Terms version: 25 May 2026

These Terms set out the rules for the provision of electronic services by the Operator via the online platform available at https://app.tlsafe.eu, consisting in the automated verification of carriers and intermediaries in the road transport of goods, in order to support Clients in demonstrating due diligence in the selection of subcontractors, in accordance with the requirements of OCP/OCPD insurance agreements and generally applicable law.

§ 1. Preliminary matters. Definitions.

1.1. For the purposes of the Terms, the Operator assigns the following meanings to the terms below, written with a capital letter:

1.2. The Terms do not apply to consumers or to persons referred to in Article 3855 of the Civil Code.

§ 2. Conclusion of the agreement and account registration

2.1. The Platform is intended exclusively for Clients who are entrepreneurs conducting business activity and who have concluded an Agreement with the Operator in accordance with the Terms.

2.2. An Agreement between the Operator and the Client may be concluded in two ways:

2.2.1. via the Platform, by electronic means – in which case the agreement is concluded upon the joint fulfilment of the following conditions:

(a)completion by the Client of the registration form available on the Platform,

(b)acceptance of the Terms and the Privacy Policy by ticking the appropriate checkboxes,

(c)selection of a Plan,

(d)confirmation of registration by clicking the activation link sent to the Client's e-mail address, and

(e)signing the agreement with the Operator via an external platform (a qualified electronic signature or an electronic signature compliant with the eIDAS Regulation);

2.2.2. by the Operator and the Client signing a separate agreement – in which case the agreement may specify detailed terms for the provision of the Services by the Operator.

2.3. When completing the registration form, the Client is required to provide at least: the company or business name, KRS number (if applicable), NIP, address, the first and last name of the person authorised to represent the Client, a business e-mail address and a contact telephone number. If the indicated person is not listed in the relevant registers, the Operator may require that person to demonstrate appropriate authorisation to conclude the agreement on behalf of the Client.

2.4. The Operator may make the activation of the Account, the conclusion of the agreement or the provision of the Services conditional on a positive verification of the Client in public registers (including KRS, CEIDG, the so-called "VAT white list"). In the event of a negative verification result, the Operator may refuse to conclude the agreement without the need to provide reasons.

2.5. Registration of an Account and use of the Platform are not permitted for consumers or natural persons acting in their own name, outside the business or professional activity of an entrepreneur.

2.6. Providing false, incomplete, out-of-date or misleading data during registration constitutes a gross breach of the agreement and entitles the Operator to terminate the agreement with immediate effect.

2.7. If it is revealed that the Client or End User has provided false data, does not meet the conditions set out in the Terms, or belongs to a category of entities excluded from registration or use of the Platform, the Operator may suspend access to the Platform or refuse to continue providing the Services.

2.8. The Operator may provide the Client with a free trial period (a demonstration account). The demonstration account is limited as to its duration, the number of Verifications and the scope of functionality, and is subject to separate terms of use.

§ 3. Rules for the provision of Services

Services

3.1. The Operator provides the Services by electronic means in accordance with the Terms and the Privacy Policy. The Services are provided in the SaaS model ("Software as a Service").

3.2. Within the Services, the Operator enables the Client in particular to:

3.2.1. use the SaaS application, both by the Client and by End Users, within the number of licences to which the Client is entitled under the Agreement,

3.2.2. automatically verify carriers in the Public Registers, within the available Verifications,

3.2.3. analyse OCP/OCPD insurance documents and transport licences using artificial intelligence tools,

3.2.4. generate Reports,

3.2.5. monitor changes in the representative bodies and ownership structure of the verified entities,

3.2.6. store the Verification history in the Client Panel.

3.3. The Client and End User may use the Operator's Services only after having first read and accepted the content of the Terms and the Privacy Policy. The Operator makes the Terms available free of charge at https://tlsafe.eu/terms in a manner enabling them to be obtained, reproduced and recorded by means of the ICT system used by the Client or End User.

3.4. The Client receives access to an Account which enables the creation and deletion of End User accounts within the available number of End Users, the assignment of roles (freight forwarder, manager, accountant), the setting of IP-based access restrictions, and the generation of API keys.

