Publishing Authorisation

A1. Plain-language acceptance statement

I confirm that I am authorised to represent this Business, that I have reviewed the site to be published, that the information is accurate to the best of my knowledge, that the Business has the necessary rights and permissions for the content, and that I accept the Publishing Authorisation.

A2. Authority and review

The person accepting this agreement represents that they are the Business owner or have authority from the Business to publish and manage its site. Before publishing, the Business must review names, contact details, prices, hours, locations, service descriptions, images, videos, links, legal notices and any regulated claims. Publication does not constitute verification or endorsement by Vitrinoro.

A3. Business content and licence

The Business keeps ownership of content it uploads or supplies. The Business grants Vitrinoro and its infrastructure providers a non-exclusive, worldwide, royalty-free licence, for the subscription term, to host, cache, reproduce, technically adapt, resize, transcode, translate where expressly requested, display and distribute that content only as needed to provide, secure, support and improve the contracted publishing service. The licence ends when the content is deleted or the service ends, except for limited backup, security, dispute and legal-retention copies. Vitrinoro does not acquire the Business's trademarks, domain names or customer relationships.

The Business confirms that it owns the content or has sufficient licences, releases and permissions, including for copyright, trademarks, publicity/personality rights, music, photographs, video, customer reviews and personal data. The Business must not upload credentials, payment-card data, medical records, children's data or other sensitive information unless a Vitrinoro feature expressly supports it and the required contract and safeguards are active.

A4. Accuracy and lawful use

The Business is responsible for keeping public information accurate and current and for complying with laws applicable to its goods, services, advertising, professional licences, pricing, taxes, accessibility, consumer notices, promotions, cookies and direct marketing. The site must not be used for unlawful, deceptive, infringing, defamatory, hateful, exploitative or dangerous content; malware, credential theft or impersonation; non-consensual intimate content; child sexual abuse material; illegal goods or services; or conduct prohibited by the Acceptable Use Policy.

Published service prices are informational unless an explicitly activated checkout or payment feature states otherwise. Vitrinoro is not the seller, merchant of record, booking provider or professional service provider for transactions between the Business and its visitors merely because it hosts the site.

A5. Personal data and visitor obligations

For account, security, billing and platform-operation data, the roles and purposes in Vitrinoro's Privacy Notice apply. For personal data that the Business places on its site or collects from its visitors through Business-configured forms, the Business generally determines the purposes and is the controller/business; Vitrinoro acts as processor/service provider only to the extent stated in the Data Processing Addendum. The Business must provide an appropriate privacy notice, establish a lawful basis, honour data-subject rights, configure lawful cookies and marketing consent, and avoid collecting data that the configured service is not designed to protect.

A6. Publication, availability and discoverability

Publishing creates a versioned release after automated health checks. Only a healthy release becomes current; a failed candidate does not replace the last healthy release. The Business may receive a Vitrinoro-hosted address and may later connect an eligible domain under separate terms. Vitrinoro does not guarantee uninterrupted availability, search ranking, indexing, traffic, leads, sales, bookings, accessibility certification or legal compliance. Search engines and third-party platforms control their own crawling and ranking.

A7. Moderation, notices and restrictions

Vitrinoro may restrict, unpublish, disable access to or remove content when reasonably necessary to enforce these terms or the Acceptable Use Policy; protect users, the service or third parties; respond to a sufficiently substantiated illegality, intellectual-property or privacy notice; comply with a court, regulator or registry order; or address urgent security risk. Measures should be proportionate where practical.

Where required by applicable law, Vitrinoro will provide the Business with a statement of reasons and an available review or appeal channel, unless notice is prohibited or would create a material security or legal risk. The Business may submit a good-faith correction, appeal or legally valid counter-notice. Repeated infringement or serious abuse may lead to account termination under the Terms of Service.

A8. Subscription status and exit

Publication availability follows the canonical subscription lifecycle. A `past_due` account receives only the documented grace period; a cancelled account remains available only until its paid current-period end unless mandatory law requires otherwise. Expiry or suspension does not transfer ownership of the Business's content or domain to Vitrinoro. The Business may use available export tools and may request an export according to the Terms of Service, Privacy Notice and any applicable data-portability or cloud-switching rights. Technical backup retention does not extend public availability.

