Terms of service

LKDN Autopilot (lkdnautopilot.com)

Version 1.1, 26 October 2026 (replaces version 1.0 of 24 October 2026)

Summary (does not replace the clauses) #

Before purchasing, read these points. They are explained in the clauses indicated.

1. The Service is for professionals and businesses, not for consumers (Art. 1).
2. It works from your LinkedIn account, in your name (Arts. 2 and 4).
3. LinkedIn restricts the use of automated tools and may limit, suspend or close your account at any time. We reduce this risk but we cannot eliminate it. The risk is yours and does not give entitlement to refunds (Art. 6).
4. You approve and own all the texts sent in your name, and you are the controller of the data of the people you contact (Art. 4 and Annex A).
5. We do not promise results: neither contacts, nor acceptances, nor replies (Art. 7).
6. The subscription costs 99 EUR per month or 997 EUR per year, and is purchased and cancelled on MigaMATCH (Art. 9).
7. Our liability is limited (Art. 13).
8. With the API and the MCP server, if activated for your account, your programs and your artificial intelligence assistants act from your LinkedIn account, in your name and under your responsibility, within the same limits as the Service (Arts. 2.5 and 4).

1. Parties and scope #

1.1 These terms govern the use of the LKDN Autopilot service (the "Service") between:

• Migastone International S.r.l., a company under San Marino law, Via 28 Luglio 212, 47893 Borgo Maggiore, Republic of San Marino, Economic Operator Code (Codice Operatore Economico) SM28583 ("Migastone", "we"); and
• the professional or the company that purchases the Service ("Customer", "you").

1.2 B2B only. The Service is intended exclusively for those acting in the course of their own professional, business or self-employed activity. It is not offered to consumers. By purchasing, you declare that you are not acting as a consumer. If you are a professional without a VAT number (partita IVA), the declaration applies all the same.

1.3 The Service is sold through the MigaMATCH store, operated by the same company. Payment, invoicing and refunds follow the conditions of that store, insofar as not otherwise provided here.

2. What the Service does #

2.1 The Service carries out, on your LinkedIn account and according to the instructions you approve, a professional outreach routine in four steps:

1. it finds people, with searches built from the segments of people you have accepted;
2. it visits their profiles (the person may see that the profile has been visited);
3. it sends, on the next working day, a connection request with a note (if your LinkedIn plan allows it);
4. it asks, when the request is accepted, one single opening question.

When the person replies, the automation for that person stops and we notify you by email. The conversation continues between you and the person, on LinkedIn.

2.2 Limits. The Service respects prudent daily and weekly limits, working hours in your time zone, random intervals and a gradual warm-up phase for accounts that are new or have few connections. With a free LinkedIn account the Service runs at reduced volume and without a personalised note. Your account's plan is detected automatically. These limits cannot be raised by the Customer beyond the maximums set by us.

2.3 What the Service does NOT do. The Service is not:

• a conversation agent: the Service does not reply on your behalf and does not send sequences of messages or follow-ups. If you use the API, the messages that your Tools send are yours, as if you wrote them yourselves (Art. 4.k);
• a CRM: it does not manage deals, activities or notes;
• a contact database: it does not sell or share contact data, does not add email addresses or telephone numbers, does not create lists shared between customers;
• a mailbox: it does not store your LinkedIn inbox or archive conversations. The API reads conversations only when your Tools request it, and does not store them (Art. 2.5.c);
• an agency service: we do not write your texts for you. An artificial intelligence proposes a first draft; the text is yours, and you approve it.

2.4 No link with LinkedIn. LinkedIn is a third-party trademark. The Service is not affiliated with LinkedIn and is not endorsed by it. It works through a technical provider that manages the connection to the LinkedIn account.

