Back to Legal
LG-05·

General terms and conditions

Definitions

This Agreement is subject to the following definitions, unless otherwise specified or unless the context otherwise requires:

“Affiliate” Any legal entity that directly or indirectly controls, is controlled by, or is under common control with a Party, where "control" means having more than 50% ownership interest.

“Agreement” The framework agreement signed by the Supplier and Customer, including Schedules and signed Statements of Work (SoW).

“Customer” The legal entity signing the Agreement or the applicable Affiliate in a signed SoW.

“Customer Data” Any data produced within the Services, excluding admission and session logs.

“Confidential Information” Information as defined in clause 11.

“The Data Act” European Regulation 2023/2854 regarding harmonized rules on fair access to and use of data.

“Deliverable(s)” Configurations, Documentation, or other items provided standalone or as part of the Services.

“Documentation” Service documentation, administrator guides, and technical specifications provided under a SoW.

“Intellectual Property Rights” Patents, copyrights, trade secrets, trademarks, and confidential know-how.

“Services” Any service performed under a SoW, including SaaS, support, or maintenance.

“Statement of Work (SoW)” The description of specific Services and Deliverables based on the template in Schedule SoW.

Annex 1 (Data Act Provisions)

This annex applies only to the extent that the Services and Deliverables are subject to the provisions of the Data Act. This annex is intended to ensure that the Agreement is in compliance with the Data Act and does not intend to make any material changes to any agreed provisions of the Agreement. Capitalized terms not defined here have the meanings in the Agreement unless specifically set out differently in this annex.

  1. General compliance with the Data Act
    Each Party shall reasonably comply with the general provisions set out in the Data Act to the extent they apply to the Parties.
  2. Transition Right and Notice
    Customer may (i) transition to another provider of data processing services or (ii) port exportable data and digital assets, or (iii) request erasure of such data and assets, in each case in accordance with Articles 25-30 of the Data Act. Customer shall initiate the transition process by a written notice delivered no later than two (2) months (“Maximum Notice Period”) before the desired effective date.

    The notice shall state (a) Customer’s name and VAT number, (b) the desired effective date, and (c) the full name, e-mail address and technical contact details of the person or third-party provider authorised to receive the exportable data. A notice submitted by a third party must be accompanied by verifiable proof of Customer’s authorisation.
    The Supplier will cooperate in good faith and will not impose contractual, technical or organizational obstacles in relating to the transition.

    The Customer shall not use any data obtained pursuant to a transition request under this annex to develop a connected product that competes with the connected product from which the data originates, nor shall Customer share such data with any third party for this purpose. Furthermore, Customer shall not use the data to gain insight into the economic situation, assets, or production methods of the manufacturer or, where applicable, the data holder.
  3. Obligations during the transition period
    Upon expiry of the Maximum Notice Period, a mandatory transition period of up to thirty (30) consecutive calendar days (“Transition Period”) shall commence.

    During the Transition Period, the Customer shall:
    1. provide reasonable assistance to Customer and any Customer-designated third parties to enable an effective transition;
    2. support Customer’s exit strategy relevant to the contracted services, including by making all relevant information available;
    3. exercise due care to maintain business continuity and to continue providing all contracted functionalities and Services;
    4. provide Customer with clear, written information on any known risk affecting the continuity of the Services; and
    5. maintain a high level of security, including protection of data in transit and at rest, in accordance with applicable Union and national law.

If completion of the transition process within the Transition Period is not technically feasible, Supplier shall, within fourteen (14) business days of receiving Customer’s transition request, provide a written, reasoned notice of the technical impediment and propose an alternative Transition Period not exceeding seven (7) months.

Customer may extend the Transition Period (or the alternative transitional period as extended by Supplier) once for a period that Customer considers more appropriate for its own purposes by notice to the Supplier.

  1. Data Retrieval
    The Supplier will at no cost, upon expiry of the Transition Period, make all exportable data and digital assets available for download in a file in a structured, commonly used and machine-readable for a minimum data-extraction period of thirty (30) consecutive calendar days (“Extraction Period”). If Customer requests a longer Extraction Period, such extended duration may be provided by Supplier on commercially reasonable terms and at Supplier’s then-current rates, provided such extension does not conflict with Article 29 of the Data Act. Except to the extent retention is required by applicable law or agreed in writing, Supplier shall at the end of the Extraction Period irreversibly delete all exportable data and digital assets generated directly by, or directly relating to, Customer.
  2. No Transition Costs
    No additional fees will be imposed on the Customer for transition in accordance with this annex for requests initiated on or after January 12th, 2027. Prior to January 12th , 2027, any transition fee shall be limited to Supplier’s direct costs incurred to execute the transition.

    There are no transition fees as long as the transition is performed in accordance with the Agreement. In no case will Customer be liable to pay fees for the terminated services exceeding what would have been due if the services had not been terminated.
  3. Exempted Data
    Only data and digital assets generated directly by Customer or directly relating to Customer will be made available for export

    The following limited categories are excluded from export in accordance with Article 25(2)(f) of the EU Data Act:
    1. Operational data essential for Supplier’s service functionality and security, such as system logs, audit trails, and access logs, are not included in the export;
    2. Data where export would risk a breach of Supplier’s trade secrets, provided that such exemptions do not impede or delay the transition process;
    3. Proprietary configuration files, deployment scripts and source code;
    4. data that have been irreversibly anonymised;
    5. documents that, in accordance with documented retention periods, have already expired, failed or been deleted before receipt of the transition notice.

The Supplier shall provide the Customer with a description of all categories of data specific to the internal functioning of Supplier’s Services that are to be exempted from the exportable data due to a risk of breach of trade secrets of Supplier’s, provided that such exemptions do not impede or delay the transition process.

  1. Payment Obligations for Committed Term (Early Termination Fee)
    The Customer’s payment obligations for the committed term as set out in the applicable SoWs are not affected by Customer’s decision to execute a transition. If Customer terminates a fixed subscription term for convenience before the end of the committed term, Customer shall pay an early termination fee equal to the fees that would have become due for the unperformed portion of the committed term under the SoW, excluding taxes and any variable usage not subject to a minimum commitment, and with the same payment terms as agreed within the Agreement. If Customer has prepaid any fees for a fixed period, such fees will not be repaid.
  2. Order of Precedence and Amendments
    This annex prevails over any contrary term in the Agreement solely with respect to transition, data portability, exit assistance and related fees.

    Supplier may amend this annex with thirty (30) days’ prior written notice to the Customer to reflect changes in applicable regulations. Such amendments shall be deemed accepted unless explicitly rejected by the Customer in writing within thirty (30) days of receipt of the notice. In the event of a rejection, the Parties shall engage in good faith discussions to seek a mutually agreeable resolution.

Learn more

See first-hand what AI-Native Resilience looks like

Fortiv
© Fortiv 2026Legal and Privacy