Version 4.0, dated: 04/2026

General Terms of Use

d.velop AG, Schildarpstraße 6-8, 48712 Gescher, Germany ("provider", "d.velop", "we", "us"), provides a web-based platform ("d.velop postbox", "platform" or "system"), which can be used by registered members ("users" or also "recipients").

1 General regulations

1.1 These General Terms of Use ("GTU") apply to all services offered by the provider to consumers (Section 13 German Civil Code (BGB)) via the platform. By signing up, the user agrees to the GTU in effect at that time. The GTU can be viewed at any time at https://postbox.eu/legal/terms-and-conditions-private.

1.2 The provider reserves the right to amend these GTU. Any material changes to the contract will be communicated to the user in writing. The user then has four weeks to object to these changes in text form. Should the user object, the provider has the option to terminate the contract for the services made available to the user without notice.

1.3 These GTU regulate the use of d.velop postbox by recipients (natural persons). In addition, we are planning to offer qualified electronic deliveries (qualified electronic registered delivery service – "QERDS" in accordance with Art. 44 eIDAS) as part of the "d.velop eIDAS postbox" service as of summer 2026. Once this function is available and a recipient uses it, the provisions in section 11 "Qualified electronic registered delivery service (QERDS)" shall also apply. d.velop postbox can also provide non-qualified standard deliveries.

2 Services of the platform

2.1 The functions of the platform can be viewed in the service description at https://postbox.eu/legal/service-description. Insofar as the service description describes functions that exclusively concern the sender, these are not relevant for the recipient. For recipients, the functions for receiving digital deliveries and qualified electronic deliveries (QERDS) as per section 11 are particularly relevant. The provider reserves the right to modify the platform at its own reasonable discretion (Section 315 BGB). The user's interests will be taken into account; essential contractual obligations on the part of the provider must not be impaired.

2.2 The provider is not obligated to provide any platform functions beyond those specified in section 2.1. There is no obligation under the contract to ensure the platform's interoperability with the user's existing hardware and software. The platform is accessed via the Internet. The user is responsible for establishing access to the Internet.

2.3 Users are provided with access to the platform via a browser-based web portal at https://postbox.eu as well as via "postbox eu" mobile applications for iOS and Android. The apps are available via the Apple App Store and the Google Play Store, where they are published under the provider d.velop AG. There is no obligation under the contract to make source code or interface definitions available.

2.4 The content uploaded to the platform for a user is considered external content by the provider. The provider is not responsible for this external content. If, in exceptional cases, the provider makes its own content available via the platform, this content is marked as such.

2.5 Via links on the platform, users can access external websites that are not operated by the provider. Such links are either clearly marked (e.g. as an advertisement) or can be identified by a change in the address line of the browser. The provider is not responsible for the content of these external websites.

2.6 The provider is entitled to offer the platform itself or through third parties ("subcontractors"). The provider will only use subcontractors based in the European Economic Area. Data processing will be carried out exclusively in data centers located in Germany and Austria.

2.7 Once delivered, the received documents remain in the recipient's mailbox and can be accessed and downloaded there by the recipient. Upon completion of delivery, the responsibility for backing up and archiving the document passes to the recipient. The provider does not offer individual restorations from backups.

3 Use of the platform

3.1 In order to use the platform, one-time registration as a user is required via an electronic form in the web portal or in the smartphone apps provided, using an e-mail address, a member name chosen by the user ("user Name", "username") and a password. It is not until the user clicks the corresponding button (e.g. "Sign up") that they submit a legally binding application to the provider. A contract with the user is concluded only upon confirmation by the provider.

3.2 Only natural persons with full legal capacity may become users; other persons require the consent of their legal representative. The provider reserves the right to refuse registration as a user in individual cases without giving reasons.

3.3 Users are responsible for the information they provide on the platform. The data stored by the user on the platform must be complete and truthful. The member name chosen by the user may not infringe any rights of third parties, in particular rights to names and trademarks.

3.4 Users are obliged to keep their password secret and must protect it from unauthorized use by third parties. Users are liable for any misuse of their member profile if they are responsible for the misuse.

