To contract the Legal Box software license, the CLIENT must previously accept the following conditions by checking the box “I have read and accept the terms and conditions”. The CLIENT will not be able to use the services if he does not accept the Conditions.

The CLIENT will not be able to use the services and will not be able to accept the Conditions if any of the following circumstances occur:

a) you are not of legal age and cannot form a binding contract with Legal Box Plus

b) does not have the necessary legal capacity to receive the services in accordance with Spanish laws.

SERVICE DESCRIPTION

Legal Box Plus is a web platform that offers the user a management tool for the implementation, management and maintenance of the General Data Protection Regulation on a website or online store. The platform is located on the site legalbox.plus and has been developed by Ocean Legaltech, S.L., with C.I.F.: B13657531 and with address at C/ Sol y Mar, 24 – 21130 Mazagón – Huelva. From now on, when referring to the client’s relationship with Legal Box Plus, it will be understood as the relationship between the client and Ocean Legaltech, S.L.

AGREEMENT FOR THE PROVISION OF THE ACCESS SERVICE TO Legal Box

 

IDENTIFICATION OF PARTIES

ON THE ONE PART, Ocean Legaltech, S.L. with CIF B13657531 and with address at C/ Sol y Mar, 24 – 21130 Mazagón – Huelva.

ON THE OTHER PART, the natural or legal person whose registration data appears in the registration form for the services offered in Legal Box Plus, hereinafter, the CLIENT.

Both parties are subject to these Contract Conditions (hereinafter, “Conditions”) to which are added our Legal warning and Privacy Policy and Cookies policy, to which we refer. These will always be available in Spanish for consultation, filing or printing.

The parties declare that they have the necessary legal capacity to act and contract through this website in accordance with the Conditions set forth, which they declare to understand and accept.

If any clause included in these Conditions is declared, totally or partially, null or ineffective, such nullity or ineffectiveness will affect only said provision or the part of it that is null or ineffective, the general conditions subsisting in everything else, being such provision, or the part thereof that is affected, for not being put in place.

 

EXPOSE

1.- That Ocean Legaltech, S.L. is the exclusive owner of all exploitation rights derived from the intellectual property of the cloud management computer application called “Legal Box”, which is hosted on the Cubenode hosting platform that It is indicated in this contract as a high availability, redundancy and scalability service. And consequently, Ocean Legaltech, S.L. is the only legal entity authorized to allow access to said platform by interested parties who request it.

2.- That the CLIENT is interested in accessing and using this platform for the adaptation of their activity, their website or online store, to the LSSI and REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT, which declares that It is always for lawful purposes, that you will introduce data or material not prohibited by the legislation in force at any time and always under your responsibility for the content.

3.- That, if the following contract clauses are not accepted, the CLIENT must refrain from accessing and/or using the services and/or content offered by Legal Box Plus.

4.- The CLIENT must take into account that the “Legal Box” tool is for all types of professional users and/or companies, taking into account the following limitations:

This tool will have to be completed with consulting services if your organization processes data of the following typology with large volumes of data: Ethnic or racial origin; political opinions or religion; union membership (except union dues); genetics; biometrics aimed at uniquely identifying a person; physical or mental health; related to sexual life or sexual orientation; relating to criminal convictions or offences; and geolocation.

This tool will have to be completed with consulting services if your organization belongs to any of the following sectors: Healthcare; financial solvency and credit; profile generation and uses; political activities; union or religious; Telecommunications services; insurance; banking and financial entities; social service activities; advertising; and video surveillance of large infrastructures such as shopping centers.

This tool will have to be completed with a consulting service if your organization performs any of the following treatments: Create or analyze profiles; carry out massive advertising or commercial prospecting to potential clients; provision of public network exploitation services or electronic communication services; manage associates or members of political parties, unions, churches, religious denominations or communities, foundations and other non-profit entities, whose purpose is political, philosophical, religious or union; management, health control or sale of medicines; clinical or health history.

PURPOSE AND DEFINITION

The object of this contract, which Legal Box Plus makes available to the CUSTOMER, is the computer application hosted in the cloud to help you legally adapt your website or online store, called “Legal Box”, in order to provide you with a helps in managing the implementation and maintenance of the General Data Protection Regulation on a website and in online stores.

