1. if the User has provided untruthful information during registration for the creation of the Account or subsequently in the context of his relationship with the Company or with its Partners;
2. if the User refuses to provide information relating to the Account and his identity, where appropriate on requests from the judicial authority, the public order authorities and any other authority entitled to do so under the applicable laws;
3. in case of violation by the User of these General Conditions and / or of the contractual agreements in place with the Partners of the Company;
4. in case of fraudulent or illegal use, even if only suspected, of the Platform and/or the Services;
5. in order to protect the User and/or the Platform from identity theft and/or other fraudulent activity of the User and/or third parties;
6. if so requested by the judicial authority, by the public order authorities and by any other authority entitled to do so under the applicable laws.

1. 1. 1. In the event of suspension, the Company may decide – at its sole discretion and unquestionable judgment – whether to reactivate or permanently cancel the Account. To proceed with the reactivation of the suspended Account, the User must make an explicit request to the Company, by sending a specific communication as required pursuant to article 18 below.
      2. In case of cancellation of the Account, the latter will no longer be able to use the Services offered by Cassandra through the Platform and the License will be considered revoked.

1. Inactive account.
   
   1. In the event that the Account is inactive (i.e. the User does not log in to the Platform and has not subscribed to a Subscription Plan) for a period of at least 6 (six) consecutive months, the Company will send the User an invitation to access your Account and, jointly, an information notice in relation to the deactivation and cancellation of your Account (the “Cancellation Notice”).
   2. If within 14 (fourteen) days of the transmission of the Cancellation Notice the User does not access the Account and/or does not send a reply communication to the Company, the Company may cancel the Account and withdraw from these General Conditions by sending written communication to ‘User.
2. Assistance.
   
   1. For questions relating to the functioning of the Platform and/or the Services, the User may contact the Company via the live chat on the Platform or by booking a 15-minute meeting with Cassandra using the appropriate form on the Platform.
3. Obligations of the User in relation to the use of the Platform.
   
   1. The User undertakes to use the Platform in accordance with the practice and ordinary operations for these types of platforms, in compliance with the technical characteristics and functions of the Platform itself as well as, where appropriate, with the instructions and indications given from time to time from society.
   2. The User shall refrain from assuming any conduct or performing any operation which causes or may cause damage to the Platform or which may compromise its performance, availability and/or accessibility. In any case, the Platform must be used lawfully, without engaging in any fraudulent activity against the Company, other users and/or third parties.
   3. The User will be responsible for all economic-financial and business data and information relating to his/her activity entered on the Platform and required for its functioning.
   4. The Company will rely solely on the information received and entered into the Platform by the User. The User acknowledges and accepts that the Company will not have any responsibility for anything that may result from the non-truthfulness, completeness or accuracy of said information that cannot be ascertained prima facie, nor will it have any obligation to carry out an independent verification of the accuracy , completeness and truthfulness of the data and information received.
   5. Pursuant to these General Conditions and in order to use the Platform, the User may not:

1. use the Platform to copy, store, host, transmit, send, use, publish or distribute any material consisting of (or related to) spyware, computer viruses, trojan horses, worms, keystroke loggers, rootkits or any other harmful software;
2. conduct any systematic or automated data collection activity (including, without limitation, data scraping, data mining and data harvesting activities) on or in relation to the Platform without Cassandra’s express written consent;
3. access or otherwise interact with the Platform through the use of robots, spiders or other automated means, except for indexing by search engines or with the explicit consent of Cassandra expressed in writing;
4. circumvent, circumvent or attempt to circumvent any restrictions on accessing the Platform;
5. alter, modify or distribute to third parties any material on the Platform.

1. 1. The User acknowledges and accepts that Cassandra will have the right to suspend or interrupt the use of the Platform and the Services at any time in the event of failure by the User to comply with the obligations listed above. The User will also bear, exclusively, any loss or damage that may arise from the failure to fulfill these obligations and undertakes to hold the Company harmless and indemnified in the event of any actions, claims, costs, losses or other consequences disadvantages resulting from such failure.

