ObligoBoard — Terms & Conditions
Last updated: 2026-06-25
Governing version. These Terms are concluded and published in English, which is the sole authentic and binding version and governs the relationship between the parties. Any translation the Provider may later make available is provided for convenience only; in case of any discrepancy, the English version prevails. This choice of contractual language does not affect the governing law (Italian) or the exclusive jurisdiction (Tribunale di Firenze) under §15.
1. Identità del Fornitore / Provider identity
The Service is provided by Grewing Mirko, operating as a sole trader (Ditta Individuale), P.IVA 07214970480 (VAT no. IT07214970480), registered office at Via delle Casine 19, 50122 Firenze, Italy, email legal@obligoboard.com, PEC mirko.grewing@pec.net.
References to "we", "us", "Provider" mean this entity.
2. Definizioni / Definitions
"Service" = the ObligoBoard SaaS application and related sites; "Customer" = the business/professional entity that subscribes; "User" = an individual authorised by the Customer; "Customer Data" = personal and other data the Customer processes through the Service; "Fees" = the subscription charges; "DPA" = the separate Data Processing Agreement published at /dpa and referenced at §7.
3. Eligibility — B2B only (vessatoria — see §17)
3.1 The Service is offered exclusively to businesses and professionals acting in the exercise of their trade, business, craft or profession. It is not directed at consumers (consumatori, Art. 3 Codice del Consumo) and consumer-protection provisions (incl. the 14-day right of withdrawal) are not intended to apply.
3.2 By subscribing, the Customer warrants that it is acting in a professional/business capacity and provides a valid VAT identification number (Partita IVA / EU VAT / UK VRN), which the Provider validates (VIES) as a condition of activation. A subscription will not activate without a validated VAT number.
3.3 If a person not acting in a professional capacity nonetheless subscribes, the Provider may suspend or terminate the account.
4. Service description & subscription
4.1 ObligoBoard provides compliance-management tooling (obligations, policy/cookie generators, scanner, etc.) "as a service". Features may evolve.
4.2 Subscriptions are per the plan selected at checkout.
4.3 The Provider grants the Customer a non-exclusive, non-transferable right to use the Service for its internal business during the term.
5. Pricing, VAT & invoicing
5.1 Fees are as displayed at checkout, exclusive of VAT unless stated.
5.2 Italian customers: Italian VAT applies; the Provider issues a fattura elettronica via SdI.
5.3 EU B2B customers with a valid VIES VAT number: supply under the reverse-charge mechanism (inversione contabile, art. 7‑ter / Dir. 2006/112/EC) — invoice issued without Italian VAT; the customer self-accounts.
5.4 UK customers: treated as outside EU VAT scope per applicable rules.
5.5 Payment is processed by Stripe; the Provider's own invoice (not Stripe's) is the fiscal document.
6. [Reserved]
This section number is intentionally left reserved and carries no provisions.
7. Data protection — Data Processing Agreement (Art. 28 GDPR)
7.1 Where the Provider processes personal data on behalf of the Customer, it acts as Processor and the Customer as Controller; the separate Data Processing Agreement (published at /dpa, including its Annexes I–IV) governs that processing and forms part of these Terms by reference.
7.2 The DPA addresses: documented processing instructions; confidentiality of personnel; Art. 32 security measures; sub-processor authorisation + flow-down + an up-to-date sub-processor list; EU SCCs for any non-EEA transfer; assistance with data-subject rights and Art. 32-36 obligations; personal-data-breach notification to the Customer without undue delay; deletion/return at term end; audit rights.
7.3 The Provider is Controller for its own account, billing and marketing data, governed by the Privacy Policy.
8. Limitation of liability (vessatoria — see §17)
8.1 General cap. To the maximum extent permitted by law, the Provider's aggregate liability arising out of or in connection with the Service is capped at the total Fees paid by the Customer in the 12 months preceding the event giving rise to liability.
8.2 Data-breach super-cap. For liability arising from a personal-data breach attributable to the Provider, the cap is raised to two (2) times the Fees paid in those 12 months.
8.3 Excluded losses. The Provider is not liable for indirect or consequential damages, loss of profit, or loss of data, save as expressly committed in the DPA / any written SLA. The Customer remains responsible for maintaining its own backups of Customer Data.
8.4 Carve-outs (uncapped). Nothing in §8 limits liability for (a) dolo or colpa grave (Art. 1229 c.c.), (b) death or personal injury, (c) the Provider's IP-infringement indemnity, or (d) statutory liability to data subjects under GDPR Art. 82, which is expressly preserved and runs independently of any contractual cap.
9. Intellectual property
The Provider retains all IP in the Service; the Customer retains all rights in Customer Data and grants only the licence necessary to provide the Service.
10. Confidentiality
Each party keeps the other's confidential information confidential and uses it only to perform these Terms.
11. Acceptable use & suspension (suspension is vessatoria — see §17)
11.1 The Customer must not misuse the Service (no unlawful content, security circumvention, resale without authorisation, etc.).
11.2 The Provider may suspend the Service for material breach, non-payment, or security risk, with notice where practicable.
12. Service availability
The Service is provided "as is" / "as available"; no specific uptime SLA is guaranteed unless agreed in writing. Planned maintenance will be notified where practicable.
13. Term, cancellation & renewal (auto-renewal is vessatoria — see §17)
13.1 The subscription runs for the selected billing period and auto-renews for successive periods.
13.2 The Customer may cancel at any time; cancellation stops the next auto-renewal, and the subscription stays active until the end of the current billing period (no mid-term refund of prepaid Fees).
13.3 For fixed multi-month or annual terms, a party that does not wish to renew must give at least 30 days' notice before the renewal date; this notice requirement does not apply to a Customer's cancellation of a monthly plan under §13.2, which is always effective at the end of the current month.
13.4 The Provider may terminate for material uncured breach.
14. Amendments (vessatoria if unilateral — see §17)
The Provider may update these Terms; material changes are notified and require re-acceptance (incl. the §17 specific approval) before continued use; the version in force is identified by its "last updated" date.
15. Governing law & jurisdiction (exclusive forum is vessatoria — see §17)
These Terms are governed by Italian law. Any dispute is subject to the exclusive jurisdiction of the Tribunale di Firenze (Florence), Italy.
16. Miscellaneous
Assignment (Provider may assign on a business transfer; Customer may not without consent); severability; entire agreement; notices by email; no waiver.
17. Approvazione specifica delle clausole vessatorie (Artt. 1341 e 1342 c.c.)
Pursuant to Art. 1341 §2 and Art. 1342 §2 of the Italian Civil Code, the Customer specifically approves in writing the following clauses:
- §3 (B2B-only / eligibility & professional-capacity warranty)
- §8 (Limitation of liability — 12-month general cap + 2× data-breach super-cap)
- §11.2 (Suspension of the Service)
- §13.1 (Automatic renewal)
- §14 (Provider amendment right)
- §15 (Exclusive jurisdiction — Tribunale di Firenze)