Legal

General Terms and Conditions

for the use of Slayper by businesses: apps for Mac and Windows, Outlook add-in, download, upload and verification pages, and integrations. The Data Processing Agreement and the privacy policy for the service also apply. This is a translation; the German version is legally binding.

Section 1 Scope and eligible customers

(1) These General Terms and Conditions (GTC) apply to all contracts for the use of the Slayper service between the following provider (hereinafter “Provider”) and its customers (hereinafter “Customer”):

(2) Slayper is intended exclusively for entrepreneurs within the meaning of Section 14 of the German Civil Code (BGB) who use the service in the course of their commercial or independent professional activity. Consumers within the meaning of Section 13 BGB are excluded from use. This applies to all plans, including the free Free plan. By registering and with every booking, the Customer confirms that it is acting as an entrepreneur. The Provider may request proof, for example the VAT identification number, an extract from a commercial register or a business registration.

(3) The Customer's own general terms and conditions do not apply, even if the Provider does not expressly object to them. Individual agreements, in particular an offer for the Business plan, take precedence over these GTC (Section 305b BGB); they must be made in text form.

(4) A statutory right of withdrawal is available only to consumers. As Slayper is intended exclusively for entrepreneurs, there is no right of withdrawal for contracts for the use of Slayper.

Section 2 Components of the contract

(1) The following form part of the contract, in this order of precedence:

• individual agreements in text form, for example an offer for the Business plan,
• the Data Processing Agreement pursuant to Art. 28 GDPR (hereinafter “DPA”),
• these GTC,
• the service description and the price list on slayper.com in the version applicable at the time the contract is concluded or the respective booking is made.

(2) In matters of data protection, the DPA takes precedence over all other components of the contract.

(3) The privacy policy for the service provides information on the processing of personal data. It is not a component of the contract but is referred to in these GTC.

Section 3 Subject matter of the contract and service description

(1) Slayper is a service for the end-to-end encrypted transfer of files between businesses and their business partners. Within the booked plan, the Provider makes available:

• apps for Mac and Windows for sending files and requesting files via upload links, with inbox, history, address book and Slayper records and, depending on the plan, the “Digital signing” function and team management,
• an add-in for Microsoft Outlook,
• web pages for downloading and uploading files, for verifying transfer records and for accepting invitations,
• integrations into the Customer's business software (event notifications, embedded window), insofar as the plan provides for them or they are separately agreed,
• the operation of the servers and object storage required for this in data centers in Germany.

(2) The exact scope of functions per plan and the system requirements are set out in the service description and the price list. The Customer is entitled to specific functions only insofar as they are described there or expressly agreed.

(3) Slayper is a transfer service, not a storage or archiving service. A transfer (also called “a Slayper” in the service) is kept available only for the period chosen by the sender: 48 hours, 7, 14 or 21 days, and no more than 7 days in the Free plan. After that, once a download limit has been reached or if the sender deletes it, it is deleted automatically and permanently. Incomplete transfers are cleaned up. The periods in detail are set out in the DPA (Annex 1, No. 4).

(4) The size per transfer is limited according to the plan (Section 6). This limit is the same in all apps and on all routes for sending, including the Outlook add-in and the embedded window in business software. Downloading in the browser on mobile devices may be subject to lower technical limits; these are stated in the service description.

(5) For the term of the contract, the Customer receives a simple, non-transferable and non-sublicensable right to install and use the apps on its users' devices for its own business purposes. Sections 69d and 69e of the German Copyright Act (UrhG) remain unaffected. Open-source components included are subject to their respective licenses.

(6) The Provider continues to develop the service and provides new versions of the apps. The apps do not check for updates on their own; the Customer is responsible for installing updates provided within a reasonable time. After reasonable notice, the Provider may exclude older versions from use if this is necessary for reasons of security or compatibility.