2.5 API and MCP server. If Migastone activates them for your account, you can use an application programming interface ("API") and a server for artificial intelligence assistants following the MCP protocol, with access keys that you create and revoke from your area. Through them your programs, your automations and the artificial intelligence assistants you connect (together, the "Customer Tools") can read data of your LinkedIn account (profile, connections, conversations, connection requests, posts, searches) and perform actions from your account (visits, connection requests, messages, InMail, comments, reactions, posts, withdrawal of requests), according to the published documentation.

a) Same limits. Every action performed through the API consumes the same daily and weekly limits of the Service, shared with the autopilot, and is subject to the same intervals, hours, exclusions and lists of people not to be contacted. The API does not allow the maximums set by Migastone to be exceeded (Art. 2.2).

b) Your account only. A key is valid only for your account on the Service and for the connected LinkedIn account. The API does not allow accounts to be connected, created or deleted, nor access to other platforms.

c) Conversations in transit. The content of conversations read through the API is read from your account at the time of the request and transmitted to the Customer Tools, without being stored by Migastone. The texts sent through the API are transmitted to LinkedIn and are not stored by Migastone. Migastone records the technical data of the requests (type of request, outcome, duration) and, for actions, the type, the recipient person and the date, without the text, to enforce the limits and for security.

d) Activation and suspension. Access to the API is an option that Migastone may grant, limit, suspend or revoke at any time, including for an individual account, in particular if it detects a risk to the Customer's LinkedIn account, a use contrary to these terms or an abuse. Suspension of access to the API does not suspend the rest of the Service.

e) Features not guaranteed. The features available through the API depend on LinkedIn and on the technical providers and may change (Art. 8.1).

3. Activation and access #

3.1 The account on the Service is created following your purchase on MigaMATCH. There is no independent registration. You will receive the access instructions from MigaMATCH.

3.2 You connect your LinkedIn account on a sign-in page hosted by the technical provider of the connection. Your LinkedIn password does not reach our systems.

3.3 You are responsible for the confidentiality of the access credentials. An account is for one person or company only and for one LinkedIn account only: it may not be shared or transferred. Notify us immediately of any unauthorised use.

3.4 On first access to the Service after purchase you are asked for two separate confirmations (Art. 17), recorded with the date, time and version of the texts; without them the Service cannot be used. Before activating sending, in the guided setup we also ask you to confirm two declarations, recorded with the date and version of the text: (a) that you have understood that the activity takes place from your LinkedIn account, that LinkedIn imposes limits and that automated use may lead to restrictions; (b) that you are the controller of the data of the people you contact and that you accept Annex A.

3.5 Configuration and activation. The Service is deemed configured and activated when you have completed the guided setup (connection of the LinkedIn account, approval of at least one search and of the texts) and have started the autopilot. The system records the date and time of the start. This information is relevant for the limits and the gradual warm-up (Art. 2.2).

4. Obligations of the Customer #

The Customer undertakes to:

a) use its own LinkedIn account and maintain a regular relationship with LinkedIn; not connect other people's accounts without written authorisation;

b) provide truthful and up-to-date data (personal and company details, description of the business, clients indicated, texts);

c) use the Service only for lawful purposes and for professional prospecting; not for spam, fraud, harassment, discrimination, sale of unlawful products or services, nor for pyramid selling schemes, "network marketing" or similar, nor to contact minors;

d) respect LinkedIn's limits and the maximums of the Service; not attempt to circumvent the limits, the checks or the hours; not use other automation tools in parallel on the same account;

e) approve and own all the texts sent in its name (invitation note and opening question, including the drafts proposed by the artificial intelligence): the Customer is answerable for their content, accuracy and lawfulness. The Customer does not insert in the texts false statements, misleading promises, links or content prohibited by law. If the Customer forces the opening question beyond the rules the Service proposes to it (for example by inserting an offer or a price), it bears every consequence;

f) be the controller of the data of the persons contacted, have a valid legal basis (as a rule, legitimate interest), inform the persons contacted as required by Art. 14 GDPR and respond to their requests (Annex A);

g) respect objections: when a person asks not to be contacted any more, the Customer immediately informs Migastone or puts the person on the exclusion list, and does not contact the person again by other means;

h) reply fairly and without insisting to the persons who reply;

i) cooperate in the event of problems with the LinkedIn account (for example by reconnecting it when requested);

j) safeguard the API keys as credentials: not publish them, not insert them in web pages or applications distributed to third parties, revoke them immediately in the event of suspected unauthorised use and notify Migastone. Every request made with a key of the Customer is deemed made by the Customer;

k) be answerable for the Customer Tools. Every action performed through the API or the MCP server, by a program, an automation or an artificial intelligence assistant connected by the Customer, even without human control over the individual sending, is performed in the name and under the exclusive responsibility of the Customer, as if the Customer had performed it personally. The Customer is answerable for the texts generated or sent by the Customer Tools as for the texts of letter e), and undertakes not to use them to send mass, unsolicited or repetitive communications, nor to contact persons who have objected;

l) not circumvent the limits through the API: not use several keys, several Tools or repeated requests to exceed the limits, the intervals or the hours of the Service, nor to systematically extract LinkedIn data;

m) if it stores in the Customer Tools the data read through the API (for example the conversations in its own CRM), do so as an independent controller of that storage, with its own legal basis and retention periods.

