Legal
Terms of Service
1. Introduction and Acceptance
These Terms of Service ("Terms") govern your access to and use of the GDPR Compliant Site service ("Service"), operated by AA Innovations, varnostne tehnologije d.o.o. ("we", "us", "our"), accessible at gdprcompliantsite.com.
By using the Service — including initiating a free scan, purchasing a report, subscribing to a certificate plan, or using the consent manager — you agree to be bound by these Terms in their entirety. If you do not agree, do not use the Service.
The Service is intended for any person or organisation operating a website subject to the General Data Protection Regulation (EU) 2016/679 ("GDPR"), including individuals, sole traders, and legal entities.
2. Description of the Service
GDPR Compliant Site provides automated GDPR compliance analysis of websites. The Service includes:
- Basic Scan — a free automated compliance scan with a summary report delivered by email
- Full Report — a detailed compliance analysis including findings, fix instructions, a generated Privacy Policy, and a processing activities register
- Certificate Basic / Pro — a verified GDPR compliance certificate with periodic automated re-scans, a public verification page, and a certificate badge
- Consent Manager — a hosted JavaScript consent management solution, personalised based on the website scan, available in Basic (local cookie storage) or Pro (audit trail) edition
- Additional scans — on-demand re-scans of existing or new websites
The Service may be modified, extended, or partially discontinued at any time. We will notify active subscribers of material changes at least 30 days in advance.
3. Compliance Methodology and Limitations
Our compliance analysis is based on a regulatory-grade methodology consistent with standards applied by European data protection supervisory authorities. We stand behind the correctness and integrity of our methodology.
What we guarantee: The methodology applied is sound, European in origin, and consistent with regulatory practice. Our analysis reflects the best possible assessment given the information technically available to us at the time of the scan.
However, the nature of web technology means that certain elements may be beyond our reach. We expressly disclaim liability for inaccuracies or omissions arising from:
- Elements that are technically hidden, dynamically generated, or loaded conditionally — for example, scripts that only activate after user interaction, A/B testing variants, or geolocation-triggered content
- Elements embedded in iframes, shadow DOM, or loaded via mechanisms that prevent external observation
- Changes made to the website between the time of the scan and the time of the analysis
- Third-party services that alter their behaviour based on the origin of the request
- Errors inherent in any software system — no software can guarantee 100% accuracy under all circumstances
Important: A compliance report from GDPR Compliant Site is an analytical tool to support your compliance efforts. It does not constitute legal advice and does not guarantee that your website is free from GDPR violations. Regulatory findings by supervisory authorities may differ from our analysis.
4. Subscriptions and Payment
Subscription plans (Certificate Basic, Certificate Pro) are billed annually, in advance. The subscription period begins on the date of payment confirmation.
| Plan | Billing | Renewal |
|---|---|---|
| Full Report | One-time payment | No renewal |
| Consent Manager Basic / Pro | One-time payment | No renewal |
| Certificate Basic | Annual, in advance | Automatic — see below |
| Certificate Pro | Annual, in advance | Automatic — see below |
| Additional scans | Per scan, in advance | No renewal |
Automatic renewal: Annual subscriptions renew automatically at the end of each subscription period. We will notify you by email at least 30 days before the renewal date, stating the renewal amount and the date of charge. You may cancel at any time before the renewal date to prevent the charge.
The Service remains available until the end of the paid subscription period, regardless of when cancellation is requested within that period.
5. Refund Policy
All payments are final. No refunds are issued for services that have been ordered and delivered, including:
- Full compliance reports that have been generated and sent
- Consent Manager scripts that have been issued
- Certificate subscriptions for the current subscription period
- Additional scans that have been completed
If a service has been purchased but not yet delivered due to a technical failure on our part, we will either deliver the service or issue a full refund at our discretion.
6. Limitation of Liability
To the maximum extent permitted by applicable law, our total liability to you for any claim arising out of or relating to these Terms or the Service — whether in contract, tort, or otherwise — shall not exceed the greater of:
- The total amount paid by you for the Service in the three (3) months immediately preceding the event giving rise to the claim, or
- The equivalent of three months of your applicable subscription fee
We are not liable for any indirect, incidental, consequential, or punitive damages, including but not limited to loss of revenue, loss of data, regulatory fines imposed by supervisory authorities, reputational damage, or costs of remediation.
This limitation applies even if we have been advised of the possibility of such damages and reflects a fundamental part of the basis of the bargain between us.
7. Intellectual Property
All content, software, methodologies, algorithms, report formats, visual designs, and documentation forming part of the Service are the exclusive intellectual property of AA Innovations, varnostne tehnologije d.o.o. or its licensors.
You are granted a limited, non-exclusive, non-transferable licence to use the Service and its outputs solely for your own internal compliance purposes. You may not:
- Reproduce, resell, sublicense, or distribute our reports, methodologies, or outputs to third parties for commercial gain
- Reverse engineer, decompile, or attempt to extract our compliance methodology, scoring logic, or software
- Use automated means to access the Service beyond what is explicitly permitted
- Represent our outputs as your own proprietary analysis or tool
8. Suspension and Termination
We reserve the right to suspend or terminate your access to the Service, with or without prior notice, in the following circumstances:
- Violation of our intellectual property rights, including unauthorised reproduction or resale of our outputs
- Any material breach of these Terms not remedied within 14 days of written notice
- Non-payment of due amounts
- Abuse of the Service, including automated scanning without authorisation, submission of false or fraudulent information, or actions that compromise the integrity or availability of the Service
- Any use of the Service for unlawful purposes
Upon termination, your access to the Service ceases immediately. Your compliance reports and data will remain accessible in your account for 7 days following termination, after which they will be permanently deleted. We recommend downloading any reports you wish to retain before termination.
9. Your Responsibilities
You are responsible for:
- Providing accurate and truthful information when using the Service
- Ensuring you have the right to submit the website URLs you provide for scanning
- Implementing the recommendations in your compliance report — we provide guidance, but implementation is your responsibility
- Keeping your account credentials secure and confidential
- Ensuring that your use of the Service complies with all applicable laws
10. Changes to These Terms
We may update these Terms from time to time to reflect changes in our Service, applicable law, or business practices. We will notify active subscribers by email at least 30 days before any material changes take effect.
Continued use of the Service after the effective date of updated Terms constitutes your acceptance of the changes. If you do not agree with the updated Terms, you may cancel your subscription before the changes take effect.
11. Governing Law and Disputes
These Terms are governed by and construed in accordance with the law of the Republic of Slovenia, as a member state of the European Union, without regard to its conflict of law provisions.
Any dispute arising out of or in connection with these Terms or the Service that cannot be resolved amicably shall be subject to the exclusive jurisdiction of the competent courts in Ljubljana, Slovenia.
Nothing in this clause limits your rights under applicable EU law, including the right to access alternative dispute resolution mechanisms or the European Online Dispute Resolution platform at ec.europa.eu/consumers/odr.
12. Contact
For any questions regarding these Terms, please contact us at:
AA Innovations, varnostne tehnologije d.o.o.
Email: info@gdprcompliantsite.com