsschiedsgerichtsbarkeit der American Arbitration Association zu entscheiden. Jeder derartige Rechtsstreit oder Anspruch wird auf individueller Basis verhandelt und kann nicht in Verbindung mit einem Streitfall oder einem Anspruch einer anderen Partei entschieden werden. Das Schlichtungsverfahren wird in Nashville, Tennessee, durchgeführt und die Entscheidung des Schiedsgerichts kann von einem zuständigen Gericht für vollstreckbar erklärt werden. Entweder Sie selbst oder Capital Confirmation kann vor einem zuständigen Gericht in Nashville, Tennessee, um zwischenzeitliche oder vorläufige Entlastung ersuchen, um die Rechte oder den Besitz von Ihnen oder Capital Confirmation zu schützen, während die Schlichtung bearbeitet wird. Wenn eine Partei entgegen diesen Bestimmungen Klage erhebt, ist die andere Partei berechtigt, Anwaltsgebühren und Kosten bis zu 1000.00,{[#2]} USD zu verlangen.

27. Additional Terms.
Die folgenden Richtlinien werden durch Bezugnahme in diese Vereinbarung integriert und stellen weitere Bedingungen in Hinblick auf die spezifischen, auf unserer Seite angebotenen Services dar.

Datenschutzerklärung: https://www.confirmation.com/legal-security-privacy/index.html
Fee and Credit Policy: https://www.confirmation.com/resources/uncategorized/fees-and-credit-policy/

Jede dieser Richtlinien kann von Zeit zu Zeit geändert werden und die entsprechenden Änderungen treten unmittelbar nach deren Veröffentlichung auf unserer Seite in Kraft, mit Ausnahme der Datenschutzerklärung, über deren Änderung Sie dreißig Tage vorher informiert werden. Wenn Sie darüber hinaus spezielle Services auf unserer Seite nutzen, unterliegen Sie den veröffentlichten Richtlinien oder Regeln zu den Services, die Sie über unsere Seite nutzen, die von Zeit zu Zeit veröffentlicht werden können. Alle diese veröffentlichten Richtlinien oder Regeln werden hiermit durch Bezugnahme in diese Vereinbarung integriert.

You acknowledge and agree that: (a) members of Capital Confirmation’s Group may be retained as sub-processors; and (b) Capital Confirmation and members of Capital Confirmation’s Group respectively may engage third-party sub-processors in connection with the provision of the Services.

We do not guarantee and shall not be liable for the performance of any sub-processor or sub-contractor.

28. Governing Law.
This Agreement shall be governed in all respects by the laws of the State of Tennessee, without reference to conflict of laws principles. You further consent to exclusive jurisdiction by the United States District Court for the Middle District of Tennessee.

29. Assignment.
Sie erklären sich einverstanden, dass diese Vereinbarung und alle darin enthaltenen Vereinbarungen im Falle einer Zusammenlegung oder Übernahme automatisch und nach eigenem Ermessen von Capital Confirmation einer anderen Partei zugewiesen werden können. You may not, without our prior written consent, assign, transfer, sub-contract or otherwise deal with any of your rights and/or obligations under this Agreement.

30. General.
Wir garantieren keinen dauerhaften, ununterbrochenen oder sicheren Zugang zu unseren Services und der Betrieb unserer Seite kann durch zahlreiche Faktoren, die außerhalb unserer Kontrolle liegen, beeinträchtigt werden. Sollte eine Bestimmung dieser Vereinbarung ungültig oder nicht durchsetzbar sein, so gilt sie als gestrichen, was die Gültigkeit der übrigen Bestimmungen nicht berührt. Überschriften gelten lediglich als Referenz und dienen nicht dazu, den Umfang oder das Ausmaß eines Abschnittes zu definieren, zu begrenzen, auszulegen oder zu beschreiben. Mit der Unterlassung unsererseits, einen Verstoß durch Sie oder andere zu ahnden, verzichten wir nicht auf unser Recht, bei späteren oder ähnlichen Verstößen zu handeln. Die offiziell für Inhalte auf der Webseite Confirmation.com verwendete Sprache ist Englisch. Über einen Drittanbieter ermöglicht es Confirmation.com Personen mit begrenzten Englischkenntnissen, auf Informationen auf der Seite zuzugreifen. Durch diesen automatischen Prozess durchgeführte Übersetzungen sollten nicht als exakt angesehen werden, insbesondere hinsichtlich technischer und rechtlicher Begriffe. Zudem können einige Dateien wie Grafiken, Fotos und PDFs im Zuge dieses Prozesses nicht übersetzt werden. Capital Confirmation Inc. garantiert nicht die Genauigkeit und Verlässlichkeit der durch dieses System übersetzten Informationen und haftet nicht für Verluste, die durch ein derartiges Vertrauen auf die Genauigkeit und Verlässlichkeit dieser Informationen entstanden sind. Obwohl jeder Versuch unternommen wird, die Genauigkeit der Übersetzung zu gewährleisten, können Teile davon fehlerhaft sein. Jede Person oder jedes Unternehmen, das auf die im System erhaltenen Informationen vertraut, tut dies auf eigene Gefahr. Diese Vereinbarung stellt die gesamte Übereinkunft und Vereinbarung zwischen den Parteien in Bezug auf den Gegenstand derselben dar. Sections 2 (Fees and Service) with respect to fees owed for our services, 3,3 (Release), 8,3 (License), 10 (Access and Interference), 18 (Liability Limit), 19 (Indemnity) and 26 (Arbitration) shall survive any termination or expiration of this Agreement.