3.5. The Platform prevents simultaneous login to the same account from two different devices. An attempt to log in again results in the logout of the previous session.

3.6. All decisions to establish or continue cooperation with a verified carrier are made by the Client solely at its own risk and responsibility. The Operator is not liable for the economic consequences of such decisions or for third-party claims (including those of the Client's contractors and insurers) directed against the Client.

3.7. The Operator may process data concerning the Client or End User which are not necessary for the provision of electronic services, for the purposes of advertising, market research and research into the behaviour and preferences of the Client or End User, with the results of such research being used to improve the quality of the services provided by the Operator.

Reports

3.8. The Operator does not guarantee that data from the Public Registers always corresponds to the actual state of affairs – the Operator guarantees only the conformity of the data presented in the Report with the data made available by a given Public Register at the moment of Verification. The Operator is not liable for the unavailability, failures, modifications, errors or changes in the scope of data on the part of the entities maintaining the Public Registers.

3.9. The Report constitutes an opinion of an informational nature only, prepared at the Client's request. The Report does not constitute:

3.9.1. economic information within the meaning of the Act of 9 April 2010 on the disclosure of economic information and the exchange of economic data,

3.9.2. a rating within the meaning of Regulation (EC) No 1060/2009 on credit rating agencies,

3.9.3. a recommendation or legal, financial or insurance advice,

3.9.4. a binding assessment of the credibility, solvency or legality of the verified entity.

Technical requirements of the Platform

3.10. The proper use of the Platform requires:

3.10.1. a permanent internet connection with a bandwidth allowing the free transfer of files;

3.10.2. a current version of the Google Chrome, Mozilla Firefox, Microsoft Edge or Safari web browser with JavaScript and cookies enabled;

3.10.3. an active e-mail address;

3.10.4. software enabling the reading of files in PDF, CSV, XLSX, JPG, PNG formats.

Technical breaks

3.11. The Operator reserves the right to temporarily suspend the provision of the Services as a result of technical breaks in the operation of the Platform necessary to carry out maintenance, updates or the introduction of new functionalities. The Operator informs of planned breaks at least 24 hours in advance via the Platform or by e-mail.

Prohibited actions

3.12. The Client may use the Services solely for its own business needs, understood as the provision by the Client of services to its direct contractors. It is not permitted to:

3.12.1. resell the Services, make them available to third parties, or offer them in any "white-label" or "reseller" model without the Operator's written consent;

3.12.2. use the Services through entities related to the Client without a separate written agreement with the Operator;

3.12.3. use the Services for automated, mass downloading of data ("scraping"), inconsistent with the purpose of the Platform and the limits set out in the Plan.

3.13. Any use of the Platform by third parties using the access credentials of the Client or End User, without creating an individual account for them in accordance with the Terms, is prohibited.

3.14. The Client and End Users are prohibited from providing content of an unlawful nature, including in particular introducing into the Platform: forged documents, documents containing watermarks or other markings indicating their non-originality, personal data obtained illegally, and content infringing the rights of third parties, personal rights or good morals.

3.15. Regardless of any other specific provisions of the agreement or any other arrangements between the Operator and the Client, both the Client and End Users are prohibited from:

3.15.1. decompiling, disassembling, translating, modifying, adapting or otherwise interfering with the source or object code of the Platform;

3.15.2. translating, adapting, rearranging or making any other changes to any part of the Platform;

3.15.3. circumventing the technical safeguards of the Platform, including authentication mechanisms, access controls, limit restrictions or mechanisms protecting the Operator's business secrets;

3.15.4. using information obtained as a result of observing, studying or testing the functioning of the Platform to create, develop, produce, offer or market a computer program, service or database of a substantially similar form of expression, functionality or structure;

3.15.5. disclosing information obtained as a result of any of the activities referred to in points 3.15.1–3.15.4 of the Terms to third parties, and in particular to entities conducting activity competitive to the Operator;

3.15.6. automated, mass downloading of the content of the Platform or Reports ("data scraping", "harvesting", indexing with automated tools);

3.15.7. distributing, including lending or leasing, any part of the Platform or copies thereof.