4 Cancelation right for consumers

For users as consumers (Section 13 BGB), the following information regarding the cancelation right for the use of services on the platform applies:

Cancelation policy

Cancelation right

You have the right to cancel this contract within fourteen days without providing any reason.

The cancelation period is fourteen days from the date on which the contract is concluded.

In order to exercise your cancelation right, you must inform us (d.velop AG, Schildarpstraße 6-8, 48712 Gescher, Germany, tel.: +49 (0) 2542 9307-0, e-mail: info@d-velop.de) of your decision to cancel the contract by means of a clear statement (e.g. a letter sent by post or an e-mail). You may use the attached sample cancelation form to do so, however its use is not mandatory.

In order to comply with the cancelation period, it is sufficient to send the notification of the exercise of the right of cancelation before the end of the cancelation period.

Consequences of cancelation

If you cancel the contract, we shall reimburse you for all payments we have received from you, including the delivery costs (with the exception of the additional costs resulting from your choice of a delivery method other than the cheapest standard delivery offered by us) immediately and at the latest within fourteen days of the date on which we receive notification of your cancelation of the contract. We will use the same payment method for this refund that you used for the original transaction, unless expressly agreed otherwise with you; in no case will you be charged any fees for this refund.

If you have requested that the services begin during the cancelation period, you must pay us a reasonable amount corresponding to the proportion of the services already provided up to the time you notify us of your exercise of the right of cancelation with respect to this contract, in comparison to the total scope of the services provided for in the contract.

5 Content and duties of the users

5.1 The user is entitled to use the platform for their own non-commercial purposes. Commercial or business use is possible by signing up as a "business" user.

5.2 The provider is a technical service provider. The content posted on the platform by the user or by third parties on the user's behalf will be stored by the provider and, if necessary, processed automatically (e.g. by means of text recognition or other methods). The provider has no knowledge of the content uploaded by the user. It is therefore considered third-party content.

5.3 Users themselves are responsible for compliance with the legal regulations regarding the content posted.

5.4 All users must comply with applicable laws and respect the rights of third parties. In particular, actions intended to render the platform inoperable, compromise its security or hinder its use are prohibited. This includes, in particular, tampering with the physical or logical structure of the platform, as well as attempts to circumvent security mechanisms.

In particular, users are prohibited from

  • violating the property rights of third parties such as trademarks, copyrights and rights to a name,
  • posting content that is offensive, defamatory, pornographic, harmful to minors or otherwise criminally relevant
  • harassing other users and/or third parties in an unreasonable manner, for example through unsolicited advertising (spam) or suggestive or sexually explicit communication
  • using mechanisms, software and/or scripts that go beyond the functionalities and interfaces made available by the provider, in particular if services of the provider are blocked, modified, copied and/or overwritten as a result and these services are required for the contractual use of the platform, and
  • attempting to compromise the platform, the security systems used by the provider or the content retrievable on the platform by altering data (Section 303a German Criminal Code (StGB)), computer sabotage (Section 303b StGB), falsification of evidentiary data (Sections 269, 270 StGB), suppression of evidentiary data (Section 274 StGB), computer fraud (Section 263a StGB), spying on data (Section 202a StGB), interception of data (Section 202b StGB) or other criminal offences, whereby any such attempts will be reported by the provider to the competent public prosecutor's office.

The provider points out that it is not responsible for damages that arise if the platform is used outside the limits described in these GTU or contrary to these GTU.

5.5 The provider does not create backups for individual recovery by the user. The user is responsible for creating their own backups and archiving their documentation. Regardless of this, the provider implements system-side security and redundancy measures to the extent necessary for the operation, integrity and recoverability of the platform. Insofar as the user utilizes qualified electronic deliveries (QERDS), proofs of delivery and evidence will continue to be retained in accordance with statutory retention requirements (see sections 11 and 9.4).

5.6 By using d.velop postbox, the recipient agrees to allow senders that are connected to d.velop postbox to deliver documents and messages to them digitally via their mailbox.

