General conditions

for the provision and use of the trusted service for issuing and verifying certificates

brainit.sk, s.r.o. effective from 15.2.2021

1. Introduction

The General Terms and Conditions regulate the basic rules of provision and use of the Provider’s Trusted Services. They also regulate the rights and obligations of the Provider on the one hand, and on the other hand, they regulate the rights and obligations in the provision and use of the Trusted Services of the Customer and the Certificate Holder.

These T&C are made in accordance with the Provider’s Policies.

The currently effective TOS, the Provider’s Policies and all documents and forms necessary for the provision of the Trusted Services are available on the durable medium, on the website of brainit.sk, s. r. o. and also in printed version at individual Workplaces. They are available for inspection and familiarisation for any person interested in Trust Services.

The service of issuing qualified certificates for electronic signatures and seals has been subject to conformity assessment in accordance with the eIDAS Regulation and the relevant ETSI standards. It is therefore a service provided at a qualified level within the meaning of the eIDAS Regulation.

2. Definitions and abbreviations

Unless otherwise stated in the General Terms and Conditions, the following definitions shall have the following meanings:

Certificate:

  • A certificate or qualified certificate for electronic signature as defined in the eIDAS Regulation;
  • a certificate or qualified certificate for electronic signature within the meaning of the eIDAS Regulation;
  • a certificate for website authentication within the meaning of the eIDAS Regulation;
  • any other certificate used for encryption, authentication or other purposes within the meaning of the Provider’s Policy which has been or is to be issued by the Provider to the Customer.

CRL – a list of Certificates revoked before their expiry date.

Trust Services – qualified trust services for the issuance and authentication of Certificates provided by the Provider within the meaning of the eIDAS Regulation, the Act and the Provider’s Policies. Trust Services may also be composed of other associated services in connection with the Certificates.

These are mainly:

  • authentication of Certificates – provision of information on the validity or revocation of Certificates – CRL, OCSP response,
  • generation of key pairs,
  • and others…

Certificate Holder – the person named in the Certificate who is the holder of the private key associated with the public key to which the Certificate is issued.

eIDAS Regulation – Regulation No. 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC.

OCSP Response – A response to an OCSP request that gives an indication of the validity of the Certificate at a specified time.

Provider Policy / Provider Policies

  • The policy of the Trust Service Provider for the issuance and verification of Qualified Certificates that applies to Qualified Certificates issued by the Provider under the eIDAS Regulation;
  • the policy of the provider of the trusted service of issuing and verifying qualified Certificates, applicable to other Certificates not listed in the above paragraph.

The Provider’s policies shall also include all regulations and their updates issued by the Provider and published on its website.

Provider – brainit.sk, s. r. o., with registered office at Veľký diel 3323, Žilina 010 08, ID No.: 52577465, registered in the Commercial Register of the District Court of Žilina, Section Sro, Insert No. 72902/L.

Acknowledgement – confirmation of receipt of the Certificate, by which the Certificate Holder confirms, among other things, the receipt of the Certificates.

Workplace – a place where Certificates are issued.

It is a place operated by the Provider – its registered office.

Relying Party – a natural or legal person who relies on the Provider’s Trusted Services to act.

General Terms and Conditions or abbreviated as GTC – this document General Terms and Conditions for the provision and use of the Trusted Service for the issuance and verification of Certificates, always in their effective version.

Qualified Device – an electronic signature/seal creation device that meets the requirements set out in Annex II of the eIDAS Regulation.

Contract – Contract for the provision of trusted service of issuing certificates concluded between the Provider and the Customer, or any other contract between the Provider and the Customer, the subject of which is the provision of Trust Services.

Contract with CA – a contract concluded between the Provider and the Certificate Holder, regulating the rights and obligations of the parties to the use of the Certificate.

Customer means a natural person or a legal entity to whom the Provider provides Trust Services on the basis of the agreed Contract and also the person who pays for these services.

