Send files

General terms and conditions

Effective from 13 October 2026

This is a translation. The Slovak version is legally binding.

Article 1 — Introductory Provisions

1.1 These general terms and conditions (hereinafter the “Terms”) govern the rights and obligations arising from the use of the file transfer service available at lawcloud.eu (hereinafter the “Service”).

1.2 The Service is operated by SYNERGIX s. r. o., with its registered office at Štúrova 23/11, 811 02 Bratislava, Company ID (IČO) 56 878 834, registered in the Commercial Register of the Bratislava III Municipal Court, Section Sro, Insert No. 188045/B (hereinafter the “Operator”). The Operator is not a VAT payer.

1.3 Contact. The Operator can be contacted by e-mail at info@lawcloud.eu. This address is also the single point of contact for users of the Service, the authorities of the Member States, the European Commission and the European Board for Digital Services under Articles 11 and 12 of Regulation (EU) 2022/2065 on a Single Market for Digital Services (Digital Services Act) (hereinafter the “DSA”). Communication is possible in Slovak, Czech and English.

1.4 Definitions. For the purposes of the Terms:

1.5 Language. The Service is available in Slovak, Czech, German and English. The contract is concluded in Slovak. The Slovak version of the Terms is binding; translations of the Terms into other languages are for information only and, in the event of any conflict, the Slovak version prevails.

Article 2 — Conclusion of the Contract

2.1 Free. The contract for the provision of the Service in the form of Free is concluded when the Sender, after verifying their e-mail address (Art. 3.2), submits files for upload. By doing so, the Sender confirms that they have read and agree to the Terms; the Terms are available before submission via a link in the form.

2.2 Account. The contract for the Account is concluded upon the first sign-in (Art. 5.1). The Terms apply to the Account to the extent applicable to Free, unless Pro is active.

2.3 Pro. The contract for Pro is concluded upon payment of the price under Art. 7. If the Operator provides Pro free of charge (e.g. as a trial), the contract is concluded upon activation of Pro in the Account, and Arts. 7.2 to 7.6 and Art. 8 do not apply.

2.4 Recipient. The relationship with the Recipient arises when the Link is opened. Arts. 3, 10, 11 and 13 apply to the Recipient mutatis mutandis. The Recipient does not need to be registered and does not pay for the Service.

2.5 Age and capacity. Only a person over 18 years of age who has legal capacity to the necessary extent may use the Service as a Sender. If the Sender acts on behalf of a legal entity or another entrepreneur, the Sender confirms that they are authorised to do so.

2.6 Pre-contractual information. Information about the Operator, a description of the Service, the price, the method of payment, the duration of the contract, the conditions for its termination and for withdrawal from it, liability for defects and the procedure for filing complaints are set out in the Terms and in the price list at lawcloud.eu/cennik.

2.7 The current version of the Terms is published on the Service’s website; the Operator will provide previous versions upon request. The Operator does not archive concluded contracts individually; the Sender may save or print the Terms.

Article 3 — Common Provisions on the Service

3.1 Nature of the Service. The Service enables the Sender to upload files and make them available to Recipients via a Link with limited validity. The Service is not a document storage or archive.

3.2 Verification of the Sender’s e-mail. Before uploading, the Sender must verify their e-mail address with a one-time code sent by the Service (the code is valid for 15 minutes). The browser remembers the verification for 30 days; signing in to the Account counts as verification of the Account address. Verification only confirms that the Sender had access to the given mailbox at the time of verification; it does not confirm the Sender’s identity. The Service shows Recipients only a verified address as the Sender’s address.

3.3 Link and Private Link. After uploading, the Sender receives a Link for sharing and a Private Link for managing the Transfer (status overview, records under Arts. 4.3 and 6.3 where applicable, downloading a receipt and deleting the Transfer). The Service displays the Private Link after uploading and sends it to the Sender by e-mail; otherwise, the Operator does not provide it again, except for Transfers in the Account history (Art. 5). Anyone who knows the Link can download the files; anyone who knows the Private Link can manage and also delete the Transfer. The Sender must protect the Private Link from third parties.

