General Terms and Conditions

for the use of the platform “Zentrale Datenschutzstelle” (zentrale-datenschutzstelle.de) of Ayzix IT Solution (hereinafter “the provider”).

§ 1 Scope, provider

1. These terms and conditions apply to all contracts between the provider and users (hereinafter “customer”) regarding the use of the platform and the booking of service packages.
2. The provider is a private-sector company. It is not a public authority, not a public body and not a data protection supervisory authority, and does not act as such.
3. Deviating terms of the customer do not apply unless the provider expressly agrees to their validity in text form.

§ 2 Subject matter and scope of services

1. The subject matter of the service is: (a) Research on personal data of the customer or their organisation that is publicly findable or held by data brokers; (b) technical check of e-mail addresses and verified domains against known data leaks; (c) Case handling: preparation, dispatch and follow-up of access, origin, objection and erasure requests to third parties on behalf of the customer; (d) Monitoring: recurring re-checks of findings and monitored items; (e) Documentation: traceable storage of findings, cases, deadlines, communication and evidence.
2. No erasure guarantee. Whether and when third parties remove personal data is beyond the provider's control. The provider owes the careful performance and documentation of the activities mentioned (service), not the success of an erasure, rectification or termination of unwanted advertising.
3. No legal advice. The provider does not provide legal services within the meaning of the German Legal Services Act and does not assume the function of a data protection officer. Templates for requests are standardised samples; their legal review in the individual case is the responsibility of the customer or their legal adviser.
4. The provider is entitled to have services performed by carefully selected subcontractors (e.g. hosting, payment processing, leak database).

§ 3 Registration, account, login details

1. Use requires a customer account with a confirmed e-mail address. The customer warrants that their details are truthful and complete, and keeps them up to date.
2. Business accounts may only be created by persons authorised to represent the organisation. Owners of business accounts are obliged to enable two-factor authentication.
3. Login details must be kept secret. The customer is liable for actions carried out under their account insofar as they are responsible for them, and informs the provider immediately of any suspected misuse.
4. In the customer area, the customer may only store monitored items (persons, e-mail addresses, domains, numbers) for which they are the data subject themselves or whose rights holder they represent. Domain checks require proof of domain ownership.

§ 4 Packages, prices, conclusion of contract

1. The package Initial check is free of charge, without a minimum term and can be used without payment details. It comprises a limited status overview and the quantities stated in the service description.
2. The paid packages Private Protection (29.90 € monthly or 299.00 € annually, 149.00 € one-off setup), Business Basic (299.00 € monthly or 2,990.00 € annually, 499.00 € one-off setup) and Business Pro (499.00 € monthly or 4,990.00 € annually, 999.00 € one-off setup) comprise the services and volume limits stated on the pricing page. The provider applies the small business regulation under § 19 UStG (German VAT Act); VAT is not charged and not shown on invoices. All amounts stated are final prices.
3. The contract for a paid package is concluded when the customer completes the order process at Stripe Checkout and the provider confirms the payment (activation in the customer area). The setup fee is due with the first invoice; the recurring fee is due in advance for the chosen billing period (month or year).
4. Payment is processed via Stripe. Invoices are provided electronically. The customer can manage payment details, package changes and cancellation in the Stripe Customer Portal.
5. Upgrading to a higher package is possible at any time; the difference is charged pro rata. Downgrading to a lower package takes effect from the next billing month.

§ 5 Term and cancellation

1. Paid packages have a term of one month and are extended by a further month each time unless cancelled by the end of the current billing month. Cancellation is possible at any time in the Customer Portal or in text form.
2. After the contract ends, the customer retains access at the level of the Initial check; cases already documented remain viewable, ongoing re-checks and case handling end.
3. The right to extraordinary termination for good cause remains unaffected. Good cause exists for the provider in particular if the customer stores monitored items of third parties without authorisation, misuses the platform or is in default of payment despite a reminder.
4. The setup fee is not refunded upon cancellation insofar as the setup service has been performed; statutory rights of withdrawal remain unaffected (see Cancellation policy).

§ 6 Customer's duties to cooperate

1. The customer provides the information and evidence required for the respective case completely and correctly and answers queries within a reasonable period.
2. The customer only uploads files to which they hold the necessary rights, and no malware. Files are checked automatically before release; files that fail the check are deleted.
3. The customer informs the provider if other parties contact them directly, so that the case can be fully documented.
4. The customer ensures that team members to whom they grant access comply with these terms and conditions.

