Customer Domain Connection Terms

B1. Plain-language acceptance statement

I confirm that the Business owns or is authorised to control this domain, that I understand the required DNS changes, that I have reviewed the effect on the existing website and email services, and that I accept the Domain Connection Terms.

B2. Authority and third-party rights

The Business represents that it is the registrant or has authority from the registrant to connect the domain and that the domain and its use do not infringe another person's trademark, trade name, copyright, privacy, publicity or other rights. Vitrinoro may require DNS-based or other reasonable proof of control. Verification proves technical control at that time; it does not decide ownership or resolve a legal dispute.

B3. Registrar and DNS relationship

Unless the Managed Domain Terms expressly apply, the Business obtains and renews the domain through its own registrar and remains responsible for registrar fees, account security, registrant-data accuracy, renewal, transfer and recovery. Vitrinoro is not the registrar and cannot promise that a registrar, registry, DNS provider or certificate authority will accept or preserve a configuration.

Vitrinoro will display the exact DNS records needed for the connection. If the Business grants a supported provider authorisation, the Business authorises Vitrinoro to create, verify, update and, on disconnection, remove only the records clearly identified as Vitrinoro-managed. Vitrinoro must not alter unrelated apex, email/MX, SPF, DKIM, DMARC or other service records. Manual DNS changes remain the Business's responsibility.

B4. Verification, TLS and primary host

A domain is not shown as connected or made the primary address until control, routing and TLS certificate checks pass. DNS propagation, provider caching and certificate issuance can take time and are partly outside Vitrinoro's control. During setup or failure, the Vitrinoro-hosted address remains the fallback if the subscription is eligible and the site is published. The Business must not represent the domain as active until the product reports it as verified.

B5. Change risk and continuity

DNS changes can interrupt an existing website, email or other service if records are entered incorrectly or if the same hostname is already in use. The Business must review current DNS records and maintain independent backups before making changes. Vitrinoro will provide rollback instructions for records it manages but does not control third-party propagation or restore unrelated configurations.

B6. Security

The Business must protect registrar and DNS accounts with strong authentication, keep recovery contacts current and promptly report suspected takeover. Vitrinoro may pause verification, remove a route or require re-verification where control changes, a certificate cannot be issued, the domain is hijacked, or continued routing creates security or legal risk. Vitrinoro will never request the Business's registrar password in ordinary support.

B7. Disconnection, suspension and disputes

The Business may disconnect a domain through the available product flow. Vitrinoro may revoke routing for material breach, expiry, loss of control, abuse, a valid provider/registry decision, or a binding legal order. Disconnection does not cancel the registration or transfer the domain. The Business remains responsible for removing obsolete DNS records and restoring any previous service. A domain dispute is resolved by the applicable registrar, registry, dispute policy or competent authority; Vitrinoro does not adjudicate ownership.

B8. Data and records

Vitrinoro processes the hostname, DNS status, certificate status, provider identifiers and limited operational logs necessary to connect and secure the domain. Registrar credentials must not be stored unless a separately documented OAuth or provider connection requires them. Personal data is handled under the Privacy Notice and Data Processing Addendum. Acceptance evidence follows Section A9.

R1. European Union and European Economic Area

1. **Digital Services Act.** Vitrinoro's restrictions on illegal and prohibited content, its moderation tools, automated checks, complaint route and possible consequences must be described clearly in the Terms and Acceptable Use Policy. When the DSA requires it, a content or account restriction must produce a sufficiently specific statement of reasons and information about available redress. Vitrinoro must maintain the legally required points of contact and notice-and-action mechanism; contract text alone is not sufficient.

2. **GDPR.** Controller/processor roles follow actual decisions about purpose and means, not labels alone. The Business is generally controller for its published visitor/customer data; Vitrinoro is processor only for documented instructions and remains controller for its own account, security, billing and legal-compliance processing. A compliant DPA, subprocessors, transfer mechanism, security terms, retention and data-subject workflow must exist separately.

3. **Data Act.** Where Vitrinoro qualifies as a data-processing service, applicable switching, export, interoperability, contractual-information and charge restrictions remain available and are not waived by these agreements.

4. **P2B/marketplace.** These agreements do not activate a marketplace, ranking, commission or listing service. Before Vitrinoro opens its proposed marketplace to EU business users, separate marketplace terms must address ranking parameters, differentiated treatment, data access, suspension/termination reasons, complaint handling and notice periods to the extent Regulation (EU) 2019/1150 applies.

5. **Spain and `.es`.** The public Legal Notice must contain the provider identity required by Spanish LSSI-CE. A managed `.es` registration is also subject to Red.es eligibility, registrant, transfer and dispute rules displayed before confirmation.

R2. United States

1. Electronic agreements and retained records are intended to have effect under the E-SIGN Act and applicable state electronic-transactions law. A user must be able to access, download and accurately reproduce the accepted version and receipt.

2. Vitrinoro may operate the U.S. copyright notice-and-takedown and counter-notice process. It must not claim DMCA safe-harbour compliance until a designated agent has been registered with the U.S. Copyright Office, published publicly and placed on a renewal calendar. A repeat-infringer policy and standard-technical-measures policy must be reasonably implemented.

3. State privacy, automatic-renewal, unfair-practices and other non-waivable laws remain applicable where their scope is met. These supplemental agreements do not themselves authorise consumer subscriptions; the service is represented as B2B. The billing flow and Terms must separately provide any required renewal disclosures and cancellation method.

R3. Canada

1. Vitrinoro and the Business must handle personal information under PIPEDA and any applicable substantially similar provincial law, including accountability, identified purposes, appropriate consent, limited collection/use/retention, accuracy, safeguards, openness, access and complaint handling.

2. The Business is responsible for obtaining the consent and including the identification and unsubscribe mechanism required by CASL before sending commercial electronic messages through its own channels. Publishing a site does not itself grant marketing consent.

3. Vitrinoro may preserve and forward copyright notices as required by Canada's notice-and-notice regime and applicable law. Forwarding a notice is not a ruling that infringement occurred.

4. A Quebec customer must be presented with the complete French contract in the manner and sequence required by the Charter of the French Language. The product may not rely on an English-only clickwrap or describe the French version as merely informational where that would be unlawful.

R4. Türkiye

1. The Business is responsible for the legality, accuracy and sector-specific disclosures of its content and electronic-commerce activity under applicable Turkish law, including Law No. 6563 where relevant. Vitrinoro's hosting of a site does not make it the seller or service provider for the Business's transactions.

2. The parties' personal-data roles are determined under Law No. 6698 according to who determines purposes and means. The Business must provide the required notice and legal basis for visitor/customer data; Vitrinoro must satisfy its separate controller duties and processor/security obligations. Cross-border transfers require the mechanism applicable at the time of transfer.

3. Vitrinoro may remove or disable content and preserve or disclose records when required by Law No. 5651, a competent authority or court. The Provider must complete an external assessment of whether its operation requires a Turkish hosting-provider notification, local representative, traffic-data process or other operational measure; these duties cannot be satisfied by this contract alone.

4. The complete Turkish version must be available before acceptance. Mandatory Turkish law and competent-authority orders remain unaffected.