Terms of Service (ToS)

1. Scope & Contracting Parties

1.1 These Terms of Service (ToS) apply to all contracts regarding the use of the cloud-based Software-as-a-Service solution "Lobby" (hereinafter "Software"), offered by Sohebullah Abdi, Friedrich-Ebert-Str. 58, 68167 Mannheim (hereinafter "Provider").

1.2 The offer is directed exclusively to entrepreneurs within the meaning of § 14 BGB, legal entities under public law, or special funds under public law (hereinafter "Customer"). Consumers (§ 13 BGB) are excluded from using the service.

2. Subject Matter of the Contract

The Provider makes the software "Lobby" available to the Customer for resource and workplace management as an integration for communication platforms (e.g., Slack or Microsoft Teams). The scope of services depends on the selected package (e.g., Free, Pro, Enterprise).

3. Limitation of Liability

3.1 The Provider is liable without limitation for intent and gross negligence.

3.2 In the event of slight negligence, the Provider is only liable for breaches of essential contractual obligations (cardinal obligations). In this case, liability is limited to the contract-typical, foreseeable damage. Strict liability for damages (§ 536a BGB) for defects existing at the time of conclusion of the contract is excluded.

4. Conclusion of Contract

The contract for the use of the paid packages is concluded as soon as the customer completes the booking in the checkout process (e.g., via Stripe) by clicking on the corresponding payment button.

5. Prices & Payment Terms

5.1 The prices displayed on the website at the time of the conclusion of the contract shall apply. All prices are net plus statutory value-added tax (VAT).

5.2 Billing in the Pro plan is usage-based ("Pay-as-you-go"). Only users who have actively used the software during the respective billing period are charged. Payment is made in advance or in arrears, depending on the selected payment method (e.g., credit card, SEPA).

6. Term and Termination

Paid contracts are concluded for an indefinite period and can be flexibly terminated by either party at the end of the current billing month. Termination can be carried out directly via the customer dashboard or in text form.

7. Final Provisions

7.1 The law of the Federal Republic of Germany shall apply, excluding the UN Convention on Contracts for the International Sale of Goods (CISG).

7.2 The exclusive place of jurisdiction for all disputes arising from this contract is Mannheim, provided the customer is a merchant, a legal entity under public law, or a special fund under public law.

By installing and using the software, the Customer (hereinafter "Controller") concludes this Data Processing Agreement with the Provider (hereinafter "Processor").

1. Subject Matter and Duration of Processing

Subject Matter: The Processor handles the processing of personal data to provide the software "Lobby" (resource and attendance management) on behalf of the Controller.

Duration: Processing begins upon installation of the software and takes place for an indefinite period until the termination of the main contract (e.g., via uninstallation of the app) by either party.

2. Nature, Purpose, and Data Subjects of Processing

Nature of Processing: Collection, recording, organization, structuring, storage, retrieval, consultation, use, erasure, or destruction of data.

Purpose of Processing: Provision of a platform for booking workplaces, parking spaces, and resources as well as for sharing attendance status within the corporate context of the Controller.

Types of Data:

• Personal master data (e.g., Slack/Teams User IDs, display names)
• Communication data (e.g., Slack Team IDs, Teams Tenant IDs, workspace/tenant names, channel IDs)
• Usage data (e.g., timestamps of bookings, booked resources, absence status like home office or sickness)
• Optional data (e.g., voluntarily stored license plates for parking spaces)

Data Subjects: Employees of the Controller as well as external guests, if applicable, managed through the system.

3. Obligations of the Processor

The Processor processes personal data exclusively as contractually agreed or as instructed by the Controller. He confirms that he is familiar with the relevant data protection regulations and undertakes to maintain confidentiality. All persons deployed by him for processing have been bound to confidentiality. Processing takes place exclusively within the EU or the EEA.

4. Subcontracting Relationships (Subprocessors)

The Controller agrees to the engagement of the following subprocessor for data processing:

The Processor ensures that the subprocessor is contractually subject to at least the same data protection obligations as agreed upon in this contract.

5. Technical and Organizational Measures (TOMs)

The Processor has implemented appropriate technical and organizational measures pursuant to Art. 32 GDPR to ensure the security of processing. These include in particular:

• Confidentiality: Logical separation of tenant data in the database; password and SSH key-protected access to the servers; consistent encryption of data transmission (HTTPS/TLS).
• Integrity: No unauthorized entry or modification of data; safeguarding the application against unauthorized access.
• Availability: Utilization of the professional data center infrastructure of Hetzner Online GmbH (ISO 27001 certified) incl. protection against accidental destruction or loss.

6. Termination of the Order

Upon completion of the provision of the processing services (e.g., after uninstallation of the app by the Controller), the Processor will delete all personal data that came into his possession in connection with the contractual relationship in a data protection-compliant manner, unless Union law or Member State law requires storage of the personal data. Regardless of contract termination, a server-side automated deletion routine strictly and irrevocably removes historical attendance and booking data of the affected individuals from the database after 90 days.