Terms of sale

These terms govern the IT infrastructure, cybersecurity and advisory services provided by Taner OKUR, a sole trader registered in France and trading as OLHYN. They apply to clients acting for the purposes of their professional activity. Outside France, OLHYN works exclusively with professional clients (businesses, organisations and self-employed professionals acting in that capacity) and does not accept orders from consumers.

The accepted quote, its appendices and any specific conditions take precedence over these terms.

Each service is defined by a detailed quote setting out the scope, deliverables, price, milestones, estimated lead times and prerequisites. The order becomes firm on receipt of the signed quote, or of its written acceptance, together with payment of the agreed deposit. Any request outside the scope is costed or covered by a prior amendment.

Prices are expressed and invoiced in euros. VAT not applicable (article 293 B of the French General Tax Code). Tax arrangements specific to the client's country and status, such as reverse charge for professional clients within the European Union, are specified on the quote. Bank and currency conversion charges incurred on the client's side are borne by the client.

Unless otherwise agreed, a 30% deposit is due on order. The balance is invoiced by the milestones set out in the quote; failing that, 40% is due on validation of the intermediate milestone and 30% before go-live or final delivery. Invoices are payable on receipt, by bank transfer.

Any late payment makes the following due without prior reminder: late payment interest at the European Central Bank refinancing rate plus 10 percentage points, and a fixed compensation of 40 euros for recovery costs, without prejudice to further compensation on proof.

The one-hour study meeting is invoiced 80 euros (VAT not applicable) and paid when booked on the contact page. If a quote that directly follows this meeting is accepted within two months, that amount is deducted from the price of the service as a commercial credit shown on the quote or invoice. This credit is personal, non-refundable and non-transferable, and cannot be applied to purchases, licences, subscriptions or third-party costs. The 30-minute discovery call is free.

The client provides in good time the access, information, approvals, licences, backups and contacts required. The client remains responsible for the accuracy and lawfulness of its data and instructions. Lead times are estimates and depend in particular on this cooperation; any delay or missing approval may shift the schedule.

Services are delivered remotely unless the quote provides for an on-site visit. Travel and on-site time are only due when set out in the quote. Meeting and intervention times are agreed with the client, taking its time zone into account.

Deliverables are presented according to the milestones in the quote. The client reports documented non-conformities within the period stated in the quote; adjustments within the scope are handled within the agreed limits. Third-party services, licences, hosting providers, publishers, platforms and APIs remain subject to their own terms. OLHYN does not guarantee their availability, their changes or the continuity of their services.

7.1. What belongs to the client. The client's data, content, accounts, credentials, domain names, licences and equipment, as well as its information system and the information it contains, remain its full property. OLHYN claims no rights over them and keeps no copy beyond what the service requires.

7.2. Deliverables. Rights to deliverables created specifically for the client (audit reports, documentation, scripts, configurations) are assigned or licensed under the conditions set out in the quote, for the client's own needs.

7.3. Pre-existing elements and third-party components. OLHYN's pre-existing methods, know-how, tools, generic scripts, reusable components and templates remain its property and are not assigned. Third-party software and services used or installed remain subject to their own licences, which the client undertakes to respect; any cost is borne by the client.

7.4. No rights without payment. No right is assigned or licensed until the price has been paid in full.

7.5. Commercial reference. Unless the client objects in writing, OLHYN may mention the client's name as a reference in its presentation materials, without ever disclosing any information about its information system or audit findings.

7.6. Confidentiality. Each party keeps confidential the non-public information received in the course of the service, for its whole duration and two years after it ends. Information relating to the security of the client's information system, in particular access, configurations and audit findings, remains confidential without time limit.

OLHYN is bound by an obligation of means. Except in the event of gross negligence, wilful misconduct or a mandatory provision to the contrary, its liability is limited to proven direct damage and to the amount actually paid for the service that caused the damage. Indirect losses, operating losses, data losses, loss of profit, damage to reputation and consequences involving a third party are excluded. The client remains responsible for its backups and for checking them, for its business decisions, its data, its access and its production environment.

OLHYN does not provide ongoing administration or monitoring of the client's IT, on-call duty or guaranteed restoration times.

OLHYN may suspend performance in the event of an unpaid invoice, missing prerequisites or a security risk. Any termination must be notified in writing. Work carried out, commitments made to third parties and milestones reached remain due. The parties first seek an amicable solution before any dispute. French law applies, without prejudice to the mandatory provisions of the law of the client's country.

10.1. Each party for its own part. For the data the client sends to OLHYN to manage the business relationship (contact details, correspondence, invoicing), OLHYN acts as controller; details are set out in the privacy policy. Where performing the service leads OLHYN to access, host or handle personal data for which the client is responsible, in particular data about its own customers, employees or users, OLHYN acts as processor within the meaning of Article 28 of Regulation (EU) 2016/679. The following provisions then govern that processing.

10.2. Purpose, duration and instructions. The sole purpose of the processing is the performance of the service described in the quote. It lasts as long as the service. OLHYN processes this data only on the client's documented instructions, uses it for no other purpose and makes no use of it for itself.

10.3. Confidentiality and security. OLHYN undertakes to keep the data confidential and applies measures appropriate to the risk: restricted and authenticated access, encryption in transit, hosting on infrastructure located in the European Union, no public exposure of storage areas, and limited retention periods.

10.4. File transfers. Large files exchanged during a service are delivered through a secure exchange method, without public exposure and for a limited time. The client is responsible for downloading and keeping them.

10.5. Sub-processors. The client authorises OLHYN to use Cloudflare, Inc. for hosting and delivery, with storage in Europe. OLHYN informs the client of any intended change of sub-processor, and the client may object on legitimate grounds.

10.6. Assistance, incidents and end of assignment. OLHYN helps the client, as far as it is able, to respond to requests to exercise rights and to meet its security obligations. Any personal data breach of which OLHYN becomes aware is reported to the client without undue delay. At the end of the service, the data is deleted unless a legal retention obligation or a written request from the client provides otherwise.

The client warrants that it has a legal basis for the data it entrusts and informs the data subjects. Specific conditions may supplement this article for a given service, in particular where the client is subject to a data protection law other than the GDPR.