General

Terms and Conditions for AyMINE and AySAFE Applications

Basic Definitions

Application means:

• The AyMINE application available via the internet address www.aymine.com, space.aymine.cz, space.aymine.de, space.aymine.fr, space.aymine.pl, space.aymine.it,
• The AySAFE application provided at an address agreed upon with the client,
• The AyMINE application available as a mobile application on servers designated for application distribution.

Client means an organization or a private individual for whom at least one Client Account has been created.

Client Account means a user account that enables the creation of its own user accounts.

User Account means data enabling the use of any of the Applications by a single user or an external system in accordance with the permissions associated with that account.

Personal Data means any data associated with information that allows the identification of a specific person and the assignment of data to them.

Module means a part of the application comprising specific functionality.

Sensitive Personal Data means any personal data that could cause the person to whom it relates to be persecuted or accused, or that could offend their honor or dignity. Sensitive personal data also includes all special categories of personal data under the GDPR.

Who Is Authorized to Use the Application

A user can be any person over the age of 14. If the legislation of your country sets a higher age limit for the free use of internet services, you are obliged to comply with this limit.

By approving the terms and conditions, you express your agreement with these terms.

Contractual Relationships

The application is provided by the application operator, PDQM, s.r.o., with its registered office in Prague, Ve Střešovičkách 169/37, Prague 6, Company ID (IČ): 278 70 588 (hereinafter referred to as the Provider).

The other party to the contractual relationship is you personally (hereinafter referred to as the User).

Exclusion of Intermediaries

This agreement applies exclusively to situations where the Application is provided by PDQM. If any application is provided to you by another entity, PDQM bears no responsibility for the provided service and its features.

Scope of the Agreement

The agreement is valid for users who set up their accounts independently and individually. An organization, association, or any other group that wishes to manage accounts independently must have its own separate agreement. This agreement cannot be invoked or relied upon in such cases.

Place and Subject of Performance

The application is a service provided via remote access (hereinafter: via the Internet). The subject of the information service is the provision of information management and ensuring remote access to it.

Ownership of Information

All information and files that you place into the application are your property, and it is entirely your responsibility to ensure that their processing complies with the legislation of your country.

The Provider accesses your information solely for the purpose of providing the system services. Under this agreement, the Provider is not authorized to carry out any processing other than what is necessary to provide the services.

Provider – Responsibilities and Authorities

Obligations of the Provider

• To manage user data with due diligence in order to prevent its loss, breach of protection, or identity compromise.
• To ensure access to information and services via the Internet.
• To protect the Application and all data so that no one who has not been explicitly granted the right directly by the Client can access the stored data.
• To resolve all user inquiries in the event that the service provider has a legal obligation to process them in its capacity as the controller of your data.
• Not to provide data from the application to third parties, except for data that the user themselves publishes or makes accessible to a third party, or in the event that the provider is obliged to do so based on applicable legislation.
• To comply with the rules and privacy policy (GDPR).

Availability Guarantee

The availability guarantee may be modified by a separate SLA agreement between the Provider and the Client.

• The Provider manages the Application in a manner ensuring 99% availability between 6:00 AM and 10:00 PM CET. Availability is defined as availability at the access point to the public internet.
• Availability is calculated within the billing period.
• Availability is not guaranteed for the period between 10:00 PM and 6:00 AM, but the Provider strives for maximum possible availability during this period as well, unless prevented by the necessity of technical management and maintenance.
• In the event that the availability standard is not met, the Provider is entitled to a discount amounting to twice the sum corresponding proportionally to the price for the duration of the system unavailability beyond the specified limit, up to 100% of the price for the given period. (Note: The original Czech text states "Poskytovatel má nárok na slevu" - "The Provider is entitled to a discount", which appears to be a typo in the original text; it typically should be "Uživatel/Klient má nárok na slevu" - "The User/Client is entitled to a discount".)

Exclusion of Liability

The Provider bears no responsibility for any direct, indirect, mediated, foreseeable, or unforeseeable consequences that the use of the application may cause to the user themselves or, through them, to anyone in their surroundings.