3.16. In the event of a breach by the Client or End User of the obligations set out in points 3.15.1–3.15.5 above, the Operator is entitled to impose on the Client a contractual penalty of EUR 500,000 for each breach, and in the event of a breach of point 3.15.6 above, the Operator is entitled to impose on the Client a contractual penalty of EUR 50,000 for each breach.

§ 4. Obligations of the Client and End Users

4.1. Persons using the Platform are responsible for maintaining the confidentiality of passwords and for all actions taken from the Client Account or End User accounts. Sharing access credentials with third parties is not permitted.

4.2. Persons using the Platform undertake to:

4.2.1. use the Platform in accordance with its purpose, the Terms and generally applicable law;

4.2.2. submit to the Platform only authentic, non-forged Client Documents. The Client acknowledges that documents marked with watermarks such as "SPECIMEN", "COPY", "WZÓR", and documents bearing signs of manipulation, will be flagged with a warning in the Report and may be excluded from further analysis;

4.2.3. comply with the quantitative limits of the Plan and refrain from actions aimed at circumventing the limits (including setting up multiple Accounts, fragmenting orders, generating queries automatically);

4.2.4. promptly report to the Operator any irregularities in the operation of the Platform, suspected security incidents and unauthorised access to the Account.

4.3. The Client ensures that End Users have read the Terms and comply with its provisions; the Client is liable for the actions and omissions of Users as for its own actions.

§ 5. Plans and remuneration

5.1. The Services are provided for a fee on the basis of a monthly subscription in one of the Plans specified in Appendix No. 1 to the Terms. The remuneration is expressed in euro (EUR) and constitutes a net amount, to which VAT is added at the rate provided for in the applicable regulations.

5.2. During the Billing Period, the Client may upgrade to a higher Plan. The difference in remuneration is charged proportionally to the remaining part of the month. A downgrade to a lower Plan may take place no earlier than from the next full Billing Period.

5.3. If the Verification limit in a given Billing Period is exhausted, the Client may purchase an additional pool of Verifications according to the current price list available in the Client Panel. Unused Verifications do not carry over to the next Billing Period.

5.4. The remuneration is charged in advance, before the start of each Billing Period, using the payment method selected by the Client. The Operator issues a VAT invoice and delivers it to the Client via the National e-Invoicing System (KSeF) in accordance with the provisions of the Act of 11 March 2004 on the tax on goods and services. In the case of Clients established outside the territory of the Republic of Poland, the invoice is delivered electronically to the Client's e-mail address provided in the Client Panel. In the case of invoices sent outside the KSeF system, the Client consents to the delivery of invoices by electronic means.

5.5. In the event of a KSeF failure, pursuant to Article 106nf of the VAT Act, the Operator may provide the Client with an appropriate visualisation of the invoice in electronic form to the e-mail address indicated in the Client Panel. The Operator will not be obliged to re-deliver the visualisation of the same VAT invoice after its effective submission to KSeF, while undertaking to observe the statutory deadlines determining the maximum time for submitting the invoice to the system. The Client consents to the delivery of invoices by electronic means.

5.6. In the event of a delay in payment, the Operator may suspend the Client's access to the Platform until the arrears are settled. Suspension does not release the Client from the obligation to pay remuneration for the period of suspension.

§ 6. Intellectual property

6.1. All intellectual property rights to the Platform, including the software, source code, object code, databases, database structure, interfaces, technical documentation, graphic materials, trademarks, logos, training materials, graphical interfaces, instructions, functionality descriptions, promotional materials and all other materials made available to the Client or End Users in connection with the use of the Platform, belong exclusively to the Operator or to entities with which the Operator has concluded relevant agreements.

6.2. The Client or End User is not entitled to use the aforementioned materials in any manner exceeding the scope expressly permitted in the Agreement or the Terms. Granting the Client or End User access to the Platform or to any materials related to the Platform shall not be construed as the granting of any licence.

