General Terms of Service — WebDisk

Version 1.0 · effective 23 August 2026

The Polish version is the legally binding version; this English translation is provided for convenience only (see §16.1). The binding text is published at webdisk.pl/regulamin-ogolny.

These terms (the "General Terms") set out the rules and conditions on which the Provider supplies services under the WebDisk brand. They constitute the terms of service referred to in Article 8 of the Polish Act of 18 July 2002 on the provision of services by electronic means (ustawa o świadczeniu usług drogą elektroniczną).

Provider: Mazura sp. z o.o., with its registered office in Ząbki, ul. Baśniowa 1C/2, 05-091 Ząbki, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division, under KRS 0000971559, NIP (VAT ID) 1251732787, owner of the WebDisk brand (the "Provider", "we" or "WebDisk").

§1. Contact and points of contact

1.1. The Provider can be contacted:

• by e-mail — office@webdisk.io,
• by telephone — +48 574 311 332,
• in writing — ul. Baśniowa 1C/2, 05-091 Ząbki, Poland.

1.2. Dedicated addresses:

| Matter | Address |
|---|---|
| Complaints, withdrawal from the Agreement, contractual matters | office@webdisk.io |
| Technical reports and outages | support@webdisk.io |
| Personal data protection, data subject rights | iod@webdisk.io |
| Security incidents | security@webdisk.io |
| Abuse, AUP violations | abuse@webdisk.io |
| Questions about legal documents, reports of illegal content | legal@webdisk.io |

1.3. Point of contact under the Digital Services Act. In accordance with Articles 11 and 12 of Regulation (EU) 2022/2065 of the European Parliament and of the Council on a Single Market For Digital Services (the "DSA"), the Provider designates legal@webdisk.io as the single point of contact for direct communication with:

• the authorities of the Member States of the European Union, the European Commission and the European Board for Digital Services,
• Customers and other recipients of the Provider's services in matters covered by the DSA.

1.4. Communication with the point of contact may be conducted in Polish or English.

§2. Definitions

Capitalised terms used in the General Terms have the following meaning:

1. AUP — the Acceptable Use Policy for WebDisk services, forming an integral part of the Agreement.
2. Price List — information on the current prices of the Services, their variants and limits, available in the Panel and on the Service's web page.
3. Customer Data — all data, files, content and metadata entered or generated by the Customer in the course of using the Service.
4. DPA — the data processing agreement concluded with the Customer where personal data for which the Customer is the controller is processed under the Service.
5. Consumer — a natural person entering into a legal transaction with the Provider that is not directly connected with their business or professional activity (Article 22¹ of the Polish Civil Code).
6. Account — the set of resources and permissions in the Provider's system assigned to the Customer, enabling use of the Service.
7. Customer — an entity that has concluded an Agreement with the Provider: a Consumer, an Entrepreneur with Consumer Rights or an Entrepreneur.
8. Non-conformity — non-conformity of the Service with the Agreement within the meaning of Article 43k of the Polish Consumer Rights Act.
9. Billing Period — the period for which the fee for the Service is charged, as indicated in the Price List and in the Panel.
10. Panel — the Service management interface made available to the Customer.
11. Privacy Policy — the document describing the processing of personal data by the Provider.
12. Entrepreneur — a party other than a Consumer or an Entrepreneur with Consumer Rights, entering into the Agreement in connection with its business or professional activity.
13. Entrepreneur with Consumer Rights — a natural person entering into an Agreement directly connected with their business activity where it is apparent from the content of the Agreement that it is not of a professional nature for that person (Article 7aa of the Polish Consumer Rights Act).
14. Service Terms — the specific terms applying to a particular Service (e.g. Files Terms, Send Terms, IaaS Terms).
15. SLA — the document setting out the guaranteed service level.
16. Agreement — the agreement for the provision of the Service concluded between the Provider and the Customer, comprising the documents listed in §3.
17. Service — a service provided by the Provider under the WebDisk brand, in particular data storage and processing, hosting, file sharing or the provision of computing resources.
18. User — a natural person to whom the Customer has granted access to the Service within its Account.

