TERMS AND CONDITIONS OF SALE
These Terms and Conditions of Sale are intended only for entrepreneurs and by accepting them, you declare and confirm to the Provider that you are not acting as a consumer.
These Terms and Conditions of Sale take effect from 22 October 2024,
In Žilina, on 22 October 2024.
Appendix 1: Definitions and Interpretation
In these Terms and Conditions of Sale and in all documents incorporated herein by reference, the following words have the following meanings, unless otherwise agreed by the Contracting Parties:
“AI” stands for Artificial Intelligence, i.e. the field that deals with the creation of systems and programs capable of performing tasks that normally require human intelligence.
“API” stands for application programming interface and has the meaning assigned to it in clauses 3.1 and 4.2 of these Terms and Conditions of Sale.
“Copyright Act” means Act No. 185/2015 Coll., on copyright, as amended.
“Bank Account” means a bank account opened by the Provider to receive Cashless Payments for the provision of the Service.
“Cashless Payment” has the meaning assigned to it in clause 9.5 of these Terms and Conditions of Sale. Cashless Payment is made (i) via the Payment Gateway, (ii) through Google Pay or Apple Pay, and (iii) by transfer to the Bank Account specified in the Invoice.
“Price” means the amount/fee for the use of the Service (excluding VAT and other taxes) paid in advance for the calendar period selected by the Customer in the Purchase Order or set by the Provider for a specific Service Plan.
“Price List” means a summary of the Prices and other fees for the provision of the Service, Other Services (if applicable), Additional Services (if applicable), other payments and costs offered by the Provider, which is displayed in the Account, or which is separately agreed upon by the Contracting Parties.
“Cloud” means technology that allows access to computer system resources and on-demand services via the Internet, including servers, repositories, databases, networks and applications, without the need to directly manage own infrastructure.
“Documentation” means the Provider’s documentation regarding access to and use of the Service, which the Provider supplies, publishes or makes available to the Customer and its Authorized Persons and Users, in particular the Moderation Manual, user instructions, user manuals and technical documentation, which may be updated by the Provider at any time.
“Additional Service” means an additional package to the Service that (if the Service Plan allows) may be purchased by the Customer in the relevant calendar period after reaching the limit of the Service Plan used in the given calendar period.
“Confidential Information” means all information that one Party discloses to the other Contracting Party during the term of the Account Agreement and the Service Agreement (in any form, whether written, oral or otherwise) and that has been designated as “confidential” at the time of its disclosure, or that can reasonably be considered confidential, or that is not publicly available from public sources and is specified in more detail in Section 14.1 of these Terms and Conditions of Sale.
“Intellectual Property” means any and all intellectual property rights of the Provider (or its controlled and controlling companies, licensors, licensees and collaborators) in the Website, Software, Service and their content, features and functions or other intellectual property rights in them anywhere in the world, whether registered or unregistered, registrable or unregistrable, including any request, application, proposal or right to exercise these rights, which include, in particular (but are not limited to), (i) copyright and other related rights, database rights, computer programs, software solutions, source and machine codes and other subject matter under the Copyright Act and Applicable Law, (ii) know-how, (iii) industrial rights, in particular designs and design rights, technical solutions, inventions, utility models, patent rights, discoveries, improvements and others, (iv) Confidential Information, trade secrets, trade names and (v) trademarks, logos, inventions and others under Applicable Law that may apply in any part of the world.
“Invoice” means a tax certificate for the payment of the Price and/or other payments under these Terms and Conditions of Sale, the Account Agreement and the Service Agreement issued in accordance with Applicable Law, in particular the Income Tax Act, the VAT Act and Act No. 431/2002 Coll., on accounting, as amended.
“Other Services” means other services that (if applied) the Provider may provide to the Customer at the Customer’s request, such as support, implementation, maintenance and removal of defects, which shall be invoiced according to the time spent and at the rate in accordance with the Provider’s Price List.
“Moderation Manual” means a manual that defines the Provider’s approach to content moderation in the provision of the Service and is published on the Website: https://elv.ai/moderation-rules/.
“Civil Code” means Act No. 40/1964 Coll., the Civil Code, as amended.
“Commercial Code” means Act No. 513/1991 Coll., the Commercial Code, as amended.
“Terms and Conditions of Sale” means these Terms and Conditions of Sale of the Provider, which are governed by (i) registering and using the Account, and (ii) using the Service, Additional Services and Other Services (if applicable) by the Customer (and its Authorized Persons and Users), which may be amended occasionally.
