Last updated: August 2026
Scope
These general terms and conditions apply to all contracts on the use of the software-as-a-service solution Hinweisbox between Hanvia GmbH (the "provider") and the customer. The service is directed exclusively at entrepreneurs within the meaning of § 14 of the German Civil Code. Deviating terms of the customer only become effective if the provider expressly agrees to them in writing.
Subject matter
The subject matter of the contract is the provision, over the internet, of an internal reporting channel within the meaning of the German Whistleblower Protection Act. The provider makes the software available for use; the software is not sold and no rights in the software are transferred. The provider does not give legal advice and does not act as an ombudsperson.
Conclusion of contract
The contract is concluded when the customer registers and the provider activates access. The customer warrants that it is authorised to represent the company stated and keeps its details up to date.
Services
The scope of services is determined by the plan booked, in accordance with the service description valid on the pricing page at the time the contract is concluded. The provider is entitled to develop the software further on an ongoing basis; essential functions are retained.
Trial period
New customers may test the service free of charge for 30 days. No payment details are required for the trial. The trial ends automatically; it does not convert into a paid subscription by itself.
Prices and payment
The prices displayed at the time of booking apply. All prices are in euros plus statutory VAT. Billing takes place in advance for the respective billing period. Invoices are provided electronically.
Term and termination
The contract runs for an indefinite period and may be terminated by either party with effect from the end of the respective billing period. The right to extraordinary termination for good cause remains unaffected. After the contract ends, customer data is deleted following a reasonable period, unless statutory retention obligations apply.
Customer obligations
The customer designates the trained individuals responsible for the reporting office, observes their confidentiality obligations under § 8 HinSchG, and protects access credentials against unauthorised access. The customer is responsible for making the reporting link available to its employees and for handling incoming reports within the statutory deadlines. Abusive use of the service is prohibited.
Availability
The provider aims for an annual average availability of 99%, excluding announced maintenance windows and disruptions outside the provider's sphere of control. Maintenance work is carried out outside normal business hours where possible.
Liability
The provider is liable without limitation in cases of intent and gross negligence and for injury to life, body or health. In the event of slightly negligent breach of essential contractual obligations, liability is limited to the foreseeable damage typical for this type of contract. Liability is otherwise excluded. Liability under the German Product Liability Act remains unaffected.
Data protection
The customer is the controller under data protection law for the personal data processed via the reporting channel; the provider acts as processor. For this purpose the parties conclude a data processing agreement pursuant to Art. 28 GDPR, which forms part of this contract. Details of the processing are set out in the privacy policy.
Final provisions
The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods. The exclusive place of jurisdiction for all disputes arising from this contract is — insofar as the customer is a merchant — the provider's registered office. Should individual provisions be invalid, the validity of the remaining provisions remains unaffected.