1. General | Scope
1.1 These General Terms of Service (“GTS”) apply to all contracts between HybridOffice21 GmbH registered with the District Court of Berlin Charlottenburg, Germany, under number HRB 226685 with its registered offices at Kasta nienallee 98b, 10435 Berlin, Germany (“yoffix”) and business owners (Unternehmern) within the meaning of § 14 of the German Civil Code to whom yoffix provides access to its Services as defined below (“Customer”). 1.2 These GTS shall govern each ordering document or any online or in-app ordering process that references these GTS (each an “Order Form”). The terms of each Order Form will incorporate the terms of these GTS and will form a separate Services Contract with respect to the services under that Order Form (a “Services Contract”). 1.3 These GTS shall also apply as a framework agreement for future contracts with the same Customers without yoffix being required to refer to them again in each individual case. They shall be deemed to be confirmed by Customer at the latest when yoffix provides the Services. 1.4 These GTS apply exclusively. Different, conflicting or supplementary standard terms of business of Customer shall only become part of the contract if and to the extent that yoffix has consented to their application in writing. 1.5 Individual agreements made in writing with Customer in specific cases (including ancillary agreements, supplemen tary agreements and amendments) shall take priority over these GTS. 1.6 Where these GTS mention the terms ‘written’, ‘in writing’, ‘written form’ or similar, this shall refer to ‘in writing’ in the sense of § 126 German Civil Code. The electronic exchange of copies of signed documents shall suffice in this regard whereas the exchange of simple e-mails shall not be sufficient. 1.7 References to the application of statutory provisions shall be for clarification purposes only. Consequently, statutory provisions shall also apply without such clarification provided that they are not directly amended or expressly ex cluded in these GTS.
2. License Grant
2.1 Subject to the terms and conditions of the Services Contract, yoffix hereby grants to Customer, during the Initial Service Term and any Renewal Service Term, a non-exclusive, non-transferable, non-sublicensable world-wide right and license to use the yoffix software as software-as-a-service and to access and use yoffix’ websites, spaces, services and applications as designated in the Order Form (collectively the “Services”) for internal business pur poses only, and for the number of Users that are registered for the Services (“Licenses”). The Services are offered as prescribed by the yoffix documentation located at an URL further specified by yoffix or attached as an exhibit to the Order Form (as it may be updated from time to time, the “Documentation”). 2.2 Customer may permit its employees, its Affiliates (and employees thereof) to use the Services (collectively “Per mitted Users” and any individual using the Services a “User”) provided that (A) Customer shall procure that Per mitted Users comply with the terms of these GTS and Customer shall remain responsible and liable for all acts and omissions of Permitted Users; (B) the Services are used solely for the benefit of Customer or any of Customer’s Affiliates. “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under direct or indirect common control with Customer or yoffix respectively, or which is a wholly owned subsidiary of Customer or yoffix respectively, where ‘control’ means owning, directly or indirectly, at least fifty-one percent (51%) of the equity secu rities or equity interests of such entity.
3. License Restrictions
3.1 Customer shall not (and shall not permit any third party to) directly or indirectly: (A) sublicense, sell, resell, transfer, assign, distribute, share, lease, rent, make any external commercial use of, outsource, use on a timeshare or service bureau basis, or use in an application service provider or managed service provider environment, or otherwise generate income from the Services; (B) copy the Services onto any public or distributed network, except for an internal and secure cloud computing environment; (C) decompile, reverse engineer or disassemble any portion of the Services, or otherwise attempt to discover any source code, object code or underlying structure, ideas, know how or algorithms or other operational mechanisms of the Services; (D) modify, adapt, translate or create derivative works based on all or any part of the Services (except to the extent expressly permitted by yoffix or authorized within the Services); (E) modify any proprietary rights notices that appear in the Services or components thereof;
(F) use any Services in violation of any applicable laws and regulations (including any export laws, restrictions, national security controls and regulations) or outside of the license scope set forth in Clause 2; (G) configure the Services to collect (i) any data that is defined as sensitive personal data or 'special categories of data' within the meaning of Directive 95/46/EC or any applicable national implementation of it; (ii) passwords or other authentication credentials, (iii) any payment or other financial data, biometric data or genetic data; or (iv) any data relating to a person under the age of 16 years old (collectively, “Prohibited Data”); or (H) use the Services to (i) store, download or transmit infringing, libelous, or otherwise unlawful or tortious material, or malicious code or malware, or (ii) engage in phishing, spamming, denial-of-service attacks or other fraudulent or criminal activity, (iii) interfere with or disrupt the integrity or performance of third party systems, or the Services or data contained therein, (iv) attempt to gain unauthorized access to the Services or yoffix’ systems or networks, or (v) perform, or engage any third party to perform, authenticated or unauthenticated penetration testing, vulnerability assessments or other security assess ments. 3.2 Customer shall not export or re-export, directly or indirectly, any Services or technical data or any copy, portions or direct product thereof in breach of any applicable laws and regulations. In particular, Customer and its Affiliates will comply with the sanctions imposed by the Federal Republic of Germany, the European Union, the United Nations and with the applicable federal laws of the United States of America insofar as they do not result in a violation of or a conflict with section 7 of the German Foreign Trade and Payments Ordinance (Aussenwirtschaftsverordnung) or a similar applicable anti-boycott statute. Customer shall, at its own expense, obtain all necessary customs, import, or other governmental authorizations and approvals. 3.3 The Services may only be used by Customer as prescribed in the Documentation. 3.4 Although yoffix has no obligation to monitor Customer’s use of the Services, yoffix may do so and may prohibit any use of the Services it believes may be (or alleged to be) in violation of the foregoing.
