TERMS OF SERVICE – AGENDLY

Software as a Service (SaaS) – Call and appointment management platform through an AI-based voice agent

Last updated: 17/02/2026

Provider: Agendly S.r.l. (VAT no. 04236380137), Registered office Via ai Crotti 39, 22031 Albavilla (CO), Italy – Email: info@agendly.ai – Certified email (PEC): agendly@namirialpec.it.

Client/User: the natural or legal person who registers on the Platform and accepts these Terms (the “Client”).

By accepting these Terms, the Client enters into a contract with Agendly S.r.l. for access to and use of the Service. Certain features and/or usage tiers may be subject to separate commercial terms (order, offer, or commercial proposal), which do not amend the general rules on use, security, data, and liability set out herein, unless expressly agreed in writing by the Parties.

1. Parties

1.1 The parties to this contract are: (i) Agendly S.r.l. (“Agendly” or “Provider”); and (ii) the entity accepting these Terms during registration (the “Client”).

1.2 Agendly and the Client are jointly referred to as the “Parties”.

2. Recitals and definitions

2.1 Agendly is the sole owner of the cloud software platform called “Agendly”, intended for professionals and organizations, enabling automated management of phone calls and collection of the information needed to schedule appointments through an AI-based voice agent.

2.2 The Client intends to use the Service within its professional activity, assuming full responsibility for the purposes and operating methods by which the Service is used (e.g., call handling, scheduling, contacts).

2.3 This contract is an atypical agreement pursuant to Article 1322 of the Italian Civil Code, concerning the ongoing provision of the Service and the grant of a temporary, non-exclusive software use license, without transfer of ownership.

2.4 The Recitals and Annexes form an integral and substantial part of these Terms.

2.5 Main definitions:

“Service” or “Platform”: the Agendly cloud application and the features described in these Terms and Annexes (including any updates).
“Authorized Users”: natural persons authorized by the Client (employees/collaborators) to access the Service with their own credentials.
“Client Data”: data and content entered by the Client or collected through the Service on behalf of the Client (including personal data).
“Personal Data”: personal data under Regulation (EU) 2016/679 (GDPR).
“DPA”: the Data Processing Agreement (Annex C) under Article 28 GDPR.
“SLA”: service, maintenance, and support levels (Annex B).
“Sub-processors”: third-party providers used by Agendly for delivery of the Service (Annex E).
“Documentation”: technical and functional documentation made available by Agendly to the Client (manuals, guides, knowledge base, API specifications, release notes, and technical policies), including online materials, as updated from time to time.

3. Scope of the Service

3.1 Agendly provides the Client, who accepts, with the Service in SaaS mode through remote Internet access, according to the Service Description in Annex A.

3.2 Unless otherwise agreed in writing, the Service includes: (i) access to the web dashboard; (ii) AI voice agent for inbound/outbound call handling; (iii) collection of information required to schedule appointments and related registration; (iv) cloud infrastructure hosting; (v) corrective maintenance and security updates; (vi) technical support under the SLA.

3.3 Any additional professional services (advanced setup, integrations, training, customizations, migrations) may be subject to a separate written order/quotation.

3.4 Agendly may update and modify the Service for technical, security, or regulatory reasons, while preserving the essential functionality of the Service, and informing the Client where reasonably possible.

4. License of use and Intellectual Property

4.1 Agendly grants the Client, for the duration of the contractual relationship, a non-exclusive, non-transferable, non-sublicensable, revocable software use license, limited to the Client’s internal purposes and use compliant with these Terms.

4.2 The Client acquires no ownership rights over the software, models, source code, interfaces, algorithms, databases, or technical documentation. All intellectual property rights remain with Agendly or their respective owners.

4.3 The following are prohibited (except where mandatorily allowed by law): copying, reproducing, modifying, decompiling, reverse engineering, bypassing security measures, creating derivative works, or using the Service to develop a competing product.