3.4 Password. The Sender may protect the Link with a password. The Operator does not store the password in readable form and can neither recover nor disclose it. The Service temporarily restricts repeated entry of an incorrect password.

3.5 E-mails to Recipients. The Sender may enter the e-mail addresses of Recipients (up to 10 per Transfer); the Service sends them the Link after the antivirus check. The e-mail contains the file names, their size, the Link validity, the Sender’s message and the Sender’s verified address. The Sender is responsible for the correctness of the addresses and for being authorised to send the files to the Recipients.

3.6 Antivirus check. Every uploaded file is automatically checked by an antivirus program. The Link starts working only after the check. If the program finds malicious code or cannot check the entire file (e.g. an encrypted archive or a file exceeding the technical limit of the check), the Operator blocks the entire Transfer and deletes its files (Art. 11). Only content identical to the checked content can be downloaded; the Service verifies this by means of a SHA-256 fingerprint. The antivirus check is not a guarantee that a file does not contain malicious code.

3.7 Security. Files are stored encrypted (AES-256), each Transfer with its own key, which the storage provider does not hold. The connection to the Service is encrypted (HTTPS). The Service is not end-to-end encrypted: the keys are managed by the Operator so that it can check the files with the antivirus program and make them available to Recipients. The Operator does not read or evaluate the content of files, except for the automatic antivirus check.

3.8 Prohibited file types. The Service does not accept certain file types (in particular .exe, .bat, .cmd, .sh, .msi, .scr).

3.9 Storage and deletion of files. Files are kept only for the Link validity period chosen by the Sender. The files are deleted no later than one hour after the validity expires or after the Sender deletes the Transfer; if the Transfer was not sent from an Account, all data about it are deleted as well. Files are not backed up and cannot be restored after deletion. The Sender must keep their own copies of the files. Database records may remain in database backups for a maximum of 14 more days.

3.10 Language of e-mails and receipts. The Service generates e-mails to Recipients and to the Sender in the language in which the Sender was using the Service when sending the Transfer, and PDF receipts in the language in which the Sender is using the Service when downloading them.

Article 4 — Free

4.1 Free is free of charge and does not require an Account.

4.2 Free limits.
a) one file up to 1 GB, a Transfer up to 5 GB in total and up to 100 files;
b) Link validity of 1 or 3 days, as chosen by the Sender;
c) from a single network, up to 10 Transfers per hour, and up to 30 Transfers and 20 GB per 24 hours;
d) the Link may be sent by e-mail to up to 30 Recipients per 24 hours from a single network.

4.3 Download records and Download Receipt. If the price list so states for Free, the Service records the time, IP address and browser information for each download; the Sender can view them via the Private Link and can generate a Download Receipt. Art. 6.4 applies to the Download Receipt mutatis mutandis. The Operator may remove these features from Free (in particular after the sale of Pro is launched); the change does not apply to Transfers sent before it takes effect.

4.4 The Operator may change the scope and limits of Free; the current scope is stated in the price list. The change does not apply to Transfers sent before it takes effect.

Article 5 — Account and Transfer History

5.1 Creation and sign-in. The Account is created upon the first sign-in with an e-mail address and a one-time code that the Service sends to that address. The Account has no password; the browser remembers the sign-in for 30 days. The Sender must protect access to their mailbox; anyone who has access to it can sign in to the Account.

5.2 History. Transfers sent under the Account address are shown in the Account history. When the Link validity expires or the Transfer is deleted, the files are deleted (Art. 3.9), but the record of the Transfer (file names, SHA-256 fingerprints, records of downloads or of events, as applicable) remains in the history so that the Sender can later download the Download Receipt or the Delivery Receipt. The record is kept:
a) for 30 days from the sending of the Transfer if the Account does not have active Pro;
b) for 3 years from the sending of the Transfer for as long as the Account has active Pro.

5.3 End of Pro and history. When Pro ends (Art. 7.5), the Operator keeps the history to the extent under Art. 5.2(b) for a further 30 days (grace period); during that period, the Account displays a notice stating the date on which it ends. After the grace period expires, retention is shortened in accordance with Art. 5.2(a) and records older than 30 days are deleted. The Sender should download and save any receipts they need during the grace period. If the Sender reactivates Pro during that period, the history is preserved in full.