(7) Third-party services that the Customer uses together with Slayper are not the subject of this contract. These are in particular Microsoft Outlook, the Customer's own email mailbox, its business software, timestamping services and OpenTimestamps. The Provider is not responsible for their availability or changes.

Section 4 Conclusion of contract, registration and account

(1) The presentation of the service on the website and in the apps does not constitute a binding offer by the Provider.

(2) The Customer registers in the app with name, business email address and password. The Provider sends a confirmation code to the address provided. By entering the code and accepting these GTC, a contract for the Free plan is concluded. Anyone who accepts an invitation to a team becomes a user of that team (Section 5); the contracting party is then the company for which the team exists.

(3) The Customer books paid plans and additional volume in the app or on the website via the payment service provider used by the Provider. The contract for the booked plan is concluded upon the Provider's confirmation, at the latest upon activation. For the Business plan, the Provider prepares an offer; the contract is concluded upon its acceptance in text form.

(4) The Customer provides complete and accurate information when registering and booking and keeps it up to date. Anyone who registers or books on behalf of a company warrants that they are authorized to do so.

(5) Each account is assigned to one specific natural person. Sharing an account among several persons is not permitted.

(6) The Customer keeps passwords secret, protects the devices on which the apps are set up against unauthorized access and informs the Provider without undue delay if it suspects misuse of its account. Actions taken via its account are attributed to the Customer unless it is not responsible for the misuse.

(7) There is no entitlement to registration. The Provider may refuse a registration in particular if a disposable address is used, there are indications of misuse or a Free plan account already exists for the same person or company.

Section 5 Teams, roles and members

(1) In the Team and Business plans, the Customer is the company for which the team exists. The team's administrators act on behalf of the Customer. Their declarations and settings, in particular bookings, invitations, roles, policies and terminations, are deemed declarations of the Customer.

(2) A team has three roles:

• Administrator: manages the team, invites and removes members, sets roles and policies, sees the sending volume and books additional volume. Each team always has at least one administrator.
• Member: sends, requests and receives files within the team's policies.
• Reviewer: views and exports the Slayper records of all members without their encrypted parts, without managing the team.

(3) The Provider sends invitations on behalf of the administrator from notify@slayper.com. They are valid for 14 days. The invited person creates their account in the app. Members and reviewers do not themselves become contracting parties of the Provider; their use is attributed to the Customer. The Customer ensures that its users comply with these GTC.

(4) Policies set by an administrator (for example the requirement to use one's own mailbox, the maximum availability period, the requirement to confirm by code) are binding on members and are enforced by the server.

(5) If a member is removed, the Provider immediately blocks their sign-in, sessions and devices. The Slayper records from the time of membership remain with the team (Section 13).

(6) The Customer informs its users that administrators and reviewers have access to the members' records and administrators to their sending volume. In doing so, it observes the requirements of employee data protection and, where applicable, the co-determination rights of an employee representative body.

Section 6 Plans, sending volume and additional volume

(1) Slayper is offered in the Free, Pro, Team and Business plans. At the time these GTC were published, the following limits apply; the current price list is authoritative:

• Free: one user, sending volume 2 GB per month, 2 GB per transfer, availability 48 hours or 7 days, retention of records one year, without “Digital signing” and without additional volume.
• Pro: one user, sending volume 100 GB per month, 10 GB per transfer, availability up to 21 days.
• Team: from three users, sending volume 100 GB per user and month, shared, at least 300 GB, 10 GB per transfer, availability up to 21 days, team management.
• Business: from 25 users, sending volume 200 GB per user and month, shared, at least 5 TB, 50 GB per transfer, availability up to 21 days, team management; further conditions according to the offer.

(2) Volumes are stated in decimal units (1 GB = 1,000,000,000 bytes, 1 TB = 1,000 GB). For each calendar month (German time), the size of the uploaded transfers in encrypted form is counted, including the files that third parties upload via the Customer's upload links. Downloads by recipients are not counted. Unused volume expires at the end of the month.