A9. Electronic acceptance and records

Acceptance is affirmative and is not preselected. Vitrinoro records the agreement key and version, content hash, workspace, project, accepting user, locale, UTC time and source action and provides a viewable or downloadable copy or receipt. A material change requires renewed acceptance before the affected action. Typographical or non-material clarifications may be published without renewed acceptance where permitted by law. Electronic acceptance does not waive any right that cannot lawfully be waived.

R1. European Union and European Economic Area

1. **Digital Services Act.** Vitrinoro's restrictions on illegal and prohibited content, its moderation tools, automated checks, complaint route and possible consequences must be described clearly in the Terms and Acceptable Use Policy. When the DSA requires it, a content or account restriction must produce a sufficiently specific statement of reasons and information about available redress. Vitrinoro must maintain the legally required points of contact and notice-and-action mechanism; contract text alone is not sufficient.

2. **GDPR.** Controller/processor roles follow actual decisions about purpose and means, not labels alone. The Business is generally controller for its published visitor/customer data; Vitrinoro is processor only for documented instructions and remains controller for its own account, security, billing and legal-compliance processing. A compliant DPA, subprocessors, transfer mechanism, security terms, retention and data-subject workflow must exist separately.

3. **Data Act.** Where Vitrinoro qualifies as a data-processing service, applicable switching, export, interoperability, contractual-information and charge restrictions remain available and are not waived by these agreements.

4. **P2B/marketplace.** These agreements do not activate a marketplace, ranking, commission or listing service. Before Vitrinoro opens its proposed marketplace to EU business users, separate marketplace terms must address ranking parameters, differentiated treatment, data access, suspension/termination reasons, complaint handling and notice periods to the extent Regulation (EU) 2019/1150 applies.

5. **Spain and `.es`.** The public Legal Notice must contain the provider identity required by Spanish LSSI-CE. A managed `.es` registration is also subject to Red.es eligibility, registrant, transfer and dispute rules displayed before confirmation.

R2. United States

1. Electronic agreements and retained records are intended to have effect under the E-SIGN Act and applicable state electronic-transactions law. A user must be able to access, download and accurately reproduce the accepted version and receipt.

2. Vitrinoro may operate the U.S. copyright notice-and-takedown and counter-notice process. It must not claim DMCA safe-harbour compliance until a designated agent has been registered with the U.S. Copyright Office, published publicly and placed on a renewal calendar. A repeat-infringer policy and standard-technical-measures policy must be reasonably implemented.

3. State privacy, automatic-renewal, unfair-practices and other non-waivable laws remain applicable where their scope is met. These supplemental agreements do not themselves authorise consumer subscriptions; the service is represented as B2B. The billing flow and Terms must separately provide any required renewal disclosures and cancellation method.

R3. Canada

1. Vitrinoro and the Business must handle personal information under PIPEDA and any applicable substantially similar provincial law, including accountability, identified purposes, appropriate consent, limited collection/use/retention, accuracy, safeguards, openness, access and complaint handling.

2. The Business is responsible for obtaining the consent and including the identification and unsubscribe mechanism required by CASL before sending commercial electronic messages through its own channels. Publishing a site does not itself grant marketing consent.

3. Vitrinoro may preserve and forward copyright notices as required by Canada's notice-and-notice regime and applicable law. Forwarding a notice is not a ruling that infringement occurred.

4. A Quebec customer must be presented with the complete French contract in the manner and sequence required by the Charter of the French Language. The product may not rely on an English-only clickwrap or describe the French version as merely informational where that would be unlawful.

R4. Türkiye

1. The Business is responsible for the legality, accuracy and sector-specific disclosures of its content and electronic-commerce activity under applicable Turkish law, including Law No. 6563 where relevant. Vitrinoro's hosting of a site does not make it the seller or service provider for the Business's transactions.

2. The parties' personal-data roles are determined under Law No. 6698 according to who determines purposes and means. The Business must provide the required notice and legal basis for visitor/customer data; Vitrinoro must satisfy its separate controller duties and processor/security obligations. Cross-border transfers require the mechanism applicable at the time of transfer.

3. Vitrinoro may remove or disable content and preserve or disclose records when required by Law No. 5651, a competent authority or court. The Provider must complete an external assessment of whether its operation requires a Turkish hosting-provider notification, local representative, traffic-data process or other operational measure; these duties cannot be satisfied by this contract alone.

4. The complete Turkish version must be available before acceptance. Mandatory Turkish law and competent-authority orders remain unaffected.