§ 7. Confidentiality

7.1. By "Confidential Information" the parties understand all information (including data), technical, technological and organisational information of the Operator, or other information of economic value, which as a whole or in a particular compilation and set of its elements is not commonly known to the Client or End User or is not readily accessible to such persons, regardless of whether it was provided or made available before the conclusion of the Agreement, during its term or after its termination, which:

7.1.1. concern the Operator, its activities, organisation, products or services (in particular the software provided by the Operator), and

7.1.2. are not commonly known or publicly available, or – even if certain elements are public – their compilation, selection or manner of preparation is non-public,

— and which have been disclosed, made available or become accessible to the Client or End User in connection with the negotiation, conclusion or performance of the Agreement – in any form, including in particular: orally, in writing, electronically, visually, through access to systems, environments, accounts, repositories, documentation, interfaces, tools, demonstrations, tests, training or correspondence.

7.2. The Operator's Confidential Information includes in particular:

7.2.1. Technological information, such as:

(a)source and object code, scripts, configurations, libraries, components, database structures, schemas, data models;

(b)the system architecture, design solutions, algorithms, processing methods, business rules and operating logic;

(c)technical and user documentation, specifications, function descriptions, instructions, training materials;

(d)interfaces and integrations, including descriptions of connections with other systems, message formats, keys, tokens, authorisation mechanisms, test environments (where made available);

(e)test results, development plans, prototypes, test versions, information on errors, incidents, workarounds, patches and fixes;

(f)security solutions and measures (including procedures, settings, access control, archiving, monitoring and incident-response mechanisms).

7.2.2. commercial and organisational information, such as:

(a)prices, price lists, discounts, sales terms, margins, settlement models, offer terms, pricing strategies;

(b)product development plans, implementation schedules, priorities and directions of development, roadmaps;

(c)sales, marketing and development strategies, market analyses, competition analyses, expansion plans;

(d)information about clients, partners, suppliers, subcontractors, cooperation terms and agreements;

(e)financial information, budgets, forecasts, reports, results, indicators.

7.2.3. Know-how, such as:

(a)practical knowledge, methods and solutions developed by the Operator concerning forwarding processes supported by software (e.g. planning, order handling, settlements, tracking, reporting, automation), where not publicly known;

(b)procedures, standards, patterns of operation, implementation and organisational materials.

7.2.4. information which the Operator is obliged to protect vis-à-vis third parties (e.g. partners or suppliers) and which has been made available to the Client or End User in connection with the Agreement.

7.2.5. all copies, extracts, summaries, analyses, comparisons, notes, studies, modifications and other materials prepared by the Operator or another person authorised by it.

7.3. Confidential Information excludes information in respect of which the Client or End User demonstrates that it:

7.3.1. was publicly known at the time of disclosure or became publicly known later without a breach of the Agreement; or

7.3.2. was lawfully in the possession of the Client or End User before disclosure by the Operator without an obligation of confidentiality; or

7.3.3. was lawfully obtained from a third party without an obligation of confidentiality towards the Operator; or

7.3.4. was independently developed by the Client or End User without the use of the Operator's Confidential Information.

7.4. The Client undertakes not to disclose to its contractors, entities competitive to the Operator or third parties the content of the Reports or the Verification methodology, subject to the use of Reports vis-à-vis the insurer and state authorities to the extent required by law. By competitive entities the Operator understands entities conducting activity competitive to the Operator, in particular in the field of automated verification of carriers or intermediaries in the road transport of goods and the provision of software for the transport, forwarding and logistics (TSL) industry, within the territory of the European Economic Area.

7.5. The Client and End User undertake to keep the Confidential Information specified in § 7 secret and not to disclose it to third parties without the Operator's prior written consent (except where required by law), and to use it solely for the purpose of performing the Agreement. The obligation to maintain the confidentiality of the Confidential Information is undertaken for a period of 10 years from the termination of the Agreement. The Client is liable for the actions and omissions of End Users as for its own actions and omissions.

7.6. The disclosure of information on the basis of mandatory law, a final court decision or a binding request of an authorised authority does not breach confidentiality.