1. Warranties and Limitations of Liability.
   
   1. The User represents and warrants that:

1. 1. use the Platform and the Services in accordance with the provisions of this Agreement, including the Annexes, as well as all applicable laws and regulations;
   2. have all necessary authorizations and powers (including as a representative acting on behalf of your company) in order to enter into this Agreement;
   3. not qualify as a “consumer” pursuant to art. 3, co. 1 (a) of Legislative Decree 6 September 2005, n. 206;
   4. access the Platform and use the Services for purposes related to the entrepreneurial, commercial, craft or professional activity carried out by the User.
   5. The User undertakes to use Cassandra, all its contents and the Services offered, in compliance with the law, morality, public order and in accordance with the provisions of these General Conditions. Likewise, the User undertakes to make appropriate use of the Services and/or the contents of the Platform, not using them for illegal activities, contrary to good faith or morality or criminal, and not to violate the rights of third parties.
   6. The User assumes full responsibility for the information and material provided. In particular, the latter undertakes not to transmit, introduce, distribute and/or make available to third parties any material and/or information (for example: data, messages, images, audio files, photographs, etc.) conflict with morality, public order, these General Conditions and, in general, with any applicable law and/or regulation. The User is prohibited from using the Platform and the Services provided for purposes other than those provided for in these General Conditions.
   7. The User agrees to indemnify and hold the Company harmless in relation to any injury, loss, damage, liability, cost, burden, expense, including legal expenses, and any claim and/or demand and/or action (whether of compensation and/or as compensation) that has been and/or may be advanced against the Company, in any location, by third parties, in relation to the violation by the User of the provisions referred to in this article, as well as in relation to the violation by the User of any obligation assumed by the same under these General Conditions.
   8. The User expressly acknowledges and accepts that:

1. the Company does not guarantee that the Platform and/or the Services will meet the Client’s need and/or will be available in an uninterrupted, secure and error-free manner;
2. the Company does not provide any guarantees regarding the quality of the features of the Platform and/or the Services;
3. in no event shall the Company and/or its subcontractors and/or Partners be liable to You or any third party with respect to any tort, contract, negligence, strict liability in respect of any loss of profits, lost or damaged data , computer failure or malfunction, business interruption, or other special, indirect, incidental, or consequential damages of any kind arising out of the use or inability to use the Platform and/or the Services, even if the User has been advised the possibility of such loss or damage and whether such loss or damage was foreseeable;
4. under no circumstances is the Company responsible and may not be held responsible for the correct functioning of the Payment Link and/or for any damage resulting from the User’s use of the Payment Link and/or the Platform or the Services in the event of a malfunction of the same due to third parties and / or Partners;
5. the Company will have no responsibility for any unlawful use of the Platform and/or the Services by the User;
6. shall undertake to indemnify and hold the Company harmless from any claim, damage, liability, cost and expense (including reasonable legal fees) deriving from the use of the Platform and/or Services by the User in violation of the provisions of this Agreement ;
7. the Company may modify, limit or remove all or some features of the Platform and / or the Services for data security reasons, technical needs or due to changes in the applicable law, provided that the modification, limitation or removal is reasonable for the ‘User in consideration of the interests of the Company and the User. The Company will inform the User of such changes in good time and in writing by email;
8. any content downloaded or otherwise obtained from or through the Services and/or Platform is obtained at the User’s sole and exclusive discretion and risk. The User is solely and exclusively responsible for any damage to the device through which he accesses the Platform or for the loss of data resulting from the use of the Services and/or the Platform;
9. the Company and all its collaborators will in no case be liable for any damages of any kind and nature resulting from (i) the incorrect use of the Services and / or the Platform, (ii) the unauthorized access or alteration transmissions or data and / or information of the User, (iii) the statements or behavior of any third party.

1. 1. Nothing provided in these General Conditions will have the effect of limiting or excluding the liability of the Company in case of damages deriving from willful misconduct or gross negligence pursuant to art. 1229 of the civil code.