5.4 Deletion of a record. The Sender may delete a Transfer record from the history at any time; deletion is irreversible.

5.5 Closing the Account. The Sender may close the Account at any time on the Account page. The Operator closes the Account immediately, together with the entire history, receipts and the files of Transfers that are still available; the Links stop working. Closure is irreversible. Any remaining period of paid Pro lapses upon closure of the Account without entitlement to a refund of the price; this does not affect the Consumer’s right to withdraw from the contract under Art. 8.

Article 6 — Pro

6.1 Scope. Pro applies to Transfers that the Sender sends under the address of an Account with active Pro. The scope of Pro is determined at the moment the Transfer is sent and is retained for that Transfer even after Pro ends (except for the retention of history under Art. 5.3). Pro includes in particular:
a) Link validity as chosen by the Sender: for a single download (up to 30 days), 1, 3, 7 or 30 days, or a custom period from 1 hour to 90 days;
b) Transfers of up to 20 GB (one file up to 1 GB), without the limits on the number and volume of Transfers under Art. 4.2(c); the e-mail limit under Art. 4.2(d) also applies with Pro;
c) Personal Links for Recipients and optional verification of the Recipient by code (Art. 6.2);
d) event records and the Delivery Receipt (Art. 6.3);
e) Transfer history under Art. 5.2(b).
The current scope of Pro is stated in the price list.

6.2 Personal Links and Recipient verification. Each Recipient to whom the Service sends the Link by e-mail receives a Personal Link. The Sender may require the Recipient to verify themselves before downloading with a code that the Service sends to the Recipient’s e-mail address entered by the Sender (the code is valid for 10 minutes; the Recipient’s browser remembers the verification for 12 hours). The Service sends the code only to the address entered by the Sender.

6.3 Event records and Delivery Receipt. For a Transfer with Pro, the Service records the opening of the Link page, automated checks of the Link, verification of the Recipient by code and the download of each file, together with the following data: date and time (UTC and Central European Time; the server clock is synchronised), IP address, network (autonomous system number and internet service provider), approximate country and city estimated from the IP address, device type, operating system and browser, the downloaded file and its SHA-256 fingerprint. Visits that bear the signs of an automated check (in particular by e-mail security scanners) are marked by the Service as probably automated, with the reason stated; such visits do not count towards the limit of a single-download Link. The Sender can view the records via the Private Link and in the Account history and can generate a Delivery Receipt from them.

6.4 Evidential value of receipts. The Delivery Receipt (and also the Download Receipt):
a) captures the data from the Service’s records at the time it is generated;
b) records the start of the sending of a file by the server, not its complete receipt or the Recipient becoming acquainted with its content;
c) without code verification, does not prove the identity of the person who opened the Link or downloaded the file, but rather that the Link delivered to the Recipient was used; with code verification, it proves that the download was confirmed by a code delivered to the Recipient’s mailbox;
d) states the location only as an approximate estimate based on the IP address, which may be inaccurate (e.g. when a VPN or a mobile network is used);
e) is not electronically signed, sealed or time-stamped and is not a qualified electronic registered delivery service or any other trust service under Regulation (EU) No 910/2014 (eIDAS); it does not have the effects of service of documents under special legislation (e.g. service of court or official documents).
A receipt is a means of evidence whose value is assessed by whoever decides the matter (e.g. a court).

6.5 Processing of data about Recipients. The Operator processes the data under Art. 6.3 on the basis of the Sender’s legitimate interest in proving that and when the files were delivered; the Recipient is informed of this on the download page and in the privacy notice. The Sender may use data from receipts only for purposes related to the delivery of the Transfer and to the exercise or defence of the Sender’s rights.

Article 7 — Price, Payments and Duration of Pro

7.1 Price. The price of Pro is €9 per month or €90 per year. The Operator is not a VAT payer; the price is final. The current price is stated in the price list. Until the Operator launches the sale of Pro, the price list shows Pro as forthcoming, and Arts. 7.2 to 7.6 and Art. 8 apply from the launch of sales.