4. Trial Use and Free Use
4.1 If Customer accesses the Services as part of a trial evaluation (“Trial Use”), the License is granted for the period enabled for the Services provided by yoffix. yoffix shall have the right to downgrade, limit or otherwise modify the Services provided for Trial Use at any time without notice, and no guarantee, indemnity, Maintenance or Support obligations of yoffix will apply to Trial Use. Customer may use the number and type of licenses indicated by yoffix in writing prior to Customer downloading or accessing the Services, which will be enabled by Customer’s specific license key. yoffix has the right to immediately revoke and terminate any Trial Use at any time. Customer agrees to provide feedback related to the Services as reasonably requested by yoffix. Customer grants to yoffix, without charge, the fully paid-up, perpetual, sublicensable right to exploit such feedback for any purpose. Trial Use is not a guarantee of future product features and should not be relied upon in making any purchasing decisions. 4.2 yoffix may grant Customer the right to use the Services free of charge subject to a respective Order Form (“Free Use”). With respect to Free Use, Customer acknowledges that certain features of the Services may be limited and/or restricted and that the actual product features which are accessible under Free Use are determined by yoffix in yoffix sole discretion from time to time. yoffix shall have the right to downgrade, limit or otherwise modify the Ser vices provided for Free Use at any time without notice. Unless required by mandatory law, no warranty, guarantee, indemnity, Maintenance or Support obligations of yoffix will apply to Free Use. § 599 German Civil Code applies. Free Use is not a guarantee of paid or future product features and should not be relied upon in making any pur chasing decisions.
5. Customer’s Responsibilities
5.1 Customer represents and warrants that Customer and its Permitted Users will use the Services only in full compli ance with all applicable laws and regulations. In particular, Customer represents and warrants that it will comply with all applicable German and EU employment legislation when using the Services and when permitting Permitted Users to use the Services and that compliance with such legislation is Customer’s sole responsibility. 5.2 Customer shall be responsible for obtaining and maintaining any equipment and ancillary services needed to con nect to, access or otherwise use the Services, including, without limitation, modems, hardware, servers, software, operating systems, networking, web servers and the like (collectively “Equipment”). Customer shall also be re sponsible for maintaining the security of the Equipment, Customer account, passwords (including but not limited to administrative and user passwords) and files, and for all uses of Customer account or the Equipment with or without Customer’s knowledge or consent.
5.3 Customer shall be solely responsible for the content of all visual, written or audible communications, files, docu ments, videos, recordings, and any other material (“Content”) displayed, posted, uploaded, stored, exchanged or transmitted on or through the Service. 5.4 yoffix has no control over what Customer or its users of the Service post or submit and cannot guarantee the accuracy of any information submitted by any User. Customer shall contact yoffix if Customer becomes aware of misuse of the Services by any person. yoffix may without notice or liability investigate any complaints or suspected violations of the Contract that come to its attention and may take any action that it believes is appropriate, including, but not limited to, rejecting, refusing to post, or removing any Content, or other data, or restricting, suspending, or terminating Customer or any User’s access to the Services, however, yoffix also reserves the right not to take any action. 5.5 Customer shall notify yoffix promptly of any unauthorized use of any password or account or any other known or suspected breach of security or misuse of the Services.
6. Maintenance And Support
6.1 Subject to Customer’s payment of the Service Fees set forth in the applicable Order Form, yoffix will provide Mainte nance and Support for the Service. “Support” is defined as yoffix’ obligations to respond to support requests of Customer by documenting and troubleshooting issues and providing technical and non-technical assistance. “Maintenance” means yoffix’ obligations related to error resolution, bug fixes and the provision of updates and upgrades made generally commercially available by yoffix in its sole discretion. 6.2 E-mail Support is provided via firstname.lastname@example.org from Monday to Friday 9:00 am to 5:00 pm (CET), excluding public holidays in the State of Berlin, Germany. 6.3 yoffix shall use reasonable efforts consistent with prevailing industry standards to maintain the Services in a manner which minimizes errors and interruptions in the Services. 6.4 The fees for Maintenance and Support are included in the Service Fees.
