Terms & Conditions

1. Definitions

Supplier: downloadlink.nl (hereinafter: “downloadlink.nl”).
Customer: the (legal) person taking the Service for business purposes.
Service: the online file transfer and hosting functionality, including storage with a cloud provider (S3-compatible).
Subscription: monthly recurring service at a fixed price per storage bundle.
Data: all files and data uploaded by the Customer or processed through the Service.

2. Applicability and order of precedence

These terms apply to all quotations, subscriptions and use of the Service by the Customer (B2B). Deviations apply only if agreed in writing. In the event of a conflict between documents, the following order of precedence applies: (1) a written bespoke agreement, (2) these terms including annexes, (3) online documentation and price information.

3. Offer, formation and term

1. The offer (storage bundles and prices) is shown on the website or confirmed by email. Obvious errors and typographical errors are not binding on downloadlink.nl.
2. The agreement is formed on (i) online confirmation via the site (including PayPal subscribe), or (ii) written or email acceptance of a proposal.
3. Subscriptions have a term of one (1) month and are renewed automatically unless cancelled with effect from the end of the current period.

4. Prices, payment and invoicing

1. Prices exclude VAT and other levies. Any transaction costs (for example PayPal) may be charged.
2. Payment is made via the chosen payment method (including iDEAL/Mollie or a PayPal subscription). After a failed direct debit, downloadlink.nl may suspend access until payment; after a reversal (chargeback) or full refund, the subscription may be terminated with immediate effect — you then fall back to the free plan and your files remain stored.
3. downloadlink.nl may change its prices. In the event of an increase for a current monthly subscription, the Customer is informed at least 30 days in advance; in that case the Customer may cancel with effect from the end of the current term.

5. Use, Fair Use and Acceptable Use

1. The Customer uses the Service with due care, in accordance with legislation and these terms.
2. Fair Use: traffic and storage must be reasonable within the bundle purchased. Excessive data traffic or improper use (for example public CDN use) may be limited or charged.
3. Prohibited content and conduct: unlawful, infringing, deceptive or harmful content and activities (including malware, phishing, hateful or criminal content) are prohibited.
4. downloadlink.nl may block or remove content and suspend accounts in the event of a (suspected) breach or at the order of a competent authority.

6. Availability, maintenance and changes

1. downloadlink.nl strives for high availability but does not guarantee uptime unless otherwise agreed in writing.
2. Maintenance (planned or urgent) may lead to temporary unavailability. downloadlink.nl endeavours to limit this and — where reasonably possible — to announce it in advance.
3. downloadlink.nl may change the Service (technically or functionally) to improve security, performance or quality. Material changes are communicated where relevant.

7. Security and backups

1. downloadlink.nl takes appropriate technical and organisational measures suited to the nature of the Service and the state of the art.
2. The Customer is responsible for choosing a strong password, for keeping login details confidential, and for its own external backups.
3. Unless expressly agreed, the Service does not include any guarantee of backups or recovery of individual files.

8. Privacy and data processing (GDPR)

1. In so far as downloadlink.nl processes personal data for the Customer in providing the Service, downloadlink.nl is the processor and the Customer is the controller.
2. That processing is governed by Annex A – Data Processing Agreement, which forms part of these terms.

9. Intellectual property

1. All rights to the Service, software and documentation rest with downloadlink.nl or its licensors.
2. The Customer's Data remains the property of the Customer. The Customer grants downloadlink.nl a limited licence to host, process and display Data in order to perform the Service.

10. Suspension and termination

1. downloadlink.nl may (temporarily) suspend access in the event of payment arrears, security risks or a (suspected) breach.
2. Termination takes effect at the end of the subscription period. On termination, Data may be deleted. The Customer is responsible for exporting in good time.

11. Liability

1. downloadlink.nl's liability is limited to direct damage and to an amount equal to the fees paid by the Customer over the twelve (12) months preceding the event (or €5,000 if a higher amount has not been paid), per event and in aggregate.
2. Exclusion: consequential damage, lost profit or turnover, loss of Data, reputational damage and third-party fines are excluded.
3. These limitations do not apply in the event of intent or deliberate recklessness on the part of downloadlink.nl's management.

12. Force majeure

In the event of force majeure (including failures at third parties or cloud providers, network or power outages, DDoS, war, government measures), downloadlink.nl is not obliged to pay damages or to perform for as long as the force majeure continues.