7.7. In the event of a breach by the Client or End User of the obligation to maintain the confidentiality of the Confidential Information specified in § 7, the Client shall pay the Operator a contractual penalty of EUR 25,000 for each breach. This provision applies without prejudice to other provisions of the Terms.

§ 8. Personal data

8.1. The Client declares that it has a legal basis to entrust the Operator with the processing of the personal data contained in the Client Documents and that the transfer of such data to the Operator takes place in accordance with the GDPR and other applicable personal data protection regulations. The Client is responsible for fulfilling the information obligations towards the data subjects.

8.2. The conclusion of the Agreement constitutes at the same time the conclusion of a personal data processing agreement, the provisions of which are set out in Appendix No. 2 to the Terms.

8.3. The Client undertakes to fulfil, towards the persons acting on its side, in particular its employees, associates and other persons authorised to contact or perform the Agreement, the Operator's information clause concerning the processing of personal data, in accordance with the obligations arising from personal data protection regulations.

§ 9. Liability

9.1. The Operator declares that the maximum unavailability of the Services in a given calendar month will not exceed 72 hours, excluding situations for which the Operator is not responsible. In the event of exceeding the maximum level of unavailability of the Services in a given Billing Period, the Client is entitled to a discount for that Billing Period of 10% of the Operator's remuneration for that Billing Period.

9.2. The Operator is not liable for:

9.2.1. decisions made by the Client or End User on the basis of the Reports, including decisions to establish, continue or refuse cooperation with a verified carrier;

9.2.2. the truthfulness of data contained in the Public Registers, if the data presented in the Report was consistent with the data made available by a given Register at the moment of Verification;

9.2.3. the unavailability of external servers, external APIs, third-party software, the Public Registers, their modifications or changes in the manner of making data available;

9.2.4. the actions of third parties beyond the Operator's supervision, including cyber attacks, if the Operator exercised due diligence in securing the Platform.

9.3. The Operator is not liable for the faulty operation of the Services if it results from:

9.3.1. the actions or omissions of the Client or End Users;

9.3.2. the Client's or End Users' delay in providing information necessary to remedy the faulty operation;

9.3.3. failures, errors or unavailability of systems, infrastructure, software or services of third parties for which the Operator is not responsible;

9.3.4. defects or limitations of components, tools or software originating from third parties;

9.3.5. force majeure;

9.3.6. periods of planned maintenance work, maintenance windows, updates, deployments or maintenance activities provided for in the Agreement or previously communicated to the Client or End User;

9.3.7. reports resulting from errors or irregularities caused by changes, configuration or interference with the Services by the Client or End User.

9.4. The Operator's total aggregate liability towards the Client on all grounds arising from the Agreement in a given calendar year is limited to the equivalent of the remuneration actually paid by the Client for the Services in the 6 months preceding the event causing the damage, but no more than EUR 25,000. Liability covers only actual damage. The limitations of the Operator's liability do not apply to damage caused intentionally.

9.5. Notwithstanding any contractual penalties charged, in the event of non-performance or improper performance of the provisions of the Terms, the Operator has the right to pursue compensation from the Client on general terms up to the full amount of the damage incurred.

§ 10. Duration of the agreement

10.1. The Agreement is concluded for an indefinite period.

10.2. Each Party has the right to terminate the Agreement with a three-month notice period, effective at the end of the Billing Period. Termination requires written form or electronic form signed with a qualified electronic signature, under pain of nullity. Termination submitted by means of a qualified electronic signature should be sent to the e-mail address support@tlsafe.eu.

10.3. The Operator may terminate the Agreement with immediate effect in the event of:

10.3.1. a gross breach by the Client or End User of the provisions of the Terms;

10.3.2. provision of false Client or End User data upon registration or intentional misleading of the Operator;

10.3.3. provision to the Platform of unlawful content (including forged documents, personal data obtained illegally, content infringing the rights of third parties);

10.3.4. circumvention by the Client or End User of the Platform's safeguards;

10.3.5. the Client's delay in paying an invoice exceeding 30 days from the due date;

10.3.6. breach of point 3.15 of the Terms;

10.3.7. breach of the provisions concerning the processing of personal data;

10.3.8. breach of the confidentiality obligation.