§3. Scope of the General Terms and hierarchy of documents

3.1. The General Terms apply to all Services provided by the Provider under the WebDisk brand, unless the Service Terms provide otherwise.

3.2. The Agreement comprises the following documents, in the order reflecting their precedence:

| Order | Document | Role |
|---|---|---|
| 1 | DPA | Solely as regards the protection of personal data — takes precedence over the remaining documents |
| 2 | Service Terms | Specific provisions for a particular Service |
| 3 | SLA | Guaranteed service level |
| 4 | Price List | Prices, limits, variants |
| 5 | AUP | Acceptable use rules |
| 6 | General Terms | Provisions common to all Services |

3.3. Rule of precedence. In the event of a conflict between documents, the document higher in the table in point 3.2 prevails. This rule does not apply where it would lead to a limitation of the rights of a Consumer or an Entrepreneur with Consumer Rights arising from the General Terms or from mandatory provisions of law — in such a case the provision more favourable to that person applies.

3.4. The provisions of §12 (Provisions concerning consumers) and §13 (Complaints) of the General Terms apply to all Services and may not be excluded or limited by the Service Terms.

3.5. Current versions of all documents are available on the Provider's websites and in the Panel.

§4. Technical requirements and security

4.1. Use of the Services requires all of the following:

• an internet connection,
• a device with an up-to-date web browser supporting HTTPS and cookies and, for selected Services, an application provided by the Provider,
• an active e-mail address.

4.2. The Provider applies technical and organisational measures to protect transmission and stored data, in particular connection encryption (TLS 1.2 or later), access control, multi-factor authentication to the extent made available in the Panel, and security monitoring. A detailed description of the measures is set out in the DPA.

4.3. Despite the security measures applied, use of the internet involves risk, in particular the risk of unauthorised access to the Customer's device or its infection with malicious software. The Provider recommends using up-to-date security software and enabling multi-factor authentication.

4.4. The Customer is responsible for keeping Account credentials confidential and for the acts of Users to whom it has granted access. Where unauthorised access is suspected, the Customer changes the password without delay and notifies the Provider at security@webdisk.io.

4.5. The Customer undertakes to provide data consistent with the facts and to update it if it changes. The Provider is not liable for the consequences of false or out-of-date data being provided.

§5. Conclusion of the Agreement, Account and Customer status

5.1. The Agreement is concluded by:

1) completing the registration form available on the Service's web page, 2) providing the data necessary to conclude the Agreement, including the data determining the Customer's status in accordance with point 5.2, 3) declaring that the Customer has read and accepts the General Terms, the Service Terms and the Privacy Policy, 4) confirming the registration by clicking the activation link sent to the e-mail address provided and, for paid Services, placing an order and making payment in accordance with §6.

5.2. Customer status. Status is determined on the basis of the data provided on conclusion of the Agreement or supplemented in the Panel:

• providing business details, in particular a VAT identification number, means that the Agreement is concluded in connection with business activity; if the Customer is a natural person conducting business activity and the Agreement is not of a professional nature for them, they are entitled to the protection afforded to an Entrepreneur with Consumer Rights,
• the absence of business details means that the Agreement is concluded as a Consumer, unless the circumstances clearly indicate otherwise.

5.3. In Services where the purchase process offers an express choice of status ("I am buying as an individual" / "I am buying as a business"), that choice is binding. In other Services, point 5.2 applies.

5.4. The Customer's status determines the scope of application of §12 and §13. The Customer may supplement or change the data in the Panel; the change takes effect for the future and does not affect rights acquired before it was made.

5.5. A Customer who is a Consumer does not lose the protection provided for in §12 and §13 solely because the data in the Panel is incomplete. Where the status is in doubt, the Provider applies the provision more favourable to the Customer.

5.6. The Agreement is concluded upon activation of the Account and, for paid Services, upon confirmation of the order by the Provider.

5.7. The Provider may make the provision of the Service conditional upon verification of the Customer's identity or of the accuracy of the data provided, where justified by the security of the Service or by a statutory obligation.