7.2 Order and payment. Pro is ordered in the Account. Payment is made by payment card or by another method offered via the Stripe payment gateway (Stripe Payments Europe, Ltd., Ireland). Payment card data are processed by Stripe; the Operator does not see them. The User receives the payment document (invoice) electronically. Pro is activated once the payment has been credited.

7.3 Automatic renewal. Pro is concluded for the paid period (a month or a year) and renews automatically for a further period of the same length unless the User cancels it before the end of the period; the price for the next period is charged using the chosen payment method at the beginning of that period. For annual Pro, the Operator sends a renewal reminder at least 7 days in advance.

7.4 Cancellation. The User may cancel automatic renewal in the Account at any time; Pro then continues until the end of the paid period. The price for a period that has already begun is not refunded unless the Terms provide otherwise (Arts. 8, 12.2, 12.3, 16.2).

7.5 End of Pro. Pro ends upon expiry of the paid period without renewal, upon failed payment for the next period (after the time limit for payment provided by the payment gateway has expired without payment), upon closure of the Account or upon withdrawal from the contract. The effects on the history are governed by Art. 5.3.

7.6 Price change. The Operator may change the price of Pro. It will notify the User of the change by e-mail at least 30 days before the start of the period from which the change is to apply; if the User does not agree with the change, the User may cancel automatic renewal under Art. 7.4. The change does not affect a period that has already been paid for.

Article 8 — Consumer’s Withdrawal from the Pro Contract

8.1 The Consumer may withdraw from the Pro contract without giving any reason within 14 days of its conclusion. It is sufficient to send the withdrawal by e-mail to info@lawcloud.eu before the time limit expires, for example using the form in Annex No. 2.

8.2 If the Consumer, when placing the order, expressly requests that the provision of Pro begin before the withdrawal period expires and confirms that they have been informed of the consequences, Pro is activated immediately. If the Consumer then withdraws from the contract, they pay the price for the performance provided up to the day on which they notified the Operator of the withdrawal, calculated pro rata according to the number of days out of the total period; the Operator refunds the rest of the price to the Consumer.

8.3 The Operator refunds payments within 14 days of receipt of the withdrawal, using the same method by which they were made.

8.4 Upon withdrawal, Pro ends; Art. 5.3 applies to the history.

Article 9 — Overview of Data Retention

9.1 For clarity: files are deleted under Art. 3.9 (no later than one hour after the Link validity expires), records of Transfers without an Account together with the files, records in the Account history under Arts. 5.2 and 5.3, verification codes and records of incorrect passwords after one day, and resolved notices under Art. 11 after one year. Details are set out in the privacy notice (Art. 14).

Article 10 — User Obligations and Prohibited Content

10.1 The Sender is responsible for the Content they upload and for being authorised to make it available to Recipients, including personal data and data protected by a duty of confidentiality (e.g. legal professional secrecy). The Sender assesses whether, in view of Arts. 3.7 and 3.9, the Service is suitable for transferring the particular Content.

10.2 It is prohibited to upload or disseminate via the Service, in particular:
a) malware, viruses or other code designed to damage devices or to obtain unauthorised access;
b) content used for fraud or phishing, in particular content impersonating another person, a bank, a public authority or a court;
c) child sexual abuse material, terrorist content or content inciting violence or hatred;
d) content infringing intellectual property rights, trade secrets, personality rights or the personal data protection rights of third parties;
e) any other content whose dissemination is unlawful under the law of the Slovak Republic or of the European Union.

10.3 It is also prohibited:
a) to use the Service for the mass sending of unsolicited messages;
b) to circumvent limits, e-mail verification, Recipient verification or other protective measures of the Service;
c) to burden the Service with automated requests beyond normal use or to disrupt its operation;
d) to enter the e-mail addresses of persons to whom the Sender is not authorised to send the files;
e) to misuse the records and receipts under Art. 6 to track persons or for any purpose other than proving delivery.

10.4 In the event of a breach of Art. 10.2 or 10.3, the Operator may proceed under Art. 11.

Article 11 — Content Moderation and Notices of Illegal Content

11.1 Nature of the Service. The Service is a hosting service within the meaning of Art. 3(g)(iii) DSA: it stores Content at the request of the Sender and makes it available only to persons to whom the Sender has provided the Link, not to the public.