(3) At 80% and at 100% of the sending volume, the administrators or the account holder receive a notice by email. Sending can continue up to 110% (tolerance). Beyond that, new transfers and new upload links are paused until additional volume is booked or the next month begins. Receiving, downloads of existing transfers, uploads by third parties and the records remain unaffected.

(4) The Customer books additional volume only expressly; there is no automatic additional billing. Packages of 250 GB, 1 TB and 5 TB per month are offered, which can be cancelled monthly at the end of the month, as well as a one-time package of 1 TB for the current month only. Prices are set out in the price list. Additional volume applies to the entire team or account.

(5) A change to a higher plan takes effect upon booking; the price is charged pro rata. A change to a lower plan takes effect at the end of the current billing period. From the change onward, the limits of the new plan apply; Section 13(3) applies to the retention of records.

Section 7 Trial period for teams

(1) A team founded in the app can test the Team plan free of charge for 14 days. No payment details are required for this.

(2) The administrators receive an email reminder seven days and one day before the end of the trial period. The trial period does not automatically turn into a paid contract; a booking is required for that.

(3) If no booking is made by the end of the trial period, sending is paused. Receiving, downloads, uploads by third parties, the records, team management and the team address book remain usable. 30 days after the end of the trial period, the Provider deletes the team with all accounts of the team, transfers, records and the team address book, after warning the administrators seven days in advance. Until then, the records can be downloaded.

(4) The Provider may extend trial periods or agree on different terms in individual cases.

Section 8 Prices, payment and taxes

(1) The prices in the price list at the time of booking or of the offer apply. All prices are net prices plus statutory VAT. The Team and Business plans are charged per user and month, at least for the minimum number of users of the plan.

(2) The Customer chooses monthly or yearly payment. For yearly payment, the lower price in the price list applies. Fees are due in advance at the beginning of each billing period.

(3) If users are added during the current billing period, they are charged pro rata for the rest of the period. A reduction in the number of users takes effect from the next billing period.

(4) Payment is made via the payment service provider used by the Provider, currently by card or SEPA direct debit. The Customer authorizes the Provider to collect the fees due via the stored payment method. The period for pre-notification of a SEPA direct debit is shortened to one day. Refunds are made to the payment method originally used.

(5) VAT depends on the Customer's place of establishment. For customers established in another EU Member State who provide a valid VAT identification number, the tax liability may be transferred to the Customer (reverse charge). The Customer is responsible for the accuracy of its billing details. Invoices are transmitted electronically.

(6) If a collection fails for reasons for which the Customer is responsible, the Customer bears the resulting costs. If the Customer is in default, the Provider may pause sending after a reminder setting a period of 14 days (Section 18). Further statutory rights remain unaffected.

(7) The Customer may only set off claims that are undisputed or have been finally established by a court. It may only assert a right of retention on the basis of claims arising from this contract.

Section 9 Term, termination and end of contract

(1) The contract for the Free plan runs for an indefinite period. The Customer may terminate it at any time, the Provider with four weeks' notice.

(2) Paid plans run for the chosen billing period (one month or twelve months) and are each extended by the same period unless terminated. The Customer may terminate at any time with effect from the end of the current billing period. The Provider may terminate with one month's notice to the end of the billing period. For the Business plan, the term of the offer applies.

(3) The Customer may cancel monthly additional volume packages at the end of the respective calendar month.

(4) The right to extraordinary termination for good cause remains unaffected. Good cause for the Provider exists in particular in the event of serious violations of Section 16, or violations repeated despite a warning, or if the Customer is in default with an amount equal to two monthly fees.

(5) Terminations can be made in the app or in text form, for the Customer for example by email to info@slayper.com.

(6) If a paid plan of an individual account ends without the account being terminated, the account continues in the Free plan. If the contract for a team ends, paragraph 7 applies to the team and all its accounts.