4.4 Removing or altering copyright notices, trademarks, or other proprietary notices present in the Service is prohibited.

5. Registration, credentials, and access security

5.1 Registration and account activation occur through the Platform. Some features may require preliminary onboarding or configuration activities, as described in Section 5.6 below.

5.2 The Client receives access credentials and/or creates credentials for Authorized Users. The Client must safeguard credentials with due care, keep them confidential, and adopt measures suitable to prevent unauthorized use.

5.3 Any operation performed through the Client’s or its Authorized Users’ credentials is presumed to be performed by the Client. In case of suspected unauthorized access, the Client must promptly inform Agendly.

5.4 The Client is responsible for its Internet connectivity, devices, and local configurations required for access.

5.5 For Service go-live (“Activation Date”), preliminary and onboarding activities may be required; any start dates provided at informational stage are indicative unless otherwise agreed in writing.

5.6 By way of example, onboarding may include: (i) account and credential setup; (ii) setup and testing of integrations (e.g., calendars, meeting tools); (iii) setting operating instructions and/or the voice agent “prompt”; (iv) activation and/or portability of the dedicated number with the telecom operator, where applicable; (v) functional testing. The Client undertakes to cooperate in good faith and provide, in a timely manner, information, authorizations, documentation, and access reasonably necessary.

5.7 Any delays or slowdowns in Service operability due to (i) missing/delayed Client activities or authorizations, (ii) need to coordinate with the Client’s internal organization or suppliers/third parties under the Client’s control, and/or (iii) technical timelines and regulatory requirements requested by the telecom operator for activation/allocation of numbering, are not attributable to Agendly and do not constitute breach.

5.8 Dedicated phone number and registration (where applicable). Where agreed, Agendly will make available a dedicated/custom phone number (including portability), through which calls handled by the Service are routed. Unless otherwise agreed in writing, numbering is registered directly to the Client as end-user, in compliance with telecom operator rules and applicable electronic communications law. The Client undertakes to provide all documentation required by the telecom operator, guaranteeing its truthfulness and updates. The telecom operator may require additional checks, refuse or revoke number activation in case of incomplete/non-compliant documentation or regulatory requirements; in such cases Agendly cannot be held liable for number unavailability or related technical timelines.

5.9 Data protection for numbering registration. Documentation and personal data collected for numbering registration are processed in compliance with the GDPR and applicable national law, according to lawfulness, minimization, and storage limitation principles, and are shared, as necessary, with the telecom operator and/or sub-processors involved in Service delivery, as described in the DPA (Annex C) and Sub-processors list (Annex E).

6. Support, maintenance, and service levels (SLA)

6.1 Availability levels, maintenance windows, and response times are set out in Annex B (SLA).

6.2 Scheduled maintenance, communicated with reasonable notice, does not constitute service disruption and is excluded from guaranteed uptime calculation, as are interruptions caused by force majeure or events attributable to the Client or third parties under the Client’s control.

6.3 Technical support is provided according to the channels and hours set out in the SLA. The Client undertakes to provide accurate diagnostic information (e.g., issue description, logs, screenshots).

7. Client obligations and conditions of use

7.1 The Client shall use the Service in compliance with applicable law (including GDPR, telecommunications law, Public Register of Objections where applicable, professional rules, and any other relevant provisions) and Service usage instructions.

7.2 The Client is solely responsible for: (i) lawfulness of data entered or collected via the Service; (ii) legal bases and notices to data subjects; (iii) operating choices (e.g., scripts, messages, contact methods, time slots, consent management).

7.3 The Client warrants it has all rights and authorizations required to process and communicate Client Data to Agendly and to place calls/contacts through the Service.

7.4 Use of the Service for unlawful or abusive activities is prohibited, including by way of example: spam, non-compliant telemarketing, phone harassment, fraud, third-party rights violations, dissemination of unlawful or harmful content, attempted intrusion or interference with systems.