The Provider will make reasonable efforts to protect all information and ensure the availability of the provided services. By this agreement, the User accepts that the application provider bears no responsibility for:

• Loss, damage, misuse, or disclosure of data if end-to-end encryption tools are not utilized.
• Temporary or long-term unavailability of data for any reason, unless a separate SLA (Availability and Technical Support Agreement) is concluded.
• Non-delivery of notifications or messages outside the application (especially by email) and any consequences resulting from non-delivery.
• The legality of the data managed by users within the application.
• Any consequences of the misuse of information stored in the Application if end-to-end encryption tools were not used.
• The consequences of using the application by AI agents, particularly the impacts on performance and potential access blocking in the event of using multiple concurrent accesses.

Exclusion of Liability due to Force Majeure

• The Provider is not responsible for unavailability caused by influences that are clearly beyond their control. Force majeure includes Internet outages, whether due to a malfunction, a targeted attack on the infrastructure, or problems on the Provider's side.
• The guarantee does not apply to cases of temporary disconnection of the application from the Internet in the event of an acute threat of a cyber attack that prevents the functioning of the application or directly threatens its security.
• Periods of limited availability of the Application between 10:00 PM and 6:00 AM, or from 12:00 AM to 12:00 PM (0–24h) on public holidays, due to necessary, pre-announced maintenance.
• The guarantee does not apply to cases where the availability of the Application is restricted to the Client due to non-fulfillment of their obligations.
• The Provider provides the Applications in accordance with the legal order of the Czech Republic. No activity of the Provider mandated by applicable legislation can be considered a breach of their liability.

Limitation of Liability

To the extent permitted by applicable legal regulations, the Providers bear no liability in any way for any inability to use the Application or any restrictions on use, nor for any consequences caused by the use of the Application on business, personal life, reputation, goodwill, or any other evaluated metric.

The maximum liability of the Provider towards the Client arising from this agreement is limited to the amount of CZK 500,000 / EUR 20,000. This amount applies in total to all possible breaches and is non-exceedable.

Authorities of the Provider

• To send users information related to the application, the service delivery period, or other information relevant to users, including notifications regarding application services. The Provider is authorized to send important information to the user's email address as well.
• To temporarily suspend the provision of application services, particularly for maintenance reasons, at any time and on any day. (This may be restricted by a separate SLA agreement.)
• To temporarily or permanently block a Client or user from using the Application if they fail to comply with the terms of the agreement, threaten the security or reliability of the application through targeted damage, or perform attacks on any part of the Application.
• To display offers for their own services as well as third-party offers to users who use the application free of charge.
• To provide additional services for a fee.
• To change the scope of the provided services, including the right to restrict or completely cancel certain services.
• To monitor compliance with the terms and conditions by users, even without their knowledge and prior notice.
• To temporarily or permanently block the account of a User who systematically utilizes more than 2 concurrent accesses. To block the account of a user whose access demonstrably shows signs of automated/machine access and system load that does not correspond to the work of a human user.

Client – Responsibilities and Authorities

Obligations of the Client

• The Client is responsible for compliance with legal obligations regarding the users whom they allow access to the system, as well as for the published content.
• The Client is responsible for the manner in which the Application is used by the Users to whom they have granted access. In particular, they are responsible for ensuring that users never disclose access credentials to anyone and do not allow a trusted device registered to their account to be used by anyone other than themselves.
• The Client is fully responsible for the use of the Application by AI agents. They are responsible for ensuring that the AI agent uses the application fully in accordance with the user regime and via a single access.