11.2 Moderation tools. The Operator uses:
a) an automatic antivirus check of every file (Art. 3.6) — the decision to block upon a detection or in the case of a file that cannot be checked is automated, without human review;
b) limits on the number of Transfers and e-mails from a single network (Art. 4.2) and restrictions on password and code attempts;
c) human review of notices (Arts. 11.3 and 11.4).
It does not otherwise automatically evaluate or read the content of files.

11.3 Notice. Anyone may notify the Operator of a Transfer that they consider illegal or in breach of the Terms, using the “Report abuse” button on the download page or by e-mail to info@lawcloud.eu. The notice should contain in particular:
a) the Link to the Transfer;
b) the reason and a sufficiently substantiated explanation of why the notifier considers the content to be illegal;
c) the name and e-mail address of the notifier, except for notices concerning offences referred to in Articles 3 to 7 of Directive 2011/93/EU;
d) a statement that the notifier believes in good faith that the information in the notice is accurate and complete.
The “Report abuse” form contains fields for name and e-mail address and a mandatory good-faith statement. The Operator will also assess a notice lacking any of these elements if it can determine from the notice which Content is concerned.

11.4 Assessment and decision. The Operator assesses the notice in a timely, diligent, impartial and objective manner, and the decision is taken by a human. If the Operator finds that the Transfer is illegal or breaches the Terms, it blocks the Transfer and deletes its files; the Link page then shows that the Transfer has been blocked. The Operator does not disclose the notifier’s identity to the Sender. The Operator informs a notifier who has provided an e-mail address of the decision without undue delay.

11.5 Statement of reasons. The Operator informs the Sender of the blocking of a Transfer without undue delay at the Sender’s verified e-mail address, with a clear and specific statement of reasons under Art. 17 DSA: what was restricted, the facts and circumstances, the legal or contractual ground, whether the decision was automated, and what redress options are available to the Sender. If the Sender has not verified their address, the statement of reasons cannot be sent to them.

11.6 Objection and redress. A Sender who disagrees with a blocking, and a notifier who disagrees with the decision on their notice, may file an objection within 6 months by e-mail to info@lawcloud.eu, stating the Link. The objection is assessed by a human and the Operator responds to it. Deleted files cannot be restored; if the Operator upholds the objection, the Sender may send them again. This is without prejudice to the right to bring the matter before a court.

11.7 Criminal offences and orders from authorities. If the Operator becomes aware of information giving rise to a suspicion of a criminal offence involving a threat to the life or safety of persons, it promptly informs the law enforcement authorities (Art. 18 DSA). The Operator responds to orders from authorities under Arts. 9 and 10 DSA without undue delay.

11.8 Repeated misuse. The Operator may, for a reasonable period, restrict use of the Service from an e-mail address, Account or network from which manifestly illegal Content repeatedly originates or which otherwise repeatedly misuses the Service; where possible, it informs the affected User of the restriction, with a statement of reasons under Art. 11.5.

11.9 Supervision of compliance with the DSA in the Slovak Republic is carried out by the Digital Services Coordinator, which is the Council for Media Services (Rada pre mediálne služby).

Article 12 — Availability and Changes to the Service

12.1 The Operator strives for continuous availability of the Service but does not guarantee any specific availability or uninterrupted operation (not even with Pro). The Service may be temporarily unavailable, in particular during maintenance, updates, faults or outages of infrastructure providers. Where possible, the Operator announces planned downtime in advance on the website.

12.2 The Operator may modify and extend the Service, in particular for security, technical or legal reasons. A change to Pro that materially and adversely affects the User will be notified by e-mail at least 30 days in advance; in such a case, the User may cancel the Pro contract with effect from the date of the change, and the Operator will refund to the User a pro rata part of the price for the unused period.

12.3 The Operator may discontinue the provision of the Service. It will announce the discontinuation on the website and, to Users with an Account, by e-mail at least 60 days in advance so that they can download their receipts; it will refund to Pro Users a pro rata part of the price for the unused period.