5.8. The Agreement is concluded for an indefinite term, unless the Service Terms or the Price List provide otherwise.

§6. Fees, Price List and settlement

6.1. The prices of the Services are set out in the Price List available in the Panel and on the Service's web page. Prices are quoted in Polish zloty unless the Price List provides otherwise.

6.2. Presentation of prices: for Consumers and Entrepreneurs with Consumer Rights, prices are presented as gross amounts (inclusive of VAT). For Entrepreneurs, prices may be presented as net amounts — in which case VAT is added at the applicable rate, of which the Customer is informed before placing an order.

6.3. The fee for the Service is payable in advance for the selected Billing Period, through the payment systems made available in the Panel.

6.4. Automatic renewal. Where the Price List or the Panel provides for automatic renewal of a subscription, the Customer is informed of this before concluding the Agreement, and the Provider:

• notifies the Customer of the upcoming renewal and its cost by e-mail at least 7 days in advance,
• allows automatic renewal to be switched off in the Panel at any time, with effect at the end of the current Billing Period.

6.5. The date of payment is the date on which the Provider's account is credited or on which payment authorisation is confirmed by the payment operator.

6.6. Invoices. A Customer who has provided a VAT identification number is issued a VAT invoice. A Customer who has not provided one is issued a document confirming payment; on request sent to office@webdisk.io, the Provider issues an invoice.

6.7. Changes to the Price List. The Provider may change the Price List. The change does not affect the fees under Agreements concluded before it took effect for the duration of the Billing Period already paid for. The Provider notifies the Customer by e-mail at least 30 days in advance of a price change applying to the next Billing Period; a Customer who does not accept the new price may terminate the Agreement with effect at the end of the current Billing Period.

6.8. Non-payment. In the event of non-payment, the Provider calls on the Customer to settle the amount due, setting an additional period of not less than 7 days. Once that period has expired without effect, the Provider may limit or suspend access to the Service. Termination of the Agreement for arrears is governed by the Service Terms and, in the absence of such a provision, by §14.

§7. Changes to the Service

7.1. The Provider may change the Service where:

1) it is necessary to adapt the Service to new devices, browsers or software, 2) the Service is being developed by adding, modifying or withdrawing functionality, 3) there is a legal obligation to do so, including adapting the Service to amended legislation, 4) it is required for security reasons.

7.2. A change to the Service involves no cost for the Customer.

7.3. Where a change materially and adversely affects access to or use of the Service, the Provider informs the Customer by e-mail at least 7 days in advance of:

• the characteristics and the date of the change,
• the right to terminate the Agreement with immediate effect within 30 days of the change being made.

7.4. Termination under point 7.3 has the same effects as withdrawal from the Agreement on grounds of Non-conformity; the Provider refunds the fee for the unused period on a pro rata basis.

7.5. Points 7.3 and 7.4 apply to Consumers and Entrepreneurs with Consumer Rights. In relation to Entrepreneurs, the Provider gives 30 days' notice of material changes to the Service.

§8. Liability and service level

8.1. The Provider supplies the Services with due care, taking into account the professional character of its activity.

8.2. The guaranteed level of availability, the rules for reporting outages and the credits payable are set out in the SLA.

8.3. The Provider is not liable for disruptions to the Service resulting from:

1) force majeure, 2) announced maintenance carried out in accordance with the SLA, 3) causes attributable to the Customer, including incorrect configuration or use of the Service contrary to its intended purpose, 4) acts of third parties for which the Provider is not responsible, including failures at link providers and network operators.

8.4. The Provider is not liable for the consequences of the Customer disclosing credentials to unauthorised persons, nor for the consequences of the Customer failing to protect those credentials adequately.

8.5. In relation to a Customer that is an Entrepreneur, the Provider's liability is limited to actual loss and to the amount of the fees paid by that Customer in the 12 months preceding the event giving rise to the loss. The parties exclude the Provider's liability for lost profits.

8.6. The limitations under point 8.5 do not apply to loss caused intentionally, nor to the extent that mandatory provisions of law — in particular consumer protection law — do not permit them. In relation to Consumers and Entrepreneurs with Consumer Rights, the Provider is liable on general principles.

8.7. The Provider carries out maintenance in the manner least burdensome for Customers and — save where immediate intervention is required — with the notice period set out in the SLA.