5. Customer data and texts #

5.1 The texts, descriptions and data that the Customer enters remain the Customer's. The Customer grants Migastone the non-exclusive licence, limited to the duration of the Service, needed to process them in order to provide it (including processing by the technical providers).

5.2 The Customer declares that it has the right to use the data it enters, including the references to its own best clients.

5.3 The Service may read, once and in limited form, the Customer's existing LinkedIn connections to calculate aggregate statistics (sectors, seniority levels, regions). We do not store the list of people, only the counts.

6. LinkedIn risk and indemnity #

This is the most important clause of these terms. Read it carefully.

6.1 Known risk. The Customer acknowledges and accepts that:

a) LinkedIn's terms of use restrict or prohibit automated access and the use of third-party tools to interact with the service;

b) LinkedIn may, at any time and without notice, limit, restrict, suspend or close the Customer's account, reduce its visibility or its sending limits, remove connections, require verifications, or change its own rules and its own limits;

c) the Service reduces but cannot eliminate this risk. The measures adopted (prudent pace, hours, gradual warm-up, immediate stop at the first sign of a problem) are measures of prudence and do not guarantee the outcome;

d) Migastone does not guarantee that the use of the Service complies with LinkedIn's terms, nor that LinkedIn tolerates it.

6.2 Risk borne by the Customer. Every restriction, suspension, closure or limit imposed by LinkedIn on the Customer's account, and every consequence (loss of connections, contacts, conversations, data, reputation, opportunities, clients, revenue or lost earnings on LinkedIn or elsewhere) is at the exclusive risk and expense of the Customer.

6.3 No liability and no refund. Migastone is not liable for the consequences indicated in point 6.2, to the extent permitted by law. Without prejudice to the guarantee of Art. 9.8, a restriction of the account is not a ground for a refund, of the fees paid or of any part of them, and does not give entitlement to termination or to a reduction of the price.

6.4 Indemnity. The Customer undertakes to hold harmless and indemnify Migastone, its directors, employees and collaborators, and its technical providers, from any claim, action, demand, penalty, loss, damage, cost and expense (including reasonable legal fees) arising from:

a) claims by LinkedIn relating to the use of the Service by the Customer on its own account;

b) claims by the persons contacted, by supervisory authorities and by third parties, arising from the texts, from the choice of the persons to contact, from the search targets, from the absence of a legal basis or of a privacy notice, from failure to respect objections, or from the use of the Service in breach of these terms or of the law;

c) false or inaccurate statements or data provided by the Customer;

d) the use of the API and the MCP server by the Customer and by the Customer Tools, including the actions performed by programs, automations or artificial intelligence assistants connected by the Customer, and the use of a key of the Customer by third parties to whom the Customer has disclosed it or who have obtained it through failure to safeguard it.

6.5 Migastone will notify the Customer of the claim received with reasonable promptness and will allow the Customer to cooperate in the defence, without any obligation to accept settlements in its name. The Customer may not enter into agreements that burden Migastone without its written consent.

6.6 What we do if it happens. If the Service detects a sign of a problem on the Customer's LinkedIn account (disconnection, verification request, restriction, error), Migastone:

a) pauses the activities on that account immediately;

b) informs the Customer by email, in plain language, stating what is suspended;

c) helps to reconnect the account, when the cause is resolved by a new connection, by sending a new secure link.

We do not restart the activity against a notice of a block by LinkedIn. These actions are courtesy and prudence measures: they do not constitute a guarantee that the account will be restored nor an assumption of liability for the restriction.

6.7 The Customer may at any time pause the Service with one click and may reduce the daily limits.

7. No warranty #

7.1 Migastone does not promise or guarantee any result: neither a number of people found, visited or connected, nor acceptance or reply rates, nor appointments, clients, sales or revenue. The numbers we illustrate (daily limits, examples, internal targets) are descriptions of how the Service works or estimates, not commitments.

7.2 The result depends on factors we do not control: the quality of the Customer's profile, the texts, the sector, the response of the people, the LinkedIn plan and LinkedIn's decisions.