“Purchase Order” means a binding proposal to conclude a Service Agreement for the use of the Service in accordance with the data specified in the Purchase Order Form, which the Customer enters in the Account.
“Purchase Order Form” means the electronic form that the Customer fills in and sends through the Account for ordering a paid Service and has the meaning assigned to it in clause 6.2 of these Terms and Conditions of Sale.
“Content” means data, text, comments, posts, media, personal data and all other data and information of the Customer and its Users that are (i) uploaded, published or stored in the Account and Sub-Accounts by the Customer or the Customer’s Users, (ii) transferred to the Account (Sub-Accounts) by the Customer or the Customer’s Users, (iii) delivered for upload or transfer to the Account (Sub-Accounts) by the Customer or the Customer’s Users with whom the Provider comes into contact or which the Provider processes for the Customer in the provision of the Service, including data, statistics and functions that have resulted from using the Service.
“Online Platform” means the Customer’s website, profile, platform and social network.
“Authorized Person” means a statutory body or a member of a statutory body, an authorized representative, a proxy or a person authorized and entitled by the Customer to represent the Customer in concluding and performing the Account Agreement, Service Agreement and other acts pursuant to these Terms and Conditions of Sale.
“Applicable Law” means the Commercial Code, the Copyright Act, the Civil Code, the Electronic Commerce Act, the Personal Data Protection Act, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and all other regulations (Slovak, European and international) that apply to the Provider and to the provision and use of the Service.
“Payment Gateway” means a payment gateway platform for online payments with a secure and reliable infrastructure of the Controller, which is used by the Provider to pay the Price and other payments under these Terms and Conditions of Sale, the Purchase Order and the Service Agreement.
“Plan” means a specific type/variant of the Service or a combination of individual types of Service, the current offer of which is available in the Account and on the Website. Individual Service Plans vary according to the scope of the Service provided, the territory/region or location of the servers, technical parameters, functions and limits, or the maximum number of Sub-Accounts. The Customer has the option to choose one Service Plan and change it during the term of the Service Agreement under the conditions specified in these Terms and Conditions of Sale.
“Sub-Account” means a separate User account established within the Customer Account for the use of the Service by the Customer User and has the meaning assigned to it in Article 7 of these Terms and Conditions of Sale.
“User” means an associate, contributor, employee, contractor, consultant, agent, partner or other person designated by Customer to create and access a Sub-Account and use the Service.
“Controller” means the operator of the Payment Gateway that is listed in the list of controllers, which shall be notified to the Customer in an appropriate manner.
“Appendix” means any appendix (annex) to the main text of the Account Agreement and the Service Agreement, which forms an integral part of the Agreement.
“Registration Form” means the electronic form that the Customer fills in and submits through the Website to set up an Account and has the meaning assigned to it in clause 4.1 of these Terms and Conditions of Sale.
“SaaS” means software as a service, i.e. a software application provided in the form of a service over the internet, in which the Provider manages the Software and its infrastructure in the Cloud and the Customer accesses it through the Website.
“Service” means the service of the Provider associated with:
“Trial Period” means a limited period of free use of the Service, which shall end either (whichever comes first) (i) 30 days from the moment of concluding the Account Agreement, or (ii) at the moment of reaching the set limit of the Service within the Trial Period specified in the Account.
“Software” means a web application operated by the Provider to access and provide the Service available through the Website, which as part of the Technology is accessible exclusively to Customers and their Users for the use of the Service.
“Technology” means the technology (including Software, source code, hardware, processes, algorithms, user interfaces, applications, systems, know-how, techniques, designs and other tangible or intangible technical materials or information) available through the Website and all related Documentation and any results related thereto.
“Account” means the unique user profile of the Customer that entitles the Customer (and its Authorized Persons) to access and use the Service. The Customer logs in to the Account using (i) his/its business login e-mail address, and (ii) the chosen access password. In the Account, the Customer has access to his/its protected profile, in which he/it can manage the Service and place Purchase Orders for the Service.
“Force Majeure” means an event or series of related events that are beyond the reasonable control of the Contracting Party concerning, including, but not limited to, catastrophes, explosions, fires, floods, epidemics and pandemics, decisions or measures taken by public authorities, strikes, riots, terrorist attacks and wars or military operations, whether declared or not, outages of the Internet or any public telecommunications network, hacker attacks, viruses or attack by other malicious software; power outages, changes in legislation and the like.