31. Disclosures.
Die hierin genannten Services werden erbracht von Capital Confirmation Inc. mit Sitz in 214 Centerview Drive, Suite 100, Brentwood, Tennessee 37027. Fees for our services are described above in Section 2 (Fees and Service).

32. Disputes.
Sie können sich mit Streitfragen zwischen Ihnen und Capital Confirmation hinsichtlich unserer Services schriftlich an unsere Kundenbetreuung wenden: Capital Confirmation, Customer Support, 214 Centerview Drive, Suite 100, Brentwood, TN 37027. Wir ermutigen Sie, alle Streitfälle zwischen Nutzern an Ihre örtliche Strafverfolgungsbehörde, den Leiter der Poststelle oder eine zertifizierte Mediations- oder Schiedsgerichtsstelle weiterzuleiten.

33. Your Acceptance of this User Agreement.
You evidence your acceptance of this User Agreement by clicking on “Accept User
Agreement and Add Account" button on the Capital Confirmation website or by using the Confirmation.com service. Ein derartiges Einverständnis hat dieselbe rechtliche Wirkung wie Ihre handschriftliche Unterschrift auf einem Schriftstück, das die Bedingungen dieser Nutzervereinbarung enthält.

Anlage 1
EUROPÄISCHE DATENÜBERTRAGUNG

We process Personally Identifiable Information outside of the European Economic Area (EEA) and Switzerland including in third countries which may not be recognized by the European Commission or the Swiss Federal Data Protection and Information Commission as providing an adequate level of privacy protection, such as in the United States.

Capital Confirmation will enter into the Standard Contractual Clauses approved by the European Commission to legitimize the transfers of Personally Identifiable Information outside of the EEA and/or Switzerland to an inadequate third country.

If we are required to enter into the Standard Contractual Clauses to legitimize the transfer of Personally Identifiable Information outside of the EEA and/or Switzerland, then the parties hereby agree to the Standard Contractual Clauses set forth in Attachment 1 (for those cases where we act as a processor with respect to personal data) below, and you evidence your acceptance of the Standard Contractual Clauses by clicking on “Accept User Agreement and Add Account” button on the Capital Confirmation website or by using the Confirmation.com Service.

Notwithstanding the foregoing, if the Standard Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personally Identifiable Information outside of the EEA to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer agreements), then you shall procure the appropriate consent of any data subject whose Personally Identifiable Information is transferred to us to enable us to transfer that Personally Identifiable Information to the United States (or such other third country).

Attachment 1: Standard Contractual Clauses (Processor)

For the transfer of personal data outside of the EEA and/or Switzerland to processors established in third countries which do not ensure an adequate level of data protection, the data exporter and the data importer have agreed on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.

Notwithstanding the foregoing, if the following Contractual Clauses are not a valid transfer mechanism to legitimize the transfers of Personal Data outside of the EEA and/or Switzerland to the United States (or another third country that does not provide an equivalent level of protection even with the use of such data transfer Clauses), you shall procure the appropriate consent of any data subject whose Personal Data is transferred to us to enable the Parties to transfer that Personal Data to the United States (or such other third country).

Clause 1
Begriffsbestimmungen.
Im Rahmen der Vertragsklauseln gelten folgende Begriffsbestimmungen:
(a) ‘personal data’, ‘special categories of data’, ‘process/processing’, ‘controller’, ‘processor’, ‘data subject’ and ‘supervisory authority’ shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;
(b) ‘the data exporter’ means the party who transfers the personal data;
(c) ‘the data importer’ means the processor who agrees to receive from the data exporter personal data intended for processing on his behalf after the transfer in accordance with his instructions and the terms of the Clauses and who is not subject to a third country’s system ensuring adequate protection within the meaning of Article 25(1) of Directive 95/46/EC;
(d) ‘the sub-processor’ means any processor engaged by the data importer or by any other sub-processor of the data importer who agrees to receive from the data importer or from any other sub-processor of the data importer personal data exclusively intended for processing activities to be carried out on behalf of the data exporter after the transfer in accordance with his instructions, the terms of the Clauses and the terms of the written subcontract;
(e) ‘the applicable data protection law’ means the legislation protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data applicable to a data controller in the Member State in which the data exporter is established;
(f) ‘technical and organisational security measures’ means those measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

Clause 2
Einzelheiten der Übermittlung
Die Einzelheiten der Übermittlung, insbesondere die besonderen Kategorien personenbezogener Daten, sofern vorhanden, werden in Anhang 1 erläutert, der Bestandteil dieser Klauseln ist.