5.7 The user must protect their login credentials and authentication methods (password, passkey and device security measures such as PINs or biometric authentication) from access by third parties and keep them secret. Login credentials and authentication methods must not be disclosed to unauthorized persons. The user must take appropriate measures to prevent unauthorized use of the user account. This includes, in particular, ensuring that an effective local unlocking method (such as a PIN or biometric authentication) is set up for the device used for passkey usage and protected against unauthorized use. Additionally, the user is advised to follow general security and account protection recommendations, especially regarding secure passwords and the protection of authentication methods. Further information can be found in the published recommendations of the Federal Office for Information Security (BSI).

5.8 Security incidents and suspected cases must be reported immediately via the designated contact channels.

5.9 The user is responsible for keeping the information stored in their user account up to date. Changes affecting authorization or use (e.g. inheritance or universal succession), must be communicated to the provider in writing within one month of becoming known.

6 Transfer of rights of use and exploitation

6.1 By uploading content to the platform, the user grants the provider those rights of use and exploitation of the content that the provider needs to deliver the services associated with the platform.

6.2 If text, image, graphic, audio or video files are uploaded to the platform by the user, the user must ensure that they are entitled to the necessary rights of use and exploitation of such content.

7 Liability and availability

7.1 Unless otherwise stated in these GTU, the provider shall be liable in accordance with the statutory provisions. This also applies to legal representatives and vicarious agents of the provider.

7.2 In the event of damages, the provider shall be liable for intent and gross negligence, regardless of the legal grounds. In the case of services provided free of charge, liability for simple negligence is excluded. Otherwise, the provider shall only be liable in the case of simple negligence (a) for damages resulting from injury to life, body or health, and (b) for damages resulting from the breach of a material contractual obligation. In the event of a breach of a material contractual obligation, liability is limited to compensation for foreseeable, typically occurring damage, while liability for indirect damage, in particular loss of profit, is excluded. This does not apply if the provider has fraudulently concealed a defect or, in exceptional cases, has given a guarantee of quality; the same applies to claims under the Product Liability Act.

7.3 The availability of the platform may be temporarily restricted due to technical faults for which the provider is not responsible or due to force majeure (e.g. failure of the power supply and/or Internet, pandemics, fire, explosion, earthquake, storms, flooding, industrial action for which the provider is not responsible), and also due to the performance of maintenance work which serves to maintain and improve the operational capability of the platform. The provider shall be liable for the consequences of limited availability only within the scope of the availability promised to the user in the service description.

7.4 The user shall indemnify the provider against all claims for payment by other users and third parties asserted against the provider due to a legal infringement by the user. The user shall bear all reasonable costs incurred by the provider as a result of such an infringement. This includes in particular the necessary costs of legal defense. This does not apply if the user is not responsible for the infringement. Other claims of the provider against the user remain unaffected.

7.5 The provider ensures the technical availability of the platform within the scope of operational and technical possibilities. Continuous technical availability cannot be guaranteed. Scheduled maintenance and necessary measures to ensure the security and integrity of the platform and data may lead to temporary limitations. In the event of significant disruptions or scheduled maintenance windows, the provider will inform users – where possible – via suitable channels (e.g. within the platform or via a status/information page). The provider shall take technical and organizational measures to ensure that, as a general rule, only the user has access to the content stored in the user account. Exceptions apply only in cases of legal obligations or official or court orders.

7.6 To the extent that the provider engages external service providers or subcontractors to provide the qualified electronic registered delivery service (QERDS) in accordance with the eIDAS regulation (Regulation (EU) No. 910/2014, as amended), the German Trust Services Act (VDG) and the Trust Service Ordinance (VDV), we are liable for their actions as if they were our own.

8 Notice and termination of membership

8.1 Membership of the platform runs for an indefinite period of time.

8.2 The user may terminate membership of the platform in the basic version at any time. The provider may terminate the user's membership with a notice period of 30 days. The provider shall inform the user via e-mail prior to termination so that the user can back up documents in good time. Termination may be effected by deleting the user account.

8.3 Upon termination of the membership, the user's member profile and their access to the platform shall be blocked. The member profile and the content posted by the user will be deleted within 48 hours after deletion of the user account. Data, documents and content intended for further use by the user must be saved by downloading them before termination of the membership. Notwithstanding this, data will not be deleted to the extent and for as long as statutory retention or documentation obligations exist, or if storage is necessary for the establishment, exercise or defense of legal claims. This applies in particular to proofs of delivery and evidence of qualified electronic deliveries (QERDS), which must be retained for a period of seven years (see section 10).