“Website” means the Provider’s website located at the Internet address: www.elv.ai and other subdomains.
“E-Commerce Act” means Act No. 22/2004 Coll., on electronic commerce, as amended.
“Income Tax Act” means Act No. 595/2003 Coll., on income tax, as amended.
“VAT Act” means Act No. 222/2004 Coll., on value added tax, as amended.
“Personal Data Protection Act” means all applicable legal regulations relating to the processing of personal data and the protection of personal data, in particular the General Data Protection Regulation (Regulation (EU) 2016/679) – GDPR and Act No. 18/2018 Coll., on the protection of personal data, as amended, insofar as they are valid and effective for visitors to the Website, the Customer and its users.
“Account Agreement” means a contract concluded between the Contracting Parties (i) opening and maintaining an Account, and (ii) on the use of the Service during the Trial Period to the extent and under the conditions specified in these Terms and Conditions of Sale.
“Service Agreement” means an agreement concluded between the Contracting Parties for the provision of the Service to the extent and under the conditions specified in these Terms and Conditions of Sale, including all their Appendices and amendments.
The interpretation of these Terms and Conditions of Sale is governed by the following rules:
“Personal Data Processing Agreement” means a contract concluded between the Customer as a personal data controller and the Provider as a personal data processor acting on behalf of the Customer in the processing of personal data in accordance with Applicable Law, and this agreement is part of these Terms and Conditions of Sale.
This PERSONAL DATA PROCESSING AGREEMENT concluded in accordance with Art. 28(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR“) and the provision of Section 34(3) of Slovak Act No. 18/2018 Coll., on the protection of personal data and on the amendments to certain acts, as amended (the “Personal Data Protection Act“) (the “Agreement“)
between:
elv.ai, j.s.a., having its registered office at Poštová 1, 010 08 Žilina, Company ID No.: 55 526 136, a company registered in the Commercial Register of the District Court Žilina, Section: Sro, Insert No. 27/L (the “Processor“)
and
the Customer, which is the entity defined in point 1.2 of these Terms and Conditions of Sale of the Service Provider of elv.ai, j.s.a. (the “Controller“)
(The Controller and the Processor together the “Contracting Parties” and individually as the “Contracting Party“)
THE CONTRACTING PARTIES HAVE AGREED ON THE FOLLOWING WORDING OF THIS AGREEMENT:
1 Subject Matter and Purpose of the Agreement
1.1 In accordance with the Terms and Conditions of Sale of the Processor, the Controller and the Processor have jointly concluded an Account Agreement and a Service Agreement (hereinafter jointly referred to as the “Master Agreement”), based on which the Processor shall provide Services to the Controller. In the performance of the related obligations arising from the Master Agreement to the Contracting Parties, the personal data of natural persons is processed by the Processor on behalf of the Controller.
1.2 By this Agreement, the Contracting Parties want to ensure that the processing of personal data by the Processor is executed in accordance with the GDPR and the Personal Data Protection Act. The aforementioned fact does not preclude the Processor from processing personal data for its own purposes, which are different from those of the Controller. In such case, the terms of this Agreement do not apply to the processing of personal data by the Processor as an independent controller of personal data, and the Processor is obliged to comply with all legal obligations arising from the GDPR as an independent controller of personal data, in particular, but not exclusively, to process personal data only for a predetermined purpose to the minimum extent necessary for the period necessary to achieve this purpose, based on a correctly chosen legal basis and after fulfilling the obligation to inform the Data Subject about such processing of personal data.
1.3 The Controller, in accordance with Article 4 of the GDPR and the provision of Section 5 of the Personal Data Protection Act, determines the purposes and gives instructions for the processing of personal data that the Processor shall process on its behalf and according to its instructions for the purpose of providing the Services to the Controller.
1.4 At the same time, the Controller declares that it has acted in accordance with Art. 28(1) of the GDPR and the provisions of Section 34(1) of the Personal Data Protection Act, and the Processor provides sufficient guarantees that appropriate technical and organizational measures shall be taken so that the processing of personal data complies with legal requirements and that adequate protection of the rights of Data Subjects is ensured.
1.5 The subject and period of processing, the nature and purpose of processing, the method of processing, the categories of Data Subjects and the scope of personal data to be processed by the Processor on behalf of the Controller pursuant to this Agreement are specified in Appendix No. 1 to this Agreement.