1. Contracting with third parties through the Platform.
   
   1. The User acknowledges and accepts from now on that the Company will remain completely extraneous to any contractual or extra-contractual relationship with any third party who publishes announcements of any kind on the Platform.
   2. The Company therefore declines all responsibility for any damages of any nature deriving or arising from contractual and/or non-contractual obligations with such third parties.
2. Updates and changes to the Platform and the Services.
   
   1. The Company reserves the right to unilaterally modify the Contract at any time by notifying the User by e-mail. The User is required to carefully read the communications sent by Cassandra in accordance with the foregoing.
   2. Cassandra also reserves the right to modify, update or cancel unilaterally and at any time (i) the information contained in the Platform without prior notice sent to the User (with reference, by way of example and not exhaustively, to the layout or design of the Platform , the conditions of access, registration and use of the Platform and the related functions, etc.), and (ii) the Services and the functions associated with them.
3. Confidentiality obligations.
   
   1. All information exchanged between the User and the Company pursuant to this Contract will be considered strictly confidential (the “Confidential Information”) and will be used exclusively for the purposes of the Contract.
   2. The User and the Company undertake to:

1. use the Confidential Information exclusively in relation to the execution of this Agreement;
2. disclose Confidential Information only to its representatives who have a need to know, provided that such representatives are bound by non-disclosure obligations;
3. protect Confidential Information from disclosure in the same manner and with the same duty of care that the User uses to protect its own Confidential Information of equal importance; And
4. promptly return or destroy Confidential Information at the request of the other party, except for any portion that is required to be retained by law.

1. 1. The obligation of confidentiality referred to in this article does not apply, however, to elements and information that:

1. are generally available or public; or
2. the party received from a third party without any obligation of confidentiality; or
3. were already known by the party, without any obligation of confidentiality, prior to when they were shared by the other party; or
4. one party learned autonomously without using elements or information received from the other party.

1. 1. In the event that a party is required to disclose any of the Confidential Information by law, if permitted by applicable law, it shall promptly notify the other party of the terms and circumstances of such request.

1. Intellectual Property Rights.
   
   1. The User acknowledges that the Platform and the computer programs connected to it contain confidential information and are protected by laws on intellectual and/or industrial property.
   2. The User also acknowledges that the Company is the legitimate owner and/or licensee of the Platform and the Services, as well as of the contents, information, documents, photographs, drawings, graphics, databases, software, logos, trademarks, trade names or other signs, present on the Platform. Except for the case in which it is expressly authorized by the Company or by third parties holding the corresponding rights, the User undertakes not to modify, dispose, reproduce, transform, modify, reverse engineer, distribute, assign or make available to third parties to any title and in any way (whether free of charge or against payment) the above elements.
   3. With the exception of the data provided by the User, all intellectual property rights relating to the contents of the License (including the texts, contents, photographs, videos, audios, interfaces, graphics and the selection and arrangement of the same as well as any information material that will be provided to the User) will be the exclusive property of the Company.
   4. By intellectual property rights we mean all rights of economic use, such as, for example: right of publication, reproduction, distribution, diffusion and communication by any means, in whole or in part, as well as the right of modification, processing, transformation, the right of loan and rental, the right of presentation in public.
   5. The User is granted a non-exclusive and non-transferable license to access and use the features of the Services within the limits and in the manner described in this Agreement. The Company does not transfer to the User, and the latter does not have the right to sub-license, any intellectual property rights of the Company.
   6. The User will not have the right to use any trademark and / or distinctive sign owned by the Company and / or any collaborator of the latter.
   7. The User authorizes the Company to publish the User’s brand and/or name on the Company’s website as well as on its promotional material for informational purposes only.
2. Withdrawal and penalties.
   