Clause 3
Drittbegünstigtenklausel

(a) The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i), Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses 9 to 12 as third-party beneficiary.
(b) The data subject can enforce against the data importer this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data exporter has factually disappeared or has ceased to exist in law unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law, as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity.
(c) The data subject can enforce against the sub-processor this Clause, Clause 5(a) to (e) and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, unless any successor entity has assumed the entire legal obligations of the data exporter by contract or by operation of law as a result of which it takes on the rights and obligations of the data exporter, in which case the data subject can enforce them against such entity. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.
(d) The parties do not object to a data subject being represented by an association or other body if the data subject so expressly wishes and if permitted by national law.

Clause 4
Pflichten des Datenexporteurs
Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;
(b) that it has instructed and throughout the duration of the personal data-processing services will instruct the data importer to process the personal data transferred only on the data exporter’s behalf and in accordance with the applicable data protection law and the Clauses;
(c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 to this contract;
(d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;
(e) that it will ensure compliance with the security measures;
(f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;
(g) to forward any notification received from the data importer or any sub-processor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;
(h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for sub-processing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;
(i) that, in the event of sub-processing, the processing activity is carried out in accordance with Clause 11 by a sub-processor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and
(j) that it will ensure compliance with Clause 4(a) to (i).

Clause 5
Pflichten des Datenimporteurs
Der Datenexporteur erklärt sich bereit und garantiert, dass:
(a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
(c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred;
(d) that it will promptly notify the data exporter about:
(e) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation;
i. any accidental or unauthorised access; and
ii. any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so;
iii. to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;
(f) at the request of the data exporter to submit its data-processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority. The data importer has included the security requirements detailed in Appendix 2 at the request of the data exporter, and the data exporter agrees that such security requirements and the audit obligations and rights under the Master Agreement will be deemed to fully satisfy the audit rights granted to the data exporter under Clauses 5(f) and 12,2;
(g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for sub-processing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;
(h) that, in the event of sub-processing, it has previously informed the data exporter and obtained its prior written consent (whether under or in connection with the Master Agreement or otherwise);
(i) that the processing services by the sub-processor will be carried out in accordance with Clause 11;
(j) to send promptly, on request, a copy of any sub-processor agreement it concludes under the Clauses to the data exporter.

Clause 6
Verbindlichkeit
1. The parties agree that any data subject, who has suffered damage as a result of any breach of the obligations referred to in Clause 3 or in Clause 11 by any party or sub-processor is entitled to receive compensation from the data exporter for the damage suffered.
2. If a data subject is not able to bring a claim for compensation in accordance with paragraph 1 against the data exporter, arising out of a breach by the data importer or his sub-processor of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter has factually disappeared or ceased to exist in law or has become insolvent, the data importer agrees that the data subject may issue a claim against the data importer as if it were the data exporter, unless any successor entity has assumed the entire legal obligations of the data exporter by contract of by operation of law, in which case the data subject can enforce its rights against such entity.
3. The data importer may not rely on a breach by a sub-processor of its obligations in order to avoid its own liabilities.
4. If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the sub-processor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the sub-processor agrees that the data subject may issue a claim against the data sub-processor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity. Eine solche Haftung des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach diesen Klauseln beschränkt.

Clause 7
Schlichtung und Gerichtsstand
(a) The data importer agrees that if the data subject invokes against it third-party beneficiary rights and/or claims compensation for damages under the Clauses, the data importer will accept the decision of the data subject:
(b) to refer the dispute to mediation, by an independent person or, where applicable, by the supervisory authority;
(c) to refer the dispute to the courts in the Member State in which the data exporter is established.
(d) The parties agree that the choice made by the data subject will not prejudice its substantive or procedural rights to seek remedies in accordance with other provisions of national or international law.

Clause 8
Cooperation with supervisory authorities
1. The data exporter agrees to deposit a copy of this contract with the supervisory authority if it so requests or if such deposit is required under the applicable data protection law.
2. The parties agree that the supervisory authority has the right to conduct an audit of the data importer, and of any sub-processor, which has the same scope and is subject to the same conditions as would apply to an audit of the data exporter under the applicable data protection law.
3. The data importer shall promptly inform the data exporter about the existence of legislation applicable to it or any sub-processor preventing the conduct of an audit of the data importer, or any sub-processor, pursuant to paragraph 2. In such a case the data exporter shall be entitled to take the measures foreseen in Clause 5(b).

Clause 9
Anwendbares Recht
Für diese Klauseln gilt das Recht des Mitgliedstaats, in dem der Datenexporteur niedergelassen ist.

Clause 10
Änderung des Vertrags
Die Parteien verpflichten sich, die Klauseln nicht zu verändern. Es steht den Parteien allerdings frei, erforderlichenfalls weitere, geschäftsbezogene Klauseln aufzunehmen, sofern diese nicht im Widerspruch zu der Klausel stehen.