8.4 The right to extraordinary termination for good cause (Section 314 BGB) remains unaffected. Good cause shall be deemed to exist for the provider in particular if the user has committed a serious violation of these GTU or has continued to violate them culpably despite a warning from the provider.

9 Confidentiality and data protection

The provider collects, processes and uses personal data. All information concerning the handling of personal data by the provider can be found in the data privacy notice, which is available at all times at https://postbox.eu/legal/privacy-policy.

10 Qualified electronic registered delivery service (QERDS) – planned

10.1 With the d.velop eIDAS postbox, the existing d.velop postbox product will be expanded to include the functionality of a qualified electronic delivery service (QERDS) in accordance with the eIDAS Regulation (Regulation (EU) No. 910/2014, as amended); this is expected to be available from summer 2026. A QERDS is a legally compliant digital delivery method. Technical records (evidence) are generated showing when a document was made available, whether it was opened and whether the collection deadline has expired. These records serve as proof in legal contexts.

Note: The publicly available principles governing the use, security, verification logic and role allocation of the qualified service are documented in the QERDS Public Policy (policy identifier: https://mobile-services.d-velop.de/policy/qerds/v1). Contractual provisions are set forth in the relevant contract documents.

10.2 This section describes the planned qualified electronic registered delivery service (QERDS). It shall apply only once the QERDS function is available and the recipient receives documents via the qualified electronic registered delivery service. These documents will be visually identifiable in d.velop postbox by a corresponding symbol. Details regarding the technical implementation are subject to change until implementation. The regulations in effect at the time of use and the relevant product information shall apply. Non-qualified standard deliveries remain unaffected by this.

10.3 Recipients are identified for the service as natural persons using a government-issued electronic identity (eID). Strong authentication via passkey (WebAuthn) is used for security-relevant recipient actions. Use of the passkey requires successful local user verification on the end device. This takes place using the unlocking method supported and enabled by the device or operating system, specifically a PIN or biometric authentication. Without successful local user verification, passkey authentication cannot be performed for security-relevant actions. In particular, opening a delivered document for the first time requires successful passkey authentication.

10.4 Following successful validation, the document is made available to the recipient in their mailbox. The recipient can open the document following successful passkey authentication. Passkey authentication requires successful local user verification on the registered end device. Initial opening of a document is currently only possible in the mobile app; in the web client, users can access previously unlocked documents. If a qualified document is not opened within 14 days of delivery, the delivery process is completed with the result "Deadline expired, unread". A deadline expiration notice is then generated. Irrespective of this, the document remains in the recipient's mailbox (until it is deleted according to the usual rules).

10.5 Electronic proofs (evidence) are generated for the key events in the certified delivery process. The following applies for every qualified delivery: proof of delivery is always required, and either proof of opening or proof of deadline expiry is required as proof of result. Recipients can use this information to retrieve proof of delivery in a human-readable format (PDF). The qualified proofs document, in particular, the dispatch and the result of the delivery process (opening or deadline expiry).

10.6 Evidence records are retained for a period of seven years. Once this period has expired, they will be deleted in accordance with deletion and retention rules, unless otherwise required by law.

10.7 To ensure long-term evidentiary value, it may be necessary to re-secure qualified sealed/time-stamped evidence before the cryptographic security expires through appropriate measures (e.g. renewal/re-protection). Information and details regarding the cryptographic validity period and appropriate measures can be found in the relevant policy/disclosure documents of the qualified trust service providers (QTSP) used.

10.8 As explained in 8.3, when an account is deleted, any proofs of delivery and evidence that have already been generated remain unchanged for the duration of the seven-year retention period. These proofs will be deleted only after the retention period has expired, unless otherwise required by law.

10.9 The provider may discontinue the qualified electronic registered delivery service (QERDS). Recipients will be informed immediately in this case. It will be ensured that essential information relating to qualified deliveries (in particular proof/evidence) can be transferred in accordance with legal requirements in such a way that it remains admissible as evidence for the entire seven-year retention period.