§ 11. Complaints

11.1. The Client may submit complaints concerning the functioning of the Platform or the Services provided to the e-mail address: complaint@tlsafe.eu, indicating the word "REKLAMACJA" in the subject of the message.

11.2. A complaint should contain:

11.2.1. data identifying the Client (company or business name, NIP, login),

11.2.2. a description of the service, the type of Plan,

11.2.3. the reason for the complaint,

11.2.4. the requested manner of resolution.

11.3. The Operator examines the complaint within 14 business days of its receipt, and in complex matters – within 30 days, of which the Client will be separately notified. In the absence of information necessary to examine the complaint, the Operator asks the Client to supplement the request – the deadline runs from the moment of supplementation.

§ 12. Amendments to the Terms

12.1. The Operator informs Clients of any amendment to the Terms by e-mail and via an information banner in the administrator's Client Panel, at least 30 days in advance. In the absence of acceptance of the amendments, the Client has the right to terminate the Agreement with effect as of the date the amendments enter into force. Continued use of the Platform after the amendments enter into force means acceptance of the amended Terms.

12.2. The Operator reserves the right to change the price list. The Operator will inform the Client of a change to the price list at least 30 days before the amendments enter into force, by e-mail and via an information banner in the administrator's Client Panel. In the absence of acceptance of the amendments, the Client has the right to terminate the Agreement with effect as of the date the amendments enter into force. Continued use of the Platform after the amendments enter into force means acceptance of the amended price list.

12.3. In the event of a conflict, the provisions of the Agreement individually agreed with the Client take precedence over the Terms.

§ 13. Final provisions

13.1. The Operator is entitled to assign the rights and obligations arising from the Agreement to a related entity or a legal successor. The Client is not entitled to assign, transfer or encumber its rights, obligations and receivables arising from the Agreement without obtaining the Operator's prior written consent.

13.2. If it is found that any of the provisions of the Terms is null and void or ineffective by operation of law, this circumstance shall not affect the validity, effectiveness or enforceability of the remaining provisions, unless it is obvious from the circumstances that without the null or ineffective provisions the Agreement would not have been concluded. If any of the provisions of the Terms proves to be null or ineffective by operation of law, the Parties to the Terms shall, through negotiation, find another solution to replace the null or ineffective provision, while taking into account the economic purpose that the Parties intended to achieve by signing the Agreement.

13.3. In the event of any dispute concerning the terms or interpretation of the Terms, the Parties shall first take steps to resolve the dispute amicably and in good faith. All disputes or claims related to the Terms shall be resolved by the courts having jurisdiction over the Operator's registered office.

13.4. The Terms are governed by Polish law.

13.5. The Terms are effective from the date of their publication.

13.6. List of appendices to the Terms:

13.6.1. Appendix No. 1 – Plans, limits and remuneration

13.6.2. Appendix No. 2 – Personal data processing agreement

13.6.3. Appendix No. 3 – Content of the Operator's information clause

Appendix No. 1 to the Terms

Plans, limits and remuneration

Notes:

1. The remuneration for the selected Plan is charged in advance, before the start of each Billing Period.

2. Verifications not used in a given Billing Period do not carry over to the next Billing Period.

3. After exceeding the Verification limit provided for in the Plan, the Client may purchase an additional pool of Verifications according to the Operator's current price list.

4. The Scale Plan includes API access with a query limit specified in the API technical documentation.

5. All prices are stated in euro (EUR) and are net prices; VAT is added in accordance with applicable regulations. The Operator reserves the right to present individual pricing to Clients whose needs exceed the limits of the Scale Plan or who require Platform customisations.

Appendix No. 2 to the Terms

Personal data processing agreement

§ 1. Subject of the agreement

1.1. This "Processing Agreement" constitutes an appendix to the Terms and is concluded for the purpose of performing the Agreement. The processing of personal data in connection with the performance of the Agreement is subject to the provisions of the GDPR.

