General Terms and Conditions of Sale
These general conditions of sale ("GTC") govern all the consulting and support services carried out by AegisPartners for professional clients. They constitute, in accordance with Article L. 441-1 of the Commercial Code, the sole basis of the commercial relationship.
Article 1 — Identification of the provider
The services are provided by AegisPartners, a simplified joint-stock company (SAS) with a capital of €10,000, whose registered office is 37 av of General Leclerc 78220 Viroflay under the SIREN number in creation, intra-Community VAT number [FR XX XXXXXXXXX], represented by its President, Nicolas HUBER (hereinafter “the Provider”).
Contact : nicolas.huber@aegispartners.eu — +33 613 440 703.
Article 2 — Purpose and scope
The GTCS apply to any service ordered from the Service Provider by a customer acting for professional purposes (hereinafter “the Customer”). They cover in particular the following areas:
digital sovereignty and certification support (NSI) ;
audit of SaaS contracts and cost optimization;
Agile governance and structuring of Centre of Excellence;
cybersecurity consulting (NIS2, ANSSI standards);
advice in governed artificial intelligence.
Any order implies the unreserved acceptance of the GTC, which prevails over the General Conditions of Purchase of the Customer, unless expressly written and expressly waived by the Service Provider. The special conditions contained in the quotation or the commercial proposal (hereinafter “the Proposal”) take precedence over the GTCS in the event of a contradiction.
The services are not intended for consumers.
Article 3 — Quote, order and formation of the contract
Each service is the subject of a Proposal specifying the scope, deliverables, schedule, pricing method and price. Unless otherwise stated, the Proposal is valid for 30 days from its issue.
The contract is formed upon receipt by the Provider of the Proposal dated and signed, or by a purchase order referring to it, accompanied if necessary by the expected deposit. The set formed by the Proposal, its annexes and the GTCS constitutes the contract (hereinafter “the Contract”).
Any modification of the perimeter requested during the mission shall be the subject of an amendment or a Supplementary Proposal accepted in writing.
Article 4 — Nature and performance of services
The Service Provider is bound by an obligation of means. He undertakes to perform the services diligently, according to the rules of the art and the standards of the profession. Unless expressly stated otherwise in the Proposal, it does not guarantee the attainment of certification, a level of savings, or a determined result.
The services can be performed on the premises of the Client, remotely or in those of the Service Provider. The Service Provider freely organizes his work and retains control of the means implemented.
The Service Provider may, with the prior agreement of the Customer, call on qualified subcontractors or partners. He remains responsible for their services to the Client.
Deliverables are deemed accepted if the Customer has not made any reservations reasoned in writing within 10 working days of their delivery.
Article 5 — Obligations of the Customer
The Client undertakes to actively collaborate in the proper performance of the services. In particular, it must:
appoint a contact person with the necessary decision-making power;
communicate within the agreed timeframe the required information, documents and access, and ensure its accuracy;
make available its teams and, where appropriate, make available a workstation and secure means of access;
inform the Service Provider of any applicable internal rules (security, access to the sites, privacy).
Any delay or failure of the Customer to meet these obligations is offset by the same amount. The resulting additional costs may be charged to the Customer.
Article 6 — Price, invoicing and payment
Prices are expressed in euros excluding taxes; VAT at the current rate is added. According to the Proposal, the pricing follows one of the following modes: package billing, in management, subscription and success fees (Percentage or amount related to a measurable result, to the finding of the result, according to the formula of the Proposal)
Travel and accommodation costs outside Île-de-France are recharged in real on receipts, except for the package provided in the Proposal.
Unless otherwise provided, invoices are payable by transfer at 30 days from their date of issue, within the limits of the time limits fixed by Article L. 441-10 of the Commercial Code. No discount is granted in case of advance payment.
Contract prices for more than one year may be revised on each anniversary date, according to the Syntec Index, with one month's written notice.
Article 7 — Delay in payment
Any delay in payment automatically entails, without prior notice:
late payment penalties calculated at the interest rate applied by the European Central Bank to its most recent refinancing operation, plus 10 percentage points ;
a fixed compensation for recovery costs of € 40, in accordance with Article D. 441-5 of the Commercial Code, without prejudice to additional compensation on receipts.
In the event of a delay exceeding 15 days after a formal notice remained without effect, the Service Provider may suspend the performance of the current services, without this suspension being charged.
Article 8 — Postponement, cancellation and termination
Postponing or cancellation of a planned intervention. Any request from the Customer must be notified in writing. The days cancelled are charged according to the following scale: more than 10 working days before the start date: none. Between 5 and 10 working days before the start date: 20% of the days concerned, less than 5 working days before the start date, 50% of the days concerned.