11 Final provisions

11.1 German law shall apply. If the user is a consumer and has their habitual residence in another country within the EU or EEA at the time of the establishment of the membership, the application of mandatory legal provisions of that country remains unaffected.

11.2 The assignment of claims of the user in connection with the membership on the platform requires the consent of the provider, which may only be refused for good cause.

11.3 The provider is entitled to transfer the membership with the user to a third party.

11.4 No verbal side agreements were made. Amendments and additions to these GTU as well as all declarations by the parties relating to membership, must be in text form. This also applies to the cancelation of the formal requirement.

11.5 Should individual provisions of these GTU be or become wholly or partially invalid, the validity of the remaining provisions shall not be affected. In this case, the law shall apply. This also applies in the event of a gap in these GTU.

11.6 The provision of the service and the application of the terms and conditions for registration and use shall be non-discriminatory.

Annexes

Sample Cancelation Form

(If you wish to cancel the contract, please complete this form and return it to us.)

To:

d.velop AG Schildarpstraße 6-8 48712 Gescher Germany

E-mail: info@d-velop.de

I/We (*) hereby revoke the contract I/we (*) have concluded for the provision of the following service:

Ordered on:

Name of consumer(s):

Address of consumer(s):

Signature of consumer(s) (only in the case of communication on paper)

Date:

General Terms of Use for Business Customers

d.velop AG, Schildarpstraße 6-8, 48712 Gescher, Germany ("Provider", "d.velop", "we", "us"), provides a web-based platform ("d.velop postbox", "platform", "system" or further names could be the following: "foxdox" or "d.velop documents light"), which can be used by registered members ("Users").

1 General regulations

1.1 These General Terms and Conditions of Use ("GT&Cs") apply to the own use of the platform by companies (§ 14 BGB), public law corporations or public law special funds as end Users. The GT&Cs can be accessed at any time at https://postbox.d-velop.de/legal/termsandconditions#tacbusiness.

1.2 The Provider reserves the right to amend these GT&Cs. Significant contractual changes will be communicated to the User in text form. The User then has 4 weeks to object to these changes in text form. If the User objects, the Provider has the possibility to terminate the contract for the services made available to the User on an extraordinary basis.

1.3 Part of the contractual agreements between the Provider and the User is also a contract for order processing – this can be called up at any time under https://postbox.d-velop.de/legal/dataprocessingonbehalf.

2 Services of the platform

2.1 The functions of the platform can be viewed in the service description at https://postbox.foxdox.de/legal/servicedescription. The Provider reserves the right to change the platform at his own reasonable discretion (§ 315 BGB), taking into account the interests of the User, provided that this does not affect the Provider's essential contractual obligations.

2.2 The Provider does not owe any quality of the platform beyond that specified in clause 2.1. The interoperability of the platform with hardware and software available at the User is not a quality owed. The platform is accessed via the Internet. The User is responsible for creating Internet access.

2.3 Access to the Platform shall be provided to the User as an executable service via a web portal (in the browser) or via an app under the operating systems released for this purpose by the Provider. The making available of source codes or interface definitions is not owed.

2.4 The contents posted on the platform by the User are third-party contents for the Provider. The Provider is not responsible for these external contents. If, in exceptional cases, the Provider provides his own content via the platform, this content is marked as such.

2.5 Via links in the Platform, Users can access external Internet sites that are not operated by the Provider. Such links are either clearly marked (e.g. as an advertisement) or can be identified by a change in the address line of the browser. The Provider is not responsible for the content of these external internet pages.

2.6 The Provider is entitled to offer the platform itself or through third parties ("subcontractors"). The Provider will only use subcontractors based in the European Economic Area and that carry out data processing exclusively in data centers located in Germany.

3 Use of the platform

3.1 In order to use the Platform, a one-time registration as a User is required via an electronic form in the web portal or in the smartphone apps provided, using an e-mail address, a member name chosen by the User ("User Name", "Username") and password. Only by clicking on the corresponding button (e.g. "register"; in the case of fee-based services, e.g. "order fee-based tariff") does the User submit a legally binding application to the Provider. This will be confirmed or rejected by the Provider; only with the confirmation by the Provider a contract with the User is concluded.