Clause 11
Vergabe eines Unterauftrags
1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Bei der Weitervergabe seiner Verpflichtungen gemäß den Klauseln durch den Datenimporteur, kann dies, mit Einverständniserklärung des Datenexporteurs, geschehen, jedoch nur basierend auf einer schriftlichen Vereinbarung mit dem externen Dienstleister, die den Dienstleister die selben Verpflichtungen auferlegt wie sie der Datenimporteur gemäß den Klauseln hat. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor's obligations under such agreement.
2. The prior written contract between the data importer and the sub-processor shall also provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the data subject is not able to bring the claim for compensation referred to in paragraph 1 of Clause 6 against the data exporter or the data importer because they have factually disappeared or have ceased to exist in law or have become insolvent and no successor entity has assumed the entire legal obligations of the data exporter or data importer by contract or by operation of law. Eine solche Haftpflicht des Unterauftragsverarbeiters ist auf dessen Verarbeitungstätigkeiten nach den Klauseln beschränkt.
3. The provisions relating to data protection aspects for sub-processing of the contract referred to in paragraph 1 shall be governed by the law of the Member State in which the data exporter is established.
4. The data exporter shall keep a list of sub-processing agreements concluded under the Clauses and notified by the data importer pursuant to Clause 5(j), which shall be updated at least once a year. The list shall be available to the data exporter's data protection supervisory authority.

Clause 12
Pflichten nach Beendigung der Datenverarbeitungsdienste
1. The parties agree that on the termination of the provision of data-processing services, the data importer and the sub-processor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred. In diesem Fall garantiert der Datenimporteur, dass er die Vertraulichkeit der übermittelten personenbezogenen Daten gewährleistet und diese Daten nicht mehr aktiv weiterverarbeitet.
2. The data importer and the sub-processor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data-processing facilities for an audit of the measures referred to in paragraph 1.

On behalf of the data exporter:
Name (written out in full):
Position:
Adresse:

Other information necessary in order for the contract to be binding (if any): (stamp of organisation)
Unterschrift

On behalf of the data importer:
Capital Confirmation, Inc.
Name (written out in full): Diana Flanders
Position: VP, Business Integrations
Address: Capital Confirmation, Inc. 214 Centerview Drive, Suite 100, Brentwood, TN 37027

Other information necessary in order for the contract to be binding (if any): N/A
Unterschrift

Anhang 1
zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden

Die Mitgliedstaaten sind in der Lage gemäß ihren nationalen Gesetzen sämtliche zusätzliche, erforderliche Informationen in diesem Anhang hinzufügen oder ausdrücken

Datenexporteur

The data exporter is (please specify briefly your activities relevant to the transfer):

The data exporter will export the personal data contained in the client's documentation to the responders via the Confirmation.com platform. Exported data will concern personal data of data exporter's employees with access given to the online platform handled by the data importer. Also, data exporter's client data for the purposes of forwarding data exporter's audit requests to responders by the data importer.

Datenimporteur
The data importer is (please specify briefly activities relevant to the transfer):
Capital Confirmation Inc.

The data importer provides an online venue for digital transaction management, including but not limited to, audit confirmations, accounts receivable/accounts payable confirmations, credit inquiries, employee benefit plan audits and confirmations, and legal confirmations for accounting firms, law firms, banks, and other users. Processed data will concern data exporter's employees for which accounts in the platform handled by the data importer will be created. Also, data exporter's client data for the purposes of forwarding data exporter's audit requests to responders by the data importer.

Betroffene Personen

The personal data transferred concern the following categories of data subjects (please specify):

Data exporter’s employees and personal data of data exporter’s client’s representatives and other subjects mentioned in the documentation, which is sent to the responder

Datenkategorien

The personal data transferred concern the following categories of data (please specify):

The categories of data are: names, surnames, addresses, account numbers, financial information, PESEL number and other personal data of the subjects mentioned in the documentation sent to the responder. Employees, partners, principals, directors, former employees, former partners, former principals, former directors, new hires, individual contractors and temporary staff of the data exporter, as well as applicants, dependants, contractors / subcontractors, clients, suppliers/vendors of the data exporter

Besondere Kategorien personenbezogener Daten (wenn zutreffend)
Not applicable

Verarbeitung

The personal data transferred will be subject to the following basic processing activities (please specify):

The platform Confirmation.com is internet-based system, that allows the data exporter to send documentation to auditors for the needs of the audit. The documentation will be encrypted by the data importer while uploading it to the platform, so the data importer should not get access to the contents of the documentation and personal data contained in the documentation beyond the scope necessary to perform the encryption process.

DATA EXPORTER
Name:
Authorised Signature

DATA IMPORTER
Capital Confirmation, Inc.
Name: Diana Flanders
Authorised Signature

Anhang 2
zu den Standardvertragsklauseln

Dieser Anhang ist Bestandteil der Klauseln und muss von den Parteien ausgefüllt und unterzeichnet werden.

Beschreibung der technischen oder organisatorischen Sicherheitsmaßnahmen, die der Datenimporteur gemäß Klausel 4 Buchstabe d und Klausel 5 Buchstabe c eingeführt hat (oder Dokument/Rechtsvorschrift beigefügt):

Data Importer has implemented the technical and organisation security measures set out in the Agreements and incorporated herein by reference.