7. Availability and Security
7.1 Subject to Customer’s payment of the Service Fees set forth in the applicable Order Form, yoffix will make the Services available to Customer in accordance with this Clause 7. 7.2 yoffix shall use reasonable endeavors, in its sole discretion, to adopt reasonable measures in order to ensure, that the Services are available to Customer over the Internet. yoffix shall be entitled to take measures that affect the aforementioned accessibility where yoffix deems such to be necessary for technical, maintenance, operational, or security reasons. Customer is aware and acknowledges that Customer’s access to the Internet cannot be guaran teed and that yoffix shall never be liable for deficiencies in Customer’s own Internet connections or equipment. 7.3 Services may be temporarily unavailable for scheduled or for unscheduled emergency Maintenance, either by yoffix or by third-party providers, or because of other causes beyond yoffix’ reasonable control, but yoffix shall use rea sonable efforts to provide advance notice in writing or by e-mail of any scheduled service disruption.
8. Professional Services
8.1 Subject to the terms hereof (including payment of any applicable Service Fees set forth in the Order Form), yoffix shall provide additional professional services described in an Order Form, if any (“Professional Services”). 8.2 The Professional Services will be rendered on a one-time fee or a time and materials basis. If the Professional Services purchased have been consumed, yoffix will stop the Professional Services until additional Professional Services have been purchased. 8.3 Customer agrees to provide reasonable cooperation and information as necessary to permit yoffix to perform the Professional Services. With respect to yoffix’ staff providing Professional Services to Customer no lease of person nel (Arbeitnehmerüberlassung) shall take place. Instructions to yoffix’ staff must not be given by Customer’s staff or representatives but only by yoffix’ representatives. Issues arising with yoffix’ staff which affect Customer and/or the Professional Services to be provided must be addressed by the relevant Customer’s contact person to the relevant yoffix’ contact person. yoffix’ staff will not be integrated into the operational organization of Customer. yoffix will in its sole discretion decide how and where to utilize its resources (including yoffix’ staff) and plan its perfor mances under the Services Contract (and the related Order Forms) in accordance with the contents and the agreed limits of the Professional Services.
8.4 When providing Professional Services, yoffix does not owe and will not be liable for any specific outcome or result vis-à-vis Customer (§ 611 German Civil Code). 8.5 Customer will reimburse yoffix for travel and expenses (at cost) incurred in connection with the Professional Ser vices (if any). 8.6 Professional Services will be performed on business days (a business day means Monday through Friday, exclud ing national holidays, during working hours, in the location where the Professional Services are provided). 8.7 The cooperation of the Parties hereunder, in particular with regard to Professional Services, builds upon mutual trust between yoffix and Customer. Therefore, during the Initial Service Term and any Renewal Service Term, and in each case for a period of twelve (12) months thereafter, without yoffix’ prior written approval, Customer will not solicit for employment or consultancy any yoffix’ employees who participated in the performance of Professional Services.
9. Confidentiality | Customer Data
9.1 Customer and yoffix understand that they have or may disclose to each other business, technical or financial infor mation relating to their business (the “Confidential Information”). Confidential Information of yoffix includes non public information regarding features, functionality and performance of the Service. Confidential Information of Cus tomer include non-public data provided by Customer to yoffix to enable the provision of the Services (“Customer Data”). 9.2 Customer and yoffix agree to take reasonable precautions to protect each other’s Confidential Information, and not to use (except in performance of the Services or as otherwise permitted herein) or divulge to any third person any such Confidential Information. This shall not apply with respect to any information after five (5) years following the disclosure thereof or any information that Customer or yoffix respectively can document (A) is or becomes generally available to the public, or (B) was in Customer’s or yoffix’ respective possession or known by them prior to receipt, or (C) was rightfully disclosed to Customer or yoffix respectively without restriction by a third party, or (D) was independently developed without use of any Confidential Information or (E) is required to be disclosed by law. 9.3 Customer shall own all right, title and interest in and to Customer Data, as well as any data that is based on or derived from Customer Data. yoffix shall have no liability for any Customer Data. 9.4 Notwithstanding anything to the contrary, yoffix shall have the right to collect and analyze data and other information relating to the provision, use and performance of various aspects of the Services and related systems and technol ogies (including, without limitation, information concerning Customer Data and data derived therefrom), and yoffix will be free (during and after the term hereof) to (A) use such information and data to improve and enhance the Services and for other development, diagnostic and corrective purposes in connection with the Services and other yoffix offerings, and (B) disclose such data solely in aggregate or other de-identified form in connection with its business.
10. Proprietary Rights
10.1 yoffix and its suppliers own and shall retain all proprietary rights, including all copyright, database rights, patent, trade secret, trademark and all other intellectual property rights and technical solutions, in and to the Services and the results of any Services. Customer acknowledges that the rights granted under the Services Contract do not provide Customer with title to or ownership of the Services. 10.2 yoffix reserves the right to implement new versions and upgrades of the Services including, but not limited to, changes that affect modifications to the design, operational method, technical specifications, systems, and other functions, etc. of the Services, at any time without prior notice. 10.3 In the event of an agreed case study or similar between Customer and yoffix, all intellectual property rights to material produced, including but not limited to photos, quotes, interviews, videos, testimonials, under such work shall belong to yoffix and may at its sole discretion be used by yoffix in the marketing of the Services. 10.4 Customer agrees that yoffix may refer to Customer by its trade names and logos, and may briefly describe Cus tomer’s business, in yoffix’ marketing materials and website.