7.5 The Client is liable for actions of its Authorized Users and warrants their compliance with these Terms.

7.6 Documentation and technical requirements. The Client declares it has understood the Service’s purpose and operation and has adequate skills and technical requirements for use (including connectivity, systems, credentials, integrations). The Client undertakes to comply with Documentation and technical policies made available by Agendly; non-compliant use remains at the Client’s sole risk.

7.7 Credential security and fraudulent uses. The Client adopts suitable organizational and technical measures to protect credentials and accounts (e.g., user management, strong authentication where available, prompt access revocation, password policies). Agendly is not responsible for unauthorized access or fraudulent operations carried out by third parties or by the Client’s Authorized Users in violation of internal policies; verification, monitoring, and prevention remain with the Client. In case of suspected abuse, the Client must immediately inform Agendly, which may start credential recovery procedures and, where necessary, temporarily suspend access to contain the incident.

7.8 Privacy acceptances and configurations. Activation and use of the Service require acceptance of applicable Annexes (in particular DPA and Annex E) and, where applicable, privacy notices and settings made available on the Platform; failing this, Agendly may suspend service delivery until regularization.

8. Data protection, GDPR, security, and retention

8.1 GDPR roles. The Client acts as Data Controller of Personal Data processed via the Service; Agendly is appointed Data Processor under Article 28 GDPR, as set out in Annex C (DPA).

8.2 Processing and data categories. The Service may process, by way of example: first and last name, contact details (phone/email), appointment data (date/time, generic reason), and—if enabled—transcripts and/or recordings. The Client undertakes not to enter special categories of data (Article 9 GDPR) or criminal data (Article 10 GDPR) into the Service, unless after prior assessment and specific documented instructions, and with adequate security measures.

8.3 Security measures. Agendly adopts technical and organizational measures appropriate under Article 32 GDPR, including: encryption of data in transit (TLS), access controls and logical segregation, logging and monitoring, backup and restore procedures, vulnerability management and patching.

8.4 Data breach. In case of a personal data breach relating to processing activities performed by Agendly as Processor, Agendly will inform the Client without undue delay and, where possible, within 48 hours of discovery, providing available information to enable the Client’s legal compliance.

8.5 Retention. Unless otherwise instructed by the Client in documented form: (i) data collected for appointment management are stored for a standard maximum period of 30 (thirty) days, after which they are deleted or anonymized; (ii) technical security logs may be retained for longer periods, in minimized form, for security and compliance purposes; (iii) administrative/tax data are retained for statutory periods.

8.6 Advanced configurations. Agendly may provide, on request and where technically compatible, advanced data minimization and non-persistence configurations (e.g., “operational zero retention”), aimed at avoiding retention of conversational content beyond the time strictly necessary to execute the individual call and produce the Service outcome. The Client acknowledges that such configurations may limit historical and reporting features.

8.7 Sub-processors and transfers. Agendly may use Sub-processors listed in Annex E. Any extra-EEA transfers will occur in compliance with GDPR Chapter V (e.g., SCCs and supplementary measures), as detailed in the DPA.

8.8 AI models and training prohibition. In the context of the Service, Agendly uses AI models based on open-source technologies or otherwise configured so as not to use Client Data for training, retraining, or improvement of general AI models. Client Data are processed exclusively for Service delivery and legal compliance.

8.9 Notice for Client contacts. Personal data of the Client’s contacts/references (e.g., names, contact details, roles) and any documentation provided for administrative purposes and/or dedicated number registration are processed by Agendly as Data Controller for purposes connected with relationship management and legal compliance, as indicated in the notice under Annex F.

9. Data ownership, portability, and return

9.1 Client Data remain under the exclusive ownership of the Client. Agendly acquires no ownership rights over Client Data.

9.2 The Client grants Agendly a limited, non-exclusive, royalty-free license, valid for the duration of the relationship, to process Client Data solely for Service delivery, support, and compliance with legal obligations.

9.3 The Client may request export of Client Data in a structured, commonly used electronic format (e.g., CSV/JSON), according to Agendly procedures.

