Terms of Service

Acceptance of Terms

By accessing or using the Viktoria Compliance website and assessment tool (the "Service"), you agree to be bound by these Terms of Service (the "Terms"). If you do not agree to all of these Terms, you must not access or use the Service.

These Terms constitute a legally binding agreement between you (the "User") and the operator of the Service (see Section 12 for operator details). Your continued use of the Service after any changes to these Terms constitutes acceptance of the revised Terms.

This document is versioned. The current version is indicated at the top of this page. You may be asked to re-accept these Terms when material changes are made.

Description of Service

Viktoria Compliance is an online self-assessment tool that helps European small and medium-sized enterprises (SMEs) evaluate their readiness with respect to the General Data Protection Regulation (GDPR), the Network and Information Security Directive (NIS2), and the EU Artificial Intelligence Act (EU AI Act).

The Service provides informational guidance only. It generates readiness scores and identifies potential compliance gaps based on your answers to a structured questionnaire. The assessment runs entirely in your web browser using localStorage; results may optionally be saved to a remote database if you create an account.

The Service is NOT legal advice. It does not constitute a legal audit, certification, or formal compliance assessment. The results do not confirm or guarantee that your organisation is compliant with any regulation. You should always consult a qualified legal professional for definitive compliance guidance.

Acceptable Use

When using the Service, you agree that you will not:

• Misrepresent assessment results as a legal certification, formal audit, or official compliance status issued by a regulatory authority.
• Use automated scripts, bots, or scraping tools to access the Service or extract its content without prior written consent.
• Resell, redistribute, sublicense, or commercially exploit the Service, its content, or its assessment framework without prior written consent.
• Attempt to reverse-engineer, decompile, or extract the source code of the assessment logic or scoring algorithms.
• Use the Service to engage in any activity that violates applicable law, including but not limited to EU and Slovenian law.
• Interfere with or disrupt the integrity or performance of the Service or its underlying infrastructure.
• Impersonate another person or entity, or falsely claim an affiliation with any person or organisation.

User Accounts

Certain features of the Service — such as saving assessment results — require you to create an account. Accounts are created using magic link authentication: you provide your email address and receive a one-time sign-in link. No password is stored.

You agree that:

• You will provide a valid email address that belongs to you.
• Each person may maintain only one account. Creating multiple accounts to circumvent restrictions or abuse the Service is prohibited.
• You are responsible for all activity that occurs under your account, including any use by individuals with whom you share your sign-in link.
• You will notify us promptly if you believe your account has been accessed without your authorisation.

We reserve the right to suspend or terminate accounts that violate these Terms (see Section 8).

Limitation of Liability

To the maximum extent permitted by applicable law:

• The Service is provided "as is" and "as available," without warranties of any kind, whether express, implied, or statutory, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement.
• The operator does not warrant that the assessment results are accurate, complete, current, or error-free.
• The operator shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from or related to your use of the Service.
• The operator shall not be liable for any regulatory fines, penalties, enforcement actions, or legal costs that you or your organisation may incur, regardless of whether you relied on the assessment results.
• You acknowledge that compliance with GDPR, NIS2, the EU AI Act, and any other regulation remains solely your responsibility. The Service is a guidance tool, not a substitute for professional legal counsel.

If any limitation above is found to be unenforceable under applicable law, the operator's total aggregate liability for all claims arising from or related to the Service shall not exceed EUR 100.

Data Handling

Your privacy is important to us. This section provides a summary of how your data is handled when you use the Service. For full details, please review our Privacy Policy.

Assessment data in the browser: When you complete an assessment, your answers and results are stored locally in your browser using localStorage. This data does not leave your device unless you explicitly choose to save it.

Saved results (optional): If you create an account and choose to save your assessment results, the data is transmitted to and stored in our Supabase-hosted database. Saved data includes your email address, assessment answers, and computed scores.

No sale of data: We do not sell, rent, or share your personal data or assessment results with third parties for marketing purposes.

Intellectual Property

All intellectual property in the Service — including but not limited to the assessment framework, question sets, scoring methodology, templates, educational content, design, and source code — is owned by the operator or its licensors and is protected under applicable copyright, trademark, and intellectual property laws.

You may not copy, reproduce, distribute, or create derivative works from any part of the Service without prior written consent, except as permitted by law for personal, non-commercial use.

Your data remains yours. You retain full ownership of the information you provide in the assessment and any results generated from your responses. By saving results to your account, you grant the operator a limited, non-exclusive licence to store and process that data solely for the purpose of providing the Service to you.

Termination and Account Suspension

By the operator: We may suspend or terminate your account and access to the Service, without prior notice, if we reasonably believe you have violated these Terms. In the event of termination for cause, you are not entitled to a refund of any fees paid (if applicable).

By you: You may delete your account at any time through the Service's account settings or by contacting us at the address in Section 12. Upon account deletion, your saved assessment data will be permanently removed from our systems within 30 days, except where retention is required by law.

Sections that by their nature should survive termination — including Sections 5 (Liability Limitation), 7 (Intellectual Property), and 9 (Governing Law) — shall survive termination of these Terms.

Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Republic of Slovenia, including the Obligations Code (Obligacijski zakonik, OZ), without regard to conflict of law principles.

Any disputes arising from or in connection with these Terms or the use of the Service shall be subject to the exclusive jurisdiction of the competent courts in Murska Sobota, Slovenia. This choice of jurisdiction shall not deprive consumers habitually resident in another EU Member State of the protection afforded by the mandatory consumer protection rules of their country of habitual residence, in accordance with Article 6(2) of Regulation (EC) No 593/2008 (Rome I).

Dispute Resolution

We encourage you to contact us first if you have a concern or complaint (see Section 12). We will make reasonable efforts to resolve any issue informally.

In accordance with the Slovenian Act on Out-of-Court Resolution of Consumer Disputes (ZIsRPS, Official Gazette RS No. 81/15), we hereby inform you that Viktoria Compliance, operated by Tina Gabrovec s.p., does not participate in out-of-court consumer dispute resolution procedures before any ADR entity.

The EU Online Dispute Resolution (ODR) platform, previously available for cross-border consumer disputes, was discontinued on 20 July 2025 pursuant to Regulation (EU) 2024/3228 and is no longer available.

If you are a consumer and wish to file a complaint regarding market surveillance or consumer protection matters, you may contact the Market Inspectorate of the Republic of Slovenia (Tržni inšpektorat RS) at https://www.ti.gov.si.

Changes to Terms

We reserve the right to modify these Terms at any time. When we make changes, we will update the "Last updated" date and version number at the top of this page.

For material changes — such as modifications to liability limitations, data handling practices, or governing law — we will notify you by email (if you have an account) or by displaying a prominent notice on the Service. You may be required to re-accept the revised Terms before continuing to use the Service.

If you do not agree to the revised Terms, you must stop using the Service and, if applicable, delete your account.

Contact Information

The Service is operated by:

For questions, concerns, or requests related to these Terms of Service, please contact us via the contact page.