2 Definitions
2.1 To eliminate doubt, the Contracting Parties declare that capitalized terms not defined in this Agreement shall have the meanings assigned to them in the Master Agreement.
2.2 The terms used in this Agreement shall have the following meanings:
2.2.1 Personal Data means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or by reference to one or more elements which are specific to the physical, physiological, genetic, mental, cultural or social identity of that natural person.
2.2.2 Personal Data Processing means an operation or set of operations on personal data or sets thereof, such as collection, recording, organization, structuring, storage, processing or altering, searching, browsing, use, disclosure by transmission, dissemination or otherwise disclosing, alignment or combination, restriction, deletion or destruction.
2.2.3 Other Processor (Another Processor) means any third party authorized by the Processor to process the Controller’s personal data.
2.2.4 Data Subject means the identified or identifiable natural person whose personal data is being processed.
2.2.5 Personal Data Breach means a breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data that is transmitted, stored or otherwise processed.
2.2.6 Applicable Legislation on Personal Data Protection within the meaning of this Agreement, means Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Slovak Act No. 18/2018 Coll., on the protection of personal data and on the amendments to certain acts, as amended, or other generally binding legal regulations that establish rights and obligations regarding the protection of personal data.
2.2.7 Standard Contractual Clauses mean the contractual document based on which the transfer of personal data to third countries takes place in accordance with Commission Implementing Decision (EU) 2021/915 of 4 June 2021 on standard contractual clauses between controllers and processors pursuant to Article 28(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council, and Article 29(7) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (Text with EEA relevance).
2.2.8 Third Countries are countries that are not a member of the European Union or are not party to the Agreement on the European Economic Area.
3 Rights and Obligations of the Contracting Parties
3.1 Rights and Obligations of the Controller
3.1.1 The Controller is obliged to ensure that the processed personal data of Data Subjects are obtained based on a valid legal basis that authorizes the Controller to process such personal data and to authorize the Processor to process it based on this Agreement.
3.1.2 The Controller is obliged to inform all Data Subjects about the processing of personal data in connection with the provision of Services and to provide Data Subjects with all information to ensure compliance with the information obligation under Art. 12 and 13 of the GDPR and the provisions of Sec 19 of the Personal Data Protection Act.
3.1.3 The Controller is obliged to give instructions to the Processor for the processing of personal data in particular, but not exclusively, by means of this Agreement. If necessary, the Controller is entitled to give any instructions other than those contained in this Agreement to the Processor in writing or electronically, including through the communication tools chosen by the Contracting Parties.
3.1.4 The Controller is entitled to require the Processor to prove compliance with legal obligations under the applicable legislation on personal data protection and under this Agreement, including the implementation of all prescribed security measures for personal data protection.
3.1.5 The Controller, or an independent auditor authorized by the Controller, is entitled to carry out a personal data protection audit at the Processor, within which it may only request information from the Processor regarding the processing of personal data strictly relating to this Agreement. The Controller is obliged to notify the Processor in writing of the planned audit at least 30 days in advance. The Processor is entitled to raise objections against the auditor selected by the Controller. In the event of objections, the Controller is obliged to replace the auditor, unless the Contracting Parties agree otherwise. The Controller shall bear all costs associated with the performance of the audit under this clause of the Agreement. During the audit, the Controller is obliged to comply with the security and organizational instructions of the Processor so that its operation is neither disrupted nor restricted, whereas the audit shall not exceed 1 working day, i.e. the audit shall be carried out within a maximum of 5 hours. The Controller undertakes to conclude a non-disclosure agreement with the Processor for the purpose of carrying out the audit, if requested by the Processor. In the event of concluding a non-disclosure agreement pursuant to the previous sentence, the Controller is obliged to bind its auditor to the same extent with confidentiality. The Processor undertakes to provide the Controller with the necessary cooperation during the audit, including the provision of information necessary to prove the fulfilment of the Processor’s obligations stipulated by the applicable legislation on personal data protection and this Agreement.
3.2 Rights and Obligations of the Processor
3.2.1 The Processor is obliged to take appropriate measures necessary to meet the legal requirements under the applicable legislation on personal data protection and to ensure the protection of the rights of Data Subjects and is obliged in particular, but not exclusively, to take appropriate technical and organizational measures and process personal data in accordance with the instructions of the Controller and the provisions of this Agreement.