DATA EXPORTER
Name:
Authorised Signature
Capital Confirmation Inc.
Name: Diana Flanders
Authorised Signature

Der Maßstab in Sachen Sicherheit

To illustrate Confirmation's commitment to effective operational controls and privacy and security best practices, we undergo all three Service Organization Control (SOC) examinations annually, have received an ISO 27001 certification for the service, TRUSTe Privacy Policy certified, and EU Privacy Shield certified. Gemeinsam unterstreichen diese die Kontrollen, die wir durchführen, um die die Vertraulichkeit unserer Benutzerdaten, die Sicherheit, Verfügbarkeit und die Integrität der Verarbeitung unseres Systems zu schützen.

TRUSTe            

                    

 

Prüfungen gemäß SOC 1, SOC 2 und SOC 3

SOC-Berichte prüfen die Kontrollen der Dienstleistungen, die von Serviceorganisationen bereitgestellt werden. Es gibt drei Arten von SOC-Berichten. Um den vielseitigen Anforderungen unserer Kunden zu entsprechen, führen wir alle drei SOC-Prüfungen durch.

  • Typ 2 SOC 1, durchgeführt gemäß SSAE 18, beschreibt den Aufbau und die operative Wirksamkeit der Kontrollen, die für die internen Kontrollen der Finanzberichterstattung der Benutzerentitäten relevant sind.
  • Typ 2 SOC 2 beschreibt den Aufbau und die operative Wirksamkeit von Kontrollen, die die Sicherheit, Verfügbarkeit und Integrität der Verarbeitung unseres Systems zur Bearbeitung von Benutzerdaten und die Vertraulichkeit der vom System verarbeiteten Daten betreffen.
  • SOC 3—reports on whether a system complies with specified Trust Services Criteria.

View our SOC 3 Report.

          

ISO-27001-Zertifizierung

ISO 27001-Zertifizierung des Service von Confirmation.com – stellt einen global anerkannten Standard für die Etablierung und Zertifizierung eines Informationssicherheitsmanagementsystems (ISMS) dar. Der Standard bestimmt die Anforderungen für die Etablierung, die Umsetzung, den Betrieb, die Überwachung, die Wartung und die Verbesserung einer dokumentierten ISMS im Kontext der gesamten Geschäftsrisiken einer Organisation.

Das ISMS von Confirmation.com umfasst den Revisionsbestätigungsservice und die Infrastruktur, einschließlich Daten und Datenumgebungen, Servern, Quellcode und internen Netzwerken in Zusammenhang mit seinen Unternehmensbüros in Brentwood, Tennessee, und Delray Beach, Florida.

Unser ISO27001-Zertifikat ansehen

TRUSTe-Zertifizierung

Confirmation.com erfüllt die vertrauenswürdigsten, von TRUSTe herausgegebenen Zertifizierungsstandards für Datenschutzrichtlinien des Internets. Das TRUSTe-Datenschutzsiegel wird Unternehmen zuerkannt, die die strengen, für das Internet geltenden Datenschutzrichtlinien von TRUSTe erfüllen und sich dafür einsetzen, Kundendaten mit dem äußersten Respekt für die Privatsphäre zu behandeln.

View our TRUSTe Privacy Seal

TRUSTe

Privacy Shield Frameworks

Capital Confirmation has certified under the guidelines set forth in the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks and has undergone successful review by the U.S. Department of Commerce.

The Privacy Shield Frameworks provide a set of robust and enforceable protections for the personal data of EU and Swiss individuals transferred to third parties. The Frameworks provide strong U.S. government oversight, increased cooperation with EU and Swiss data protection authorities (DPAs), and transparency regarding how participating companies use personal data. The Privacy Shield Frameworks also offer EU and Swiss individuals multiple avenues to address any concerns regarding participants' compliance with the Frameworks including free dispute resolution.

View our Privacy Shield

Datenschutz-Grundverordnung (DSGVO)

Die DSGVO hat in erster Linie das Ziel, EU-Bürgern die Kontrolle über ihre persönlichen Daten wiederzugeben und die Gesetzeslandschaft für internationale Unternehmen zu vereinfachen, indem die Verordnungen in den Mitgliedsstaaten vereinheitlicht werden. Confirmation.com verpflichtet sich dazu, seine Daten und die seiner Kunden zu schützen. Um dieses Ziel zu erreichen, hat das Unternehmen viele Kontrollmechanismen eingesetzt, die die Einhaltung der DSGVO sicherstellen sollen. Please read below for more information.

What is GDPR?

On May 25, 2018, the European Union (EU) began enforcing a new data protection regulation, the General Data Protection Regulation, or GDPR. The GDPR is designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens' data privacy and to reshape the way organizations across the region approach data privacy.

Who does the GDPR impact?

The GDPR applies to organizations located within the EU, and to organizations located outside of the EU if they offer goods or services to, or monitor the behavior of, EU natural persons or 'data subjects.' It applies to all companies processing and holding the personal data of data subjects residing in the EU, regardless of the company's location.