11. Data Protection
11.1 Customer and yoffix shall at all times comply with the requirements of any applicable privacy and data protection legislation. To the extent that a data processing agreement is mandatory under applicable privacy and data protec tion legislation, the Data Processing Terms in Schedule A hereto shall supplement these GTS and shall become an integral part of any applicable Services Contract. 11.2 yoffix may subcontract processing of Customer personal data (if any) provided that it enters into a written agreement with any subcontractor containing terms at least as stringent as those in this Clause 11. 11.3 yoffix may export Customer personal data outside of the European Economic Area provided that it complies with applicable privacy and data protection legislation.
12. Payment Of Fees
12.1 Customer will pay yoffix the fees described in the Order Form for the Services and Professional Services in accord ance with the terms therein (the “Service Fees”). 12.2 To the extent that the number of Licenses contained in the Customer’s account exceeds the minimum number of Licenses set forth in the Order Form or that Customer’s use of the Services otherwise requires the payment of additional fees per the terms of the Services Contract, Customer shall be billed for such usage accordingly and Customer agrees to pay the additional fees. Customer agrees that any reduction in the number of Licenses con tained in the Customer’s account shall only become effective upon the beginning of the calendar month following such reduction. Customer shall in any case be obliged to pay for the minimum number of Licenses set out in the Order Form. 12.3 yoffix reserves the right to change the Service Fees for the following Renewal Service Term upon at least sixty (60) days prior to the end of the Initial Service Term or the end of the then current Renewal Service Term. 12.4 Unless otherwise specified, yoffix requires Customers to make all payments via credit card. yoffix will provide a secure link to Customer where they can upload credit card information that will be processed at time of billing. yoffix may offer Customer to make payments via bank wire using the payment details provided by yoffix. yoffix may also choose to bill through an invoice, in which case, full payment for invoices issued in any given month must be re ceived by yoffix fourteen (14) days after the mailing date of the invoice. Yoffix can select external payment and invoicing service provider to process fees payments or to serve as revenue delivery partner. 12.5 Following notice in text form under § 126b German Civil Code (simple email sufficient), yoffix shall be entitled to suspend Customer’s access to the Services if payments are not received within fourteen (14) days of the due date. Suspension of Customer’s access to the Services does not affect yoffix’ right to receive full payment for the remain ing Service Term. Should yoffix not have received payment within three (3) months of the due date, yoffix reserves the right to transfer the right to collect payment to a collections service and add a thirty (30) percent surcharge to cover for collection costs. 12.6 All Service Fees are exclusive of, and Customer shall pay, all taxes, duties, and assessments, however designated, which are levied or imposed upon such Service Fees, excluding only taxes based on yoffix net income.
13. Term | Termination
13.1 Subject to earlier termination as provided below, the Services Contract begins on the date specified in the Order Form (“Effective Date”) and will remain in effect for an initial term as specified in the Order Form (“Initial Service Term”). The Initial Service Term shall automatically and continuously renew for additional periods, each of which correspond with the Initial Service Term (“Renewal Service Term”), unless either party requests termination at least thirty (30) days prior to the end of then-current term. Termination must be requested in writing (e-mail or in app chat message would suffice). 13.2 Neither Customer nor yoffix shall be entitled to terminate the Services Contract for convenience with effect prior to the end of the Initial Service Term or any Renewal Service Term (Ausschluss der ordentlichen Kündigung). Cus tomer’s and yoffix’ right to immediately terminate the Services Contract for good cause (ausserordentliche Kün digung aus wichtigem Grund) shall remain unaffected. Such good cause shall in particular exist, if the other party commits a material breach of the Services Contract, and such breach has not been cured within thirty (30) days after receipt of written notice thereof. 13.3 After termination of the Service Contract or lapse of its Initial or Renewal Service Term and upon Customer’s re quest, yoffix will provide Customer with access to Customer’s content (if any) in the possession of yoffix for a period
of thirty (30) days, in then-current standard export format or another industry-standard format mutually agreed by Customer and yoffix, after which such Content may be deleted.