§9. Intellectual property

9.1. All elements comprising the Service, in particular:

• the WebDisk designation and logo,
• the Panel, its interface and graphic elements,
• applications made available by the Provider,
• the Provider's source code, documentation and databases,

are protected by law, in particular under the Polish Copyright and Related Rights Act, the Industrial Property Law and the Act on Combating Unfair Competition.

9.2. Conclusion of the Agreement does not transfer any of the Provider's intellectual property rights to the Customer. The Customer obtains only a non-exclusive, non-transferable right to use the Service for the term of the Agreement, to the extent arising from its content.

9.3. Customer Data remains the property of the Customer. The Provider acquires no rights to it and processes it solely to the extent necessary to provide the Service and in accordance with the DPA.

9.4. The Provider does not use Customer Data to train machine-learning models or for any purpose other than providing the Service, unless the Customer gives separate, express consent.

§10. Customer content and reporting of illegal content

10.1. The Customer is solely responsible for Customer Data, including the compliance of its content and of the manner in which it is shared with the law and with the AUP. The Customer declares that it holds the rights necessary to store and share that content.

10.2. The Provider does not carry out general monitoring of the content stored by Customers and is under no obligation actively to seek facts indicating illegal activity (Article 8 of the DSA).

10.3. Reporting illegal content. Any person may report to the Provider content stored under the Service which they consider to be illegal, at legal@webdisk.io. A report should contain:

1) a sufficiently substantiated explanation of why the content is illegal, 2) a precise indication of the location of the content, in particular the exact URL, 3) the name and e-mail address of the reporting party — save for reports concerning the offences referred to in Articles 3–7 of Directive 2011/93/EU, 4) a statement confirming the reporting party's bona fide belief that the information in the report is accurate and complete.

10.4. The Provider confirms receipt of the report without undue delay. Where the report is incomplete, the Provider may ask the reporting party to supplement it within 14 days; failure to do so entitles the Provider to leave the report unexamined.

10.5. The Provider examines a complete report within 14 days. Pending examination, it may disable access to the reported content where the nature of the allegation so justifies.

10.6. Decision and statement of reasons. Having examined the report, the Provider removes the content, disables access to it or leaves it unchanged, notifying the reporting party and the Customer whose content is concerned. The statement of reasons includes:

1) the type of measure applied, together with its territorial scope and duration, 2) the facts and circumstances on which the decision was based, including whether it was taken on the basis of a report or of the Provider's own checks, 3) information on the use of automated means in detecting the content or taking the decision, 4) the legal or contractual ground for the decision, together with an explanation, 5) information on the possibility of appeal.

10.7. Appeal. The Customer whose content has been removed or disabled, and a reporting party whose request for removal has been refused, may lodge an appeal at legal@webdisk.io or in writing, within 6 months of being notified of the decision. The appeal should contain the appellant's details, contact details and a statement of reasons. The Provider examines appeals within 14 days, not solely by automated means, and notifies the outcome by e-mail.

10.8. Out-of-court dispute settlement. Irrespective of the appeal, a person affected by a decision has the right to select a certified out-of-court dispute settlement body in accordance with Article 21 of the DSA and the right to lodge a complaint with the competent Digital Services Coordinator.

10.9. Misuse of reporting. The Provider may suspend the processing of reports from a party that frequently submits manifestly unfounded reports, after prior warning.

§11. Personal data

11.1. The rules on the processing of the personal data of Customers and Users by the Provider as controller are set out in the Privacy Policy.

11.2. Where, under the Service, the Customer entrusts the Provider with the processing of personal data for which the Customer is the controller, the DPA applies. The DPA takes precedence over the remaining documents as regards the protection of personal data.

11.3. Contact on personal data matters: iod@webdisk.io.

§12. Provisions concerning consumers

12.1. This paragraph applies to a Customer who is a Consumer and — to the extent set out in Article 7aa of the Polish Consumer Rights Act — to an Entrepreneur with Consumer Rights. In the event of a conflict with the other provisions of the documents comprising the Agreement, this paragraph prevails.