(7) After the end of the contract, the Provider makes the Slayper records available to the Customer for download for 30 days. It then deletes all of the Customer's data: accounts, transfers, requests, address books and records. Entries created in the records of other customers regarding transfers with the Customer belong to their record and remain there in accordance with their periods. Any statutory retention obligations of the Customer, for example under Section 257 of the German Commercial Code (HGB) or Section 147 of the German Fiscal Code (AO), are the sole responsibility of the Customer from the time of deletion; the Customer makes its own copies in good time.

Section 10 Data protection and data processing on behalf

(1) The Provider is the controller for the data of customer accounts. Details are set out in the privacy policy for the service.

(2) The Provider processes everything that arises when files are sent, requested and received, including information about recipients and uploaders and the Slayper records, on behalf of the Customer. The Data Processing Agreement applies to this. It forms part of the contract and is concluded upon acceptance of these GTC at registration or booking; no separate acceptance is required.

(3) The Customer is responsible for the lawfulness of the processing, in particular for informing recipients and uploaders pursuant to Art. 13 and 14 GDPR. For this purpose, it may refer to the privacy policy for the service.

(4) The sub-processors and the procedure for changing them are set out in the DPA. Payment data is processed by the payment service provider as described in the privacy policy.

(5) The Customer's data remains the Customer's data. The Provider receives only the rights to it that it needs to provide the service.

Section 11 Encryption and obligations of the Customer

(1) Files, file names, messages, references and address books are end-to-end encrypted on the users' devices. The key of a link is contained only in the link itself. The Provider has no access to the keys and cannot read this content.

(2) As a consequence, the Provider can neither inspect content nor scan it for malware. It cannot restore lost keys, links or content. If all devices of a user or their keys are lost, the encrypted content is no longer accessible to that user.

(3) Anyone who knows a complete link including the key and meets the protection measures chosen by the sender can download the files. The Customer chooses recipients, availability period, download limit and protection (PIN, confirmation of the email address by code) itself and on its own responsibility. For confidential content, the Provider recommends confirmation by code or a PIN transmitted by a different route than the link.

(4) If the user has linked their own email mailbox, the app sends link emails to recipients via that mailbox; the link then does not pass through the Provider's server. Without a linked mailbox, the server sends the link email via the system address notify@slayper.com (system sending). For this, the app transmits the link including the key and, if applicable, the message to the server for the moment of sending; the Provider does not store or log them. If the Customer's requirements do not permit this, for example due to professional secrecy obligations, the Customer links its own mailbox; in a team, an administrator can make this mandatory by policy. The Provider may reasonably limit the number of system emails per day and the number of recipients per email.

(5) As Slayper is not a storage or archiving service (Section 3(3)), the Customer keeps its own copies of sent and received files. Deletion after the availability period has expired is in accordance with the contract.

(6) The Customer is further obliged

• to keep operating systems and apps on its devices up to date and not to use compromised devices,
• to remove lost or no longer used devices from the account without undue delay,
• to check recipient addresses before sending,
• to check received files with up-to-date security software before opening them,
• to comply with professional, contractual and statutory confidentiality obligations on its own responsibility,
• to report security incidents that may affect the service to the Provider without undue delay.

Section 12 Recipients and uploaders without an account

(1) Persons who download files via a link or upload files via an upload link without using their own account do not thereby become contracting parties of the Provider. Receiving and uploading are free of charge for them.

(2) The Provider processes their data on behalf of the Customer. The processing is described in the privacy policy for the service.

(3) The Customer ensures that it is permitted to send files to the recipients it chooses and to request files from the uploaders. Files that third parties upload via its upload links count towards its sending volume and are subject to the limits of its plan.

(4) For recipients with their own Slayper account, their own contract with the Provider applies.

Section 13 Slayper records

(1) For every transfer, the Provider creates on behalf of the Customer a record of sending, delivery, download, confirmation, receipt and deletion (Slayper record). Each event is signed, chained to the previous one and anchored every hour via a fingerprint with OpenTimestamps. Via the verification page, anyone who knows the fingerprint of an event can check its time, type and signature.