The Client is further obliged:

• To protect their application access credentials against misuse.
• To use the application in accordance with the legislation of their country.
• To comply with the terms and conditions of using the application.
• To ensure that each User account is used by only one natural person.
• To use the system exclusively in a manner that does not bypass or disrupt its protective mechanisms.
• Not to disclose details about the system's operation that could help breach its security to anyone other than their own Users.
• To pay all invoices for rental and related services within their validity period.
• In case of disagreement with the terms and conditions, not to use the Application, or to terminate its use immediately.
• If the Client's Users are granted access to instructional information (e.g., via a non-public link) and this information is not publicly available, the Users shall keep these accesses confidential. Unless explicitly prohibited, the Client's Users may distribute any information among themselves, but they must not publish it in a way that allows people or algorithms outside the Client to access it. If they need to make it available to third parties (e.g., to their suppliers), they may do so exclusively on the basis of written consent.

The Client and Users Are Prohibited From

• Using the application for any activity that is contrary to good morals, or that may offend, defame, or morally or socially discredit other persons.
• Offending, humiliating, or in any way disrupting good morals in communication with other users.
• Making any modifications to the application, accessing the application interface in any way other than through the Application and its components, or attempting to disrupt the operation of the application or the security of the stored information and data.
• Attempting to disrupt the smooth operation of the Application by inserting data that would interfere with the application, accessing non-public system interfaces, attacking, or attempting to breach the application's security systems.
• Using the Application as the sole repository of information that is necessary for their own safety and life or that of anyone else.
• Storing information in the Application without additional appropriate protection, the disclosure, damage, loss, or unavailability of which may directly or indirectly endanger the life, health, freedom, social status, or property of the User or any third party.
• Subleasing the Application or any part of it without the express written consent of the provider. This does not apply to cases of shared use of the Application by multiple entities within the scope of a collaboration.

User – Responsibilities and Authorities

The User Standardly Undertakes

• To protect their application access credentials against misuse.
• To use the application in accordance with the legislation of their country.
• To comply with the terms and conditions of using the application.
• To ensure that each user account is used exclusively by a single person.
• To use the system in a manner that does not jeopardize the behavior of the system or its security. (Note: The original Czech text contains a logical typo "Používat sytém tak, že ohrožuje..." – "To use the system in a way that jeopardizes...", but based on context, it implies a negative commitment, translated here to maintain standard legal sense).
• In case of disagreement with the terms and conditions, not to use the application, or to terminate its use immediately.
• To protect all information that could endanger human life or safety, or threaten the business and operations of the client, using the encryption tools provided by the Application.

Right to Assign the License

The Client is entitled to use the Application solely for purposes related to their own activities. They are explicitly not authorized to rent or otherwise provide user access for a fee. If the Provider discovers such behavior, they are entitled to disable the use of the Applications immediately and without compensation.

Interconnection of Applications with Other Information Systems

The Provider is entitled to refuse any interconnection of the Application with other systems if such interconnection would threaten the reliability, functionality, or security of the Application, potentially jeopardize the data of other clients, or if such interconnection could lead to the circumvention of the legitimate rights of the owner or a breach of the terms of this agreement.

By consenting to the interconnection, the Provider does not issue any warranty, guarantee, or similar form of confirmation that the interconnection will function according to the Client's expectations. The Client bears full responsibility for the consequences of the interconnection with respect to other systems. The provider explicitly bears no liability for the impacts of the Application's interconnection on the connected systems.

The Provider has the right to revoke consent to the interconnection at any time if the interconnection disrupts the smooth operation of the Application or threatens its security or availability. They are entitled to immediately disconnect an interconnection that disrupts operations or actively prevent its connection, even without the consent of the Provider/Developer who created such an interconnection.

Price for Using the Application

The price for using the Application is governed by the public price list listed on the official pages of the Application. The price is based on the number of Users working with the Client's data and with regard to the number of application modules that the Client utilizes.

Any change to the price of the application will always be in accordance with the conditions specified for all users as well as new users.

In the event that a discount for the initial period is specified for new users, it applies to existing clients if they have been using the Application for a total duration shorter than the duration of the discount.

Personal Data Processing

Neither the Provider nor the Application Owner has any access to the Client's data, and they are not processors of this data within the meaning of the GDPR regulation. The Provider provides the tools (data space + algorithms) for data processing performed by the Client and its users.