It also provides data hosting services, application updates and support services in accordance with the provisions of this agreement.

LICENSE

Legal Box Plus grants CUSTOMER a non-transferable and exclusive license to use the Legal Box Tool for an activity. The sole purpose of this license is to allow you to use and benefit from the services provided by Legal Box Plus, as permitted in the Conditions.

The CUSTOMER may not copy, modify, create derivative works, reverse engineer or attempt to discover the source code of the platform or any part of it.

The provision of this service does not imply, directly or indirectly, any transfer to the CLIENT of intellectual property rights of any kind over the aforementioned computer application, which are expressly reserved to its legitimate owner. The Client may not assign, transfer or sublease to third parties the rights and obligations that correspond to them derived from this contract, without the prior express consent of Legal Box Plus.

CHARACTERISTICS OF THE SERVICES OFFERED

The characteristics of the services offered through Legal Box Plus, as well as the price to be paid for them, are, at all times, clearly determined in legalbox.plus according to the type of license chosen by the CUSTOMER.

Legal Box Plus offers other solutions in addition to the Legal Box tool, such as the Lexmaster Club, a service that allows people dedicated to development and design to help manage regulatory compliance in terms of data protection, marketing and electronic commerce. of websites, as well as marketing agencies, consultancies, lawyers, consultants, etc.

Among the main characteristics that allow you to belong to the Lexmaster Club are:

• • Access to a management panel within the Legal Box tool.

• • Special discount on all Legal Box products.

• • Access to training

• • Monthly training sessions at Lexmaster Live*

• • Priority support for all Lexmaster Club members.

• • Access to a private forum to clarify doubts

* By participating in Lexmaster Live sessions, you give your consent for them to be recorded. The sessions will be recorded and shared with the rest of the community members. If you do not want your image and audio to appear, enter the session without activating the camera and audio and ask your questions through the chat.

In https://legalbox.plus/club-lexmaster you have all the information about this service.

Likewise, Data Protection Officer (DPD or DPO) services called “Plus DPO” are offered, which will have a wide range of actions that the client can use to comply with legal requirements.

Our services will consist of the client advice necessary to guarantee compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, relating to the protection of natural persons with regard to data processing. personal data and the free circulation of these data and which repeals Directive 95/46/EC (hereinafter “GDPR and Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (hereinafter “LOPDGDD“), thus addressing the following points under contracting the necessary consulting hours:

• • Compliance controls: address operational, regulatory and structural changes of the client that entail changes in the documentation and procedures related to data protection, for their proactive updating, when appropriate.

• • Review of compliance with the legal system, in terms of identification of personal data, the purposes of data processing and the key processing processes carried out, as well as compliance with all applicable regulations on the matter.

• • Analysis of the legitimacy of the processing and review, both of the recipients of the data (data transfers, international data transfers, provision of services), as well as the information clauses and procedures for exercising rights.

• • Review of proactive responsibility measures, advice on updating the Record of Treatment Activities, and advice on procedures for communicating security breaches, Risk Analysis, audit of the security measures to be implemented, and evaluation of impact in your case.

• • Advice on the review of the personal data protection policy, updating the Personal Data Protection Policy, in accordance with the principle of Proactive Responsibility. Counseling will include:
    
    
    • • The internal personal data protection policy, which will develop the functions and responsibilities of the different areas, units, bodies and people responsible for data processing, and the records of Processing Activities.
    • • The personal data protection policy for personnel external to the client, stipulating their functions and responsibilities.
    • • The procedures for reviewing, modifying and updating internal and external policies.

• • Advice on personal data protection, to respond to new events or practices of relevance to compliance with the RGPD, responding to direct or online queries that may arise.

• • Attendance at follow-up meetings of the person responsible for the contract with those responsible for the client’s bodies and units, to check the maintenance of good practices in each of them or in those maintained with other companies or organizations, specifically, with the Spanish Agency of Data Protection, in the exercise of the functions entrusted to it by the RGPD and the LOPD.

• • Communication to the person responsible for the contract of legislative developments regarding data protection, as well as the Legal Reports issued by the Spanish Data Protection Agency and that are of interest to the Department.

• • Inform the Controller of any relevant risk or violation in terms of data protection.

• • Carrying out training actions for the Client’s staff with a minimum annual frequency.