Termination for convenience. Indeterminate Contracts or subscriptions may be terminated by each party with one month’s written notice. The services performed up to the effective date are due, as are the costs incurred and not recoverable.
Termination for failure. In the event of a serious breach of an unrepaired party within 30 days of a formal notice by registered letter with acknowledgement of receipt, the other party may terminate the Contract as of right, without prejudice to any damages.
In the event of termination, whatever the reason, the services performed and the results fees acquired on that date remain due.
Article 9 — Intellectual property
The Service Provider retains the exclusive ownership of its methods, tools, repositories, audit grids, questionnaires, models and know-how, whether prior to or developed on the occasion of the mission (hereinafter "the Tools").
Subject to full payment of the price, the Customer acquires on the deliverables specifically made for him a right of non-exclusive use, for his internal needs, for the whole world and for the legal duration of the rights. Where a deliverable includes Tools, the Customer shall have a license to use them under the same conditions, without the right to market them or to distribute them to third parties.
Any assignment of more extensive rights must be expressly provided for in the Proposal.
The documents and data provided by the Customer remain his property.
Article 10 — Confidentiality
Each party undertakes to keep strictly confidential the information of any kind communicated by the other party or of which it is aware on the occasion of the Contract. This applies in particular to technical, financial, contractual, security or information systems information. It only uses them for the execution of the Contract.
This obligation does not apply to information that has fallen into the public domain without fault of the party receiving it, already known to it in a lawful manner, or whose disclosure is required by law or an authority.
Security audit results, identified vulnerabilities and architecture data are subject to enhanced protection: restricted access, encrypted exchanges and restitution or destruction at the end of the mission at the request of the Customer.
This obligation remains in effect for 5 years after the end of the Contract.
Article 11 — Liability and insurance
The responsibility of the Service Provider can only be engaged in case of proven fault. It is limited to direct and foreseeable damage.
Indirect damages, including loss of turnover, customers, data or image, and any consequences of a decision made by the Customer on the basis of the Service Provider's recommendations are excluded. The Client remains solely the decision-maker for the implementation of these recommendations.
All causes combined, the responsibility of the Service Provider is capped at the amount excluding taxes actually paid by the Customer under the Contract during the 12 months preceding the generating event. This ceiling does not apply in case of gross negligence or fraudulent or in case of personal injury.
The Service Provider holds a professional liability insurance contracted with [insurer], policy n° [number], a certificate of which is communicated on request.
Article 12 — Non-solicitation
During the term of the Contract and 12 months after its end, the Customer is prohibited from soliciting, directly or by interposed person, any employee or subcontractor of the Service Provider who has participated in the mission. It also prohibits the use of its services without the written consent of the Service Provider.
In the event of a breach, the Customer shall pay the Service Provider a flat-rate allowance equal to 12 months from the last gross remuneration or the last annual invoicing of the person concerned.
Article 13 — Personal data
Each party complies with the applicable regulations on the protection of personal data, in particular Regulation (EU) 2016/679 (GDPR) and Law No. 78-17 of 6 January 1978 amended.
Where the performance of the services leads the Service Provider to process personal data on behalf of the Customer, he acts as a subcontractor within the meaning of Article 28 of the GDPR. The parties then conclude a data processing agreement specifying the purpose, duration, nature of the processing and security measures.
The data of the Client’s interlocutors are processed by the Service Provider for the management of the commercial relationship. The data subjects have the right to access, rectify, delete, oppose and limit, which they exercise at [dedicated e-mail address]. They can lodge a complaint with the CNIL.
Article 14 — Force majeure
No party is responsible for a breach of its obligations resulting from a case of force majeure within the meaning of Article 1218 of the Civil Code. The party who invokes it shall inform the other without delay.
Obligations are suspended during the impediment. If it lasts more than 60 days, each party may terminate the Contract by registered letter with acknowledgement of receipt, without compensation. The services performed remain due.
Article 15 — Commercial references
Unless the Customer’s written objection, the Service Provider may mention the Customer’s name and logo for commercial reference, without disclosing any confidential information about the assignment.
Article 16 — Applicable law and disputes
The contract is subject to French law.
In the event of a dispute, the parties shall seek an amicable solution for 30 days from the notification of the dispute by one of them. In the absence of agreement, any dispute relating to the formation, interpretation or execution of the Contract is the exclusive competence of the Commercial Court of Versailles, including in the case of multiple defendants, appeal as security or interim proceedings.