§ 7 Data access request: dispatch by the customer or representation with power of attorney

1. For the data access request under Art. 15 GDPR, the customer can choose between two routes. Both require a paid package; they are activated once payment has been received.
2. Dispatch by the customer. The provider prepares the letters as the customer's declaration and transmits them as a messenger on the customer's instruction. Replies go directly to the customer. If a body requires proof of identity, the customer encloses it themselves.
3. Representation with power of attorney. If the customer grants a power of attorney, the provider asserts the rights of access, objection, rectification and erasure on behalf of the customer, receives the correspondence and follows up if no reply is received. The power of attorney is granted electronically; time, IP address and browser identifier are recorded as evidence. The power of attorney is limited to the bodies named in the deed and the respective order.
4. The Full service requires the customer to provide a copy of their official ID document; companies additionally provide proof of authority to represent. The provider transmits these proofs exclusively to the bodies selected by the customer and exclusively for identity verification under Art. 12 (6) GDPR; each copy bears a printed purpose statement with the recipient. Details on the retention period are set out in the privacy policy.
5. Scope of representation. The power of attorney does not authorise representation before courts and authorities beyond the complaint under Art. 77 GDPR, nor the assertion of payment claims, nor legal advice; § 2 (3) remains unaffected. No sub-authorisation is granted.
6. Withdrawal. The customer may revoke the power of attorney at any time without giving reasons (§ 168 BGB, German Civil Code), in the customer area or informally in text form. Letters not yet dispatched will then no longer be sent; letters already dispatched remain effective. The provider deletes the submitted proofs of identity without delay.
7. The customer warrants that the information they provide relates to themselves or to the company they represent. The provider is not obliged to handle requests for third parties.

§ 8 Late payment, suspension

1. If a debit fails, the provider informs the customer. If payment is still not made despite a reminder, the provider may restrict access to the scope of the Initial check until the outstanding amount has been settled.
2. In the event of late payment, statutory default interest applies; the right to claim further damages is reserved.

§ 9 Availability, changes to the service

1. The provider aims for platform availability of 99 % on an annual average. Maintenance windows, force majeure and disruptions outside the provider's control are not taken into account.
2. The provider may further develop the platform and change functions as long as the core contractual service is preserved and the change is reasonable for the customer. Significant changes are announced at least four weeks in advance.
3. External data sources (e.g. leak databases) are operated by third parties; the provider gives no guarantee of their completeness or uninterrupted availability.

§ 10 Liability

1. The provider is liable without limitation for intent and gross negligence as well as for damage resulting from injury to life, body or health and under the German Product Liability Act.
2. In the event of slightly negligent breach of essential contractual obligations (obligations whose fulfilment is essential for the proper performance of the contract and on whose observance the customer may regularly rely), liability is limited to the foreseeable damage typical for the contract. Otherwise, liability for slight negligence is excluded.
3. The provider is not liable for third parties answering requests, deleting data or ceasing unwanted advertising, nor for damage arising from the use of incomplete or incorrect information provided by the customer.
4. The customer is responsible for keeping their own backup of the original documents they upload; the provider performs daily backups of the platform.

§ 11 Data protection and confidentiality

1. The provider processes personal data in accordance with its Privacy policy. For business customers who submit personal data of third parties (e.g. employees, senders), the parties conclude a data processing agreement under Art. 28 GDPR on request.
2. The provider treats the customer's findings, leak results and documents confidentially and passes them on to the respective other parties only within the scope of the commissioned cases.
3. Data from closed cases is deleted automatically after the retention periods stated in the privacy policy have expired, unless statutory retention obligations prevent this.

§ 12 Changes to these terms and conditions

The provider may amend these terms and conditions with effect for the future where this is necessary for valid reasons (e.g. changes in the legal situation, the services or the technical framework) and does not unreasonably disadvantage the customer. Amendments are communicated to the customer by e-mail at least four weeks before they take effect. If the customer does not object within this period, the amended terms are deemed accepted; the notification will point out this consequence. Alternatively, the customer may cancel before the amendments take effect.

§ 13 Final provisions

1. The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods. For consumers, this applies only insofar as it does not deprive them of the protection of mandatory provisions of the state of their habitual residence.
2. If the customer is a merchant, a legal entity under public law or a special fund under public law, the place of jurisdiction is the provider's registered office.
3. Should individual provisions be invalid, the validity of the remaining provisions remains unaffected.
4. The European Commission provides a platform for online dispute resolution: ec.europa.eu/consumers/odr. The provider is neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.

Last updated: 09.09.2026