12.2. Right of withdrawal. A Customer who has concluded the Agreement at a distance may withdraw from it within 14 days without giving any reason and without incurring costs, subject to point 12.4. The period runs from the date of conclusion of the Agreement. Sending the statement before the period expires is sufficient to meet the deadline.

12.3. How to withdraw. The statement of withdrawal may be made in any form, in particular by e-mail to office@webdisk.io or in writing to: Mazura sp. z o.o., ul. Baśniowa 1C/2, 05-091 Ząbki, Poland. The Customer may use the model form set out in Annex 2 to the Consumer Rights Act, but is not obliged to do so. The Provider confirms receipt of the statement without undue delay.

12.4. Performance of the Service before the withdrawal period expires. Where the Customer requested that performance of the Service begin before the withdrawal period expired and subsequently withdrew from the Agreement, the Customer is obliged to pay for the performance rendered up to the moment of withdrawal — in an amount proportionate to the scope of performance rendered, having regard to the agreed price. The right of withdrawal does not apply where the Provider has fully performed the Service with the Customer's express and prior consent, the Customer having been informed before performance began that the right of withdrawal would be lost and having acknowledged this.

12.5. Refund of payments. In the event of withdrawal, the Provider refunds the payments received — subject to point 12.4 — without undue delay and no later than 14 days from receipt of the statement, using the same means of payment, unless the Customer has expressly agreed to another means of refund involving no cost for them.

12.6. Conformity of the Service with the Agreement. A Service constituting a digital service within the meaning of the Consumer Rights Act is subject to Chapter 5b of that Act on the trader's liability for lack of conformity of a digital service with the contract. The Customer may demand that the Service be brought into conformity with the Agreement and, in the cases specified by the Act, may make a statement on price reduction or withdrawal from the Agreement.

12.7. Effects of withdrawal on grounds of Non-conformity. In the event of withdrawal from the Agreement on grounds of Non-conformity, the Provider refunds the fees paid without undue delay and no later than 14 days. The Customer is obliged to cease using the Service and to cease making it available to third parties (Article 34(1a) of the Consumer Rights Act). The Customer retains the right to retrieve Customer Data on the terms set out in §14.

12.8. Out-of-court complaint and redress procedures. The Customer may use out-of-court procedures for handling complaints and pursuing claims, in particular by:

• applying to a district (municipal) consumer ombudsman or to a social organisation whose statutory tasks include consumer protection,
• applying to a voivodeship inspector of the Trade Inspection to initiate out-of-court dispute resolution proceedings or mediation,
• applying to a permanent arbitration court operating at a voivodeship inspector of the Trade Inspection.

Information on out-of-court consumer dispute resolution is available on the website of the Polish Office of Competition and Consumer Protection: uokik.gov.pl. Use of these procedures is voluntary and requires the consent of both parties.

§13. Complaints

13.1. In the event of non-performance or improper performance of the Service, the Customer is entitled to lodge a complaint.

13.2. A complaint may be lodged:

• by e-mail to office@webdisk.io,
• in writing to: Mazura sp. z o.o., ul. Baśniowa 1C/2, 05-091 Ząbki, Poland,
• through the reporting function in the Panel.

13.3. A complaint should contain data enabling the Customer to be identified and contacted, identification of the Service complained of, and a description of the circumstances justifying the complaint.

13.4. The Provider examines the complaint and replies within 14 days of receipt, to the address indicated by the Customer. The reply includes a statement of reasons.

13.5. In relation to Consumers and Entrepreneurs with Consumer Rights, failure to reply within the period under point 13.4 means the complaint is deemed upheld.

13.6. In its reply to a complaint from a Consumer or an Entrepreneur with Consumer Rights, the Provider states, as applicable: that the complaint is upheld, together with the planned date for bringing the Service into conformity with the Agreement; that it refuses to bring the Service into conformity, together with reasons (where this is impossible or would entail excessive costs); or that the complaint is not upheld, together with reasons.

13.7. Complaints concerning failure to meet SLA parameters are examined in accordance with the SLA.

§14. Termination of the Agreement, data export and portability

14.1. Termination by the Customer. The Customer may terminate the Agreement at any time, without giving reasons:

• directly in the Panel, or
• by a statement sent to office@webdisk.io.

