Terms and Conditions

These Terms and Conditions (“Terms”) form a legally binding contract (“Service contract”) between you (“the Client”) and GDPR Register OÜ private limited company established under the laws of the Republic of Estonia, having its principal place of business at Rotermanni 8, 10111 Tallinn, Estonia, and registered in Estonian Commercial Register under code 14432795 (“GDPR Register”).

GDPR Register services (“Services”) are the subject, offered to the Client’s acceptance, without modification. GDPR Register is offering services for legal entities only.

If the Client is entering into Service contract on behalf of an entity, such as an employer or the company he/she works for, the Client confirms the legal authority to represent that entity.


Upon sign-up, Client must select a plan for the Services. Please note that the plans have different functionalities, options and rates. The applicable Fee is charged in advance on annual payment intervals unless agreed otherwise. The Service contract will be renewed after the payment for the next period.

All Fees are exclusive of all taxes, levies or duties applicable under any applicable law unless stated otherwise herein.

All Fees are non-refundable.


GDPR Register may seek pre-authorization of Client’s credit card account prior to the purchase of GDPR Register Plan, in order to verify that the credit card is valid and has the necessary funds or credit available to cover the purchase. The Client authorizes such credit card account to pay any amounts described herein and authorizes GDPR Register to charge all sums described in these Terms to such credit card account.

The Client agrees to provide GDPR Register updated information regarding his/her credit card account upon GDPR Register request and any time the information earlier provided is no longer valid.

If GDPR Register has not sought pre-authorization of the Client’s credit card, then before the end of each payment interval, Client will be issued an electronic invoice for payment of the Fee of the next payment interval. The Client must pay the invoice by the due date indicated on the invoice.

Annual payments will automatically renew at the end of each term unless either party gives the notice of termination at least 30 days prior to the end of the relevant term or either party terminates the Service contract.

There is a Trial version with limited functionality, that is available for the Client without a charge for 14 days.  Details about the Trial version and the payments are provided during the sign-up process.

The Service contract between GDPR Register and the Client will be valid from the moment of the first payment and during the selected period. In case of selection of a Free version and Trial version, the Service contract will be valid from the moment of sign-up.

Technical Support

GDPR Register shall provide reasonable technical support to Client at the reasonable request of the Client. GDPR Register shall respond to enquiries to support a Client as soon as reasonably possible.


GDPR Register shall not warrant that:

• the use of the Service will always meet the Client’s requirements;

• the use of the Service will always be uninterrupted, timely, secure or free from error;

• any information obtained by the Client as a result of the use of the Service will be accurate or reliable;

• that defects in the operation or functionality of any software provided to the Client as part of the Service will be corrected.


GDPR Register shall not be liable to the Client for any consequences resulting from:

• any modifications in the Service contract;

• calculation and rates of Fees;

• using the Services or any part or element thereof, including any error, permanent or temporary interruption, discontinuance, suspension or other types of unavailability of the Services;

• deletion of, corruption of, or failure to store any data;

• use of Client´s data by the Client;

• upgrading;

• any disclosure, loss or unauthorized use of the login credentials of Client due to Client’s failure to keep them confidential.

In particular, GDPR Register does not represent or warrant that the data the Client enters into the Services gives full compliance with The General Data Protection Regulation 2016/679 requirements.

The maximum liability of GDPR Register is limited to the amount that is equal to the annual Fee paid by the Client.


The Service contract may be terminated for convenience upon notice to the other party:

• by the Client any time by clicking the cancellation link, when logged in to the account;

• by GDPR Register upon the decision to end provision of the Services;

• immediately by either party, if proceedings are initiated for the other party’s liquidation or insolvency or a negotiated settlement with the other party’s creditors is concluded or an assignment is made on behalf of the other party for the benefit of creditors.

Annual payments will automatically renew at the end of each term unless either party gives the notice of termination at least 30 days prior to the end of the relevant term or either party terminates the Service contract.

In the case of termination of the Service contract, the Fee is non-refundable. The copy of the data inserted by the Client can be provided in CSV format and delivered to the Client by email upon such request. Please note that the copy of inserted data will be not provided to the Clients who are subscribed to Free plan or Trial version.

Intellectual Property

All trademarks, service marks, trade names, logos, domain names and any other features of the brand are the sole property of GDPR Register. Database rights, copyrights of the software, and any other intellectual property rights belong to the GDPR Register. The purchase of the Services does not grant any rights to use any GDPR brand features whether for commercial or non-commercial use. The Client may not copy, duplicate, distribute, modify, adapt, hack, create derivative works, reverse engineer or decompile the Services or any part or element of Services unless agreed otherwise.

Change of the Terms and Services

GDPR Register reserves right to modify, add, or remove functionalities of the Services at any time without sending prior notice to the Client.  The Client acknowledges and agrees that the Services may change over time and that GDPR Register may make changes to the Services in its sole discretion.

GDPR Register may discontinue the Services,  or change the pricing model and the fees of the plans, at any time with thirty (30) days prior written notice. However, if the Client has selected a paid plan, the updated fees will not take effect during the subscription period, selected by the Client. If such changes are unacceptable, the Client may terminate the Service contract by providing written notification (e.g. email) to GDPR Register at least thirty (30) days prior to the date the change is scheduled to take effect. Any use of the Services by the Client, after the effective date, will be deemed acceptance of the amendments of the Service contract.

Governing Law and Jurisdiction

In the event of a dispute, controversy or claim arising out of or in relation to these Service contract, it shall be governed by and construed in accordance with the laws of the Republic of Estonia, without giving effect to any principles of conflicts of law. With Harju County Court having exclusive jurisdiction.

Data Storage

The Services may be performed using equipment or facilities located within the territory of the European Union. GDPR Register will maintain administrative, physical, and technical safeguards for the protection of the security, confidentiality and integrity of the Client’s data. Please, read more about GDPR Register’s security standards.  The data is accessible only to the Client and will be not provided to the third party. The requests of Data Inspectorate shall be implemented by the Client. Service is designed in a way that the Client shall not enter any personal data. Please read Privacy Notice.

In case of losing, forgetting or otherwise not being able to log into the account, GDPR Register may request additional information or proof of the person’s credentials.