9.4 Upon termination, Agendly will make Client Data available for export for 30 (thirty) days, after which it will proceed with secure deletion within the following 10 (ten) days, except for statutory retention obligations or as provided by the DPA and technical backup cycles.

10. Confidentiality

10.1 The Parties undertake to keep confidential all Confidential Information learned in relation to these Terms and not disclose it to third parties nor use it for purposes other than performance of the relationship, except with the other Party’s written consent or legal obligations.

10.2 “Confidential Information” includes, by way of example: credentials, configurations, Client data and content, technical and security information, know-how, documentation, and communications between the Parties.

10.3 The Parties may disclose Confidential Information to their employees/collaborators and Sub-processors with a need to know, imposing confidentiality obligations at least equivalent.

10.4 Confidentiality obligations survive for 5 (five) years after termination; for trade secrets and personal data, for as long as the information remains confidential under law.

11. Indemnity, limitation of liability, and force majeure

11.1 Indemnity. The Client undertakes to indemnify and hold Agendly harmless from any claim, sanction, damage, cost, or expense (including legal fees) arising from: (i) use of the Service by the Client and/or Authorized Users in breach of law, Documentation, or Terms; (ii) data, content, scripts, prompts, messages, or instructions provided by the Client; (iii) instructions given by the Client to Agendly; (iv) third-party rights violations attributable to the Client; (v) breaches of privacy obligations, commercial communications rules, and/or sector regulations (including phone marketing, call recording, notices/consents), attributable to the Client; (vi) disputes, claims, or orders by third parties (including data subjects, telecom operators, and Authorities) connected to use of the dedicated number and/or communications made through the Service, where attributable to the Client.

11.2 Limitation. Except in case of wilful misconduct or gross negligence and within mandatory legal limits (Article 1229 of the Italian Civil Code), Agendly is not liable for indirect or consequential damages, including by way of example loss of profit, business interruption, loss of customers, reputational damages, or data loss not attributable to Agendly.

11.3 Liability cap. Except in case of wilful misconduct or gross negligence and within mandatory legal limits, Agendly’s aggregate liability for direct damages arising from the relationship shall not exceed the total amount actually paid by the Client to Agendly in the 12 months preceding the event giving rise to the damage, as resulting from applicable commercial agreements.

11.4 Exclusions. Agendly is not liable for disruptions or damages due to: (i) Client connectivity/tools; (ii) third-party software or integrations not under Agendly’s control; (iii) non-compliant Client use; (iv) scheduled maintenance; (v) force majeure.

11.5 Force majeure. Neither Party shall be liable for failures due to force majeure events (e.g., natural disasters, acts of authorities, wars, large-scale cyberattacks, blackouts). The affected Party shall notify the other and use reasonable efforts to reduce effects.

12. Service suspension

12.1 Agendly may suspend all or part of the Service (including without notice in urgent cases) if: (i) the Client breaches law or Terms; (ii) there is risk to system security or stability; (iii) there are orders/requests from authorities; (iv) there is abuse or abnormal use that may prejudice the Service or third parties; (v) urgent extraordinary maintenance is required; (vi) in cases provided by any applicable commercial agreements (e.g., non-fulfilment of administrative or contractual obligations).

12.2 Where technically possible, Agendly shall promptly inform the Client indicating the reason. The Service will be reactivated once the suspension causes are removed, unless the relationship is terminated.

13. Term and termination

13.1 These Terms apply from acceptance and remain in force until termination of the Client account or other termination of the relationship between the Parties.

13.2 The Client may request deletion of its account and termination according to methods made available on the Platform or by contacting support, without prejudice to legal obligations and technical management of data return/deletion under Section 9 and the DPA.

13.3 Agendly may terminate the relationship under Article 1456 of the Italian Civil Code (express termination clause), by written notice, in the following cases: (i) breach of use license or intellectual property rights; (ii) unlawful or non-compliant use of the Service; (iii) uploading/managing unlawful content or content infringing third-party rights; (iv) serious breach of confidentiality obligations; (v) serious breach of Client obligations under Section 7.