• • Other analogous or whatever ones are necessary to comply with those previously stated.

The aforementioned functions will be carried out during the agreed working hours and taking into account the contracted consulting hours. We offer the option of purchasing packages of consulting hours. Contact us for more information without any obligation.

HOW TO HIRE THE SERVICES?

As a condition for contracting the service, the user may only contract if he is of legal age and/or has the legal capacity to join. Otherwise, the responsibility for placing orders by minors will be the responsibility of the parents or legal guardians of the minor.

The user must register at legalbox.plus and provide the corresponding information required for the acquisition of the services available on this website. The contracting information you provide must be accurate, complete and up-to-date at all times. Failure to do so constitutes a violation of the terms, which may result in the termination of the contract with Legal Box Plus.

The steps to contract the service are:

• • Select the contracting method for the services requested

• • Complete all the information requested in the contracting process in legalbox.plus

• • Check the box accepting the contract conditions.

• • Make the payment.

• • You can download the contract conditions accepted at the time of contract or you will receive them by email.

From the moment of acceptance, the user acquires the status of Legal Box Plus Client.

Payment is always 100% in advance of the order and the services will be provided when we confirm payment.

Legal Box Plus issues the client an invoice corresponding to their purchase in digital format immediately after the contract is made.

PRICE AND METHOD OF PAYMENT

From the moment the client registers for the service by accepting this contract and configuring the license to which he or she is going to access, Legal Box Plus will proceed to invoice in advance the price of the service selected by the CLIENT, using the form payment also selected by him on the “Legal Box Plus” website.

The Client may unsubscribe from the service at any time, by means of written and reliable communication to Legal Box Plus, being obliged to pay only for the calendar years in which they have maintained their access to the application.

The Client may also modify its license at any time, in this case Legal Box Plus proceeding to apply the corresponding tariff modification to the increase or decrease, with effect from the date of modification of the license configuration, in the next invoice that from said date issued to the CUSTOMER.

Non-payment of the invoice issued will give Legal Box Plus the right to suspend or terminate this contract and proceed, as a consequence, to cancel the CLIENT’s access to the platform, once 15 days have elapsed since non-payment and with prior notice from Legal Box Plus.

In the event of contractual termination, the CLIENT may recover the information that has been hosted up to that point on the Legal Box Plus server by requesting it from the Legal Box Plus support service, as long as it is up to date with its payment obligations with Legal Box Plus.

In no case is Legal Box Plus responsible for any damages or losses that may arise directly or indirectly from the suspension or cancellation of the service due to these circumstances. Once the CLIENT is unsubscribed from the Legal Box Plus service, their access codes will be disabled, as well as the processing of any type of CLIENT information in accordance with the provisions of current data protection regulations. data.

The accepted payment method is:

Payment by card: Accepted bank cards are: Visa, MasterCard, American Express. Any other type of card will not be accepted for payment. Payment by card is made through the secure payment gateway Stripe. In this payment method, Legal Box Plus does not collect or manipulate any customer data related to their card number. All data is processed directly by the corresponding financial institution, thus offering the greatest security and confidentiality in the transaction.

No other payment method is accepted.

Payment is always 100% in advance of the order and the services will be provided when we confirm payment.

DURATION AND VALIDITY

This contract will come into force on the same day of activation of the license, acceptance which will be understood to have occurred from the day on which the CUSTOMER confirms the acceptance of this contract through the website. legalbox.plus.

The Contract will have the duration corresponding to the type of service contracted.

This initial duration will be extended for periods of equal duration (1 year), unless: either party expresses to the other its willingness to terminate the Contract by giving at least one month’s notice in advance of the license renewal invoice. .

Legal Box Plus reserves the right to suspend the Service, at any time and without prior notice, to those Clients who fail to comply with these General Conditions.

The contract may be terminated by mutual agreement of the parties.

Any resolution requires written form to be effective.

Causes for dissolution of the contract

Legal Box Plus.com may terminate the contract at any time, with 1 month’s notice, in the following cases:

• The CUSTOMER fails to comply with any provision of the Conditions (or acts in a manner that clearly demonstrates that the CUSTOMER has no intention of complying, or is unable to comply, with the provisions of the Conditions).legalbox.plus is required for this purpose by legislation.