3.2 Users can only become natural persons with unlimited legal capacity; other persons require the consent of their legal representative. The User is free to register several times as a member of the platform under different member names. The Provider reserves the right to refuse registration as a User in individual cases without giving reasons.

3.3 The User is responsible for the information he provides on the platform. The data stored by the User on the platform must be complete and truthful. The member name chosen by the User may not infringe any rights of third parties, in particular no name and trademark rights.

3.4 The User is obliged to keep his password secret and must protect it from unauthorized use by third parties. The User is liable for any misuse of his member profile if he is responsible for the misuse.

4 Prices, terms of payment, default

4.1 Basic membership of the platform is free of charge. The User can upgrade his membership at any time and change to a fee-based tariff.

4.2 The amount of the costs for chargeable services on the platform is shown in the tariff overview. For the chargeable services, the tariffs on the day of the order apply, which are understood to include VAT at the statutory rate. Tariff changes become effective when the User has agreed to the selected tariff.

4.3 Invoices issued by the Provider are delivered to the User account of the User and are due immediately and payable without deduction. The payment is only considered as effected if the Provider can dispose of the payment amount. Only the payment methods listed in the service description https://postbox.foxdox.de/legal/servicedescription are available.

4.4 The User shall be in default if he has not paid within thirty days of the due date and receipt of an invoice or comparable payment schedule.

5 Content and Obligations of the Users

5.1 The User is entitled to use the platform exclusively for his own commercial or business purposes.

5.2 The Provider is only a technical service Provider. The content posted on the Platform by the User or by third parties on the User's behalf is merely stored by the Provider and, if necessary, automatically processed by means of text recognition or other methods. The Provider has no knowledge of the content uploaded by the User. Therefore, these are third-party contents.

5.3 The User himself is responsible for compliance with the legal regulations regarding the content posted for the User.

5.4 Every User has to observe the applicable law and to protect the rights of third parties.

In particular, Users are prohibited from doing so,

  • to violate the property rights of third parties such as trademarks, copyrights and rights to a name
  • to post insulting, slanderous, pornographic, youth-endangering or otherwise criminally relevant contents
  • to harass other Users and/or third parties unreasonably, for example through unsolicited advertising (spam) and offensive or sexually-oriented communication
  • use mechanisms, software and/or scripts that go beyond the functionalities and interfaces provided on the platform by the Provider, in particular if services of the Provider are blocked, modified, copied and/or overwritten as a result and these services are required for the contractual use of the platform, and
  • to attempt to compromise the platform, the security systems used by the Provider or the contents retrievable on the platform by altering data (§ 303a German Criminal Code), computer sabotage (§ 303b German Criminal Code), falsification of evidentially relevant data (§§ 269, 270 German Criminal Code), suppression of evidentiary data (§ 274 StGB), computer fraud (§ 263a StGB), spying on data (§ 202a StGB), interception of data (§ 202b StGB) or other criminal offences, whereby corresponding attempts are reported by the Provider to the responsible public prosecutor's office.

5.5 The Provider does not create backups for the User.

6 Transfer of rights of use and exploitation

6.1 By placing content on the Platform, the User grants the Provider those rights of use and exploitation of content that are required by the Provider to enable the Provider to provide the User with the services associated with the Platform.

6.2 If text, image, graphic, audio or video files are placed on the Platform by the User, the User must ensure that he/she is entitled to the necessary rights of use and exploitation of such content.

7 Liability and availability

7.1 Unless otherwise stated in these GT&Cs, the Provider shall be liable in accordance with the statutory provisions. This also applies to legal representatives and vicarious agents of the Provider.

7.2 In the event of damages, the Provider shall be liable for intent and gross negligence, regardless of the legal grounds. In the case of services provided free of charge, liability for simple negligence is excluded. Otherwise, the Provider shall only be liable in the case of simple negligence a) for damages resulting from injury to life, body or health, and b) for damages resulting from the breach of a material contractual obligation. In the event of a breach of an essential contractual obligation, liability is limited to compensation for foreseeable, typically occurring damage and liability for indirect damage, in particular loss of profit, is excluded. This does not apply if the Provider has fraudulently concealed a defect or, in exceptional cases, has given a guarantee of quality; the same applies to claims under the Product Liability Act.