Act – Act No. 272/2016 Coll. on Trust Services for Electronic Transactions in the Internal Market and on Amendments and Additions to Certain Acts.

3. Information about the provider and its contact details

Name: brainit.sk, s. r. o.

Registered office: Veľký Diel 3323, 010 08 Žilina

ID: 52577465

TAX ID: 2121068763

VAT ID: SK 2121068763

Register: Commercial Register of the District Court of Žilina, Section Sro, Insert No. 72902/L

Contact:

Mobile: +421 918 022 030

E-mail: info@nfqes.sk

Provider’s website: https://nfqes.com/

Website of the Trusted Services: https://zone.nfqes.sk/

Supervisory Authority:

Contact for Certificate revocation request:

Mobile: +421 918 022 030

E-mail: info@nfqes.sk

4. Binding force of the general conditions and conclusion of the contract

These GTC form an integral part of every Contract and Agreement with CA. In the event of a conflict between the General Terms and Conditions and the provisions in the Contracts, the provisions under the Contracts shall prevail.

In addition to the aforementioned GTC, the appropriate Provider’s Policy, depending on the type of Certificate provided, is also binding for the provision of Trust Services by the Provider and their acquisition by the Customer.

The Provider shall inform each prospective Trusted Service Provider about the TOS before entering into a contractual relationship with the Provider. The CPs are also permanently accessible in electronic form on a durable medium:

  • on the website https://zone.nfqes.sk;
  • in the process of applying for a Certificate.
 

The person interested in the issuance of Certificates, who becomes a Certificate Holder, is forced to actively express his/her own consent to these CoCs before their issuance, after they have been made available to him/her, i.e. by signing the application for the issuance of a Certificate with a qualified electronic signature using his/her electronic identity card (eID) with a qualified time stamp, which informs that the signing of the application with a qualified electronic signature implies the expression of consent to the CoCs, the interested person is informed immediately in the application. This qualified signature is subsequently validated, thereby verifying the validity of the signature, the validity and authenticity of the data and the validity of the identification documents. Subsequently, this application for the issue of a Certificate with a qualified electronic signature and a qualified time stamp is kept in the RA’s records.

The signing of the application for the issuance of a Certificate with a qualified electronic signature by the prospective Certificate holder, who subsequently becomes a Certificate Holder, shall constitute the basis for the conclusion of a contractual agreement for the provision of Trust Services addressed to the Provider, the content of which shall be formed by these General Terms and Conditions.

Acceptance of the proposal for conclusion of the contract resulting from the preceding paragraph by the Provider, and consequently the conclusion of the contract between the Provider and the Certificate Holder occurs at the moment of provision of the requested Trust Service, i.e. at the moment when the requested Certificate is handed over to the Certificate Holder. The content of the aforementioned contract between the Provider and the Certificate Holder is fully determined by the General Terms and Conditions (GC).

Upon the conclusion of this contract pursuant to the preceding paragraph, the Provider shall issue a Certificate to the Certificate Holder. The Certificate Holder is obliged to sign it with his/her qualified electronic signature.

The Contract with the Customer who is not the Certificate Holder at that time shall be concluded in writing and shall not be subject to the procedure under the aforementioned paragraphs.

In addition to the aforementioned TOS, the Provider’s Policy is also binding for the provision of Trust Services by the Provider.

5. Price for trust services and payment terms

The current prices for the issuance of Certificates are set out in our price list published on our website https://nfqes.sk (the “Price List”). The price for the provision of the Trust Service is determined in accordance with the Price List in force during the provision of the Trust Service, unless otherwise agreed between the parties.

The prices for the issuance of Certificates may be individually agreed with the Customer, directly in the Contract, in a confirmed order or also in another document.

The Customer is obliged to pay the value of the price for the Trust Services by wire transfer on the basis of an invoice issued by the Provider after the provision of the requested Trust Service. The due date of this invoice shall be 2 weeks, i.e. 14 days, unless otherwise provided for by generally applicable law or the contract in question. The price for these Trusted Services shall be deemed to have been paid on the date on which the amount is credited to the Provider’s bank account in full.