3.2.2 The Processor is obliged to process personal data in accordance with the instructions of the Controller and exclusively to the extent, under the conditions and for the purpose specified by the Controller in this Agreement and the Master Agreement. The Processor shall inform the Controller without delay and before commencing the processing of personal data if it is obliged to process personal data to meet a legal requirement outside the scope of the Controller’s instructions, and this notification does not run contrary to the public interest.
3.2.3 The Processor is obliged to inform the Controller if it considers the Controller’s instructions to run contrary to the applicable legislation on personal data protection, or if it is not possible to ensure adequate protection of the rights of Data Subjects by fulfilling these instructions.
3.2.4 When processing personal data, the Processor is obliged to proceed in accordance with the applicable legislation on personal data protection.
3.2.5 In order to meet the requirements of Art. 32 of the GDPR and the provisions of Section 39 of the Personal Data Protection Act, the Processor, taking into account the latest knowledge, the costs of implementing measures and the nature, scope, context and purposes of processing, as well as risks of varying probability and severity to the rights and freedoms of natural persons, shall take appropriate technical and organizational measures to ensure a level of security of personal data processing appropriate to that risk, in particular the measures listed in Appendix 3 to this Agreement, which are intended to:
When assessing the appropriate level of security, the Processor shall take into account, in particular, the risks posed by the processing, in particular as a result of accidental or unlawful destruction, loss, alteration, unauthorized provision of personal data or unauthorized access to it.
3.2.6 The Processor is obliged to ensure that only authorized persons bound by the obligation of confidentiality have access to personal data. At the same time, the Processor declares that the authorized persons have been instructed on their rights and obligations in the processing of personal data resulting from the applicable legislation on personal data protection and from this Agreement.
3.2.7 The Processor is obliged to notify the Controller of any breach of personal data protection or inability to perform the obligations set out in this Agreement immediately after its discovery. This notification must contain at least the likely extent of the damage incurred and the extent of the personal data breach and, if the Processor is aware at the time of the notification, also the elements required by Art. 33(3) of the GDPR.
3.2.8 The Processor is obliged to delete or return to the Controller, at the request of the Controller, any personal data, or copies thereof, which the Processor has processed on behalf of the Controller for providing Services based on the Master Agreement, no later than 30 days from the date of delivery of the Controller’s request. The Processor shall delete the Controller’s’ personal data that the Processor has processed in order to provide the Services to the Controller no later than 30 days after the termination of the cooperation of the Contracting Parties based on the Master Agreement or after the expiry of the period necessary for the processing of personal data under this Agreement. The above does not apply to personal data that the Processor is obliged to process in accordance with applicable legal regulations even after the termination of cooperation under the Master Agreement, or to personal data that the Processor processes as an independent controller for its own purposes.
3.2.9 If the Data Subject addresses the Processor with his/its request regarding his/its rights related to personal data processing under this Agreement, the Processor is obliged to refer the Data Subject to the Controller and to inform the Controller of this request without delay. When handling the request of the Data Subject, the Processor shall provide the Controller, in accordance with Art. 28(3)(e) of the GDPR, the necessary cooperation and information necessary to handle the request of the Data Subject, if these are not known to the Controller from the available sources published by the Processor.
3.2.10 The Processor undertakes to follow the procedure set out in Article 4 of this Agreement when entrusting any third party with the processing of personal data.
3.2.11 The Processor undertakes to provide the Controller with the necessary cooperation in ensuring the obligations under Art. 32 and Art. 36 of the GDPR and the provisions of Sections 39 to 43 of the Personal Data Protection Act, if the Controller cannot fulfil such an obligation without the cooperation of the Processor.
3.2.12 The Contracting Parties have agreed that the Processor is entitled to use and process the Controller’s personal data in an anonymized or other similar form that makes it impossible or difficult to identify the Data Subject for other own purposes, including the development of the Processor’s services and products in accordance with the terms of Article 6 of the Master Agreement, while the Processor is entitled to provide such modified personal data to third parties. The aforementioned authorization of the Processor applies to personal data obtained by the Processor during the term of the Master Agreement in connection with the provision of Services, as well as after the termination of the cooperation of the Contracting Parties. Should the Processor’s actions under this provision of the Agreement result in the processing of personal data, the Processor, as an independent controller, undertakes to comply with the legal obligations arising to it from the GDPR and the Personal Data Protection Act.