7.3 The Service is provided "as is" and "as available", insofar as not otherwise provided by mandatory law.

8. Availability #

8.1 We do not guarantee that the Service will be uninterrupted or error-free. The Service depends on LinkedIn, on the technical providers that manage the connection, the infrastructure, the artificial intelligence models and the mail, and on what these make available. LinkedIn's features, limits and behaviour may change at any time, and the Service may have to be adapted, limited or suspended accordingly.

8.2 We may suspend the Service for maintenance, for security reasons or for force majeure. We will do our best to limit its duration and to notify you when reasonably possible.

8.3 The Service may stop automatically if it detects a problem on the account, if a security check cannot be reached or if the configuration is not valid. This is the intended behaviour: when in doubt, it does not send.

8.4 Support is provided only by email at info@lkdnautopilot.com. We aim to reply within one working day; this is a target and not a commitment.

8.5 There is no service level agreement with penalties.

9. Price, renewal, cancellation #

9.1 The price of the Service is 99 EUR per month, or 997 EUR per year with the annual subscription, for one LinkedIn account, exempt from taxes (Republic of San Marino). For subscriptions already running on 26 October 2026, the new price applies in accordance with Art. 9.5, from the renewal following the notice.

9.2 The subscription is purchased through the MigaMATCH store and renews automatically at the end of the chosen period (month or year) until cancellation.

9.3 Cancellation. You may cancel at any time from the MigaMATCH purchases area, the same one from which you purchased. Cancellation takes effect at the end of the period already paid.

9.4 No refund. Without prejudice to the guarantee of Art. 9.8, fees already paid are not refundable, not even in part and not even for partial months, unless otherwise provided by mandatory law.

9.5 We may change the price with at least 30 days' notice; the change applies from the following renewal, and you may cancel beforehand.

9.6 At the end of the subscription or in the event of non-payment, the Service stops. As a technical courtesy, and not as a right, a short grace period (normally 7 days from expiry) may be granted during which the Service remains active.

9.7 If the Service has been paused for more than 30 days, we disconnect the LinkedIn account from the technical provider and will ask you to reconnect it on resumption. The rest of the configuration is not touched.

9.8 "Satisfied or your money back" guarantee. If you are not satisfied with the Service you may request a refund of the first fee paid, monthly (99 EUR) or annual (997 EUR), without having to give a reason and even if you have not configured or started the Service, on the following conditions:

a) the request is sent in writing to info@lkdnautopilot.com within 14 calendar days of the purchase of the first subscription;

b) the guarantee applies only once per Customer (same VAT number or tax code (codice fiscale)), only to the first fee and not to renewals or to subsequent subscriptions;

c) the guarantee does not apply in the event of breach of these terms, in particular of Art. 4, or of abusive use of the Service.

Once the request has been verified, the first fee is refunded by the same means of payment used for the purchase; the subscription ends and the Service stops, with the disconnection of the LinkedIn account.

10. Termination #

10.1 We may suspend or terminate the Service, with immediate effect, in the following cases:

a) failed or late payment, reversal of payment, subscription ended;

b) use in breach of Arts. 4 or 6, of the law or of the rights of third parties;

c) false data or a false declaration of acting as a professional;

d) a concrete risk to the Customer's LinkedIn account, to other customers, to the providers, to the security of the Service or to the persons contacted;

e) a request from an authority or from LinkedIn;

f) use of the API contrary to Art. 2.5 or to Art. 4, letters j) to m). In this case Migastone may also merely suspend access to the API.

10.2 In the cases referred to in letters (a) and (e) and, when possible, in every other case, we inform you by email.

10.3 Upon termination: the activity stops, we disconnect the LinkedIn account from the technical provider, connection requests already sent may expire naturally, and the data are processed in accordance with Annex A and the privacy notice. Termination does not cancel debts already accrued.

11. Appointment as data processor #

11.1 For the personal data of the persons contacted, the Customer is the controller and Migastone is the processor within the meaning of Art. 28 GDPR. By accepting these terms the Customer appoints Migastone as processor in accordance with Annex A, which forms an integral part of them.

11.2 For the Customer's personal data (purchase, access, configuration, use) Migastone is the controller, in accordance with the privacy notice.