(2) Records prove the download and the complete, unaltered decryption of files, not that a specific person has taken note of them. For downloads via a link without confirmation by code, it is not proven who used the link. Records are not qualified trust services within the meaning of the eIDAS Regulation and do not give rise to any statutory presumption; they are subject to the free assessment of evidence. The Provider does not warrant that a court or authority will assess a record in a particular way, for example as evidence of the receipt of a declaration.

(3) Records are automatically deleted ten years after the respective event, or one year after it in the Free plan. Records from before a switch to the Free plan and records of team members are always retained for ten years. After a switch from the Free plan to another plan, existing records are retained for ten years; records already deleted cannot be restored. During the term of the contract, records can be neither modified nor deleted early by the Customer or by the Provider; this is an instruction of the Customer within the meaning of the DPA.

(4) Retention under paragraph 3 applies only during the term of the contract. After the end of the contract, Section 9(7) applies. The Customer can export its records as a file at any time and is itself responsible for their further retention.

(5) In teams, administrators and reviewers see the members' records without their encrypted parts. Records of removed members remain with the team.

Section 14 Digital signing

(1) From the Pro plan onward, the apps include, where available on the respective platform, the “Digital signing” function for PDF and Word documents. Signing takes place on the user's device; content of the document is not transmitted to the Provider.

(2) The function inserts the signature visibly, attaches a signature audit trail on request and seals the file with the user's key in accordance with the PAdES standard. The time is confirmed by a timestamp pursuant to RFC 3161 from a timestamping service in the EU, currently Certum, with the timestamping service of the DFN-Verein as fallback. On request, the checksum of the document is additionally anchored via OpenTimestamps. Only checksums are transmitted in the process.

(3) The signature created is an electronic signature within the meaning of Art. 3(10) of the eIDAS Regulation. It is not a qualified electronic signature and replaces neither the statutory written form (Section 126 BGB) nor the electronic form (Section 126a BGB). The Provider does not warrant that it meets the requirements for an advanced electronic signature in an individual case. The Customer decides on its own responsibility whether the function is suitable for a particular document; the Provider does not provide legal advice.

(4) The timestamping services and OpenTimestamps are third-party services. If they cannot be reached, a signature may temporarily not be created or only without a timestamp.

(5) Signed documents are stored on the user's device. The Provider does not keep them.

Section 15 Availability, maintenance and support

(1) For the paid plans, the Provider aims for an availability of the service's servers of 99% as a monthly average, measured at the data center's transfer point to the internet by the Provider's monitoring.

(2) The following do not count as downtime:

• maintenance announced at least 24 hours in advance,
• urgent security updates,
• disruptions outside the Provider's sphere of influence, in particular of the internet, the Customer's devices and networks and third-party services under Section 3(7),
• disruptions caused by the Customer,
• force majeure.

(3) If the availability in a month is below 99%, the Customer of a paid plan receives, upon request submitted in text form within 30 days after the end of the month, a credit on the pro rata monthly fee for the plan: 10% for an availability of 98% to below 99%, 25% for 95% to below 98% and 50% below 95%. Credits are offset against future invoices and are credited against any reduction of fees. Further claims under Section 20 remain unaffected. There is no availability commitment for the Free plan and the trial period.

(4) The Provider may carry out maintenance, install security updates and make technical adjustments. Where possible, it schedules planned maintenance at times of low usage.

(5) The Provider continuously backs up the service's database, including accounts and records. Files in transfers are end-to-end encrypted, stored only for their availability period and are not subject to a backup by the Provider.

(6) The Customer receives support by email to info@slayper.com on working days in Brandenburg. The scope depends on the plan: help pages in the Free plan, email in the Pro and Team plans, and according to the offer in the Business plan. Fixed response times apply only if agreed.

Section 16 Acceptable use

(1) The Customer uses Slayper only for lawful business purposes and in accordance with these GTC.