14. Limited Warranty
14.1 Customer has checked that the specification of the Services as described in the Documentation meets his needs and wishes. Customer is aware of the essential functionalities and features of the Services. The extent, nature and quality of the goods and services to be delivered by yoffix are determined by these GTS, the Order Form, and the Documentation. Any other information or requirements do only form part of the Services Contract if Customer and yoffix so agree in writing or if yoffix so confirms in writing. Product descriptions, illustrations, test programs, etc. represent mere service specifications but do not constitute guarantees (Garantien) or agreements on certain spec ifications (Beschaffenheitsvereinbarungen). In order to be valid, an agreement on a guarantee requires the written confirmation from a director of yoffix. 14.2 yoffix warrants (gewährleistet) that the Services will, in all material respects, conform to the functionality described in then-current Documentation for the applicable Services version. In case of a breach of this warranty yoffix shall be required to use commercially reasonable efforts to modify the Services to conform in all material respects to the Documentation, and if yoffix is unable to materially restore such functionality within thirty (30) days from the date of written notice of said breach, Customer shall be entitled to terminate the Services Contract upon written notice and receive a pro-rata refund of the unused Services Fees which have been paid in advance (if any) for unused access to the Services. Customer must notify yoffix in writing of any warranty breaches and Customer must have installed and configured the Services in accordance with the Documentation to be eligible for the foregoing remedy. Any no fault liability (verschuldensunabhängige Haftung) of yoffix for damages caused by the existence of initial errors (anfängliche Mängel) under § 536a German Civil Code shall be excluded. Customer’s claims for damages for a breach of this warranty are subject to the limitations set forth in Clause 16. 14.3 Under no circumstances shall Customer be entitled to obtain the source code of the Services.
15.1 Customer agrees to defend, indemnify and hold harmless, at its expense, yoffix and its Affiliates, its suppliers and resellers against any third party claim to the extent such claim arises from or is made in connection with: Customer’s breach of Clause 3 or otherwise from Customer’s use of Services, and Customer shall pay all costs and damages finally awarded against yoffix by a court of competent jurisdiction as a result of any such claim. 15.2 In connection with any claim for indemnity under this Clause 15, yoffix must promptly provide Customer with notice of any claim that yoffix believes is within the scope of the obligation to indemnify, provided, however, that the failure to provide such notice shall not relieve Customer of its obligations under this Clause 15, except to the extent that such failure materially prejudices Customer’s defense of such claim. yoffix may, at its own expense, assist in the defense if it so chooses, but Customer shall control the defense and all negotiations related to the settlement of any such claim. Any such settlement intended to bind Customer party shall not be final without yoffix’ written consent, which consent shall not be unreasonably withheld, conditioned or delayed. 15.3 yoffix agrees at its expense to defend Customer against (or, at yoffix’ option, settle) any third-party claim to the extent such claim alleges that the Services infringe or misappropriate any patent, copyright, trademark or trade secret of a third party, and yoffix shall pay all costs and damages finally awarded against Customer by a court of competent jurisdiction as a result of any such claim. In the event that the use of the Services is, or in yoffix’ sole opinion is likely to become, subject to such a claim, yoffix, at its option and expense, may (a) replace the applicable Service with functionally equivalent non-infringing technology, (b) obtain a license for Customer’s continued use of the applicable Service, or (c) terminate the license and provide a pro-rata refund of the Service Fees that have been paid in advance for the applicable Service (beginning on the date of termination). The foregoing indemnity obligation of yoffix will not apply: (1) if the Service is modified by Customer or its agent; (2) if the Service is combined with other non-yoffix products, applications, or processes, but solely to the extent the alleged infringement is caused by such combination; or (3) to any unauthorized use of the Service. The foregoing shall be Customer’s sole remedy with respect to any claim of infringement of third party intellectual property rights.
16. Limitation Of Liability
16.1 yoffix shall be unrestrictedly liable for (A) injury to life, body or health caused by yoffix, its legal representatives (gesetzliche Vertreter) or assistants in performance (Erfüllungsgehilfen); (B) damage caused intentionally (vorsätz lich) or with gross negligence (grob fahrlässig) by yoffix, its legal representatives or executive staff; (C) damage caused intentionally by yoffix’ assistants in performance not mentioned in (B); (D) damage resulting from the ab sence of any guaranteed (garantiert) characteristics; and (E) claims under the German Product Liability Act (Produk thaftungsgesetz). 16.2 yoffix shall be liable for damage resulting from the breach of its primary obligations (Kardinalpflichten) hereunder by yoffix, its legal representatives, senior executives or assistants in performance. Primary obligations are such basic duties which form the essence of the Services Contract, which were decisive for the conclusion of the Services Contract and on the performance of which Customer may rely. If the breach of such primary obligation was caused (A) through simple negligence by yoffix, its legal representatives or executive staff or (B) through simple or gross negligence by yoffix’ assistants in performance not mentioned in (A), then yoffix’ ensuing liability shall be limited to the amount which was foreseeable by yoffix at the time the respective service was performed. 16.3 Subject always to Clauses 16.1 and 16.2, yoffix shall not be liable for damage resulting from the breach of non primary obligations through (A) simple negligence of yoffix, its legal representatives or executive staff or (B) simple or gross negligence of yoffix’ assistants in performance not mentioned in (A). 16.4 yoffix shall not be liable for any loss, damage or harm suffered by Customer that is directly or indirectly caused by Customer’s unauthorized use of the Services to process Prohibited Data. 16.5 yoffix shall be liable for loss of data only up to the amount of typical recovery costs which would have arisen had proper and regular data backup measures been taken. These include a data backup to be performed by Customer at least every twenty-four (24) hours. 16.6 Subject always to Clause 16.1, the total liability of yoffix arising out of or in connection with the Services Contract, whether in contract or tort or otherwise shall in no circumstances exceed a sum equal to 100% of the total Service Fees paid (plus Service Fees payable) by Customer in the twelve (12) months immediately preceding the event which gave rise to the liability. 16.7 Any other liability of yoffix arising out of or in connection with the Services Contract (including these GTS and Schedule A (if applicable)) that is not covered by this Clause 16 shall be excluded on the merits.