   1. The User may withdraw from the Contract at any time by sending a written communication, sent by PEC or registered letter with return receipt to the Company address indicated on the Platform and / or by using the appropriate function in the Account in order to withdraw from the Subscription Plan.
   2. In case of withdrawal, the User will have access to the Services until the expiry of the relevant Subscription Period. The User will not be entitled to any refund of the Fees already paid and the Fee relating to the Subscription Period during which the User has exercised the right of withdrawal will also be due to the Company.
   3. At the end of the Subscription Period, the Account will remain accessible to the User for a further period of 6 months. During this additional period, the User will only have access to the history of the activities carried out on the Platform and will not be able to use the Services covered by the License.
   4. The Company will not grant refunds and/or credits for partially used term periods and/or in case of failure and/or partial use of the features of the Platform and/or the Services during the Subscription Period.
3. Resolution.
   
   1. The Company may terminate the Contract at any time pursuant to Article 1456 of the Italian Civil Code. civ., by sending a PEC or registered letter with return receipt to the Customer, and anticipated by mail, to the address indicated in the Account creation phase, in the case of;

1. use of the Platform not compliant with the terms and conditions of this Agreement; and/or
2. non-payment by the User of the Fee relating to the Subscription Period, according to the methods and times indicated in the Payment Link.

1. Communications.
   
   1. Communications sent by the Company to the User and vice versa provided for and/or relating to these General Conditions must be sent to the following addresses:

1. as regards communications addressed to the Company: Corso di Porta Romana no. 6, 20122 Milan,e-mail:admin@cassandra.app, pec: aicassandra@legalmail.it ;
2. for communications addressed to the User: residence address of the legal representative / registered office or alternative address indicated by the User when entering the data to create the Account.

1. Jurisdiction.
   
   1. These General Conditions are governed by and must be interpreted according to Italian law.
   2. Disputes relating to the interpretation and execution of these General Conditions will be devolved to the jurisdiction of the Court of Rome.
2. Referral to law.
   
   1. For anything not provided for in these General Conditions, the provisions of Italian law in force will be applicable.
3. Processing of personal data.
   
   1. The Company undertakes to apply adequate technical and organizational measures to guarantee the punctual and exact fulfillment of all the obligations in force regarding privacy and the processing of personal data, in accordance with the provisions of EU Regulation 2016/679 on data protection (“GDPR ”), as well as any other applicable national legislation.
   2. The Company takes the form of an independent controller pursuant to Article 24 of the GDPR in relation to the processing of the User’s personal data, of natural persons acting in the name and on behalf of the latter and of the User’s employees; this treatment will take place in compliance with the provisions of the available Privacy Information here.
   3. Furthermore, in the context of the execution of the activities covered by this Contract and with reference to the data of the User’s customers, the latter acts in the role of data controller of personal data, while the Company acts in that of data processor, following the instructions given by the User and detailed in writing in the Appointment as Manager (attached to these General Conditions sub-Appendix), also undertaking to comply with the applicable provisions of the supervisory authority for the protection of personal data competent pro tempore in force.

Privacy disclaimer.

1. For the information in relation to the processing of the User’s personal data, please refer to the available Privacy Information here, which the User must read and which must be accepted by the latter for the purpose of providing the Services.

Modification of the general conditions.

1. Cassandra reserves the right to unilaterally modify these General Conditions at any time, also in order to adapt them to legislative changes or any changes to the Services themselves.
2. The above changes, which can be consulted at the General Conditions link, will be notified to the User where they result in changes to the Services.

****

APPENDIX – APPOINTMENT OF DATA PROCESSING MANAGER

BETWEEN

The User, as identified at the time of registration and creation of the Account on the Platform (the “Data Controller”)

And

BETWEEN

Cassandra Ltd, with headquarters in Corso di Porta Romana, n. 6, 20122 Milan, fiscal code, VAT number, fiscal code and registration number in the Milan Company Register no. 1265410965 (hereinafter, the “Data Processor”)

(the Data Controller and the Data Processor, hereinafter also, individually, a “Party” and, jointly, the “Parties”).