11.3 Annex A can be downloaded in PDF format from the Customer's area.

12. Intellectual property #

12.1 The Service, the software, the trademark, the name, the design and the content we provide are and remain the property of Migastone or of its licensors. We grant you a personal, non-exclusive, non-transferable right, limited to the duration of the subscription, to use the Service in accordance with these terms.

12.2 You may not copy, decompile, resell, provide to third parties as a service, or systematically extract the data of the Service. You may not use the name or the trademark LKDN Autopilot in a way that suggests an affiliation or an endorsement.

12.3 The drafts generated by the artificial intelligence and the texts approved by the Customer belong to the Customer. We warrant ownership of our software, not the novelty or the absence of similarity of the generated texts.

13. Limitation of liability #

13.1 To the extent permitted by law, Migastone is not liable for indirect or consequential damages, such as loss of profit, of clients, of opportunities, of goodwill or of data, nor for the consequences indicated in Art. 6.2.

13.2 Migastone's total liability towards the Customer, for any cause, is limited to the amount of the fees paid by the Customer in the 12 months preceding the event that gave rise to the claim.

13.3 Nothing in these terms excludes or limits liability that the law does not allow to be excluded or limited, in particular for wilful misconduct or gross negligence (dolo o colpa grave), or for personal injury.

13.4 The limits of this article do not reduce the Customer's indemnity obligations (Art. 6.4) or its payment obligations.

14. Changes #

14.1 We may change these terms and the Service, for example because of new rules, changes by LinkedIn or by the technical providers, or new features. For significant changes we notify you by email at least 30 days in advance, unless the change is imposed by law or by urgent security reasons. If you do not accept, you may cancel before the change comes into force.

14.2 The version in force, with its number and date, is the one published on the website. We keep proof of which version you accepted and when.

15. Miscellaneous #

15.1 Assignment. The Customer may not assign the contract without our written consent. Migastone may assign it to a group company or to a successor in the business, with notice to the Customer.

15.2 Entire agreement. These terms, Annex A, the privacy notice and the Cookie policy are the entire agreement on the Service. If a clause is invalid, the others remain in force.

15.3 Communications. Communications take place by email to the Customer's address and to info@lkdnautopilot.com.

15.4 Force majeure. Neither party is liable for failures to perform due to causes beyond its reasonable control, including the unavailability or modification of the services of LinkedIn or of the technical providers.

16. Governing law and jurisdiction #

16.1 These terms are governed by the law of the Republic of San Marino.

16.2 The Court of the Republic of San Marino (Tribunale della Repubblica di San Marino) has exclusive jurisdiction (Foro) over every dispute.

17. Specific approval of clauses #

On first access to the Service after purchase you are asked for two separate confirmations, recorded with the date, time and version of the texts. The first concerns reading and accepting these terms and the privacy notice. The second has this text:

«Pursuant to and for the purposes of Arts. 1341 and 1342 of the Italian Civil Code (c.c.), I specifically approve the clauses: 2.2 (Limits), 2.5 (API and MCP server), 6 (LinkedIn risk and indemnity), 7 (No warranty), 8 (Availability), 9.4 (No refund), 10 (Termination), 13 (Limitation of liability), 14 (Changes), 16 (Governing law and jurisdiction).»

Without both confirmations the Service cannot be used. A new version of these terms requires both confirmations to be repeated.

18. Contacts #

Migastone International S.r.l., Via 28 Luglio 212, 47893 Borgo Maggiore, Republic of San Marino. Support: info@lkdnautopilot.com.

Annex A. Appointment as data processor (Art. 28 GDPR)

Controller: the Customer. Processor: Migastone International S.r.l.

A.1 Subject matter and duration #

The Processor processes personal data on behalf of the Controller for the sole purpose of providing the Service described in the terms. The Annex is effective from the acceptance of the terms and for the whole duration of the Service, and until the return or deletion of the data (A.12).

A.2 Nature and purpose of the processing #

Collection, recording, organisation, storage, consultation, use, disclosure and deletion of data of the contacted persons, for the sole purpose of: searching for people according to the segments approved by the Controller; visiting their profile; sending a connection request and one single question; recording the outcome; notifying the Controller of the replies; excluding those who object. If the Controller uses the API or the MCP server: reading and transmitting to the Controller's Tools, at the time of the request, the data of its LinkedIn account that these request, and transmitting to LinkedIn the texts and actions that these order (processing in transit: the Processor does not store the content of the conversations or the texts sent); recording for each action the type, the LinkedIn identifier of the person and the date, without text; excluding from the autopilot the persons contacted through the API.