17.1 Customer shall ensure that User identities, passwords, and equivalent obtained by Customer in conjunction with registration for the Services are stored and used in a secure manner and cannot be accessed and thereby used by third parties. Customer shall be liable for any unauthorized use of the Services. 17.2 Where it is suspected that any unauthorized person has become aware of a User identity and/or password, Cus tomer shall immediately inform yoffix thereof and also change such User identity and/or password. 17.3 Customer shall be liable for losses or damage incurred by yoffix where Customer intentionally or negligently reveals a user identity/password to a third party or where a user identity and password otherwise become known to an unauthorized party, unless Customer notifies yoffix immediately upon suspicion that such has occurred. 17.4 yoffix shall adopt reasonable measures to ensure that the security of the Services meet relevant industry standards. yoffix’ security measures are set forth in the yoffix Security Policy, which is available upon request.
18. Use of Subcontractors | No Set-Off | Limitation Of Right Of Retention
18.1 yoffix shall be entitled to retain subcontractors, including third party software suppliers, for the performance of any of its obligations in accordance with the Services Contract. 18.2 Customer may only invoke a right to set-off and assert a right of retention to the extent that its claims have been (A) finally established by a court of law; (B) are uncontested; or (C) have been acknowledged by yoffix.
19. Assignment | Novation
19.1 Customer may not assign the Services Contract without the prior written approval of yoffix and any purported as signment in breach of this Clause 19 shall be void. yoffix may at its discretion assign, transfer, subcontract or novate the Services Contract and/or any associated rights to assign the Services Contract in whole or in part. 19.2 Customer shall, at yoffix’ request, promptly, and in any event within fifteen (15) days, enter into a novation agree ment in such form as yoffix shall reasonably specify in order to enable yoffix to exercise its rights pursuant to this Clause 19.
20.1 Should any provision of the Services Contract including the Order Form and these GTS be or become ineffective, impracticable or unenforceable in whole or in part, (a “Defective Provision”) the effectiveness and the enforcea bility of the other provisions shall remain unaffected. Instead, Customer and yoffix undertake to replace the Defec tive Provision with a provision which comes as close as legally possible to what Customer and yoffix would have agreed, pursuant to the meaning and purpose of the Services Contract, if they had recognized the defectiveness of the provision. If the defectiveness of a provision is based on the determination of a certain level of performance or a certain time (deadline or fixed date), the provision is deemed to have been agreed with the level or time which comes as close as legally possible to the original level or time. The same shall apply for any possible omission in the Services Contract including the Order Form and these GTS. It is the express intention of Customer and yoffix that this savings Clause does not just have the effect of shifting the burden of proof, but rather that § 139 German Civil Code is excluded.
21. Entire Agreement | Changes
21.1 The Services Contract including the Order Form, these GTS and Schedule A (if applicable) represent the entire agreement between Customer and yoffix in respect of its subject matter and supersede and extinguish all prior negotiations, arrangements, understanding, course of dealings or agreements made between the Parties in relation to its subject matter, whether written or oral. 21.2 Valid amendments or supplements to these GTS including Schedule A (if applicable) must be made in writing. The same shall apply to any agreement to deviate from or cancel this requirement of written form. 21.3 yoffix may amend and/or update these GTS including Schedule A with future effect from time to time and as nec essary for technical, economic or legal reasons. Any revision of these GTS shall be announced to Customer in text form (simple email shall suffice) no later than six (6) weeks before their proposed effective date. Customer may either approve or object to the revision before their proposed effective date. The revision shall be deemed approved by Customer, unless Customer objects to the revision before their proposed effective date. yoffix shall expressly inform Customer thereof in the respective announcement.
22. Governing Law | Jurisdiction
22.1 The Services Contract including these GTS and Schedule A (if applicable) and any issues, disputes or claims (whether contractual or non-contractual) arising out of or in connection with it or its subject matter or formation shall be governed by and construed in accordance with the laws of the Federal Republic of Germany. The United Nations Convention on Services Contracts for the International Sale of Goods (CISG) shall not apply. 22.2 The parties agree that the courts of Berlin (Germany) shall have exclusive jurisdiction to settle any dispute or claim (whether contractual or non-contractual) that arises out of or in connection with the Services Contract including these GTS and Schedule A (if applicable) or its subject matter or formation.