GIVEN THAT

1. pursuant to Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 containing the European regulation for the protection of individuals with regard to the processing of personal data, as well as the free movement of such data ( General Data Protection Regulation, hereinafter “GDPR” and, jointly with the Legislative Decree of 30 June 2003, n. 196, as amended by the Legislative Decree of 10 August 2018, n. 101, the “Applicable Regulation”), the Data Controller, if processing is to be carried out on your behalf, you must only use processors who present sufficient guarantees to implement appropriate technical and organizational measures,in such a way that the treatment satisfies the requirements of the Applicable Law and guarantees the protection of the rights of the subject to whom the personal data refer (hereinafter, the “Data Subject”);
2. this agreement (hereinafter the “DPA”), which forms an integral part of the General Conditions of the Platform, is aimed at regulating the appointment of the Data Processor and the relationship deriving from this DPA;
3. by virtue of this DPA, which has an ancillary nature to the Contract, the Data Processor processes, directly and/or through his own specifically authorized personnel (hereinafter the “Authorised”), as well as through any other data processors (hereinafter the “Sub -Responsible”), the categories of personal data as better specified in Annex A (“Description of the treatment”) (the “Personal Data”);
4. the Personal Data of the interested party are also processed by the Data Processor for the purposes described in Annex A (“Description of the processing”);
5. the Data Processor must present sufficient guarantees to implement adequate technical and organizational measures so that the treatment meets the requirements of the Applicable Law and guarantees the protection of the rights of the interested party;
6. all capitalized terms not otherwise defined in this DPA shall have the meanings given to them in the Agreement.

ALL THIS CONSIDERED, the Parties agree as follows

1. Appointment of the Data Processor.

Pursuant to Article 28 of the GDPR, the Data Controller intends to entrust the processing of Personal Data to the Data Processor, as specified below.

1. Obligations and Guarantees of the Data Processor.

The Data Processor undertakes to:

1. process Personal Data exclusively for the purposes for which the data controller has been appointed;
2. perform what is necessary for compliance with the Privacy Law and the GDPR, and with any other applicable legislation on the protection of personal data and make available to the Data Controller all the information necessary to demonstrate compliance with its obligations as data processor processing pursuant to Article 28 of the GDPR;
3. process Personal Data only on the documented instruction of the Data Controller, unless required by law or regulation; in this case, the Data Processor informs the Data Controller about this legal obligation before the processing;
4. keep a Register of the processing activities carried out under its responsibility pursuant to Article 30, par. 2, of the GDPR. In particular, this register must contain:

1. the name and contact details of the Data Processor(s), of the Data Controller on whose behalf the Data Processor acts, of the Data Controller’s representative or of the Data Processor and, where applicable, of the Data Protection Officer of data (DPO);
2. the categories of treatments carried out on behalf of the Data Controller;
3. where applicable, transfers of Personal Data to a third country (by this meaning a non-EU country) or an international organization;
4. possible, a general description of the technical and organizational security measures implemented in accordance with Article 32 of the GDPR;

1. adopt the technical and organizational security measures of the Personal Data being processed in compliance with the provisions of the GDPR and supervise their application, in order to guarantee a level of security appropriate to the risk as required pursuant to Article 32 of the GDPR and minimize the risks of destruction or loss, unauthorized access or treatment that is not permitted or does not comply with the purposes of collecting the Personal Data, and inform, without unjustified delay, the Data Controller should one of these events occur at pursuant to Article 33 of the GDPR. These measures must take into account the state of the art and implementation costs, as well as the nature, object, context and purpose of the processing,
2. in the presence of the exercise of one’s rights by an interested party, pursuant to articles 15-20 of the GDPR, if the Data Processor is still processing the Personal Data, within a period that allows the Data Controller to reply to the Data Subject in accordance with the law and, in any case, no later than 10 days from receipt of the instance:

1. 1. collect the information contained in the access request and in the other types of requests advanced by the interested party and transmit them by cooperating in order to provide feedback to the interested party;
   2. give communication of the request to the Sub-Managers and/or Authorized to the processing who are presumed to process or have processed the Personal Data of the applicant, in order to collect the information necessary for the satisfaction of the request;