It is necessary that the invoice issued by the Provider contains all the elements of a tax document referred to in Section 74(1) of Act No. 222/2004 Coll. on Value Added Tax, as amended. The Customer shall have the right to object to the Provider’s substantive or formal deficiencies of the invoice during the term of its due date. The Provider shall evaluate the Customer’s objections and, if justified, shall subsequently prepare a new invoice, the due date of which shall commence from the day on which it was delivered to the Customer.

In the event that the Customer fails to pay the full amount for the Trust Services provided by the due date as specified in the TOS or the Contract, the Trust Service Provider shall be entitled to immediately withdraw from the Contract, which shall entail the cancellation of any Certificate for which payment has not been received.

6. Issue of Certificates

Certificates under the aforementioned T&Cs are issued exclusively to the HSM Device, remotely mediated by the Application, only upon the request of the person interested in the Certificates. If the conditions specified in these GC and the Provider’s Policy are met, the Provider is obliged to issue the Certificate to the Holder and shall deliver it in the near future. For the issued Certificates, the Provider shall also issue a Confirmation signed by the Certificate Holder. The Acknowledgement identifies the specific Certificate that has been issued to the Certificate Holder. The Trusted Service shall be deemed to have been provided at the moment of acceptance of the issued Certificate by the Certificate Holder.

7. Restrictions on the use of Certificates

Each Certificate that is issued by the Provider, together with the relevant Key Pair, may be used in the usual manner, only for the purpose for which it is intended, in accordance with the conditions and limitations set out in the relevant Provider Policy. The Certificate is intended solely for the execution of an electronic signature or an enhanced electronic signature of the Certificate Holder. As the Device is a qualified device within the meaning of the eIDAS Regulation, it is possible for a qualified electronic signature to be created using the Certificate.

The validity period of the Certificates is limited. After the expiry or revocation of the Certificate, the use of the Certificate is prohibited, even for the purpose specified by the Certificate. The use of a Certificate that is invalid or has been revoked, which is also intended for the creation of an electronic signature, will consequently result in the invalidity of this electronic signature.

The verifiability of electronic signatures has limitations, i.e. after the expiration of the Certificate on the basis of which they were made, it is not guaranteed that it will be possible to reverify the validity of the electronic signature in question. In order to ensure the long-term verifiability of this electronic signature even after the expiry of the Certificate on the basis of which it was made, it is necessary to make appropriate use of specialised services designed for this purpose while the Certificate is still valid, for example, the electronic signature storage service and/or the electronic time stamp service.

The use of a Certificate to create an electronic signature does not guarantee that the created electronic signature can be used for its intended purpose. Nor does it mean that they will be in the required format acceptable to third parties.

The format of the electronic signature is determined by the application used to create the electronic signature.

In the event that the Customer or the Certificate Holder uses the Certificate in a manner that violates the rules set out in these GC or relies on the Certificate in violation of these restrictions and the Customer or a third party suffers damage in connection with this action, the Provider shall not be liable for such damage pursuant to Article 13(2) of the eIDAS Regulation.

8. Rights and obligations of the customer and the certificate holder

Both the Customer and the Certificate Holder are obliged to comply with these GTC and the generally binding legal regulations of the Slovak Republic. The Customer is entitled to use the Trusted Services provided by the Provider in accordance with the Contract, these GC and the Provider’s Policies. The Customer has the right to request cancellation of the issued Certificate regardless of the Certificate Holder’s consent.

In case the Customer is a consumer, the Customer shall be entitled to the rights under § 622 and § 623 of the Civil Code in case of defects in the Trust Service.

