ObligoBoard — Terms & Conditions
Last updated: 2026-07-25
Governing version. These Terms are concluded and published in English, which is the sole authentic and binding version and governs the relationship between the parties. Any translation the Provider may later make available is provided for convenience only; in case of any discrepancy, the English version prevails. This choice of contractual language does not affect the governing law (Italian) or the exclusive jurisdiction (Tribunale di Firenze) under §15.
1. Identità del Fornitore / Provider identity
The Service is provided by Grewing Mirko, operating as a sole trader (Ditta Individuale), P.IVA 07214970480 (VAT no. IT07214970480), registered office at Via delle Casine 19, 50122 Firenze, Italy, email legal@obligoboard.com, PEC mirko.grewing@pec.net.
References to "we", "us", "Provider" mean this entity.
2. Definizioni / Definitions
"Service" = the ObligoBoard SaaS application and related sites; "Customer" = the business/professional entity that subscribes; "User" = an individual authorised by the Customer; "Customer Data" = personal and other data the Customer processes through the Service; "Fees" = the subscription charges; "DPA" = the separate Data Processing Agreement published at /dpa and referenced at §7.
3. Eligibility — B2B only (vessatoria — see §17)
3.1 The Service is offered exclusively to businesses and professionals acting in the exercise of their trade, business, craft or profession. It is not directed at consumers (consumatori, Art. 3 Codice del Consumo) and consumer-protection provisions (incl. the 14-day right of withdrawal) are not intended to apply.
3.2 By subscribing, the Customer warrants that it is acting in a professional/business capacity and provides a valid VAT identification number (Partita IVA / EU VAT / UK VRN). The Provider validates EU VAT numbers through the EU VIES service where that service is available. Where VIES is temporarily unavailable at the time of subscription, the Provider may activate the subscription provisionally and re-verify the number once the service is restored. UK VAT registration numbers (VRNs), which are not covered by VIES, are recorded and handled in accordance with applicable UK rules. Activation does not constitute confirmation by the Provider that the number supplied is valid; the Customer remains responsible for its accuracy under §5.6.
3.3 If a person not acting in a professional capacity nonetheless subscribes, the Provider may suspend or terminate the account.
4. Service description & subscription
4.1 ObligoBoard provides compliance-management tooling (obligations, policy/cookie generators, scanner, etc.) "as a service". Features may evolve.
4.2 Subscriptions are per the plan selected at checkout.
4.3 The Provider grants the Customer a non-exclusive, non-transferable right to use the Service for its internal business during the term.
5. Pricing, VAT & invoicing (§5.6 is vessatoria — see §17)
5.1 Fees are as displayed at checkout, exclusive of VAT unless stated.
5.2 Italian customers: Italian VAT applies; the Provider issues a fattura elettronica via SdI.
5.3 EU B2B customers. Where the Customer supplies an EU VAT identification number, the supply is treated under the reverse-charge mechanism (inversione contabile, art. 7-ter D.P.R. 633/1972 / Dir. 2006/112/EC) — the invoice is issued without Italian VAT and the Customer self-accounts for VAT in its Member State. This treatment is applied on the basis of the VAT identifier the Customer supplies (including where that identifier has not been, or could not be, validated through VIES) and is subject to the Customer's warranty and indemnity in §5.6.
5.4 UK customers: treated as outside EU VAT scope per applicable rules.
5.5 Payment is processed by Stripe; the Provider's own invoice (not Stripe's) is the fiscal document.
5.6 Customer VAT warranty, re-invoicing and indemnity.
(a) Warranty. The Customer warrants that (i) it is registered for VAT / acting in a business capacity, and (ii) each VAT identification number it supplies is valid, current and its own. The Customer will promptly notify the Provider of any change affecting its VAT status or number.
(b) Reliance. The Provider applies reverse-charge or out-of-scope treatment in reliance on that warranty and on the identifier supplied, including where the identifier has not been (or could not be) validated through VIES.
(c) Re-invoicing. If an identifier proves invalid, or if the reverse-charge / out-of-scope treatment is subsequently disallowed or corrected by a competent tax authority, the Provider may re-issue its invoice charging the applicable VAT, and the Customer will pay that VAT on demand.
(d) Indemnity. The Customer indemnifies and holds the Provider harmless against any VAT, interest, penalties and reasonable costs assessed on or incurred by the Provider as a result of (i) an invalid identifier supplied by the Customer, or (ii) reverse-charge / out-of-scope treatment applied on the basis of the Customer's warranty being disallowed. This indemnity does not extend to amounts arising from the Provider's own dolo or colpa grave (Art. 1229 c.c.) — including a failure to apply the correct treatment to a valid number the Customer correctly notified.