4 Other Processors
4.1 The Controller hereby authorizes the Processor to entrust the processing of personal data under this Agreement to Other Processors.
4.2 The Processor is obliged to inform the Controller electronically of each authorization of Another Processor within 15 days. The Processor shall inform the Controller of the authorization of Another Processor by e-mail sent to the Controller’s address specified in the header of this Agreement.
4.3 The Controller is entitled to object to the authorization of Another Processor within 15 days from the date of receipt of information about the authorization of Another Processor. If the Controller does not exercise this right, the Contracting Parties consider that the Controller agrees to authorize Another Processor. If the Controller exercises the right to object to the authorization of Another Processor and the Processor is consequently unable to continue providing the Services under the Master Agreement, the Controller acknowledges and agrees that in connection with such inability of the Processor, it does not incur any claims against the Processor other than those expressly agreed by the Contracting Parties for this purpose, in particular, the Controller does not have the right to a refund of the Subscription already paid and/or other performances for the Services already provided.
4.4 The Processor shall ensure that the Other Processor who/which has been granted a mandate pursuant to the paragraphs above is bound by the same or similar data protection obligations as the Processor has undertaken under this Agreement.
4.5 The Processor shall be directly liable to the Controller for any damage caused by the processing of personal data under this Agreement by Another Processor.
4.6 At the time of concluding this Agreement, the Processor has entrusted the processing of personal data under this Agreement to Other Processors listed in Appendix No. 2 to this Agreement, to which the Controller expressly agrees.
5 Transfer of Personal Data to Third Countries
5.1 The Processor is entitled to transfer personal data processed under this Agreement to third countries only if it ensures that the level of personal data protection after such transfer shall correspond at least to the level of protection under this Agreement and applicable personal data protection legislation. The Processor is obliged to ensure that appropriate security and protection measures are observed under this Agreement and the applicable legislation on personal data protection and the rights of Data Subjects are not jeopardized, and to conclude standard contractual clauses in the relevant wording for the purpose of such transfer.
6 Liability for Damage
6.1 The Processor is obliged to compensate the Controller for damage incurred as a result of a breach of the provisions of this Agreement or the provisions of the applicable legislation on personal data protection by the Processor or persons for whose actions the Processor is responsible under this Agreement or generally binding legal regulations.
6.2 The Contracting Parties agree that the relevant provisions on the limitation of liability for damage agreed by the Contracting Parties in the Master Agreement shall apply accordingly to the assertion of the Contracting Parties’ liability for damage, and to the compensation of any damage.
7 Term and Termination of the Agreement
7.1 This Agreement shall be valid and effective from the date of its acceptance by the Contracting Parties in accordance with the terms of the Master Agreement. This Agreement is an integral part of the Master Agreement. By accepting the terms of the Master Agreement, the Controller agrees and is also bound by the wording of this Agreement. The Agreement shall expire on the date of termination of the Master Agreement. If necessary, this Agreement shall remain in force even after the termination of the Master Agreement in the event that personal data is processed by the Processor on behalf of the Controller. The aforementioned does not affect the processing of personal data, which the Processor is obliged to process in accordance with applicable legal regulations even after the termination of cooperation under the Master Agreement, or personal data that the Processor processes as an independent controller for its own purposes
7.2 The Controller is entitled to immediately terminate this Agreement and the Master Agreement if the Processor breaches its obligation(s) arising from this Agreement or from the applicable legislation on personal data protection and fails to remedy such breach(es) no later than 30 days from the date on which the Controller informed the Processor thereof and called on it to remedy it/them, or within another reasonable period agreed by the Contracting Parties.
8 Contact Persons
8.1 The Contracting Parties have agreed that for the purposes of communication in matters related to this Agreement and the processing of personal data of Data Subjects, the Contracting Parties shall use the following contact details:
9 Final Provisions
9.1 If any contract, other binding document or agreement concluded between the Contracting Parties contains provisions relating to the protection of personal data during their processing for the purpose of performing the Master Agreement, on the effective date of this Agreement, such contract, document or agreement, or the relevant provisions, shall lose its/their validity and effectiveness, and the processing of personal data between the Controller and the Processor shall be governed exclusively by the provisions of this Agreement.
9.2 This Agreement is an integral part of the Master Agreement. The rights and obligations of the Contracting Parties not regulated by this Agreement shall be governed by the provisions of the Master Agreement. In the event of any inconsistency between the provisions of this Agreement and the Master Agreement, this Agreement shall prevail.