Termination takes effect at the end of the Billing Period already paid for, unless the Customer indicates an earlier date. A Customer who is a Consumer or an Entrepreneur with Consumer Rights may request termination with immediate effect; in that case the fee for the unused period is refunded on a pro rata basis.

14.2. Termination by the Provider. The Provider may terminate the Agreement:

| Ground | Notice period |
|---|---|
| Material breach of the AUP not remedied despite a request | 7 days |
| Breach of the AUP posing a direct threat to the security of the Service, to other Customers' data or to third parties | with immediate effect |
| Arrears exceeding 60 days from the payment date, despite a reminder | 30 days |
| Withdrawal of the Service from the offering | 90 days |

14.3. Suspension or termination of the Agreement by the Provider does not deprive the Customer of the right to retrieve Customer Data within the periods set out in point 14.4, save where releasing the data would be contrary to law or to a decision of a competent authority.

14.4. Export of Customer Data. The Customer may retrieve Customer Data at any time using the functions made available in the Panel. After termination of the Agreement, the Provider maintains access to Customer Data for retrieval for a period of not less than 30 days, unless the Service Terms provide for a longer period. After that period, Customer Data is permanently deleted, except for data whose retention is required by law.

14.5. Data format. Customer Data is made available in a commonly used, machine-readable format. The Provider makes a description of the export structure available in the Service documentation.

14.6. Switching to another provider. The Provider does not apply measures that impede the transfer of Customer Data to another data processing service provider. At the Customer's request, the Provider supplies the information necessary to carry out a migration and — to the extent technically possible — assistance in carrying it out. Detailed conditions, including any charges for assistance going beyond making the data available, are set out in the Price List.

14.7. Detailed rules on retention, grace periods and permanent deletion of data for individual Services are set out in the Service Terms.

§15. Amendments to the General Terms

15.1. The Provider may amend the General Terms for valid reasons, in particular where:

1) legislation or its interpretation by the authorities changes, 2) the scope or manner of providing the Services changes, 3) the technical conditions for providing the Services change, 4) the Provider begins to provide new Services or ceases to provide existing ones.

15.2. The Provider gives notice of an amendment by e-mail and by publishing the amended version, 30 days in advance.

15.3. A Customer who does not accept an amendment may terminate the Agreement before the date on which the amendment takes effect. Until the end of the Billing Period already paid for, the previous wording of the General Terms applies to that Customer.

15.4. Failure to terminate before the amendment takes effect constitutes acceptance of it. The Provider may additionally require acceptance to be confirmed in the Panel on first login after the amendment takes effect.

15.5. Agreements concluded before an amendment are governed by the previous wording of the General Terms until the end of the current Billing Period.

§16. Final provisions

16.1. Language versions. The General Terms may be made available in other languages. In the event of any discrepancy, the Polish version prevails.

16.2. Governing law. The governing law is Polish law. The choice of Polish law does not deprive a Consumer of the protection afforded by mandatory provisions of the law of the country of their habitual residence.

16.3. Jurisdiction. Disputes are resolved by the common court having territorial jurisdiction over the Provider's registered office. The preceding sentence does not apply to a Customer who is a Consumer or an Entrepreneur with Consumer Rights — in such a case jurisdiction is determined in accordance with the general rules.

16.4. Invalidity of provisions. If any provision of the General Terms proves invalid or ineffective, the remaining provisions remain in force.

16.5. Assignment. The Customer may transfer rights and obligations under the Agreement to a third party only with the Provider's prior consent given in documentary form. The Provider may transfer rights and obligations under the Agreement to a legal successor, giving the Customer 30 days' notice; the Customer is then entitled to terminate the Agreement with immediate effect.

16.6. Communications. Statements made in connection with the Agreement take effect upon delivery to the e-mail address indicated by the other party, unless the documents comprising the Agreement or the law require another form.

16.7. Matters not governed by these General Terms are subject to Polish law, in particular the Civil Code, the Act on the provision of services by electronic means and the Consumer Rights Act.

General Terms of Service — WebDisk · version 1.0 · effective 23 August 2026