CONDITIONS OF ACCESS AND USE OF “Legal Box”

The services included in “Legal Box” offered by Legal Box Plus, including price, method and payment conditions, are defined in detail on the website legalbox.plus . Legal Box Plus reserves the right to charge an additional fee of 6.01 euros plus 10% on amounts greater than 30 euros in the event of a bank return, and to temporarily block the service provided in the event of any incident in the collection of the service, until the resolution of the same and that the CLIENT is up to date with payment.

Every CUSTOMER will select one of the services offered, this operation being the element of contracting the service that entails the registration obligation.

Legal Box Plus may modify the username and password, prior notice to the user via email.

The CLIENT authorizes Legal Box Plus to use basic information related to the transaction (name of the CLIENT, name of the financing entities and amount of the transaction) for the preparation of commercial and promotional materials, including the publication of a “case of success” next to the CLIENT logo on the Legal Box Plus website.

Technical access requirements

To access “Legal Box”, the User must have access to the Internet and have the equipment and computer systems necessary to make the connection to the Network, including a terminal that is suitable for this purpose (computer, telephone, etc.). .), a modem or other analog or similar access device and a browser.

The access codes to the “Legal Box” belong exclusively to the CLIENT, the client creates their own passwords that Legal Box Plus does not know. The CLIENT undertakes to make diligent use of them, as well as to keep them secret, and Legal Box Plus will not be responsible for any misuse that the CLIENT may make of said access codes or for any damages that may be caused by said circumstance. Likewise, the CLIENT must notify Legal Box Plus of the loss, theft or any incident of the access codes so that Legal Box Plus deactivates and disables them, and provides or allows the creation, if applicable, of a new one. key to the CUSTOMER, all in order to guarantee correct access to the data and prevent unauthorized access.

Denial and withdrawal of access to “Legal Box” and/or Services:

Legal Box Plus reserves the right to deny or withdraw access to “Legal Box” and/or Services, at any time and without prior notice to those Users who fail to comply with these General Conditions or violate any of the precepts established by the Law. 34/2002, of July 11, on information society services and electronic commerce (LSSICE) or equivalent legislation.

Common value added tax system of the European Union

In accordance with the provisions of Law 37/1992, of December 28, regulating said tax and the European Directive 2008/8/EC, the operation may be exempt or not subject to it depending on the country of residence of the buyer and the condition in which the same acts (businessman/professional or individual). Consequently, in some cases the final price of the order may be altered compared to what is displayed on the website.

The price of the services offered by Legal Box Plus includes Spanish VAT. However, the final price of the order may vary depending on the VAT tax rate applied to the order.

Prices for the Services may change at any time in the sole and exclusive discretion of Legal Box Plus. The Services do not provide price protection or refunds in the event of price reductions or promotional offers.

VALIDITY OF PRICES AND OFFERS

The services offered on the website, and their prices, will be available for purchase while they are in the catalog of services displayed through the website. Users are requested to access updated versions of the website to avoid pricing errors. In any case, orders in processing will maintain their conditions for 7 days from the moment they are formalized.

RIGHT OF WITHDRAWAL

Withdrawal is the power of a consumer or user, according to the concept established by Law 3/2014, of March 27, which modifies the consolidated text of the General Law for the Defense of Consumers and Users and other laws. complementary, approved by Royal Legislative Decree 1/2007, of November 16, to desist from the purchase of a good to return it to the trade within a legal period of 14 days, without having to plead or give any explanation in this regard or suffer a penalty.

The right of withdrawal cannot be exercised (except for error or defect in the contracted product or service), in the following cases provided for by article 103 of Law 3/2014 mentioned above:

a) The provision of services, once the service has been completely executed, when the execution has begun, with prior express consent of the consumer and user and with the recognition on their part that they are aware that, once the contract has been completely executed by the employer, he will have lost his right of withdrawal.

b) The supply of goods made in accordance with the specifications of the consumer and user or clearly personalized.

c) The supply of digital content that is not provided on a material medium when the execution has begun with the prior express consent of the consumer and user with the knowledge on their part that they consequently lose their right of withdrawal.

The withdrawal period for digital content products (such as the licenses offered by Legal Box Plus) will be void when the keys are used to access the platform.