Article 13 — Liability

13.1 The Operator is liable for Content uploaded by Users only to the extent provided in Art. 6 DSA: it is not liable for Content of whose illegality it is not aware, provided that, after becoming aware of it, it acts under Art. 11.

13.2 In particular, the Operator is not liable for:
a) loss of files after the Link validity expires, after the Transfer is deleted or after it is blocked (Arts. 3.9, 11);
b) loss of records after the end of the retention period, including the grace period (Arts. 5.2 and 5.3), or after the Account is closed;
c) damage caused by file content that the antivirus check could not check or did not detect;
d) access to files or the Account by a person to whom the User provided the Link, password, Private Link or access to their mailbox, or who obtained them from the User’s device or mailbox;
e) non-delivery of e-mails for reasons attributable to the Recipient’s e-mail provider (e.g. a spam filter);
f) legal effects that the User attributes to receipts beyond the scope of Art. 6.4;
g) unavailability of the Service under Art. 12.1.

13.3 Business Users. Towards a Business User, the Operator is liable only for damage that it foresaw at the time the contract was concluded or that could have been foreseen in view of the facts that it knew or ought to have known at that time (Section 379 of the Slovak Commercial Code).

13.4 Consumers. Towards a Consumer, the Operator’s liability is not limited beyond the extent permitted by law; nothing in the Terms excludes liability that cannot be excluded in advance under the law, nor the Consumer’s rights arising from liability for defects (Art. 15).

13.5 The Sender is liable to the Operator for damage caused to the Operator by a breach of Art. 10, including reasonable costs of defence against third-party claims and penalties imposed by public authorities.

Article 14 — Personal Data Protection

14.1 The processing of Users’ personal data (e-mail addresses, IP addresses, download and event records, verification codes, Account, notices, payments) is governed by the privacy notice at lawcloud.eu/ochrana-osobnych-udajov.

14.2 Data in Content. If the Sender uploads files or enters a message containing personal data of third parties (e.g. clients), the Sender is the controller in respect of such data, and the Operator processes them as a processor on the Sender’s behalf under Annex No. 1 (Art. 28 GDPR), which forms part of the Terms.

14.3 Payment data are processed by Stripe as an independent controller under its own terms; the Operator receives only the data necessary to record the payment (e.g. payment status, period, last digits of the card).

Article 15 — Liability for Defects, Complaints and Dispute Resolution

15.1 The Operator is responsible for ensuring that, for the duration of the contract, the Service conforms to the Terms and the price list. If the Service does not work as described, the User may file a complaint by e-mail to info@lawcloud.eu, stating in particular a description of the defect, the time it occurred and the Link or Account concerned.

15.2 The Operator handles the complaint without undue delay, no later than 30 days from its filing, and notifies the User of the outcome by e-mail. In the case of Pro, if the defect cannot be remedied, the User is entitled to a reasonable reduction of the price or to cancel the contract with a refund of a pro rata part of the price for the period in which the Service was not properly provided.

15.3 Alternative dispute resolution. A Consumer may contact the Operator with a request for redress if they are not satisfied with the handling of a complaint or believe that the Operator has violated their rights. If the Operator rejects the request or does not respond to it within 30 days of its dispatch, the Consumer may submit a petition to initiate alternative dispute resolution to an alternative dispute resolution entity under Slovak Act No. 391/2015 Coll. on Alternative Dispute Resolution of Consumer Disputes, in particular the Slovak Trade Inspection (Slovenská obchodná inšpekcia) (www.soi.sk), within one year of the rejection or of the expiry of the time limit without a response.

15.4 The consumer protection supervisory authority is the Slovak Trade Inspection, SOI Inspectorate for the Bratislava Region (www.soi.sk).

Article 16 — Amendments to the Terms

16.1 The Operator may amend the Terms due to changes in legislation, changes to the Service, security reasons or changes in its business terms. It publishes the new version on the website at least 15 days before it takes effect; it also notifies Users with an Account by e-mail.