13.4 Effects. Upon termination, rights to use the Service immediately cease. Confidentiality obligations, liability limitation and indemnity clauses, and rules on data return/deletion remain in force.

14. Communications

14.1 Official communications between the Parties shall be made in writing by certified email (PEC) or registered letter with return receipt to the addresses indicated above or subsequently communicated in writing.

14.2 Operational communications (support, service notifications) may also occur by ordinary email or dashboard.

15. Governing law and competent court

15.1 These Terms are governed by Italian law.

15.2 Any dispute concerning validity, interpretation, performance, or termination of these Terms shall be subject to the exclusive jurisdiction of the Court of Milan, expressly excluding any other competing or alternative forum, within legal limits.

16. Final provisions

16.1 Entire agreement. The Terms, including Annexes, constitute the entire agreement between the Parties and supersede any prior understanding on the same subject matter.

16.2 Partial invalidity. Any nullity or ineffectiveness of a clause shall not invalidate the entire contract; the clause will be replaced by a valid provision reflecting its rationale.

16.3 Assignment. The Client may not assign the relationship or rights arising from the Terms without Agendly’s prior written consent. Agendly may assign the relationship within extraordinary transactions (merger, transfer of business), with notice to the Client.

16.4 Changes to the Terms. Agendly may update the Terms for technical, security, or regulatory needs. In case of material changes, Agendly will provide notice with reasonable advance through the Platform or email. Continued use of the Service after the effective date of changes constitutes acceptance, except where mandatory law provides otherwise.

16.5 Language. In case of translations, the Italian-language version prevails.

16.6 References and trademark use. Unless otherwise agreed in writing, the Client authorizes Agendly to indicate the Client’s name and logo as a commercial reference (e.g., website, presentations, promotional materials), without disclosing Confidential Information or Client Data. Agendly undertakes not to use the trademark in contexts that may harm the Client’s decorum or reputation. The Client may revoke this authorization at any time by written notice; revocation shall apply prospectively within a reasonable time.

Annexes

Annex A – Service Description and features
Annex B – SLA (availability, maintenance, support)
Annex C – Data Processing Agreement (DPA) under Article 28 GDPR
Annex E – List of Sub-processors and localization/transfers (where applicable)
Annex F – Privacy notice on processing of Client contacts’ personal data (Article 13 GDPR)

ANNEX A – SERVICE DESCRIPTION AND FEATURES

A.1 The Service is a SaaS platform enabling the Client to:

configure an AI-based voice agent to manage inbound and/or outbound calls;
collect information required for appointment scheduling (e.g., availability, contact details, request);
record call and appointment outcomes and consult reports and application logs available in the dashboard;
integrate, where available, the Service with third-party tools (e.g., calendars, meeting systems, webhook/API).

A.2 Agendly may provide different optional configurations and features (e.g., transcripts, recordings, advanced routing rules, advanced retention). Enabling such options occurs according to what is made available on the Platform or agreed in writing.

A.3 Requirements: Internet access, compatible devices, and updated browser; specific requirements and limitations are indicated in the Documentation.

A.4 Dedicated numbering: where used, activation/portability may depend on technical timelines and regulatory requirements of the telecom operator; the Client must provide required documentation.

ANNEX B – SLA (SERVICE LEVEL AGREEMENT)

1. Availability (Uptime). Agendly undertakes to guarantee monthly Service availability of at least 99%, calculated on a monthly basis.

1.1 Definitions. “Uptime” means the percentage of time, in the relevant month, during which the Service is available and reachable in production. “Downtime” means total unavailability of the Service preventing use of essential functionalities; partial malfunctions or degradations do not constitute Downtime and are managed according to severity classes in point 5.