(2) It is prohibited to send, request or keep available via Slayper any content that

• is unlawful or whose possession or distribution is a criminal offense,
• depicts sexual abuse of children or adolescents or is harmful to minors,
• contains terrorist or extremist propaganda or incites violence or hatred,
• infringes copyrights, trademarks or other intellectual property rights or trade secrets of third parties without authorization,
• contains malware, for example viruses, trojans, ransomware or phishing tools,
• contains personal data in violation of data protection law,
• is insulting, defamatory, threatening or fraudulent.

(3) The following are also prohibited in particular:

• sending unsolicited advertising (spam) or other messages in violation of Section 7 of the German Act against Unfair Competition (UWG),
• misuse of system sending, in particular for emails to persons without a business reason, for phishing or to deceive about the sender,
• use as a public download service, for distributing links to an indefinite group of persons, for example on social networks, forums or websites, or as a delivery service for websites and software,
• circumventing plan limits, in particular through multiple Free plan accounts, sharing an account, automated creation of accounts or repeated trial periods,
• unauthorized access to systems, accounts or data, circumventing security mechanisms, and attacks or loads that may impair the service,
• automated access to interfaces outside the documented integrations,
• decompiling or reverse engineering the software, unless permitted under Sections 69d and 69e UrhG,
• reselling the service or making it available to third parties without the Provider's consent.

The Provider welcomes reports of security vulnerabilities at info@slayper.com.

(4) The Customer is responsible for the content that it and its users transfer via Slayper and ensures that its users comply with these rules.

(5) Due to end-to-end encryption, the Provider cannot view content. It does not generally monitor content and does not use automated content moderation. It takes action upon specific notices (Section 17).

Section 17 Notices, measures and authorities

(1) Anyone can report illegal content to the Provider by email to info@slayper.com. The notice should contain the link or identifier of the transfer, the reasons and a means of contact. The Provider processes notices in a timely, diligent and objective manner. As it cannot view content itself, it decides on the basis of the notice, the information available to it and any content made accessible to it by the person submitting the notice.

(2) In the event of violations of Section 16, the Provider may block or delete transfers and upload links, restrict sending, and suspend accounts temporarily or permanently (Section 18). It chooses the measure according to the severity and repetition of the violation. It informs the affected Customer of the measure and its reasons, unless this is prohibited by law; the Customer may raise objections in text form.

(3) The Provider provides information to authorities only insofar as it is legally obliged to do so, and only about data available to it, such as account data, information on transfers and records. It cannot decrypt encrypted content; it does not store links, keys and messages from system sending. If the Provider becomes aware of information giving rise to a suspicion of a criminal offense involving a threat to the life or safety of persons, it informs the competent authorities. It notifies the Customer of requests for information insofar as this is permitted.

Section 18 Suspension

(1) The Provider may suspend the Customer's access in whole or in part, in particular pause sending, block individual transfers or suspend accounts, if

• the Customer materially violates Section 16 or there are specific indications of this,
• there is a risk to the security of the service or of third parties, for example in the case of a compromised account,
• the Customer is in default with fees due despite a reminder setting a period of 14 days,
• a court or official order requires it.

(2) The Provider chooses the mildest suitable means and takes the Customer's legitimate interests into account. It announces the suspension in advance in text form, unless there is imminent danger. It lifts the suspension as soon as the reason for it no longer applies.

(3) Where possible, receiving and access to the records remain possible during a suspension. The obligation to pay the fees continues during a justified suspension.

(4) The right to extraordinary termination remains unaffected.

Section 19 Defects

(1) During the term of the contract, the Provider maintains the service in a condition suitable for use in accordance with the contract. The statutory provisions of German tenancy law apply to defects in paid plans, with the following deviations.

(2) The Customer reports defects without undue delay in text form with a comprehensible description.

(3) Strict liability for defects already present when the contract was concluded (Section 536a(1), first alternative BGB) is excluded. Otherwise, Section 20 applies.