23.1 The person signing or otherwise accepting the Order Form and these GTS for Customer represents that s/he is duly authorized by all necessary and appropriate corporate action to enter the Services Contract on behalf of Cus tomer. 23.2 Without prejudice to § 354a of the German Commercial Code, Customer shall not assign any of its rights or obliga tions under any Order Form and these GTS without the prior written consent of yoffix. 23.3 No agency, partnership, joint venture, or employment is created as a result of the Services Contract and Customer does not have any authority of any kind to bind yoffix in any respect whatsoever. HybridOffice21 GmbH Kastanienallee 98b, 10435 Berlin, Germany District Court of Berlin Charlottenburg, Germany HRB 226685 May 2021Schedule A Data Processing Terms 1. Scope 1.1 These Data Processing Terms (“Data Processing Terms“) shall apply to the processing of personal data related to the Services Contract by yoffix or by third parties commissioned by yoffix. These Data Processing Terms shall supplement the yoffix GTS as per Clause 11.1 of the GTS. 1.2 Under these Data Processing Terms yoffix shall provide the following data processing services to and on behalf of Customer (“Data Processing”): Software-as-a-Service provided by yoffix to Customer that enables Customer to organize, manage and optimize hybrid work. Further details can be found in the Services Contract. 1.3 It cannot be ruled out that yoffix will, during the Data Processing, gain access to or obtain knowledge of or process the following personal data: Types of Personal Data Categories of Data SubjectsEmail, name, photograph, office, department, position, office daysEmployees and other personnel of Customer.
Further details can be found in the Services Contract. 2. General Rights and Obligations of the Parties 2.1 The Data Processing shall be conducted by yoffix on behalf of Customer. Customer shall be responsible for com pliance with applicable data protection laws. 2.2 yoffix may process personal data only within the scope of these Data Processing Terms and in accordance with the instructions of Customer, unless required otherwise by the laws of the European Union or its Member States to which the yoffix is subject. In particular, yoffix shall only correct, delete or limit the processing of personal data according to the instructions of Customer. In the event that an affected data subject addresses yoffix directly in such regard, yoffix shall, where reasonably possible, immediately forward such request to Customer. 2.3 Customer shall issue verbal instructions to yoffix only in urgent cases and immediately thereafter confirm such instructions at least in text form. 2.4 yoffix shall process personal data only within the territory of a member state of the European Union or of a signatory state of the Agreement on the European Economic Area. Any transfer and processing of personal data to third countries shall require the prior written consent of Customer and shall only take place if the conditions of Art. 44 et. seq. General Data Protection Regulation of the European Union (GDPR) are met. 2.5 yoffix shall regularly audit its internal processes and data protection security mechanisms for compliance with ap plicable data protection laws. 2.6 If required by law, yoffix shall appoint a data protection officer in writing. yoffix shall notify Customer of the contact details of such data protection officer to allow Customer to directly contact such data protection officer. 2.7 yoffix shall within its capabilities assist Customer in fulfilling Customer’s obligations under Art. 12 through 22 GDPR and Art. 32 to 36 GDPR. The costs thereof shall be borne by Customer. 2.8 yoffix shall only delegate the Data Processing to such employees who are bound by confidentiality obligations or who are subject to an appropriate statutory duty of confidentiality. Persons subordinated to yoffix, having access to personal data of Customer, shall process such data exclusively in accordance with the instructions of Customer, unless such persons are legally obliged to process such data. 2.9 Upon completion of the Data Processing and upon termination of the Services Contract in its entirety at the latest, yoffix shall, at the choice of the Customer, and as far as yoffix is not bound by statutory retention duties, either return all personal data as well as all documents, data and copies obtained in connection with these Data Processing Terms to Customer, or upon the prior written consent of Customer, delete or destroy such personal data, docu ments, data and copies.