1. assist the Data Controller with technical and organizational measures in the event of requests from interested parties pursuant to the Privacy Law, and to provide any information and/or document useful or appropriate to follow up on the requests themselves;
2. provide the Data Controller with every element useful for carrying out an impact assessment by the Data Controller if necessary pursuant to Article 35 of the GDPR, as well as collaborate in carrying out any prior consultation with the Guarantor pursuant to Article 36 GDPR. The Data Processor makes the results of any impact assessment carried out by the Data Controller available to the Data Controller;
3. expose in detail to the Data Controller any impediments to the exercise of one’s functions;
4. make available to the Data Controller all the information necessary to demonstrate compliance with the law, allow and contribute to the review activities, including inspections, carried out by the Data Controller or by another person appointed by him. Furthermore, if, in his opinion, an instruction received from the Data Controller violates the GDPR or other national or EU provisions, the Data Processor will immediately inform the Data Controller.

1. Persons Authorized to process.

The Data Processor will identify the Authorized Authorities who act under their authority in relation to the processing of Personal Data, pursuant to Article 29 of the GDPR; these Authorized will be obliged to keep the Personal Data confidential. The authorization will be accompanied by suitable and detailed instructions regarding the methods of treatment and, for the entire duration of the DPA, the Data Processor will scrupulously supervise the exact fulfillment of the same by the Authorized.

1. Sub-processors.

The Data Processor is authorized to resort to Sub-Processors for the execution of the processing activities (or part thereof), imposing on them the same obligations regarding the protection of Personal Data to which the Data Processor is subject, providing in particular sufficient guarantees to put in place appropriate technical and organizational measures, so that the treatment meets the GDPR requirements.

The Data Processor undertakes to inform the Data Controller of any changes regarding the addition and/or replacement of Sub-processors. The Data Controller will have the right to object to such changes by communicating his opposition in writing within 5 days of notification by the Data Processor.

1. Indemnity.

The Parties, each to the extent of their competence, undertake to keep each other harmless from any dispute, action or claim made against them by the interested parties and/or by any other person and/or Authority following any non-compliance with the Privacy Law.

It is understood that where the Data Processor has fulfilled the tasks assigned to him under the DPA and the obligations of the GDPR specifically aimed at data processors, the Data Controller will be liable for damages caused to the data subject by the processing carried out in violation of the law.

1. Duration and effective date.

The duration of the treatment is indicated in Annex A (“Description of the treatment”), and in any case limited to the execution of the activities covered by the Contract. Upon termination, for any reason, of the Contract, the Data Processor undertakes to cancel from any medium as well as, where requested by the Data Controller, to return the Personal Data processed directly or incidentally on behalf of the Company within 30 (thirty) days, without prejudice to further conservation obligations established by the regulations to which the Data Processor is obliged. It is understood that the demonstration of the reasons justifying the continuation of the conservation obligations is the responsibility of the latter, and that the only purposes that can be pursued with such Data are exclusively limited to responding to these regulatory obligations.

Annex A – Description of the treatment

With reference to the DPA, of which this annex forms an integral and substantial part, the categories of Personal Data processed by the Data Processor on behalf of the Data Controller are detailed below, the types of interested parties to whom such Data refer, the treatments carried out existing, the purposes and duration of the processing.

Categories of Personal Data	☒First name ☒Surname ☒Tax ID code ☒Date of birth ☒Birth place ☒Residence address ☒E-mail ☒Telephone ☒Audio/Video/Photo ☒Profiling data (e.g. consumption habits)

Categories of data subjects

☒Clients ☒Providers ☒Employees ☒Collaborators ☒Partners (corporate structure)

Treatments

☒ Collection ☒Organization ☒storage ☒Adaptation ☒Extraction ☒Consultation ☒Use ☒Communication ☒Comparison

Purpose of the treatment

The provision of the Services offered by Cassandra through the Platform.

Duration of treatment

For the duration of the Subscription Period and for six (6) months after the termination of the same.