In particular, the Customer shall be obliged to:

  1. to provide the Provider with all data and documents necessary within the meaning of the Provider’s Policies for the provision of the requested Trusted Service; the data and documents must be true, up-to-date and complete;
  2. in the case of the provision of data necessary for the provision of the Trusted Service, to ensure in advance that such data is sent to the Provider in a manner that guarantees its confidentiality and integrity (e.g. sending an encrypted file electronically and sending the password through a separate channel);
  3. use the Certificate and the generated key pair only for the purposes intended, in accordance with the law and the restrictions on their use set out in the ToR;
  4. take reasonable care in using and relying on the Certificate in accordance with Section 10 of the TOS;
  5. refrain from unauthorised use of the Certificate Holder’s private key where the Customer and the Holder are not the same person;
  6. in cases where the Customer generates cryptographic keys for which a Certificate is to be issued, the Customer is obliged to create a key pair of the prescribed length, using the algorithm required by the Provider’s Policy related to the requested Certificate;
  7. allow the private key for which the Certificate is issued to be used for cryptographic functions solely within the Facility and under the exclusive control of the Certificate Holder;
  8. provide the Provider with immediate and prompt assistance, if requested to do so, in verifying the data necessary for the issuance of the Certificate;
  9. during the validity of the Certificate, promptly notify the Provider of any changes, errors or outdates in the data contained in the Certificate;
  10. during the validity of the Certificate, immediately notify the Provider if any misuse, theft, loss, defacement, destruction, compromise or any unauthorized access to the associated private key or access codes (password and token) occurs or if the Customer suspects that the aforementioned events may have occurred; and ensure that the Certificate Holder refrains from using a private key and Certificate that has expired, been revoked or compromised (including if the Provider itself has been compromised and the Customer is aware of it).

The Certificate Holder has the right to use the Certificate issued to him by the Provider in accordance with the Agreement and these General Terms and Conditions.

In particular, the Certificate Holder has the obligation to:

  1. immediately after obtaining the Certificate, to check the accuracy and timeliness of the data contained therein and to provide only true and up-to-date data and documents in connection with the Trust Services at all times;
  2. take reasonable care in using and relying on the Certificate in accordance with Section 10 of these TOS;
  3. use the Certificate and the generated Key Pair solely for the purposes intended, in accordance with generally applicable law and the restrictions on their use set out in the GTC;
  4. protect the access code (password and token) against unauthorised access and also against loss, compromise, destruction or misuse;
  5. during the validity of the Certificate, immediately notify the Provider of any changes, incorrectness or outdatedness of the data contained in the Certificate;
  6. during the validity of the Certificate, immediately notify the Provider if any misuse, theft, loss, destruction, compromise or any unauthorised access to the associated private key, access codes (PIN), recovery codes (PUK) or to the device on which the keys are stored occurs or is suspected by the Certificate Holder, that the above events may have occurred and refrain from using a private key and Certificate that has expired, been revoked or compromised (including if the Provider itself has been compromised and the Certificate Holder is aware of it).

Cancellation of the Certificate is requested by the Customer or the Certificate Holder to the Provider using the contact details specified in Article 3 of the GTC.

9. Provider’s rights and obligations

The Provider is entitled not to provide the Trusted Service or to limit the scope of its provision to the Client (e.g. by not specifying all the required attributes in the Certificate) if the prerequisites for the issuance of Certificates as defined in the Provider’s Policy or these GC are not fulfilled.

The Provider is entitled to revoke the Certificate in the cases specified in the relevant Provider’s Policy, in particular if:

  1. it notices that the conditions of the eIDAS Regulation, the Act or the Provider’s Policy have not been met for the issuance of the Certificate;
  2. observes that the Device on which the Keys are stored or its software components are or may be compromised;
  3. is ordered by a court to revoke the Certificate;
  4. the Customer fails to pay the agreed price of the Trusted Services within a predetermined period of time, even after a notice sent electronically by the Provider;
  5. The Customer fails to disclose the contract with the Provider within three months of its conclusion in cases where it is a compulsorily disclosed contract in accordance with Section 5a of Act No. 211/2000 Coll. on Free Access to Information and on Amendments and Additions to Certain Acts (Act on Freedom of Information);
  6. termination or expiry of the contract with the Customer or the Certificate Holder occurs or if the Certificate Holder fails to sign the Confirmation;
  7. the Customer or the Certificate Holder breaches the given obligations under these General Terms and Conditions, the Contract or generally applicable law;
  8. becomes aware of any changes affecting the validity of the Certificate, in particular in cases where the data provided in the Certificate is incorrect or outdated or becomes aware of the theft, loss or compromise of access codes, etc.;
  9. becomes aware that the Customer or the Certificate Holder has died (if a natural person) or ceased to exist (if a legal person);
  10. the Customer or Certificate Holder requests cancellation;
  11. The Certificate no longer complies with the Policy under which it was issued;
  12. the cryptography used for the Certificate no longer provides a link between the Certificate Holder and the public key.

10. Information for parties relying on trust services

Relying Parties acknowledge that it is their sole and absolute discretion as to whether they choose to trust and rely on the Certificate issued by the Provider and the information contained therein.

In the event of a decision to rely on the Provider’s Certificate, the relying parties shall be obliged to comply with the obligations described in this Section 10 of the T&C otherwise they shall be solely responsible for the legal consequences caused thereby.

The Relying Party acknowledges that the validity of the Certificates, CRLs as well as OCSP responses issued by the Provider is limited in time:

  1. The Certificate is valid for the validity period specified in the body of the Certificate or until it is revoked prior to the expiration of the validity period;
  2. The CRL is valid for the validity period specified in the body of the CRL, and to obtain the most accurate information on revoked Certificates, it is always necessary to refer to the most up-to-date CRL, i.e., the one published most recently by the Provider;
  3. The OCSP response is valid at the time indicated in the body of the OCSP response by “producedAt”. The item producedAt is only the time of signing of the OCSP response and has nothing to do with the validity of the certificate.
  4. Only CRLs and OCSP responses where the thisUpdate entry contains a time and date after the time and date the signature was produced that is within the validity interval of the certificate and is considered to be the time at which the certificate is validated may be used to validate signatures or seals.

The Relying Party shall exercise reasonable care in relying on any Certificate issued by the Provider, in particular it shall:

  1. Evaluate whether the use of the Certificate is in accordance with its intended purpose and whether it is appropriate for that purpose;
  2. to check whether the use of the Certificate does not contravene the restrictions on the use of the Certificate set out in the Certificate itself, these General Terms and Conditions or in the Provider’s Policies which are related to the Certificate;
  3. when working with the Certificate, including its authentication, use only designated and appropriate hardware or software;
  4. verify the validity of the Certificate in question by using an application validating the Qualified Certificate using a trusted list published by the NSA and an appropriate CRL or OCSP response with a thisUpdate entry containing the time and date after the time of the signature or seal.
  5. Perform such other verifications, if any, as may be required under the Provider’s Policies or Standards for the particular type of Certificate or its use;
  6. in the manner described in a) – e) above, verify other Certificates in the certification path up to the “trust anchor”. Trust anchor is stored in a trusted list published by the NSA. Certificates stored in the trusted list constitute a “Trust anchor”.

The Relying Party also acknowledges that the Provider shall archive the information related to the issued Certificates for the purpose of providing evidence for a certain period of time within the meaning of Article 12 of the GC.

For reliance on a CRL or OCSP response issued by the Provider, it is the relying party’s obligation to exercise reasonable diligence. In particular, the Obliged Party shall verify that the certificate with which the CRL or OCSP Response has been signed belongs to the Provider by using the trusted list issued by the NSA, while proceeding by analogy within the meaning of Article 10 of these General Conditions.

11. Provider’s liability, warranty and their limitations

The Provider shall be solely liable for damages caused by its failure to comply with its obligations under the eIDAS Regulation within the meaning of Article 13 of the eIDAS Regulation.