Consulting services:

 

If the right of termination is exercised 10 days before the start of the service, Legal Box Plus will refund the amount received without any withholding and never later than 14 days. If the aforementioned right has been exercised within a period of less than 10 days, 50% of the amount will be returned, and if it is exercised later, no amount will be paid.

Likewise, Legal Box Plus may proceed to terminate the contract if the corresponding payment is not made by the user or any of the actions set out in the section on causes for dissolution of the contract are incurred.

If the CLIENT wishes to exercise their right to withdraw from the Legal Box Plus service, they must contact Legal Box Plus with a request to withdraw from the contract before the contracted service has begun to be executed (see withdrawal process and form below). .

Legal Box Plus guarantees the CLIENT the refund of the amounts paid within a period of fourteen (14) calendar days from the date of reliable communication of the exercise of their right of withdrawal provided that it meets the requirements and has been accepted by Legal Box Plus.

Consequences of withdrawal

In case of withdrawal by the CLIENT according to the conditions established for acceptance, Legal Box Plus will return all payments received that have been made to us without any undue delay and, in any case, no later than 14 calendar days from the date on which the CLIENT informs us of his decision to withdraw from this contract and provided that he has been notified 10 days in advance of the start date of the contracted work.

Legal Box Plus will proceed to make said refund using the same payment method used by the CLIENT for the initial transaction, unless it has expressly provided otherwise; In any case, you will not incur any expenses as a result of the refund.

CLAIM OR WITHDRAWAL FORM MODEL

The CUSTOMER may notify us of the claim or withdrawal, either by email to: juridico@legalbox.plus or by postal mail to the address indicated on the withdrawal form.

Copy and paste this form, complete it and send it by email or postal mail.

For the attention of Legal Box Plus

Postal mail: C/ Sol y Mar, 24, 21130 Mazagón (Huelva)

Email:juridico@legalbox.plus

I hereby inform you that I claim / withdraw from the contract for the sale of the following goods / provision of the following service …………………………………………………………………………………

Hired on the day:………………………………………………………………………………

In case of complaint, indicate the reason:

IF YOU HOOKED FOR A CONSUMER CREDIT to finance the purchase made remotely, include the following text in your withdrawal notification:

You are also notified that according to article 29 of Law 16/2011, of June 24, on credit contracts, that since the contract for the supply of goods/services has been withdrawn and it was fully/partially financed through a linked credit, I will leave to be bound by said credit contract without any penalty.

Below indicate your name as a consumer and user or of consumers and users:

Now indicate your address as a consumer and user or of consumers and users:

Indicate the date on which you claim/withdraw from the contract:

-Sign your claim/withdrawal request if it is notified to Legal Box Plus in paper format-

(place), to …………………………….. of …….. ……………… of 20……..

The refund of the amount will be made within the next 14 calendar days from the date on which the client’s withdrawal request is approved.

EUROPEAN CONSUMPTION REGULATIONS

The European Commission has created the first European platform for the resolution of conflicts in online commerce covered by the latest consumer law. In this sense, as those responsible for an online sales platform, we have the duty to inform our users about the existence of an online platform for alternative dispute resolution.

To resort to the conflict resolution platform, the user must use the following link: http://ec.europa.eu/odr

 

SUPPORT MODALITY AND REASONABLE USE

Special or personal consulting services must be requested through the appropriate channels to be received and responded to within a reasonable period of time. These channels are the respective forms located in each of the services offered.

Each request is subject to assessment and approval by Legal Box Plus.

Legal Box Plus can provide alternative solutions to the client including referral to the Legal Box Plus network of consultants.

REASONABLE USE CLAUSE

The consulting and maintenance services offered are subject to a reasonable use clause. The definition of fair use is determined by Legal Box Plus, in its sole and exclusive discretion. Clients who Legal Box Plus considers to be abusing these services will be contacted by Legal Box Plus.

Legal Box Plus reserves the right to suspend the service if we consider it exceeds the reasonable use clause.

DELIMITATION OF RESPONSIBILITIES

Legal Box Plus will not be responsible for the use of the platform by the CLIENT, nor for the content and/or data entered by the CLIENT in it. The CLIENT will be responsible for their data at all times, with Legal Box Plus being responsible only for offering the adaptation guide service to the Organic Law on Data Protection and the European Data Protection Regulation.