16.2 Transfers sent before an amendment takes effect are governed by the version of the Terms in force at the time they were sent. By continuing to use the Service after the amendment takes effect, the User agrees to the amendment. A User who does not agree with the amendment may close their Account before the amendment takes effect; a User with Pro may cancel the Pro contract with effect from the date on which the amendment takes effect, and the Operator will refund to the User a pro rata part of the price for the unused period.

Article 17 — Final Provisions

17.1 Legal relationships under the Terms are governed by the law of the Slovak Republic. In relation to a Consumer, this does not affect the protection afforded to the Consumer by the mandatory provisions of the law of the state of their habitual residence.

17.2 Disputes with a Business User are decided by the courts of the Slovak Republic; the court with local jurisdiction is the court competent for the Operator’s registered office, where permitted by law.

17.3 The Operator delivers documents to the User by e-mail to the verified address or the Account address; the User delivers documents to the Operator at info@lawcloud.eu.

17.4 If any provision of the Terms is invalid or ineffective, the remaining provisions remain valid.

17.5 These Terms take effect on 13 October 2026.

Annex No. 1 — Processing of Personal Data on Behalf of the Sender (Art. 28 GDPR)

1. Parties and subject matter. The Sender (as controller) entrusts the Operator (as processor) with the processing of personal data contained in the files and the message that the Sender uploads to or enters into the Service, and in the file names, for the purpose of storing them, checking them for viruses, making them available to Recipients via the Link and sending e-mails to Recipients.

2. Duration. For the validity period of the Link; for Transfers from an Account, the file names are also kept in the history under Art. 5 of the Terms.

3. Nature and categories. Storing, checking and making files available. The categories of data subjects and of personal data are determined by the Sender through the content of the files; they may also include special categories of personal data and personal data relating to criminal convictions and offences. The Operator does not read the content of files.

4. Instructions. The Operator processes the data only on documented instructions from the Sender, which consist of uploading the files and the Transfer settings (validity, password, Recipients, deletion), unless required to do otherwise by EU or Slovak law; in such a case, it informs the Sender of that legal requirement unless the law prohibits this.

5. Confidentiality. Persons authorised to process the data are bound by a duty of confidentiality.

6. Security (Art. 32 GDPR). Encryption of files in storage (AES-256, a key for each Transfer that the storage provider does not hold), encrypted transmission (HTTPS), antivirus check, access only via the Link with an optional password and limited attempts, Personal Links and Recipient verification by code (Pro), automatic deletion, no backups of files, data centres in Germany.

7. Sub-processors. The Sender gives general authorisation for the following sub-processors:
– Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany — server, database and file storage (Germany);
– Resend, Inc., USA — sending e-mails from a data centre in Ireland; processes e-mail addresses and the content of e-mails (including file names and the Sender’s message), not files; the transfer outside the EU is safeguarded by standard contractual clauses and the EU–US Data Privacy Framework.
The Operator gives notice of any intended change of sub-processors on the website at least 14 days in advance; the Sender may object by ceasing to use the Service. The Operator imposes the same data protection obligations on sub-processors.

8. Assistance. The Operator assists the Sender to a reasonable extent in fulfilling obligations towards data subjects, ensuring the security of processing, notifying personal data breaches and carrying out data protection impact assessments. It notifies the Sender of a personal data breach without undue delay at the Sender’s verified e-mail address.

9. Termination. When the Link validity expires or the Transfer is deleted, the Operator erases the files (Art. 3.9 of the Terms); the files are not backed up and are not returned.

10. Audit. The Operator provides the Sender with the information necessary to demonstrate compliance with the obligations under Art. 28 GDPR upon a request sent to info@lawcloud.eu and allows audits to a reasonable extent and at the Sender’s expense.

11. Conclusion. This Annex forms part of the contract for the Service and is concluded together with it (Arts. 2.1 to 2.3 of the Terms).

Annex No. 2 — Model Withdrawal Form

(complete and return this form only if you wish to withdraw from the Pro contract)

To: SYNERGIX s. r. o., Štúrova 23/11, 811 02 Bratislava, info@lawcloud.eu

I hereby give notice that I withdraw from the contract for the provision of the lawcloud.eu Pro service.

Terms and conditions · lawcloud