(4) Termination due to failure to grant use (Section 543(2) sentence 1 No. 1 BGB) is only permitted once the Provider has had sufficient opportunity to remedy the defect and has failed to do so.

(5) In the Free plan and during the trial period, the service is provided free of charge. There, the Provider is liable for defects only if it fraudulently concealed them.

Section 20 Liability

(1) The Provider is liable without limitation for intent and gross negligence, for injury to life, body or health, where it has given a guarantee, in the event of fraudulent concealment of a defect and under the German Product Liability Act.

(2) In the event of slight negligence, the Provider is liable only for breach of essential contractual obligations, i.e. obligations whose fulfillment makes the proper performance of the contract possible in the first place and on whose fulfillment the Customer may regularly rely. Liability is then limited to the foreseeable damage typical for the contract, at most to the fees the Customer paid in the twelve months before the damaging event, but in any case to at least 500 euros per incident.

(3) In the Free plan and during the trial period, the Provider is not liable for slight negligence, except in the cases of paragraph 1.

(4) The deletion of transfers after their availability period has expired is in accordance with the contract and does not constitute damage. The Provider is liable for loss of data only in the amount of the effort that would have been necessary for restoration had the Customer kept its own copies properly (Section 11(5)). The Provider cannot restore lost keys (Section 11(2)).

(5) The Provider is not liable for content transferred by customers or third parties, for the conduct of recipients or for third-party services under Section 3(7), unless the damage is based on a breach of duty by the Provider.

(6) The limitations of liability also apply in favor of the Provider's employees, representatives and vicarious agents.

(7) Claims under paragraph 2 become time-barred one year after the statutory limitation period begins.

(8) Liability under Art. 82 GDPR remains unaffected.

Section 21 Changes to services, prices and GTC

(1) The Provider may further develop the service. It makes changes that restrict essential functions of a booked paid plan only for a valid reason, for example due to a change in the law, for reasons of security or due to changes in third-party services, and announces them at least six weeks in advance in text form. The Customer may then terminate the contract extraordinarily with effect from the time of the change. The Provider may change the limits and functions of the Free plan with four weeks' notice.

(2) The Provider may increase the prices of ongoing contracts with at least six weeks' notice in text form, and for yearly payment no earlier than the beginning of the next billing year. The Customer may then terminate the contract with effect from the date on which the increase takes effect; in that case, the increase does not take effect for the Customer. The Provider points out this right in the notice.

(3) The Provider may amend these GTC with effect for the future if there is a valid reason for doing so, for example a change in the law or case law, new functions or security requirements, and the balance between performance and consideration is not shifted to the Customer's disadvantage. The Provider communicates the changes in text form at least six weeks before they take effect. If the Customer does not object in text form within six weeks of receipt of the notice, the changes are deemed accepted; the Provider specifically points this out in the notice. If the Customer objects, the contract continues under the previous terms; both parties may then terminate it with ordinary notice.

(4) Changes to the DPA and to sub-processors are governed by the DPA.

Section 22 Final provisions

(1) The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods (CISG).

(2) If the Customer is a merchant, a legal entity under public law or a special fund under public law, the exclusive place of jurisdiction for all disputes arising from this contract is the Provider's place of business in Havelsee, Germany. The Provider may also sue the Customer at the Customer's place of business.

(3) The Provider may transfer the contract with all rights and obligations to a company that continues the Slayper service. It notifies the Customer of this in text form at least four weeks in advance; the Customer may terminate the contract with effect from the date of the transfer. The Customer may transfer rights under this contract only with the Provider's consent.

(4) Declarations under this contract may be made in text form unless otherwise provided. Notices from the Provider are sent to the email address of the account or of the administrators.

(5) The German version of these GTC is authoritative. Translations are for information purposes only.

(6) Should individual provisions be invalid or unenforceable, the remainder of the contract remains valid. The invalid provision is replaced by the statutory provisions (Section 306(2) BGB).

Last updated: October 19, 2026