1.2. On the basis of the Processing Agreement, the Client (the personal data controller) entrusts the Operator (the processor) with the processing of the personal data specified below.

1.3. The Operator processes the entrusted personal data solely for the purpose of and to the extent necessary for the performance of the Agreement.

1.4. The Parties declare that they have the infrastructure resources, experience, knowledge and qualified personnel enabling the proper performance of the Processing Agreement, in accordance with applicable law.

§ 2. Obligations of the Operator

2.1. The Operator undertakes that it:

2.1.1. applies appropriate technical and organisational measures to secure personal data, on the terms set out in Article 32 of the GDPR;

2.1.2. processes personal data solely on the documented instruction of the Client, unless such an obligation is imposed on the Operator by applicable national or EU law; in such a case, before processing begins, the Operator informs the Client of that legal obligation, unless the law prohibits the provision of such information on important grounds of public interest;

2.1.3. ensures that persons authorised to process personal data commit themselves to confidentiality, unless they are persons bound by confidentiality under statute;

2.1.4. maintains a record of all categories of processing activities carried out on behalf of the Client;

2.1.5. in the event of a personal data breach, notifies the Client of such breach without undue delay, but no later than within the deadlines provided for by the regulations;

2.1.6. upon termination of the Processing Agreement, depending on the Client's decision, will delete or return the personal data and delete copies thereof, unless mandatory law provides otherwise.

2.2. The Operator is entitled to use further processors (sub-processors) indicated in the list below. The Operator ensures that the sub-processors provide guarantees of implementing appropriate technical and organisational measures compliant with the GDPR. The Operator informs the Client of any intended changes concerning the addition or replacement of sub-processors, allowing it to raise a justified objection.

2.3. The Parties make available to each other the information necessary to perform their obligations related to the processing of personal data.

2.4. The Operator will not transfer personal data to third countries (i.e. outside the territory of the European Economic Area), unless such transfer takes place in accordance with the relevant provisions of the GDPR.

2.5. Personal data may be transferred to entities providing services to the Operator and to other entities, such as providers of IT, advisory, postal or courier services. Personal data will be processed within the European Economic Area, unless the transfer takes place in accordance with the relevant provisions of the GDPR.

§ 3. Duration

3.1. The Processing Agreement remains in force for the time necessary to perform the Agreement. A breach by the Client of the provisions of the Processing Agreement, of the GDPR or of other applicable personal data protection regulations in relation to a given Agreement constitutes grounds for its termination with immediate effect.

Scope of the personal data entrusted to the Operator

List of further processors (sub-processors)

Appendix No. 3 to the Terms

Content of the Operator's information clause

The controller of the personal data of the Client's employees or associates and of its representatives and other persons whose personal data are made available to the other Party in connection with the performance of the Agreement is Mateusz Obuchowski Investments, ul. Włodarzewska 57E/15, 02-384 Warszawa, entered in the Central Register and Information on Economic Activity (CEIDG), NIP: 7010305265 (hereinafter: the "Controller").

The personal data processed may include in particular: first name, surname, job title, e-mail address, telephone number. This data is processed for the purpose of performing the agreement until the limitation of any claims arising from it. The legal basis for processing is the Controller's legitimate interest consisting in performing the agreement in accordance with its content (Article 6(1)(f) GDPR).

This data was obtained in connection with the conclusion and performance of the Agreement. This information clause is an appendix to the agreement between the Controller and the Client.

The Controller can be contacted via:

• e-mail: contact@tlsafe.eu
• post: to the controller's registered office address indicated in the recitals of the Agreement.

The data subject has the right to:

• access their data,
• request its rectification, erasure or restriction of processing,
• object to processing,
• lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing is unlawful.

Personal data may be transferred to entities providing services to the Controller, such as providers of IT, advisory, postal or courier services – solely to the extent necessary to achieve the processing purpose. Personal data will be processed solely within the European Economic Area, unless the transfer takes place in accordance with the relevant provisions of the GDPR.

Read the Controller's Privacy Policy: https://tlsafe.eu/en/polityka-prywatnosci/.