If a stipulation of the GTC is declared void, the other provisions remain in effect. The fact that the Service Provider does not avail itself of a stipulation is not tantamount to a waiver of it later..
Privacy Policy
Preamble - October 2026
Aegis Partners only collects the data necessary to respond to you, accompany you and manage its business relationship, and never sells it. This policy explains what data is processed through the aegispartners.eu website and in the context of our exchanges, why, how long, and how to exercise your rights.
It applies in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Law No. 78-17 of 6 January 1978 amended ("Informatique et Libertés").
Responsible for processing
The controller is Aegis Partners, represented by its President, Nicolas Huber. Name : Aegis Partner : Legal form : SAS with a capital of 10 000 € Head office : 37 av du Général Leclerc 78220 Viroflay : RCS / SIREN : In creation. Contact personal data : contact@aegispartners.eu
Aegis Partners is not required to appoint a Data Protection Officer (DPO) in relation to its activity. Any questions relating to your data can be addressed to the above address.
Data collected, purposes and retention periods
We only process professional identification and contact data, as well as the technical data strictly necessary for the operation of the site. No sensitive data (health, opinions, etc.) are requested.
The data entrusted by our customers in the context of a mission (audit, cybersecurity diagnostics, etc.) are covered by the mission contract and, where applicable, a subcontracting agreement in accordance with Article 28 of the GDPR.
Recipients, subcontractors and transfers
Your data is intended for the only authorized staff of Aegis Partners. They are not sold, leased, or transferred to third parties for commercial purposes.
We use technical service providers acting as subcontractors within the meaning of Article 28 of the GDPR:
1 - Hostinger International Ltd — 61 Lordou Vironos, Lumiel Building, 6023 Larnaca, Cyprus - Website accommodation aegispartners.eu, - European Union
2 - Hostinger International Ltd — 61 Lordou Vironos, Lumiel Building, 6023 Larnaca, Cyprus - Professional Messaging - European Union
3 - Accounting expert - DBF AUDIT – SA à sa à entreprise – 13 passage Dartois Bidot - 94100 Saint Maur des ditches - Maintenance de la comptables - France
Your data may also be communicated to the administrative or judicial authorities when required by law.
Aegis Partners favours providers hosting data in the European Union. If a non-EU transfer were to take place, it would be framed by an adequacy decision of the European Commission or by standard contractual clauses.
Cookies and Trackers
The site uses cookies strictly necessary for its operation, which do not require your consent. Any other tracer is filed only with your prior consent.
Necessary cookies: security, load balancing, remembering your choice of cookies. Exempt from consent.
Audience measurement cookies: deposited only after your consent, except solution configured to be exempted according to the recommendations of the CNIL.
Third-party cookies (social networks, embedded videos): no deposit without your consent.
You can accept, refuse or personalize your choices via the banner displayed on your first visit, and modify them at any time via the “Cookie Management” link at the bottom of the page. Refusing is as simple as accepting. Your choices are kept for 6 months, and cookies subject to consent for up to 13 months.
Data Security
As a cybersecurity consulting firm, Aegis Partners applies to its own data the requirements it recommends to its clients, in the spirit of ANSSI’s standards.
Exchanges with the site (HTTPS / TLS)
Strong authentication (MFA) on professional accounts and tools
Access to data limited to authorized persons only
Regular backups and security updates
Confidentiality commitments in mission contracts
In the event of a data breach that poses a risk to your rights, Aegis Partners shall notify the CNIL within 72 hours and inform you when required by law (Articles 33 and 34 of the GDPR).
Your rights
You have at any time rights in your data, which you can exercise free of charge by simple e-mail to [rgpd@aegispartners.eu — to be confirmed].
AccèsAccess: obtain confirmation that your data is processed and receive a copy
Correction : correct inaccurate or incomplete data
EffacementErasure: request the deletion of your data
Limitation : temporarily freeze a treatment
OppositionObjection: object to a processing based on the legitimate interest, and at any time to prospecting
Portability : recover the data provided in a structured format
Withdrawal of consent: at any time, without calling into question previous processing
Post-mortem guidelines: define the fate of your data after your death
We respond within one month, extendable by two months for complex requests. Proof of identity may be requested in case of reasonable doubt about your identity.
If you believe that your rights are not respected, you can lodge a complaint with the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
Policy Developments and Contact
This policy may be updated to reflect the evolution of our services or regulations; the date of last update is at the top of the page.
For any questions: contact@aegispartners.eu or by mail to Aegis Partners, 37 av du Général Leclerc, 78220 Viroflay
