This page summarises, in plain language, the core terms of ArvaSafe's Master Service Agreement (MSA) and its schedules (DPA, SLA, Acceptable Use Policy). It's for information before signing, it is not itself a binding contract. The actual engagement is governed exclusively by the signed contract bundle, which we send you before any commitment.
1. What the service includes
Automated backups of the workstations and data declared in the Order Form, AES-256 encryption before upload, 500GB of storage per workstation (pooled), failure monitoring, the agreed restore-test type, restore support, and documentation of the service controls. Storage region, retention period by data category, and any immutability are defined in writing in the contract documents. Servers, databases, and specialist applications require separate assessment and written agreement.
2. What's excluded
Hardware or software support beyond the backup agent, cybersecurity incident response, any other IT services, and legal or compliance advisory services. The client remains solely responsible for assessing the service's suitability for their own legal compliance.
3. Pricing & payment
€49/workstation/month or €490/workstation/year (~17% discount), with 500GB/workstation included and a €49 one-time setup per workstation. Prices exclude 24% VAT. Additional capacity or services outside the basic scope are priced only through a prior written quotation. The price agreed at signing stays fixed for the contract period. Before a renewal price change you receive 60 days' written notice.
4. Term & termination
The monthly plan may be cancelled at any time. Service continues until the end of the current paid period, does not renew, and no partial refund applies. For the annual plan, written non-renewal notice is required at least 60 days before the renewal date. In case of material breach by either party, a 15-day cure period applies before termination, except for a confirmed data breach or a serious GDPR violation by the client, where ArvaSafe may terminate immediately.
5. Data portability
At termination, ArvaSafe may, under the agreed exit plan, restore selected data to a customer destination in a usable form or support a transition to a compatible provider. Exceptional third-party charges or physical-media costs are disclosed before transfer.
6. Encryption key management
Your data is encrypted client-side with AES-256 before it leaves your computer. Encryption keys are securely managed by ArvaSafe so that restores can be performed. Access to decrypted content is limited to named authorised personnel, only for a customer-requested restore or support case, and is logged. No storage or platform sub-processor holds the keys required to decrypt your file content.
7. Limitation of liability
For simple (light) negligence, ArvaSafe's total contractual liability per incident is the greater of the fees paid in the preceding 12 months or €5,000, with an annual aggregate cap of €10,000 per contract year. Liability for a personal-data breach is a separate limb, equal to the amount actually paid under ArvaSafe's cyber-liability insurance for that incident, with a guaranteed minimum of 12 months' fees regardless of the insurance outcome. These limits do not apply in case of intent or gross negligence, and do not affect liability toward data subjects under GDPR Article 82 or administrative fines imposed by a supervisory authority. ArvaSafe is not liable for lost profits or consequential damages. Full terms: MSA Part ΣΤ.
8. Acceptable use
The service is intended exclusively for the client's lawful business data, not illegal content, third-party business data without a written agreement, or personal use unrelated to the business. The full Acceptable Use Policy is delivered with the contract bundle.
9. Service level
Monitoring, notification, response, recovery, and support-availability objectives, together with exclusions and any credits, are defined in the signed Order Form and applicable SLA schedule.
10. Governing law
The contract is governed by Greek law. The competent courts are those of the client's registered seat or Athens, at the client's choice.
For the complete, binding contract text (MSA, DPA, SLA, Acceptable Use Policy), contact us, we send it before any signature is required.