6. [Reserved]
This section number is intentionally left reserved and carries no provisions.
7. Data protection — Data Processing Agreement (Art. 28 GDPR)
7.1 Where the Provider processes personal data on behalf of the Customer, it acts as Processor and the Customer as Controller; the separate Data Processing Agreement (published at /dpa, including its Annexes I–IV) governs that processing and forms part of these Terms by reference.
7.2 The DPA addresses: documented processing instructions; confidentiality of personnel; Art. 32 security measures; sub-processor authorisation + flow-down + an up-to-date sub-processor list; EU SCCs for any non-EEA transfer; assistance with data-subject rights and Art. 32-36 obligations; personal-data-breach notification to the Customer without undue delay; deletion/return at term end; audit rights.
7.3 The Provider is Controller for its own account, billing and marketing data, governed by the Privacy Policy.
8. Limitation of liability (vessatoria — see §17)
8.1 General cap. To the maximum extent permitted by law, the Provider's aggregate liability arising out of or in connection with the Service is capped at the total Fees paid by the Customer in the 12 months preceding the event giving rise to liability.
8.2 Data-breach super-cap. For liability arising from a personal-data breach attributable to the Provider, the cap is raised to two (2) times the Fees paid in those 12 months.
8.3 Excluded losses. The Provider is not liable for indirect or consequential damages, loss of profit, or loss of data, save as expressly committed in the DPA / any written SLA. The Customer remains responsible for maintaining its own backups of Customer Data.
8.4 Carve-outs (uncapped). Nothing in §8 limits liability for (a) dolo or colpa grave (Art. 1229 c.c.), (b) death or personal injury, (c) the Provider's IP-infringement indemnity, or (d) statutory liability to data subjects under GDPR Art. 82, which is expressly preserved and runs independently of any contractual cap.
9. Intellectual property
The Provider retains all IP in the Service; the Customer retains all rights in Customer Data and grants only the licence necessary to provide the Service.
10. Confidentiality
Each party keeps the other's confidential information confidential and uses it only to perform these Terms.
11. Acceptable use & suspension (suspension is vessatoria — see §17)
11.1 The Customer must not misuse the Service (no unlawful content, security circumvention, resale without authorisation, etc.).
11.2 The Provider may suspend the Service for material breach, non-payment, or security risk, with notice where practicable.
12. Service availability
The Service is provided "as is" / "as available"; no specific uptime SLA is guaranteed unless agreed in writing. Planned maintenance will be notified where practicable.
13. Term, cancellation & renewal (auto-renewal is vessatoria — see §17)
13.1 The subscription runs for the selected billing period and auto-renews for successive periods.
13.2 The Customer may cancel at any time; cancellation stops the next auto-renewal, and the subscription stays active until the end of the current billing period (no mid-term refund of prepaid Fees).
13.3 For fixed multi-month or annual terms, a party that does not wish to renew must give at least 30 days' notice before the renewal date; this notice requirement does not apply to a Customer's cancellation of a monthly plan under §13.2, which is always effective at the end of the current month.
13.4 The Provider may terminate for material uncured breach.
14. Amendments (vessatoria if unilateral — see §17)
The Provider may update these Terms; material changes are notified and require re-acceptance (incl. the §17 specific approval) before continued use; the version in force is identified by its "last updated" date.
15. Governing law & jurisdiction (exclusive forum is vessatoria — see §17)
These Terms are governed by Italian law. Any dispute is subject to the exclusive jurisdiction of the Tribunale di Firenze (Florence), Italy.
16. Miscellaneous
Assignment (Provider may assign on a business transfer; Customer may not without consent); severability; entire agreement; notices by email; no waiver.
17. Approvazione specifica delle clausole vessatorie (Artt. 1341 e 1342 c.c.)
Pursuant to Art. 1341 §2 and Art. 1342 §2 of the Italian Civil Code, the Customer specifically approves in writing the following clauses:
- §3 (B2B-only / eligibility & professional-capacity warranty)
- §5.6 (Customer VAT warranty, re-invoicing right & tax indemnity)
- §8 (Limitation of liability — 12-month general cap + 2× data-breach super-cap)
- §11.2 (Suspension of the Service)
- §13.1 (Automatic renewal)
- §14 (Provider amendment right)
- §15 (Exclusive jurisdiction — Tribunale di Firenze)