7.3 The availability of the platform may be temporarily restricted due to technical faults for which the Provider is not responsible or due to force majeure (in particular due to failure of the power supply and/or Internet, pandemics, fire, explosion, earthquake, storms, flooding, industrial action for which the Provider is not responsible), and also due to the performance of maintenance work which serves to maintain and improve the operational capability of the platform. The Provider shall be liable for the consequences of limited availability only within the scope of the availability promised to the User in the service description.

7.4 The User releases the Provider from all claims of other Users and third parties directed to payment, which are asserted against the Provider because of a violation of rights of the User. The User takes over all the Provider arising and reasonable costs, which result from such a violation of rights. This includes in particular the necessary costs of legal defence. This does not apply if the User is not responsible for the infringement. Other claims of the Provider against the User remain unaffected.

8 Notice and termination of membership

8.1 Membership of the platform runs for an indefinite period of time.

8.2 The User may terminate the membership with the platform in the basic version at any time. The Provider can terminate the User's membership on the platform with a notice period of 30 days. Before the Provider terminates the membership, the User will be informed by the Provider by e-mail so that he can save his documents in time. The termination can be effected by deleting the User account.

8.3 If the User makes use of chargeable services, the contract period resulting from the tariff overview shall apply. If neither the User nor the Provider reduces the use of the chargeable Services to free membership at the latest two weeks before the agreed term expires, the term of the chargeable Services shall be extended again by the corresponding period from the tariff overview, i.e. as a rule by a further month in each case, but no longer than by a further year in each case. The termination or termination of a fee-based service does not affect the User's free membership of the Platform.

8.4 Upon termination of the membership, the User's member profile and his access to the Platform shall be blocked. The member profile and the content posted by the User will be deleted within 48 hours after the User's account has been deleted. Data, documents & contents intended for further use by the User shall be secured by downloading them before termination of the membership.

8.5 The right to extraordinary termination for good cause (§ 314 BGB) remains unaffected. An important reason for the Provider is given in particular if (i) the User has continued and culpably violated these GT&Cs seriously or in spite of a warning from the Provider, or (ii) the User is in default with the payment of the costs for the use of chargeable services in spite of a warning from the Provider and a grace period for payment of at least two calendar weeks.

9 Confidentiality, data protection and naming as reference customer

9.1 The Provider collects, processes and uses personal data. All information on the handling of personal data by the Provider can be found in the privacy policy, which is available at any time at https://postbox.foxdox.de/legal/privacypolicy.

9.2 With regard to the personal data processed by the User on the platform, the Provider is a commissioned processor within the meaning of Art. 28 DSGVO. The regulations on order processing are based on the contract on order processing – this can be called up at any time under https://postbox.d-velop.de/legal/dataprocessingonbehalf.

9.3 The Provider is entitled, taking into account the interests of the User, to name the User as a business customer of the Provider vis-à-vis third parties (e.g. for presentations to other potential Users). A naming of the User in advertising of the Provider directed to the general public (e.g. website, brochures) requires the prior consent of the User.

10 Final provisions

10.1 German law shall apply, excluding the conflict of laws provisions; Art. 3 para. 3, para. 4 Rome I Regulation shall remain unaffected.

10.2 The assignment of claims of the User in connection with the use of the platform requires the consent of the Provider, which may only be refused for good cause.

10.3 The Provider is entitled to transfer the membership with the User to a third party.

10.4 Oral collateral agreements have not been made. Amendments and supplements to the contract including these GTC-B as well as all declarations of the parties relating to the contract must be in text form. This also applies to the cancellation of the formal requirement.

10.5 Should individual provisions of these GT&Cs be or become invalid in whole or in part, this shall not affect the validity of the remaining provisions. In this case the law shall apply. The same shall apply in the event of a gap in these GT&Cs. In this case, the parties undertake to replace the invalid or incomplete provision without delay by a valid provision which comes as close as possible to the economic intention of the parties at the time of conclusion of the contract.

As of: 08.2025