Terms and Conditions

Last updated: September 2026

1. Scope

These terms and conditions apply to all contracts between Soulution Enterprise LLP ("Provider") and businesses (not consumers) based in the DACH region, covering the appointment as external data protection officer as well as AI-rollout and website/automation projects. Deviating terms of the customer apply only if the Provider has expressly agreed to them in writing.

2. Formation of contract

The contract is formed through the free first call, a subsequent written proposal from the Provider, and its acceptance by the customer in text form (e-mail is sufficient). The Provider's proposal is non-binding until accepted by the customer.

3. Scope of services: external data protection officer

For the ongoing mandate as external data protection officer, the scope of services follows the statutory duties under Art. 39 GDPR (advice, monitoring, training, contact point for the supervisory authority) and the individual proposal. Appointment as data protection officer and the corresponding notification to the competent supervisory authority take place once the customer has provided the required information.

4. Scope of services: AI and website projects

For AI-rollout, website and automation projects, the scope of services follows the respective written proposal, including the description of services, milestones and timelines. Changes to the scope require text form.

5. Fees and payment terms

Fees follow the individual proposal. Unless agreed otherwise, invoices are due within 14 days of the invoice date without deduction. Statutory provisions apply in the event of late payment.

6. Term and termination of the data protection officer mandate

The mandate as external data protection officer is concluded for an indefinite period unless agreed otherwise, with a minimum term of 12 months from appointment. After that it may be terminated by either side with 4 weeks' notice to the end of a month. The right to extraordinary termination for good cause remains unaffected. After the mandate ends, the Provider supports the appointment of a successor within reasonable limits.

7. Customer's duties to cooperate

The customer provides the information, documents and contacts required for performance in good time and names an internal point of contact. Delays caused by late cooperation on the customer's part are not attributable to the Provider.

8. Confidentiality

Both parties undertake to keep confidential all confidential information of the other party disclosed in the course of the cooperation and to use it only to perform the contract. This duty survives termination of the contract.

9. Liability

The Provider is liable without limitation for intent and gross negligence and under applicable product liability law. For slightly negligent breach of a material contractual duty, liability is limited to the foreseeable damage typical for this type of contract. Otherwise, liability for slight negligence is excluded. Appointing a data protection officer does not relieve the customer of its own responsibility as controller under Art. 4(7) GDPR.

10. Final provisions

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. Unless mandatory law provides otherwise, the place of jurisdiction for all disputes arising from or in connection with this contract is the customer's registered seat. Should individual provisions of these terms be invalid, the validity of the remaining provisions is unaffected.