At no time will Legal Box Plus be responsible for possible erroneous use, whether voluntary or not, by the CLIENT, who assumes all responsibilities that may arise from such use. The CLIENT will be solely responsible for the data entered in the forms included in the application and for the insertion of the texts obtained on their website, blog or e-commerce.

Legal Box Plus does not guarantee total compliance with the Law by the CLIENT since the accuracy and veracity of the data entered is not verified nor does it verify the degree of legal adequacy of the client’s website unless this service has been contracted. specifically.

If a defect or defect is found in the software or service, Legal Box Plus undertakes to resolve it as soon as possible.

The CLIENT will be responsible for carrying out any type of illegal, rights-injuring, harmful and/or detrimental action.

Neither party will be liable for any indirect, incidental, special, punitive or consequential damages, or for lost profits or revenue (except for fees under this agreement), data or data use.

The total liability of Legal Box Plus for any damages arising under or as a consequence of this contract, whether contractual, tort, or of any other nature, or in connection with poor service or any breach of this contract will be limited to return to the CLIENT a maximum of the payments made by the CLIENT to Legal Box Plus in the last year immediately preceding the event that gave rise to said liability.

Occasional interruptions carried out by Legal Box Plus for the purpose of improving the service will be limited to the minimum time necessary and will be carried out during time slots of minimum service consumption.

Legal Box Plus will in no case be responsible for damages, whether direct or indirect consequence of the use or inability to use the service, in addition Legal Box Plus will not be responsible for the defective provision or interruption of the Service in the following cases without being numerus clausus:

• Causes of force majeure.
• Negligence in the use of “Legal Box” by the CUSTOMER.
• Interruptions in the communications of the Data Center where the Legal Box Plus servers are located, or in the CLIENT’s communications.

INTELLECTUAL AND INDUSTRIAL PROPERTY

The ownership and all Intellectual Property Rights of “Legal Box” as well as the structure, operating diagrams, operating manuals, associated documentation, organization and presentation of its contents will remain fully the property of Ocean Legaltech, S.L. Said ownership is protected by the laws on Intellectual and Industrial Property, and its reproduction, distribution, public communication and transformation is prohibited.

PERSONAL DATA PROTECTION

In accordance with the provisions of the European Data Protection Regulation, Legal Box Plus informs the CLIENT about the following:

Responsible

Identity:Ocean Legaltech, S.L.

CIF: B13657531

Address: C/ Sol y Mar, 24 21130 Mazagón (Huelva)

E-mail: juridico@legalbox.plus

Your data will be processed in order to provide you with the requested service. The legal basis for the processing of your data is compliance with these contract conditions. The data provided will be kept as long as you do not request the cessation of the service. The data will not be transferred to third parties, except in cases where there is a legal obligation. You have the right to obtain confirmation as to whether Ocean Legaltech, S.L. We are processing your personal data, therefore you have the right to access your personal data, rectify inaccurate data or request its deletion when the data is no longer necessary for the purposes for which it was collected.

Anyone also has the right to obtain confirmation as to whether at Legal Box Plus we are processing personal data that concerns them or not.

Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. Legal Box Plus will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

You may materially exercise your rights by writing by ordinary mail or email to Ocean Legaltech, S.L., C/ Sol y Mar, 24 – 21130 Mazagón – Huelva, juridico@legalbox.plus.

Legal Box Plus expressly warns the CUSTOMER that the current state of development of the technique does not allow it to fully guarantee data protection in data transmissions on open networks such as the Internet.

The CLIENT is aware that for technical reasons the provider has access at all times to the pages recorded on the network server and, if applicable, also to other CLIENT data stored there. Other Internet users could also be in a technical position to interfere in an unauthorized manner in the security of the network, controlling message traffic. The CLIENT will be fully responsible for the security of the data that he has transmitted on the Internet and recorded on network servers.

In the absence of express authorization from the CLIENT in this regard, Legal Box Plus may only process, distribute and use the CLIENT’s personal data to the extent necessary for the purposes of establishing and developing the contract and billing. Legal Box Plus will not use personal data for consulting, advertising and market research purposes, against the express will of the CLIENT.