Therefore, without additional services, neither the Provider nor the Application Owner is a controller or a processor of the personal data managed by the Provider within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR Regulation). For the purposes of the remaining text of this section, the Controller refers to the Provider of the AyMINE product licenses who manages personal data therein. (Note: The original Czech text contains a logical flip between Provider/Processor/Controller roles in this section, translated literally to match your source).

The Provider undertakes:

• To provide the Controller with the information necessary to demonstrate that the processing carried out complies with the requirements of the GDPR Regulation, in particular to demonstrate the implementation of appropriate technical and organizational measures. Technical and organizational measures must be set up in such a way that the fulfillment of all obligations of the Processor arising from the Regulation, related legal regulations, and standards is ensured by the Processor. Technical and organizational measures shall ensure the integrity of personal data, confidentiality, transparency, isolation of the Controller's Personal Data processing from the data of other Controllers, and accountability.
• To immediately inform the personal data controller of any contact by the Office for Personal Data Protection and provide the necessary cooperation required to resolve all requests of this Office.
• To provide the necessary cooperation in fulfilling any requests of data subjects that arise from the GDPR Regulation and whose resolution requires the cooperation of the product owner.

Data Processing Agreement for Extended Product Support

The Provider may become a Processor within the meaning of the GDPR Regulation in the event that it provides extended Processing services to the Client. In the case of extended support, it becomes a processor and is governed by the rules of the GDPR Regulation, and its liability is backed by the following processing agreement:

• The Application Provider, as the processor of personal data, processes data exclusively at the request of the provider and within the precisely defined scope. (Note: "at the request of the provider" reflects the original Czech "na žádost poskytovatele", though legally it typically means "at the request of the Controller/Client").
• The Controller and the Processor shall adopt measures necessary to ensure the confidentiality, integrity, and availability of the Controller's personal data during its processing by the processor. The measures must be appropriate to the risk arising from a potential breach of their security. In particular, they are obliged to take measures against unauthorized access to personal data, its alteration, destruction, loss, theft, or other unauthorized processing.
• The Processor undertakes to assist the Controller in ensuring compliance with obligations under Articles 32 to 36 of the Regulation.
• The Processor undertakes to immediately inform the personal data controller of any contact by the Office for Personal Data Protection and provide the necessary cooperation required to resolve all requests of this Office.
• The Processor undertakes to provide the necessary cooperation in fulfilling any requests of data subjects that arise from the Regulation and whose resolution requires the cooperation of the processor or even the processor in the role of the Product Owner.
• The Processor is obliged to enable inspections, audits, and other analogous activities that are necessary for fulfilling the role of the Controller under the Regulation.
• The Processor undertakes that within the fulfillment of the Processor's obligations, personal data from the Controller's records will not leave the product space unless explicitly requested by the Controller. If requested, the processor will take the measures necessary to keep the data secure so that it is not damaged, destroyed, or exposed to the risk of misuse.

Termination of Contractual Relationship

Both parties to the contractual relationship have the right to terminate the contractual relationship at any time without giving a reason.

The Client has the right to request an export of the stored data in a format that allows further data processing (sql, json, xml). (Note: The original Czech text mistakenly uses "Poskytovatel má právo" here, but the context clearly indicates the Client/Klient has this right). Data export is a paid service; the Provider will estimate the complexity in advance and, upon acceptance of the price, provide the data no later than 30 days from the approval of the request price, but not before the Client pays the service price against a proforma invoice.

In the event that the agreement is terminated by the Provider and the termination is not due to a serious breach of the terms and conditions by the Client or its Users, the Client is entitled to an export of all stored data free of charge. The Provider is obliged to do so no later than 3 days after the termination of the service provision.

Automatic Termination of Service Provision

The agreement is automatically terminated if the Client has not paid an invoice within 60 days after the due date of the last invoice. A case where the Client has not accepted an invoice sent in the manner customary up to that time is also considered non-payment.