3. Information Obligations 3.1 In the event yoffix becomes aware that an instruction of Customer violates any data protection laws, yoffix shall immediately notify Customer thereof. yoffix shall be entitled to suspend the execution of such instruction until such instruction is confirmed or altered in writing by Customer. 3.2 yoffix shall immediately notify Customer of control actions and measures of investigating and supervisory authori ties, to the extent such measures are related to the Data Processing. 3.3 In the event yoffix becomes aware of any violation of the protection of personal data in relation to these Data Processing Terms, yoffix shall immediately notify Customer thereof. 4. Technical and Organizational Measures 4.1 yoffix shall implement technical and organizational measures for the protection of personal data appropriate to comply with the requirements of the GDPR, in particular measures ensuring confidentiality, integrity, availability and resilience of the systems and services used for Data Processing (each of these technical and organizational measures hereinafter individually “TOM“, jointly “TOMs“). 4.2 The particular TOMs implemented by yoffix are further described in Attachment 1 hereto. 4.3 yoffix shall be entitled to replace any of the implemented TOMs at any time with alternative measures that provide a comparable level of protection. 5. Subcontractors 5.1 yoffix shall be entitled to subcontract certain parts of the Data Processing to third parties (“Subcontractors”) only with Customer’s prior written consent. Customer shall not withhold its consent unless on important grounds of data protection law. 5.2 Customer hereby consents to the commissioning of Subcontractors by yoffix as follows: Subcontractor Address Subcontractor’s Services Location of Data ProcessingAmazon Web Services EMEA SARL38 avenue John F. Ken nedy, L-1855 Luxem bourgCloud Services EuropeGoogle Inc 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USACloud Services Europe
5.3 yoffix shall impose its data protection obligations under these Data Processing Terms on any Subcontractor. 5.4 Clauses 5.1 and 5.2 shall apply mutatis mutandis to the replacement of any Subcontractor by yoffix and to the further subcontracting of the Data Processing to another third party by Subcontractor. 6. Proof of Compliance 6.1 yoffix shall allow Customer or an external auditor commissioned by Customer to verify yoffix’s compliance with these Data Processing Terms (including the implementation of the TOMs pursuant to Clause 4). yoffix may demon strate compliance with these Data Processing Terms by providing suitable evidence. 6.2 If necessary for the purposes laid down in Clause 6.1, yoffix shall enable Customer to carry out, once per calendar year during normal business hours and without disrupting yoffix’s business, inspections at yoffix’s business prem ises. Such inspections shall be announced by Customer at least 14 business days in advance and shall only be performed by independent external auditors. Such auditors shall not be entitled to gain access to company secrets, business secrets or confidential information of yoffix or to any data which is not subject to these Data Processing Terms. yoffix may object to the appointment of an external auditor for good cause, in particular, where an auditor is a competitor of yoffix. Customer shall bear the costs of any inspections and supporting actions of yoffix hereunder (if any).
Attachment 1 Description of Technical and Organizational Measures (TOMs) TOMs implemented by yoffix: 1. Confidentiality Measures 1.1 Physical Access Control Physical measures to prevent unauthorized persons from accessing data processing systems. We deploy security locking systems with keys. We carefully select our cleaning and maintenance personnel.
1.2 Systems Access Control Measures to prevent the use of data processing systems by unauthorized persons. We have two-factor authentication (2FA) and strong password policies for all IT services that our employees use.
1.3 Data Access Control Measures to ensure that persons authorized to use data processing systems have access to only such data that is covered by their authorization and that personal data cannot be read, copied, altered or removed during processing, use or after storage. All data is encrypted both at rest and in transit. Only our tech team has direct access to Data Processing systems.
1.4 Separation Control Measures to ensure that data collected for different purposes can be processed separately. Our production and development environment, as well as the different web and mobile clients we use or offer are isolated systems.
2. Integrity Measures 2.1 Disclosure Control Measures to ensure that personal data cannot be read, copied, altered or removed during electronic transmission, transport or storage on data carriers, and to ensure that it is possible to verify and establish the points envisaged for the transfer of personal data by data transmission systems. Our Services are served entirely over HTTPS. All data sent to or from us is encrypted in transit using 256 bit encryption, utilizing AES_128_GCM and ECDHE_RSA as key exchange mechanism. Our API and ap plication endpoints are TLS/SSL only. In addition, all connections from our application servers to our data bases are TLS encrypted.
2.2 Input Control Measures to ensure retrospective verification and assessment whether and by whom personal data has been en tered, changed or removed within the relevant data processing systems.
We are able to follow-up on all logs into the system and see who is using which services and when. The foregoing statement is also valid for our Subcontractors.
3. Availability and Resilience Measures Measures to ensure that personal data are protected against accidental or willful destruction or loss and can be recovered quickly after an incident. We run daily database backups that are also stored on AWS. Additionally, we also create backups of each application build that we deploy, for both our servers and our clients. This enables us to rapidly rollback a database, server or client application, should any incidence occur. AWS deploys uninterruptible power sup plies.
4. Testing, Assessment and Evaluation Processes 4.1 Data Protection Management Measures to plan and organize data protection requirements. We run a security briefing as part of our onboarding process for every new employee that joins yoffix. Our internal HR tool enforces the completion of this step, so we can be sure it will not be skipped. We review our data protection processes and TOMs twice a year. In addition, our product and engineering teams are in close contact with the management on data protection issues and consult it whenever changes are made to our Services that could have an impact on our data processing.
4.2 Incident-Response-Management Measures to respond to detected or suspected security incidents within the area of data processing systems used. If we become aware of a data incident, we will immediately notify our CTO (if not involved yet) or contact our Engineering lead over the phone. We have backup lines available but our technical executives ensure access to internet and availability over the phone whenever possible. We will ensure that reasonable measures are taken to mitigate the harmful effects of the incident and to prevent further unauthorized access or disclosure. Following that, we will promptly notify affected Customers and describe, to the extent possible, the details of the incident, the steps we have taken to mitigate the potential risks, and any suggestions we have for the Customer to minimize the impact of the incident.
4.3 Order Control Measures that ensure that personal data processed on behalf of Customer can only be processed in accordance with the instructions of Customer.All our employees are contractually obliged to treat any data they handle as confidential. We have a strict process for changing our Subcontractors, to ensure that they only access and use data to the extent required to perform the obligations subcontracted to them, and do so in accordance with our agreements and these Data Processing Terms.