What steps is Confirmation.com taking to comply with GDPR?

Confirmation.com welcomes the GDPR as an important step forward in streamlining data protection requirements across the EU, and as an opportunity for our organization to strengthen our commitment to data protection.

The following steps have been taken to ensure compliance with the GDPR:

  • Implemented a Security Management System
  • Appointed a Data Protection Officer
  • Appointed a EU-Based Data Protection Representative
  • Updated Data Privacy Policies
  • All Data Classified as “Most Sensitive” is Encrypted At-Rest
  • Annual Data Protection Impact Assessments Performed
  • Implemented Data Protection by Design Into All Business Projects
  • Created a GDPR Compliant Data Breach Incident Response Plan
  • Personal Data Processing Inventory (Article 30 Report) Created and Maintained.
  • Implemented Personal Data Loss Prevention Controls
  • Enhanced Data Privacy and Security Awareness Training implemented
  • Enhanced Encryption For Personal Data in Transit via TLS 1,2
  • Created GDPR Compliant Procedures for EU Data Subject Inquiries
  • Streamlined Explicit Consent and Withdrawal Procedures Implemented
  • Fair Personal Data Processing Notices Created and Sent to Data Subjects
  • Implemented GDPR Compliant Third Party Risk Management System
  • Registered with the ICO (UK Information Commissioner’s Office) To Provide EU Data Subject Inquiry Recourse
  • Certified EU-US Privacy Shield
  • Certified Swiss-US Privacy Shield

For more information about Confirmation.com and GDPR, email DataInquiries@confirmation.com. Further information on GDPR specifically can be found at eugdpr.org.

HIPAA/HITECH

The federal Health Insurance Portability and Accountability Act of 1996 (HIPAA), includes laws and regulations governing health insurance coverage protection and health information security for Americans and their families. The intent of HIPAA is to assure the portability of health insurance, decrease health care fraud and abuse, improve efficiency and effectiveness of healthcare, enforce standards, and guarantee security and privacy of patient identifiable information.

The Health Information Technology for Economic and Clinical Health (HITECH) Act, enacted as part of the American Recovery and Reinvestment Act of 2009, was signed into law on February 17, 2009, to promote the adoption and meaningful use of health information technology. Subtitle D of the HITECH Act addresses the privacy and security concerns associated with the electronic transmission of health information, in part, through several provisions that strengthen the civil and criminal enforcement of the HIPAA rules.

HIPAA and HITECH compliance certification is the formal way to assure individuals that a provider is committed to protect their medical information.

We are committed to respect the privacy of all health care information and to follow industry standard guidelines for securing patient information.

PCI-DSS Level 2 Compliance

Maintaining payment security is required for all entities that store, process or transmit cardholder data. Guidance for maintaining payment security is provided in PCI security standards. These standards detail the technical and operational requirements for organizations accepting or processing payment transactions, and for software developers and manufacturers of applications and devices used in those transactions.

AICPA - AU-C Section 500: Audit Evidence

Confirmation helps auditors comply with auditing standards and requirements. Please read below to learn how Confirmation complies with the AICPA.

Externe Bestätigungen

Leitfaden

.A18 Eine externe Bestätigung repräsentiert einen von einem Wirtschaftsprüfer eingeholten Revisionsnachweis als direkte, schriftliche Antwort an den Prüfer von einem Dritten (der bestätigenden Partei) in Papierform, elektronisch oder einem anderem Medium.

How Confirmation Complies

Confirmation uses a unique authentication and authorization process to verify the authenticity of each user. Mit dem Versand einer Anfrage an einen validierten Responder wird es überflüssig, die Identität der befragten Person und deren Authorisierung selbst zu verifizieren.

Zuverlässigkeit

Leitfaden

.A32  While recognizing that exceptions may exist, the following generalizations about the reliability of audit evidence may be useful:

  • Direkt von einem Wirtschaftsprüfer eingeholte Revisionsnachweise sind verlässlicher als indirekt eingeholte Revisionsnachweise.
  • Dokumentierte Revisionsnachweise – sei es in Papierform, elektronisch oder mit einem anderen Medium – sind verlässlicher als mündlich weitergegebene Nachweise.

How Confirmation Complies

Confirmation uses a unique authentication and authorization process to verify the authenticity of each user. By sending a request to a validated responder, you eliminate the burden of having to verify the identity of the respondent and whether or not they are authorized to respond.Undergoes SOC 1, SOC 2 and SOC 3 examinations annually, and has received an ISO 27001 certification of its Confirmation.com service.

AICPA - AU-C Section 505: External Confirmations

Confirmation helps auditors comply with auditing standards and requirements. Please read below to learn how Confirmation complies with the AICPA.

Auswahl der angemessenen bestätigenden Partei

Leitfaden

.A3  Responses to confirmation requests provide more relevant and reliable audit evidence when confirmation requests are sent to a confirming party who the auditor believes is knowledgeable about the information to be confirmed.