1.2 Measurement. Uptime is calculated monthly using Agendly monitoring systems (availability logs and metrics). Upon Client request, Agendly may provide reasonable evidence of relevant metrics, within confidentiality and security limits.

2. Exclusions from Uptime calculation: (i) scheduled maintenance with prior notice; (ii) force majeure events; (iii) suspensions due to Client breach; (iv) unavailability due to Client connectivity or systems; (v) third-party integrations.

3. Scheduled maintenance: preferred window Saturday with at least 1 business day notice, except urgent needs.

4. Support: email channel – Monday to Friday, 10:00 to 19:00.

5. Severity classes and indicative times:

Critical (Service unavailable): response within 2 hours; best-effort restoration/workaround with highest priority.
High (Key functionality degraded): response within 12 hours; best-effort restoration/workaround.
Medium/Low (Non-blocking issue): response within 24 hours; resolution in subsequent releases/patches.

6. Remedies. In case of failure to meet SLA, Agendly shall adopt proportionate and reasonable remedies (e.g., service extension, replacement services, or other agreed measures), without prejudice to limits under Section 11 of the Terms and events excluded from Uptime calculation. Monetary remedies may be provided only in separate commercial agreements.

7. Exclusive remedies: SLA remedies are the Client’s sole remedy in relation to SLA breaches, except in case of wilful misconduct or gross negligence and within mandatory legal limits.

ANNEX C – DATA PROCESSING AGREEMENT (DPA) UNDER ARTICLE 28 GDPR

Between: (i) the Client, as Data Controller; and (ii) Agendly S.r.l., as Data Processor.

1. Scope and duration: the Processor processes Personal Data to provide the Service described in the Terms, for the duration of the relationship and for the technical time necessary for return/deletion.

2. Nature and purpose: call and appointment management, hosting and support, security, abuse prevention, legal compliance, according to documented Controller instructions.

3. Types of data and data subject categories: identification and contact data (name, surname, phone, email), appointment data, any recordings/transcripts if enabled; data subjects: Controller’s clients and potential clients, and Controller’s Authorized Users.

4. Controller instructions: the Processor processes data only on documented Controller instructions. The Controller warrants instructions are lawful and GDPR-compliant.

5. Confidentiality: the Processor ensures persons authorized to process data are bound by confidentiality obligations.

6. Security (Article 32 GDPR): the Processor adopts appropriate technical and organizational measures, including (a) in-transit encryption; (b) access control and least privilege; (c) logical segregation; (d) backup and recovery; (e) logging and monitoring; (f) vulnerability management.

7. Sub-processors: the Controller grants general authorization for use of Sub-processors listed in Annex E. Agendly will inform the Controller of any material change to the list, allowing 10 days for reasoned objection. Agendly imposes obligations on Sub-processors equivalent to this DPA.

8. Assistance to the Controller: the Processor assists the Controller, where reasonably possible, in responding to data subject requests and complying with Articles 32-36 GDPR (security, DPIA, prior consultation).

9. Data breach: the Processor notifies the Controller without undue delay and, where possible, within 48 hours of discovery, providing available information.

10. Return and deletion: upon Service termination, the Processor, on Controller request, returns Personal Data in structured format and deletes data from systems within the terms set out in the Terms (Section 9.4), except legal obligations and cyclical backups. Backups are overwritten according to internal policies.

11. Audit and compliance: the Processor makes available to the Controller information necessary to demonstrate compliance with this DPA and allows reasonable audits, upon written request with 15 days notice and in compliance with trade secrets and security.

12. Extra-EEA transfers: where applicable, Agendly ensures appropriate safeguards under Articles 44-49 GDPR (e.g., SCCs) and supplementary measures (e.g., encryption) as per Annex E.