In the event of non-payment of an invoice by the due date, the Provider is entitled, but not obliged, to notify the Client's Users through the tools of the Application. In doing so, it is entitled, but not obliged, to warn multiple or all Users that the provision of the Application will be terminated.

In the case of Clients who use the system free of charge, the provision is terminated after 6 months during which no user of the Client has used the service. The Provider will remove all records and files created or stored by the user in the application within a range of between 6 and 12 months from the last use of the service. Until the data is deleted, the user has the right to start using AyMINE again.

The Provider is not obliged to notify the Client in advance of the termination of the service provision if the Client has not used it in any way for more than 6 months.

In the event that the Client is in default with the payment of costs for services according to the price list (Note: The original text text contains a typo "Poskytovatel je v prodlení s úhradou" – changed here to Client based on context), the Provider or the Application Owner is entitled to block access to the Application until full payment for the service is made, including payment of default interest and related taxes.

Removal of Data of a Specific User

Both the Client and the Provider may cancel a user's account based on the Client's decision.
If the Client has terminated the last User account, it is deemed that they are definitively ceasing to use the Application. The Provider has the right to cancel the Client's account.

If the Client announces the termination of the use of the Application, the application provider is obliged to invalidate the Client's Application and prevent access to the data. No later than 30 days from the cancellation of the account, the Provider is obliged to irreversibly remove all data and stored files. The Provider does not retain any backup after this date.

Removal of Retained Client Data

The Operator manages retained data throughout the entire time the Client has an account, in accordance with the standard lifecycle of such data. In accordance with these rules, certain data is retained only for a limited period:

• System logs allowing the tracking of system behavior are retained for 3 months.
• Records of user work (application logs) are retained for 1 year.
• Internal messages between users are retained for 1 year.
• Records marked as deleted (in the trash bin) are retained for 3 months.
• Records associated with a specific User are retained for 3 months after the cancellation of the User Account.

The above times are minimums; the Provider does not guarantee their removal immediately after the interval expires.

The Customer has the right to request a longer data retention period only on the basis of a separate SLA agreement.

Amendments and Availability of the Terms and Conditions

The Provider is entitled to amend the terms and conditions.

The Provider is obliged to inform about an amendment to the terms and conditions at least 30 days before the amendment takes effect. The Provider fulfills this obligation by providing information in the form of a message within the application. The message is considered delivered upon the date of delivery to the inbox within the application.

The service Provider undertakes to keep all versions of this agreement along with their validity dates for a period of at least 5 years from the date they ceased to be valid.

In the event that the Client does not agree with the amendment to the terms and conditions, they shall inform the Provider. The Client shall cease using the Application within three months after the notice, during which time the original terms remain in force for them. If they had prepaid usage for a period longer than 3 months, the terms and conditions in the original wording apply until the end of the prepaid period.

Temporary and Final Provisions

If any part of the terms and conditions proves to be inapplicable in a specific relationship or in conflict with currently applicable legislation, it shall not be applied, but this does not affect the validity of the remaining parts of the terms and conditions.

Legal Order

All provisions of the agreement and other relationships with you are governed by the laws applicable in the home country of the Provider. If the home country is not specified in the agreement by the Provider, the laws of the Czech Republic shall apply.

Both the Provider and the Client agree that all commercial and other disputes, in so far as they relate to the Product Owner, may be resolved exclusively within the legal order of the Czech Republic.

These terms and conditions are effective from June 1, 2026.

PDQM, s.r.o.
ID: 278 70 588
Praha 6, Ve Střešovičkách 169/37

Amendments to the Terms and Conditions Effective from June 1, 2026

The above terms and conditions were updated as of June 1. The implemented changes include:

• The terms and conditions now also apply to the AySAFE application.
• The terms and conditions have been simplified and no longer apply to cases where the Application is provided by a provider other than PDQM.
• The Client is responsible for the use of AI agents.
• A single user account may only be used concurrently by up to two accesses. This restriction does not affect the work of human users in any way, but it prohibits the bulk creation of access by AI agents and unreasonable system load.