The Provider is obliged to provide the Trusted Services in accordance with the generally binding legislation and the Provider’s Policies. The Provider shall be liable for defects in the Trust Service provided in accordance with generally applicable law.

The Provider shall not be liable for indirect losses or damages incurred by the Customer, the Certificate Holder, the Relying Party or any third party in connection with the use of the Trust Services.

The Provider shall not be liable for damages (including lost profits) incurred by the Customer, the Certificate Holder, the Relying Party or any third party due to:

  1. Breach of obligations by the Customer, the Certificate Holder or the Relying Party set out in generally applicable laws, these GC, the relevant contract or the Provider’s Policies, including the obligation to take reasonable care when using and relying on the Certificate;
  2. failure by the Customer or the Certificate Holder to provide the necessary cooperation;
  3. the technical characteristics, configuration, incompatibility, unsuitability or other defects of the software or hardware used by them;
  4. use of or reliance on a Certificate that has expired or been revoked;
  5. The Certificate has been used in violation of its intended purpose or the restrictions set forth in the Certificate, these TOU or the Provider’s Policies;
  6. delay or non-delivery of requests to verify the status of the Certificate to the Provider, for reasons that are not on the Provider’s side (in particular, cases of unavailability or congestion of the Internet network or defects in the equipment or technical equipment used by the verifier);
  7. failure to provide one of the Trusted Services or its unavailability during planned maintenance or reorganization announced on the Provider’s website;
  8. force majeure.

The Customer and the Certificate Holder use the Trusted Services on their own responsibility and bear all costs for remote communication means or other technical means necessary for the use of the Provider’s Trusted Services (e.g. for the software necessary for the execution of an electronic signature or seal based on the Certificate);

12. Privacy and Personal Data Protection

The Provider processes the personal data of the data subjects in accordance with the relevant legislation. The Provider may disclose this data to third parties if this is required or permitted by the relevant legislation.

For the purpose of informing data subjects or persons interested in Trust Services about the processing of personal data carried out by the Provider in the provision of Trust Services, the Information on the processing of personal data is used:

  1. always available in electronic form online at https://nfqes.sk
  2. of which the Certificate Holder is informed in the process of applying for a Certificate.

The Provider shall record and archive all material information and documents related to the issuance or revocation of the Certificate and on the basis of which the Certificate was issued, including the personal data of the Customer, the Certificate Holder and, where applicable, persons authorised to act on their behalf or authorised by the CoC, for 10 years from the date of revocation or expiry of the Certificate in question.

The Certificate Holder acknowledges that if an electronic document is signed on the basis of the Certificate designated for this purpose, the recipient of this electronic document, or any persons having access or having access to this electronic document, will gain access to his/her personal data contained in the Certificate.

13. Dispute and complaint resolution

The User is entitled to send the Provider a complaint, suggestion or complaint about the Trusted Service by email to ca@nfqes.sk. The Provider shall respond to it within 30 days of its receipt; in the case of more complicated complaints or claims, the Provider reserves the right to extend this period.

The courts of the Slovak Republic shall have exclusive jurisdiction to decide any disputes between the Provider and the Customer or the Certificate Holder. If the Customer or the Certificate Holder is a consumer, he/she is entitled to contact an out-of-court dispute resolution entity, e.g. the Slovak Trade Inspectorate or another legal entity registered in the list pursuant to Section 5(2) of Act No. 391/2015 Coll. on Alternative Dispute Resolution for Consumer Disputes, as amended. Before proceeding to judicial or out-of-court dispute resolution, it is the obligation of the parties to try to resolve the dispute by mutual agreement in advance.

14. Governing law

Legal relations between the Provider and the Customer or the Certificate Holder shall be governed by the laws of the Slovak Republic.