A.3 Categories of data and of data subjects #

• Data subjects: natural persons whom the Controller chooses to contact on LinkedIn (professionals); persons from the Controller's existing network, for the aggregate counts only.
• Data: public professional data from the profile (name, headline, company, role, location, country, sector, language, summary, activity indicators, network distance, LinkedIn identifier); text of the message sent by the autopilot and the fact that a reply has arrived; event log. Through the API, in transit only: content of the conversations, posts and comments read, texts sent; stored are only the LinkedIn identifier of the person to whom an action is directed, the type of action, the date, and an outcome of the check against the exclusion list (yes or no, without the text of the profile).
• Special categories of data (Art. 9): not requested and not sought. The Controller does not enter them in the texts.

A.4 Instructions of the Controller #

The Processor processes the data only on documented instructions from the Controller. The Controller's instructions are the terms of service, the configuration approved by the Controller (segments, searches, texts, hours, exclusions) and subsequent written requests. The requests that the Controller's Tools send to the API with a key of the Controller are also instructions of the Controller. The Processor informs the Controller if it considers that an instruction infringes data protection law.

A.5 Obligations of the Controller #

The Controller is responsible for: the legal basis and lawfulness of the choice of the persons to contact; the information notice to the data subjects (Art. 14); the content of the texts; responding to the data subjects' rights, insofar as not handled by the Processor; respecting objections.

A.6 Confidentiality #

The Processor's personnel authorised to process the data are bound by confidentiality.

A.7 Security #

The Processor adopts appropriate technical and organisational measures (Art. 32 GDPR), including: encryption in transit and at rest; separation of data by customer with row-level access control; absence of the LinkedIn password from its own systems; providers' keys kept out of the code that reaches the browser; logging of administrative actions and read-only support access; stopping the activity if a security check cannot be reached; exclusion list consulted before every contact; minimisation of data to what is strictly necessary.

A.8 Sub-processors #

The Controller authorises the sub-processors indicated below and, in general, the engagement of other sub-processors on the conditions of this article:

For reasons of commercial confidentiality, some sub-processors are indicated by function and location; their name is disclosed to the Controller upon written request, and the Controller undertakes to keep it confidential. The Processor imposes on the sub-processors obligations equivalent to those of the Annex, and is liable for them. It provides the updated list on request and communicates every change with at least 15 days' notice, during which the Controller may object on legitimate grounds.

A.9 Transfers outside the EU #

Transfers to third countries take place only with appropriate safeguards (standard contractual clauses, Data Privacy Framework where applicable).

A.10 Assistance to the Controller #

The Processor assists the Controller, with appropriate measures: (a) in responding to requests from data subjects: it forwards the requests received and, on instruction, exports, deletes or excludes the data; (b) in complying with Arts. 32 to 36 GDPR (security, impact assessment, prior consultation).

A.11 Data breach #

The Processor informs the Controller without undue delay, and in any case within 72 hours of becoming aware of it, of a personal data breach for which it is responsible, with the information available.

A.12 Retention, return and deletion #

During the Service, the data of the contacted persons are kept for the periods indicated in the privacy notice (section 7.4): the records of the contacted persons and the message history 180 days from the last activity concerning the person. At the end of the Service the Processor, at the Controller's request, returns the data in a common format and in any case deletes them within 90 days from the end of the Service, save for legal obligations. The exclusion list (only the identifier, the reason and the date) is kept even after deletion, for as long as needed to avoid contacting again those who have objected, on the basis of the obligation to act on the objection and of the legitimate interest in not contacting them again. At the end of the Service the data are deleted or irreversibly anonymised within the period indicated. The technical data of the requests to the API are kept for 90 days; the log of the actions performed through the API (without text) for 180 days, like the records of the contacted persons; the Controller's keys and webhooks until revocation and in any case not beyond the deletion of the account. The content read or sent through the API is not stored.

A.13 Audit #

The Processor makes available the information necessary to demonstrate compliance with Art. 28 GDPR and allows audits by the Controller, including through an auditor, with reasonable notice of at least 30 days, once a year save in the event of breaches, during working hours, without access to the data of other customers and with confidentiality. Costs are borne by the Controller.

A.14 Liability #

The liability of the parties for breaches of this Annex follows Art. 13 of the terms, unless otherwise provided by law.