Effective from 28 August 2026. Version 2.

1. What this document covers

This document sets out the terms of use of the Worklines business management system (the “System”) and applies to you as a person using the System.

2. Definitions

• Provider: Business Software Solutions Kft. (Apor Vilmos tér 25-26., 1124 Budapest, Hungary; company registration number 01-09-356890; VAT number 25420113-2-43)
• Subscriber: the organisation that subscribes to the System and grants you access
• User (you): the natural person who signs in to the System with a personal, named account
• Location: the Subscriber’s separate data area within the System, with its own subdomain

3. Where your access comes from

1. Your access is created, modified and withdrawn by the Subscriber. The provider does not decide the scope of your access: the Subscriber’s administrator configures it through permission groups.
2. If you believe your access is incomplete or unjustifiably broad, raise it with your employer, not with the provider.
3. The provider restricts or terminates your access on its own initiative only on the grounds set out in section 11.

4. Your account and authentication

1. The account is personal and non-transferable. You must not share your password with anyone — not a colleague, not a manager, not a member of the provider’s staff. The provider will never ask for your password, and cannot technically learn it: passwords are stored only as one-way hashes.
2. Your password must satisfy the length and complexity requirements enforced by the System. Stricter rules apply to accounts with administrator rights.
3. If two-factor authentication is mandatory at your location, the System will direct you to the setup page on first sign-in and no other function will be available until setup is complete. Keeping the secret key stored in your authenticator app and your recovery codes safe is your responsibility.
4. If you notice that someone may have gained unauthorised access to your account, report it to your employer’s administrator without delay and change your password. Changing your password invalidates all previous sessions in the System.
5. You are responsible for operations carried out with your account, unless you demonstrate that they did not originate from you.

5. Acceptable use

You may use the System solely to perform your job duties, in accordance with your employer’s instructions.

The following are prohibited in particular:

• circumventing access controls, or attempting to do so — including hand-crafting addresses, identifiers or requests that the interface does not offer, in order to reach another user’s or another location’s data
• probing, testing or scanning the System’s security mechanisms for vulnerabilities without the prior written permission of both the Subscriber and the provider
• bulk extraction of data by automated means, or loading the interface or endpoints beyond ordinary use
• using, passing on or publishing data obtained from the System for any purpose outside your job duties
• uploading content that is unlawful, infringes the rights or legitimate interests of others, or contains malicious code
• reverse engineering the System, attempting to obtain its source code, or copying, redistributing or reselling the System or any part of it
• acting in another user’s name, or creating the appearance of doing so

The System logs sensitive operations and enforces authorisation gates on the server side, not only in the interface. Circumvention attempts are logged and may be reported to the Subscriber.

6. Content you upload

1. The data and documents you record and upload form part of the Subscriber’s data set. The right of disposal over them belongs to the Subscriber; the provider processes them only on the Subscriber’s instructions and does not use them for its own purposes.
2. You are responsible for ensuring that you are entitled to upload what you upload, and that the content complies with your employer’s internal policies.
3. If your employment ends, uploaded content remains with the Subscriber, which decides what happens to it.

7. Logging, monitoring and impersonation

The purpose of logging is traceability and detection of unauthorised access. The Privacy Notice gives detailed information on how log data is processed.

8. Availability and support

1. The provider makes the System available in its current state, under continuous development. It aims for high availability but does not guarantee uninterrupted or error-free operation to you: availability commitments and their consequences are set out in the subscription agreement with the Subscriber.
2. The provider may temporarily suspend the System for maintenance, with prior notice. Immediate intervention without prior notice may be necessary for security reasons.
3. The provider may develop, modify or discontinue features of the System. This does not affect the availability of data already recorded.
4. Support: for questions about operation and for faults, contact your employer’s internal administrator first. You may also reach the provider directly through the Feedback feature built into the System; you can follow the status of your report and the response to it on the My feedback page.

9. Intellectual property

1. The System, its source code, interface, visual elements and documentation are the intellectual property of the provider and are protected by copyright.
2. You acquire no rights in the System; you receive only a non-exclusive, non-transferable right of use for the performance of your job duties, based on and for the duration of the Subscriber’s subscription.
3. You may not publish screenshots, exports or descriptions originating from the System that show its interface or operation without the provider’s prior written permission.

10. Liability

1. Responsibility for the substantive accuracy of data appearing in the System lies with the Subscriber and the user who recorded it. The provider does not verify the accuracy of content.
2. The provider is not liable for damage arising from your breach of these terms, your employer’s internal policies or the law.
3. To the fullest extent permitted by law, the provider’s liability towards you is limited to damage caused intentionally and to damage to human life, physical integrity or health. The provider’s contractual liability towards the Subscriber is governed by the subscription agreement.
4. The provider is not liable for malfunctions arising from faults in the network connection between the System and the user, or from faults in the user’s device or browser.

11. Suspension and termination of access

1. The Subscriber may suspend or terminate your access at any time; the provider neither decides on this nor notifies you of it.
2. The provider may suspend your access without prior warning, while simultaneously informing the Subscriber, if your conduct directly endangers the security or integrity of the System or the protection of other users’ data.
3. Deactivating an account immediately invalidates existing sessions: the System signs you out on the next request.
4. Your access ends when the Subscriber’s subscription ends.

12. Data protection

The processing of personal data in connection with use of the System is governed by the Privacy Notice, which is available at all times via the link at the bottom of the interface. The two documents complement each other; in the event of any inconsistency on data protection matters, the Privacy Notice prevails.

13. Changes to these terms

1. The provider may amend these terms unilaterally, in particular in the event of legislative change, functional change to the System, or a security requirement.
2. The System stores legal documents in versioned form: each release receives its own version number and effective date, so it can be established retrospectively which text was in force at any given time.
3. The provider gives notice of material changes before they take effect, through an in-system notification or by e-mail. Continued use of the System constitutes acceptance of the amended terms.

14. Governing law and disputes

1. These terms and the use of the System are governed by Hungarian law, including Act V of 2013 on the Civil Code.
2. The parties will attempt to settle disputes arising from these terms by negotiation. Failing that, they submit to the jurisdiction of the competent court in Budapest, in accordance with Act CXXX of 2016 on Civil Procedure.

15. Contact

• Business Software Solutions Kft.
• Apor Vilmos tér 25-26., 1124 Budapest, Hungary
• E-mail: info@bssolution.hu
• Phone: +36 30 120 2255

Complaints may be submitted using the contact details above. We investigate and respond to complaints within 30 days of receipt.

This English text is a translation provided for convenience. In the event of any discrepancy, the Hungarian version prevails.