Legal relations not expressly regulated by these GTC or the Contract shall be governed by the relevant provisions of Act No. 513/1991 Coll. of the Commercial Code, as amended, and other generally binding legal regulations. If the Customer or the Certificate Holder is a consumer, the provisions of Act No. 40/1964 Coll., the Civil Code, as amended, shall apply to legal relations between the Customer and the Provider that are not expressly regulated by these GTC.

15. Duration and termination of contracts

The contract between the Provider and the Customer is concluded for an indefinite period of time, unless otherwise specified. The contract between the Provider and the Certificate Holder is always concluded for a definite period of time, until the expiry or cancellation of the Certificate to which the contract relates.

The contract between the Provider and the Customer may be terminated:

  1. by mutual agreement of the Parties;
  2. by notice of either party in the case of a contract concluded for an indefinite period; the notice period shall be 2 months and shall commence on the first day of the calendar month following the month in which the other party to the contract received the written notice;
  3. withdrawal from the contract by either party in the event of a material breach of contractual obligations by the other party.

The following shall be deemed to constitute a material breach of contractual obligations giving rise to a right of withdrawal:

  1. if the Customer fails to pay the full price for the Trusted Services provided within the agreed time period;
  2. if the Certificate Holder or the Customer uses the Certificate in a manner contrary to the law, these GC or the Provider’s Policies;
  3. if the Customer or the Certificate Holder breaches the obligation to request revocation of the Certificate in the cases specified in these GC or the Contract;
  4. other reasons within the meaning of generally binding legal regulations of the Slovak Republic.

If the Provider exercises its right to withdraw from the Contract, it shall also have the right to cancel the Certificate to which the breach of obligation by the Customer or the Certificate Holder relates.

In the event of termination of the contract, the Customer’s obligation to settle any debts incurred in connection with the use of the Trusted Services shall not be extinguished.

The termination of the contract between the Provider and the Customer or the Certificate Holder shall not affect those provisions, the nature of which implies that they are to survive their termination.

16. Final Provisions

The Provider is entitled to unilaterally change the General Terms and Conditions or the Price List, for reasons consisting in the business policy of the provision of Trust Services, for reasons of changes in generally binding legislation, changes in standards regulating the provision of Trust Services, for reasons of technical, security or organizational changes in the systems used for the provision of Trust Services on the Provider’s side, as well as for reasons of improving the quality, security or availability of Trust Services. In such case, the Provider shall notify the Customer and the Certificate Holders of the changes to these documents at least 30 days before the changes take effect, by sending an informative electronic message to the email address provided in advance and also by publishing them on the Provider’s website. If the Customer or the Certificate Holder does not agree with the change of the binding document, he/she has the right to terminate the contract with the Provider with immediate effect within 30 days from the date of sending this information by the Provider. The termination can be sent to the Provider’s registered office address or to the email address info@nfqes.sk. Unless the Customer or the Certificate Holder rejects the proposed change in writing no later than the effective date of the change in question, the Customer agrees to the change and the change becomes binding on him/her as of the effective date of the change.

For the delivery of legal acts and other legal acts between the Provider on the one hand and the Customer or the Certificate Holder on the other hand, the contact details provided by the parties to each other, in particular the email address and the address of residence/residence, are used. It is the obligation of the Party to notify the other Party immediately of any changes to its contact details. Until such time as the other Party is notified of a change in contact details, the contact details provided shall be deemed to be correct.

In the event that any provision or part of these T&C or the Contract is or becomes invalid or ineffective, the validity and effectiveness of any other provision or the remainder of the relevant provision shall not be affected. The parties undertake to replace any such invalid or ineffective provision with a provision which they would have agreed to had they been aware of such invalidity or ineffectiveness.

In the event that any provision, part or portion of these General Terms and Conditions is or becomes invalid, ineffective or unenforceable, the remainder of the relevant provision or the remainder of the provision of the General Terms and Conditions shall not be affected thereby.
These General Terms and Conditions shall be valid and effective from 15.2.2021.