13. Precedence: in case of conflict between DPA and Terms, the DPA prevails regarding data protection matters.

APPENDIX 1 – Processing details (Article 28(3) GDPR)

Nature of processing: collection, recording, organization, storage (for expected period), consultation, use, disclosure to sub-processors, deletion.
Purposes of processing: Service delivery (call and appointment management, hosting and application functionalities), technical support, security and abuse prevention, legal compliance.
Types of personal data: identification and contact data, calendar/appointment data, communication metadata (timestamp, duration), any transcripts/recordings if enabled; data of contacts and Authorized Users.
Categories of data subjects: Controller’s clients and contacts (end users calling), Controller’s Authorized Users, Controller’s contacts and personnel involved in relationship execution.
Processing duration: for the duration of the relationship and the technical time necessary to deliver the Service; return/deletion according to Terms and DPA; standard retention 30 days unless different documented instructions.

ANNEX E – SUB-PROCESSORS AND LOCALIZATION

Indicative list to be periodically updated by Agendly and made available to the Client. By way of example, Agendly may use providers for: hosting/compute/storage; telephony and call termination; speech synthesis; AI components; monitoring and security services. For each sub-processor, Agendly indicates (where applicable) data localization and safeguards for any extra-EEA transfers (e.g., SCCs and supplementary measures).

The Client may request the updated list of sub-processors at the contacts indicated in the Terms or through the Platform.

ANNEX F – PRIVACY NOTICE ON PROCESSING OF CLIENT CONTACTS’ PERSONAL DATA (ARTICLES 13-14 GDPR)

1. Data Controller: Agendly S.r.l., with registered office and contacts indicated in the Terms.

2. Types of data processed: identification and contact data of Client contacts (name, surname, email, phone, role/title), administrative and tax data necessary for relationship management; where applicable, copies and data contained in documentation provided for dedicated phone number registration, within limits required by the telecom operator and sector regulations.

3. Purposes and legal bases: a) contractual relationship management and pre-contractual phases (Article 6(1)(b) GDPR); b) legal, tax, and accounting compliance (Article 6(1)(c) GDPR); c) protection of Agendly rights and prevention of fraud/abuse, including in court (Article 6(1)(f) GDPR).

4. Processing methods and security measures: processing with electronic and/or paper tools, according to logic related to stated purposes, and through appropriate technical and organizational measures (Article 32 GDPR).

5. Recipients and categories of recipients: IT and hosting providers; telecom operators and technical providers required for numbering activation/management; advisors (legal, tax) and banks; competent authorities, where required by law. The list of relevant providers can be requested from Agendly via the contacts indicated in the Terms.

6. Extra-EEA transfers: where certain providers involve data transfers to countries outside the EEA, Agendly adopts appropriate safeguards under GDPR Chapter V (adequacy decisions, SCCs, and supplementary measures where necessary).

7. Storage period: data are kept for the time necessary for the purposes above and, in any case, for the duration of the relationship; administrative and tax data are retained for periods required by applicable law (generally 10 years). Documentation for numbering registration is retained for the time required by operator/legal obligations and in any case within necessity limits.

8. Data subject rights: exercisable under Articles 15-22 GDPR by contacting Agendly at the contacts indicated in the Terms. A complaint may be lodged with the Italian Data Protection Authority.

9. Nature of provision: necessary for relationship management and/or dedicated number activation; refusal may make it impossible to perform the relationship, in whole or in part.

SPECIFIC APPROVAL PURSUANT TO ARTICLES 1341 AND 1342 OF THE ITALIAN CIVIL CODE

After reading, the Client specifically approves, pursuant to Articles 1341 and 1342 of the Italian Civil Code, the following clauses: 4 (License of use and Intellectual Property – limitations and prohibitions), 5.2-5.9 (Credential custody, access responsibility, onboarding, dedicated number and registration), 6 and Annex B (SLA – exclusions and remedies), 7 (Client obligations, prohibitions and responsibilities), 8 (Data protection and limitations on processable data), 10 (Confidentiality), 11 (Indemnity and liability limitations), 12 (Suspension), 13.3 (Express termination clause), 15.2 (Exclusive forum of Milan), 16.3 (Assignment), 16.6 (References and trademark use).