9.3. This Agreement is governed by the relevant provisions of generally binding legal regulations of the Slovak Republic. In the event of a dispute arising from this Agreement, the Contracting Parties agree that such disputes shall be resolved primarily by mutual negotiations of the representatives of the Contracting Parties, and if they do not resolve the dispute by negotiation, the Contracting Parties shall refer the dispute to the court of the Slovak Republic with substantive and territorial jurisdiction.
9.4 The Contracting Parties have agreed that the Processor is entitled to unilaterally amend the terms of this Agreement in accordance with the terms of the Master Agreement. Any changes and amendments shall be effective upon posting of the new or amended version of the Agreement (or at a later effective date specified therein). The Processor shall notify the Controller of any changes and amendments via the Website or by e-mail to the Controller’s e-mail address at least 15 days before the entry into force of such changes or amendments. If the Controller does not agree with such changes or amendments to the Agreement, it is entitled to unilaterally terminate the Agreement. The Controller acknowledges and agrees that the unilateral termination of this Agreement also terminates the Master Agreement, in accordance with these Terms and Conditions of Sale and consequences specified in the Master Agreement. If the Controller fails to deliver a notice of termination of the Agreement before the date of entry into force of the new or amended Agreement, the Controller (by continuing to use the Service) accepts the Agreement as amended, supplemented or modified.
9.5 The following appendices are an integral part of this Agreement:
Appendix No. 1: Specification of Personal Data Processing
Appendix No. 2: Other Processors Agreed
Appendix No. 3: Overview of Technical and Organizational Measures
9.6 The Contracting Parties declare that their capacity and freedom to conclude this Agreement, as well as their capacity to perform related legal acts, is not limited or excluded in any way, and at the same time that they have read this Agreement, understand its contents, express their free will, and that it has not been concluded under duress or under conspicuously disadvantageous conditions.
9.7 This version of the Agreement is effective as of the effective date of the Master Agreement.
In Žilina, on 22 October 2024.
Appendix No. 1
Specification of Personal Data Processing
Personal data shall be processed by the Processor for the purpose of providing Services to the Controller as defined in clause 1.1 of the Agreement and in the Master Agreement.
Unless the Controller has given the Processor any other written instructions, the Processor is entitled to perform such processing operations with the personal data that lead to the achievement of the purpose of processing. The Processor is entitled with regard to personal data in particular, but not exclusively to: obtain, record, organize, collect, store, use for the purpose of processing, browse, search, combine, correct, update, delete, anonymize, pseudonymize and perform other related operations with personal data.
The Processor is entitled to use both automated and non-automated means of processing personal data of Data Subjects. The Processor is not entitled to use personal data in any other way than for the specified purpose of their processing. The above does not preclude the Processor from processing personal data for its own purposes as an independent controller in accordance with the terms of the Master Agreement and this Agreement.
Personal data shall be processed for the duration of the cooperation of the Contracting Parties based on the Master Agreement and in accordance with the period determined pursuant to Article 7 of this Agreement
Participants in discussions on the Controller’s Online Platform and persons whose personal data is provided in comments and posts on the Online Platform.
Name of the participant’s profile on the Online Platform (may contain first and last name), content of the post and comment on the Online Platform, date and time of publication of the post and comment on the Online Platform, ID of the participant in the discussion on the relevant Online Platform
The Contracting Parties do not anticipate the processing of special categories of personal data. However, due to the subject matter of the Services provided, the Contracting Parties cannot exclude that personal data falling into a special category shall not be part of the text within the discussion, comments or posts on the Online Platform.
Appendix No. 2
Other Processors Agreed
For the purposes of cooperation between the Contracting Parties under this Agreement:
☐ The Processor does not use any Other Processors at the time of concluding the Agreement;
X The Controller agrees that the Processor is entitled to use Other Processors to process personal data under this Agreement. A list of Other Processors is available to the Controller after sending an inquiry to the e-mail address support@elv.ai.
Appendix No. 3
Overview of Technical and Organizational Measures
The Processor undertakes that when processing personal data on behalf of the Controller based on this Agreement, it shall comply with at least the following security, technical and organizational measures for ensuring compliance with the requirements of 3.2.5 of the Agreement:
We fight against hoaxes and misinformation to protect brands on their social networks.