In such case, the CLIENT may notify it in writing, sending it to the following address:Ocean Legaltech, S.L., C/ Sol y Mar, 24 – 21130 Mazagón – Huelva. The offering of a Legal Box Plus service will depend on the consent of the CLIENT.

Legal Box Plus may have access to the personal data entered by THE CLIENT on the platform, for which THE CLIENT is responsible. These data will only be accessed for the purpose of providing services as Data Processor, providing technical support to platform users.

Hiring form: The user has different contract forms subject to the conditions specified in our contract conditions for each service where contact and payment information will be required. We request the following personal data: Company name, email, CIF. We inform you that the data you provide us will be located on the servers of OVH HISPANO SL (provider of Webempresa Europa S.L.) within the EU.

You may exercise the rights set out below by sending your request in writing to the email or postal address indicated above:

• • Right of access to personal data: you may request information from the company about whether it is processing your data and what processing it is carrying out.
  • Right to request the rectification of your data if it is incorrect or its deletion if it is no longer necessary for the purpose for which it was collected.
  • Right to request the limitation of the processing of your data.
  • Right to object to the processing of your data.
  • Right to data portability to a new Controller.
  • Right not to be subject to decisions based solely on the automated processing of your data
  • If you consider that there is any violation of your right to data protection on our part, you can file a claim with the supervisory authority, which in Spain is the Spanish Data Protection Agency (www.aegpd.es ).

Legal Box Plus has access to personal data of employees and/or collaborators of the companies that use the platform and that are the responsibility of the (RESPONSIBLE FOR THE TREATMENT), therefore Legal Box Plus will assume the obligations of the DATA PROCESSOR, in accordance with the article 28 of the RGPD and which are contemplated below:

The TREATMENT PROCESSOR and all his staff undertake to:

1. 1. Use the personal data being processed only for the purpose of this assignment. Under no circumstances may you use the data for your own purposes.
   2. Process the data in accordance with the instructions of the DATA CONTROLLER. If the PROCESSOR considers that any of the instructions violate the GDPR or any other data protection provision of the Union or the Member States, the processor will immediately inform the controller.
   3. Keep, in writing, a record of all categories of processing activities carried out on behalf of the controller, containing:

• • The name and contact information of the person in charge or persons in charge and of each person in charge on behalf of whom the person in charge acts and, where applicable, of the representative of the person in charge or of the person in charge and of the data protection officer.

• • The categories of treatments carried out on behalf of each person responsible.

• • Where applicable, transfers of personal data to a third country or international organization, including the identification of said third country or international organization and, in the case of transfers indicated in article 49 section 1, second paragraph of the GDPR, the documentation of adequate guarantees.

• • An overview of the appropriate technical and organizational security measures you are implementing.

• • Do not communicate the data to third parties, unless you have the express authorization of the CONTROLLER, in legally admissible cases.

The DATA PROCESSOR may communicate the data to other data processors of the same DATA CONTROLLER, in accordance with the DATA CONTROLLER’s instructions. In this case, the CONTROLLER will identify, in advance and in writing, the entity to which the data must be communicated, the data to be communicated and the security measures to apply to proceed with the communication.

If the PROCESSOR must transfer personal data to a third country or to an international organization, by virtue of the Law of the Union or of the Member States that is applicable to it, it will inform the controller of this legal requirement in advance, unless such Law prohibits it. for important reasons of public interest.

1. 1. THE DATA PROCESSOR is prohibited from subcontracting all or part of the services developed under this Contract, except for those contemplated below:

• • Service 1: Cubenode System S.L.

• • Service 2: Webempresa Europa, S.L.

• • Service 3: Active Campaign, LLC

These services are subcontracted to third parties adopting all mandatory security and contractual measures.

In the event that THE DATA PROCESSOR requires the subcontracting of additional services to those indicated, they must request express authorization from THE CLIENT indicating the services to be subcontracted and the identity of the company or professional with whom the subcontracting is intended.