How Confirmation Complies

Confirmation uses a unique authentication and authorization process to verify the authenticity of each user. Mit dem Versand einer Anfrage an einen validierten Responder wird es überflüssig, die Identität der befragten Person und deren Authorisierung selbst zu verifizieren.

Zuverlässigkeit der Antworten auf Bestätigungsanfragen

Leitfaden

.A15  An electronic confirmation system or process that creates a secure confirmation environment may mitigate the risks of interception or alteration. Die Erschaffung einer sicheren Umgebung für Bestätigungen ist von den Prozessen oder Mechanismen abhängig, die Wirtschaftsprüfer und befragte Personen einsetzen, um die Möglichkeit einer Kompromittierung der Ergebnisse durch ein Abfangen oder Verändern der Bestätigung zu reduzieren.

How Confirmation Complies

Einsatz fortschrittlichster Sicherheitsmaßnahmen zur Gewährleistung von Datenschutz und Datenintegrität. Undergoes SOC 1, SOC 2 and SOC 3 examinations annually, and has received an ISO 27001 certification of its Confirmation service.

AICPA - Practice Alert 03-1: Audit Confirmations

Confirmation helps auditors comply with auditing standards and requirements. Please read below to learn how Confirmation complies with the AICPA.

Leitfaden

.19 Wenn der Wirtschaftsprüfer davon überzeugt ist, dass der elektronische Bestätigungsprozess sicher und ordnungsgemäß kontrolliert ist und die Bestätigung direkt von einem dritten autorisierten Bona-Fide-Respondenten stammt, dann werden elektronische Bestätigungen als hinreichend und gültig anerkannt.

How Confirmation Complies

Undergoes SOC 1, SOC 2 and SOC 3 examinations annually, and has received an ISO 27001 certification of its Confirmation service. Einsatz fortschrittlichster Sicherheitsmaßnahmen zur Gewährleistung von Datenschutz und Datenintegrität. Confirmation uses a unique authentication and authorization process to verify the authenticity of each user. Mit dem Versand einer Anfrage an einen validierten Responder wird es überflüssig, die Identität der befragten Person und deren Authorisierung selbst zu verifizieren.

PCAOB - AU Section 330: The Confirmation Process

Confirmation helps auditors comply with auditing standards and requirements. Please read below to learn how Confirmation complies with the PCAOB.

Befragte Person

Leitfaden

.27  The auditor should consider whether there is sufficient basis for concluding that the confirmation request is being sent to a respondent from whom the auditor can expect the response will provide meaningful and appropriate audit evidence. 

How Confirmation Complies

Confirmation.com verwendet einen einzigartigen Prozess für die Authentifizierung und Autorisierung, um die Authentizität jedes Benutzers zu verifizieren. Mit dem Versand einer Anfrage an einen validierten Responder wird es überflüssig, die Identität der befragten Person und deren Authorisierung selbst zu verifizieren.

Durchführung des Bestätigungsprozesses

Leitfaden

.29  During the performance of confirmation procedures, the auditor should maintain control over the confirmation requests and responses. Die Kontrolle zu behalten bedeutet die Einrichtung eines direkten Kommunikationsweges zwischen dem beabsichtigten Empfänger und dem Wirtschaftsprüfer, um eventuellen Verzerrungen der Ergebnisse durch ein Abfangen und Ändern der Bestätigungsanfragen und Antworten vorzubeugen.

How Confirmation Complies

Einsatz fortschrittlichster Sicherheitsmaßnahmen zur Gewährleistung von Datenschutz und Datenintegrität. Ermöglicht dem Wirtschaftsprüfer, Revisionsbestätigungsanfragen direkt an den vorgesehenen Responder zu schicken. Undergoes SOC 1, SOC 2 and SOC 3 examinations annually, and has received an ISO 27001 certification of its Confirmation.com service.

PCAOB - AU Section 326: Audit Evidence

Confirmation helps auditors comply with auditing standards and requirements. Please read below to learn how Confirmation complies with the PCAOB.

Hinreichend angemessener Revisionsnachweis

Leitfaden

0,08 Ein Revisionsnachweis ist verlässlicher, wenn er von kenntnisreichen unabhängigen Quellen außerhalb der juristischen Person eingeholt wird.

How Confirmation Complies

Undergoes SOC 1, SOC 2 and SOC 3 examinations annually, and has received an ISO 27001 certification of its Confirmation.com service.

ISA – ISA 505: Externe Bestätigungen

Confirmation helps auditors comply with auditing standards and requirements. Please read below to learn how Confirmation complies with the ISA.

Para 6(a) Definition: Externe Bestätigung 

Leitfaden

Direkt für den Wirtschaftsprüfer von einem Dritten (der bestätigenden Partei) bezogener, schriftlicher Revisionsnachweis in schriftlicher oder elektronischer Form oder über ein anderes Medium.

How Confirmation Complies

Confirmation.com ermöglicht Wirtschaftsprüfern die elektronische Einholung von Bestätigungen. Die Antworten werden von autorisierten Bankangestellten entsprechend der Anfrage des Wirtschaftsprüfers verfasst. Die Nutzung von Confirmation.com erfüllt die Anforderungen einer „externen Bestätigung“.