13. Changes to these terms

downloadlink.nl may amend these terms. In the event of material changes, the Customer is reasonably informed. If the Customer does not agree, it may cancel with effect from the end of the current month.

14. Governing law and jurisdiction

Dutch law applies. Disputes are submitted to the competent court in the district of Overijssel, Almelo/Enschede location.

Annex A – Data Processing Agreement (B2B)

A1. Subject matter and roles

This annex governs the processing of personal data in the context of the Service. The Customer is the controller; downloadlink.nl is the processor.

A2. Processing operations

Purposes: providing file storage and transfer; security and continuity; support; invoicing. Categories of data subjects and data: determined by the Customer. Duration: the term of the agreement.

A3. Processor obligations

• Process only on documented instructions from the Customer.
• Appropriate security measures (art. 32 GDPR), including encrypted transport layers and restricted access.
• Employees involved are bound by confidentiality.
• Sub-processors (including an S3 cloud provider, email, Mollie/PayPal and AI supplier Anthropic in the United States) may be engaged; on request, downloadlink.nl provides an up-to-date overview. The Processor imposes comparable obligations on sub-processors. Only what the AI feature you use requires is sent to Anthropic: for the planning summary and the planning proposal, the names, disciplines and hours from your weekly overview; for scan recognition (OCR), the page images of the document you have recognised; for the bookkeeping module, the receipt or invoice you add, from which the AI reads the supplier, date and amounts. We keep the AI response to a planning query as a cache for a maximum of 30 days, we do not store OCR pages, and what the AI extracts from a receipt goes into your own bookkeeping and follows the retention period that applies there. Ordinary uploading and downloading involves no AI at all. The safeguards set out in A4 apply to the transfer to the United States.
• Notification of a personal data breach without undue delay after detection, with information relevant to the Customer.
• Reasonable assistance with the Customer's GDPR obligations (including data subject rights, DPIA), against reasonable compensation if outside normal service provision.
• Delete or return Data afterwards, unless legislation requires storage.
• Audits: the Customer may commission an audit (max. once per 12 months), after reasonable notice, during office hours, with minimal disruption. Confidentiality and security requirements apply. Reasonable costs are borne by the Customer.

A4. International transfers

Hosting, storage, email and the network layer run in Europe: Render (Frankfurt), Backblaze B2 (Amsterdam), Brevo and Cloudflare (European servers). For those components, no transfer outside the EEA takes place.

One processing operation does fall structurally outside this: the AI features. If an AI feature is used in your environment, we send precisely the data required for it to Anthropic PBC in the United States. Anthropic acts as a sub-processor in doing so and processes that data solely to return the response. Which features this concerns, and what is sent along:

• AI weekly overview in the planner: names of employees, their role, contracted and scheduled hours, project names and how full a budget is. Please note: this overview is automatically fetched in advance shortly after the planner is opened, so even without anyone pressing the button.
• AI scheduling proposal in the planner: names of employees, their discipline and available hours, plus the outstanding work with project name and remaining hours. This is only sent when someone explicitly requests it.
• Scan recognition (OCR) in the file tools: the image of the page you have transcribed, including everything on it.
• Receipt recognition in the bookkeeping module: the purchase invoice or receipt you add (as a PDF, as a photo, or as the text of the email), so that the supplier, date, amount and VAT can be extracted from it automatically.
• If your environment also provides AI document checking or quotation and document assistance, the document itself is sent along: the PDF, drawing or Word text you are having checked or edited.

What happens to the response afterwards differs per feature. We keep the output of the AI weekly overview and the planning proposal in a cache for a maximum of 30 days and then delete it automatically; of the data you put into it, we keep only an irreversible fingerprint, not the content. With OCR we keep nothing: the recognised text goes straight back to your screen. With receipt recognition and document checking, the result is stored in your own environment and follows the retention period that applies there.

For this transfer to the United States, downloadlink.nl ensures appropriate safeguards (such as EU standard contractual clauses) or an equivalent legal basis. If none of these features is used, no data leaves the EEA via this route. Google and PayPal stand apart from this: they only process data if you yourself choose to sign in with Google or to pay via PayPal, and they do so as independent data controllers under their own terms.

A5. Liability

The limitations of liability in article 11 of the terms also apply to this annex, to the extent permitted by law.