1. 1. Maintain the duty of secrecy regarding the personal data to which you have had access by virtue of this assignment, even after its purpose ends.
   2. Guarantee that the persons authorized to process personal data undertake, expressly and in writing, to respect confidentiality and to comply with the corresponding security measures, of which they must be appropriately informed.
   3. Keep at the disposal of the CONTROLLER the documentation proving compliance with the obligation established in the previous section.
   4. Guarantee the necessary training on personal data protection for persons authorized to process personal data.
   5. Assist the CONTROLLER in responding to the exercise of the rights of:
   6. Access, rectification, deletion and opposition
   7. Limitation of treatment
   8. Data portability
   9. Unless you are subject to automated individualized decisions (including profiling)

When the affected persons exercise the rights of access, rectification, deletion and opposition, limitation of processing, data portability and not to be subject to individualized automated decisions before the PROCESSOR, the latter must communicate this by email to the address juridico@legalbox. plus . Communication must be made immediately and in no case later than the business day following receipt of the request, together, where appropriate, with other information that may be relevant to resolve the request.

1. 1. It is the responsibility of the person responsible to provide the right to information at the time of data collection.
   2. Notification of data security breaches. The DATA PROCESSOR will notify the DATA CONTROLLER, without undue delay, and in any case before the maximum period of 48 hours, and through reliable written communication, of the violations of the security of the personal data in his/her care of which he/she is aware. , along with all the relevant information for the documentation and communication of the incident. Notification will not be necessary when it is unlikely that such a breach of security constitutes a risk to the rights and freedoms of natural persons. If available, at least the following information will be provided:

• • Description of the nature of the personal data security breach, including, where possible, the categories and approximate number of data subjects affected, and the categories and approximate number of personal data records affected.

• • The name and contact details of the data protection officer or other contact point where further information can be obtained.

• • Description of the possible consequences of the violation of the security of personal data.

• • Description of the measures taken or proposed to remedy the breach of personal data security, including, if applicable, measures taken to mitigate potential negative effects. If and to the extent that it is not possible to provide the information simultaneously, the information will be provided gradually without undue delay.

It is the responsibility of the DATA PROCESSOR to communicate data security violations to the interested parties in the shortest possible time, when it is likely that the violation poses a high risk to the rights and freedoms of natural persons. Communication must be carried out in clear and simple language and must, at a minimum:

1. 1. Explain the nature of the data breach.
   2. Provide the name and contact details of the data protection officer or other contact point where further information can be obtained.
   3. Describe the possible consequences of a breach of personal data security.
   4. Describe the measures adopted or proposed by the DATA CONTROLLER to remedy the violation of the security of personal data, including, if applicable, the measures adopted to mitigate possible negative effects.
   5. Make available to the CONTROLLER all the information necessary to demonstrate compliance with its obligations, as well as to carry out audits or inspections carried out by the CONTROLLER or another auditor authorized by him.
   6. Implement the necessary technical and organizational security measures to:
2. 1. Ensure the ongoing confidentiality, integrity, availability and resilience of treatment systems and services.
   2. Restore availability and access to personal data quickly, in the event of a physical or technical incident.
   3. Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the security of the treatment.
   4. Pseudonymize and encrypt personal data, if applicable.
   5. If a data protection officer is appointed, his/her identity and contact information will be communicated to the CONTROLLER.
   6. Destroy or return to the CONTROLLER the personal data and, if applicable, the media on which they are recorded, once the service has been completed. The return must entail the total deletion of the existing data on the computer equipment used by the person in charge. However, the PROCESSOR may keep a copy, with the data duly blocked, as long as responsibilities may arise from the execution of the service.

APPLICABLE LEGISLATION AND JURISDICTION

In the provisions of this contract, as well as in the interpretation and resolution of conflicts that may arise between the parties, Spanish legislation will apply.

The parties, expressly waiving any jurisdiction that, according to law, may correspond to them, submit for the definitive resolution of all disputes resulting from the contractual relationship to the courts of Huelva.

In the event that one or more of the stipulations of the contract are void, this will not affect the validity of the rest.

Acceptance of all of the above must be complete to contract the service offered by Legal Box Plus. The CLIENT accepts all of them without reservations.

NOTIFICATIONS AND CONTACT

For any notification and/or communication between the parties related to the Contract, it must be made in writing, either by postal mail or email to the following addresses:

Ocean Legaltech, S.L.

C/ Sol y Mar, 24

21130 Mazagón (Huelva)

info@legalbox.plus

The Client: the postal and electronic address provided to Legal Box Plus during the contracting procedure.

Any change of address for notification purposes must be communicated to the other Party in writing at least five (5) business days in advance.