Para. 7 Bewahrung der Kontrolle 

Leitfaden

Bei der Nutzung externer Bestätigungsprozesse muss der Wirtschaftsprüfer stets die Kontrolle über externe Bestätigungsanfragen behalten.

How Confirmation Complies

Wirtschaftsprüfer bewahren die vollständige Kontrolle über den Prozess einschließlich der Einrichtung von Kunden und Konten sowie über die Anfrage von Kundenautorisierungen und dem Versand und Empfang von Bestätigungen.

A2 Auswahl der angemessenen bestätigenden Partei 

Leitfaden

Antworten auf Bestätigungsanfragen stellen einen zuverlässigeren und fundierteren Revisionsnachweis dar, wenn die Anfragen an eine bestätigende Partei geschickt wird, die nach Auffassung des Wirtschaftsprüfers mit den zu bestätigenden Informationen vertraut ist. So ist zum Beispiel der mit den Transaktionen oder Arrangements im Zusammenhang mit einer Bestätigung vertraute Mitarbeiter eines Finanzinstituts die am besten geeignete Person innerhalb des Finanzinstituts für die Bearbeitung dieser Anfrage.

How Confirmation Complies

Teilnehmende Banken verfügen über strenge Zugangskontrollen und Überwachungsprozesse, um zu gewährleisten, dass nur autorisierte Bankmitarbeiter über Confirmation.com auf Prüfungsanfragen antworten.

A6 Validierung von Adressen 

Leitfaden

Das Eruieren korrekter Adressierung von Anfragen umfasst eine Prüfung der Gültigkeit einiger oder aller Adressen von Bestätigungsanfragen, bevor diese verschickt werden.

How Confirmation Complies

Wir validieren alle am Netzwerk von Confirmation.com teilnehmenden Parteien. The controls surrounding this process are included in our SOC 1 report that is issued annually as part of our controls audit. Indem Sie auf unsere Validierungsprozesse zurückgreifen, können Sie auf die Durchführung eigener Validierungsprozesse verzichten.

A12 Elektronische Antworten 

Leitfaden

Elektronisch erhaltene Antworten, beispielsweise per Fax oder E-Mail, bergen Risiken im Hinblick auf die Verlässlichkeit, da Ursprung und Befugnis der befragten Person sich nur schwer bestimmen lassen und Veränderungen unter Umständen nicht erkannt werden. Ein von Wirtschaftsprüfern und befragten Personen verwendeter Prozess, der eine sichere Umgebung für elektronisch erhaltene Antworten schafft, kann diese Risiken abmildern. Wenn der Wirtschaftsprüfer davon überzeugt ist, dass ein Prozess sicher und ordnungsgemäß kontrolliert ist, dann verbessert dies die Verlässlichkeit der erhaltenen Antworten. Ein elektronischer Bestätigungsprozess kann verschiedene Techniken für die Validierung der Identität des Absenders elektronisch verschickter Informationen enthalten, beispielsweise durch Verschlüsselung, digitale Signaturen und Prozesse für die Prüfung der Authentizität von Webseiten.

How Confirmation Complies

Confirmation.com setzt branchenweit führende IT-Sicherheit und Richtlinien für den Datenschutz ein. Wir verwenden Prozesse und Kontrollen zur Gewährleistung von Integrität, Vertraulichkeit und Erreichbarkeit von Daten. Wir lassen diese Prozesse von Dritten prüfen, um die Wirksamkeit unserer Kontrollen zu belegen:

  • SOC 1, SOC 2 and SOC 3 examinations annually.
  • ISO27001-Zertifizierung für den Service von Confirmation.com
  • TRUSTe data privacy and EU-US Privacy Shield and Swiss-US Privacy Shield frameworks certification.

A13 Beteiligung Dritter 

Leitfaden

Falls eine bestätigende Partei für die Koordination und Einholung von Antworten auf Bestätigungsanfragen auf Dritte zurückgreift, kann der Wirtschaftsprüfer Prozesse zum Abmildern folgender Risiken einsetzen: (a) dass die Antwort nicht ordnungsgemäßer Herkunft ist; (b) dass die befragte Person nicht befugt ist, eine Antwort zu erteilen; und (c) dass die Integrität der Übertragung kompromittiert wurde.

How Confirmation Complies

Die Kontrolleinrichtungen innerhalb der Umgebung von Confirmation.com gewährleistet, dass Benutzerzugriffe bei den Banken überwacht und kontrolliert werden und die Übertragung von Daten sicher abläuft. Unsere oben beschriebenen Kontrollberichte untermauern die Wirksamkeit dieser Prozesse.

Para 12 Fehlende Rückmeldungen 

Leitfaden

Im Falle einer fehlenden Rückmeldung kann der Wirtschaftsprüfer alternative Auditprozesse durchführen, um aussagekräftige und verlässliche Revisionsnachweise zu erhalten.

How Confirmation Complies

Confirmation.com garantiert Antworten für Bestätigungen innerhalb des Netzwerks und macht auf diese Weise alternative Prozesse überflüssig.