1. General Provisions

1.1. General terms and conditions of use for the SOS IB platform (hereinafter also referred to as the "general terms") define the conditions for using the SOS IB platform, which is managed by the VŠR College of Accounting and Finance Ljubljana (Visoka šola za računovodstvo in finance, Ljubljana, hereinafter referred to as the "provider") and the obligations of the SOS IB platform user (hereinafter referred to as the "user"). The platform is freely accessible at the following link: https://sosib.eu/

1.2. Provider's identification details: VŠR
VISOKA ŠOLA ZA RAČUNOVODSTVO IN FINANCE, LJUBLJANA
(COLLEGE OF ACCOUNTING AND FINANCE LJUBLJANA)
Stegne 21C, 1000 Ljubljana
Company registration number: 2287994000 Tax number: SI 62679198
IBAN: 10100-0052573219 (Bank Intesa Sanpaolo d.d.)
IBAN: 6100 0002 3633815 (Delavska hranilnica d.d.)
Email: international@vsr.si
Phone: 00386 (0) 2 229 80 83

1.3. The College of Accounting and Finance Ljubljana has been registered in the court register under entry number: 1/46906/00 at the District Court in Ljubljana since May 10, 2007.

1.4. The general terms bind the contracting parties as contractual provisions and form an integral part of the business cooperation agreement.

1.5. The client is considered an institution/organization or company that decides to use the SOS IB platform for its business use and invites its employees and students to register. A user is anyone who registers on the SOS IB platform (institution - client, administrator, professor, student). Only individuals who are 18 years of age or older can By registering, the user confirms that they are familiar with and agree to the full General terms. Upon registration, the user is bound by the general terms published on the website on the date of registration, https://sosib.eu/terms-and-conditions/. The provider reserves the right to amend or supplement the general terms. Unless otherwise stated, the amended general terms take effect the day after being published on the website https://sosib.eu/terms-and-conditions/, or after written notice is sent to the client. Continued use of the SOS IB platform after changes to the General Terms implies that the user agrees with them. By registering, the user also declares that they are familiar with the Privacy Policy for the SOS IB Platform https://sosib.eu/privacy-policy/ and agree to it.

1.6. The contracting parties (the provider and the user) agree to ensure timely communication of information and notify the other party about anything that could affect the subject matter and execution of the contract.

1.  Conditions of Use and Payment

2.1. The use of the SOS IB platform is free of charge until further notice. Nonetheless, the contracting parties remain in a contractual relationship in accordance with these General Terms.

2.2. Users are responsible for the content they upload, publish, or share in any way via the platform. Users must use the SOS IB platform in a friendly and respectful manner towards other users. It is prohibited to post illegal, misleading, discriminatory, or fraudulent content, or content containing malicious software or links to such It is also forbidden to upload content that infringes on the rights and freedoms of others, including intellectual property rights. Actions that overload or hinder the proper functioning of the SOS IB platform are prohibited. Content that violates these provisions may be removed, restricted, or blocked. Similarly, access to the user's account may be temporarily suspended or disabled due to actions that violate these General Terms. The procedure for reporting illegal content and the complaint process in the event of content removal/restriction/blocking or user account suspension is described in section 9 of these General Terms.

2.3. The provider agrees not to promise, offer, or give any unauthorized benefit to any public sector official or entity representative to obtain business, secure a favorable contract, forgo required supervision of contractual obligations, or engage in any other action that causes harm to the public sector entity or results in unauthorized benefits for the provider or the representative of the other contracting In the event of a violation or attempted violation of this clause, any already concluded and valid contract is void, and if the contract has not yet come into effect, it is considered not to have been concluded.

3. Registration

3.1. To use the SOS IB platform, the user must register by creating a user account and is responsible for providing accurate and truthful information.

3.2. The user is responsible for the security of their account, including the password, and for all activities carried out through their account.

3.3. The user must not use the platform in a way that could harm the provider, other users, or third parties, or in a manner contrary to the law.

3.4. The SOS IB platform is intended for international collaboration among students, professors, and other experts from various fields (hereinafter referred to as the "teacher"). The SOS IB platform is used by different user profiles. Collaboration with a specific institution (or company) begins when the responsible person of the organization contacts VŠR via the specified email address and expresses interest in participating in the SOS IB platform. The organization provides the email address of the institution's administrator and other information requested by VŠR (purpose of use, general information about the organization, etc.). The administrator receives a link to the platform at the provided address, through which they can register (create a user account). The administrator invites the institution's teachers to the platform (by entering their email addresses in the appropriate field). Both the administrator and the teachers can invite students to the application. There can be multiple administrators for the same institution. The administrator can nominate other teachers from their institution for the administrator role using the teacher search function (teacher- administrator). The institution, administrator, or teacher can only enter (or otherwise communicate) the email addresses of users for whom they have the appropriate legal basis under Article 6 of the General Data Protection Regulation (GDPR) and other relevant legislation.

4. Protection of trade secrets

4.1. If the contracting parties (provider or user) become aware of each other’s trade secrets, they are obligated to protect them carefully.

4.2. A trade secret includes undisclosed technical knowledge, experience, and business information that meet the following criteria:
- ut is a secret not generally known or easily accessible to individuals in circles that usually deal with such types of information;
- it has market value;
- the holder of the trade secret has taken reasonable steps to maintain its secrecy.

4.3. Information considered trade secrets may include:
- Materialized: documents, records, tables, plans, schemes, sketches, photos, drawings, formulas, calculations, diagrams, software tools, data storage devices, databases, technological and other solutions;
- Non-materialized: oral communication of data, research ideas, shared experiences, ideas for implementation solutions, discussions on strategies, tactics, plans, and projects.

4.4. All information clearly considered likely to cause significant harm if disclosed to an unauthorized person, and all information designated by the company in writing as confidential, including all knowledge and records in any form related to:
- the planning and execution of development, research, project, analytical, and production activities of the company, including work organization and the results of these activities;
- knowledge gained under licensing and copyright agreements, know-how agreements, joint- venture agreements, and task refinement processes;
- financial positions and activities, investment plans, analyses, and project solutions;
- bids for tenders, public procurements, and offers made to specific individuals;
- computer user applications and system products, as well as various access passwords for portals, applications, or other essential parts relevant to the concept.

4.5. Information, data, conversation content, and facts that can be proven to have been:
- publicly known before being provided to the receiving party, or later published without breaching the contract,
- known to the receiving party prior to disclosure by the other party,
- lawfully received from a third party without breaching this agreement,
- independently developed by the receiving party, are not considered trade secrets.

4.6. The contracting parties commit to using the trade secrets exclusively for the purposes of fulfilling the contract and other business activities of the client. Both parties are obligated to protect the confidential information from unauthorized access and to handle it with the same level of care as they would handle their own confidential information – with the diligence of a good manager. The obligation to protect trade secrets remains in force for 10 years after the termination of the contractual relationship. This non-disclosure agreement does not apply to legal obligations before courts or in the performance of official duties.

4.7. The contracting parties must immediately inform each other if unauthorized third parties have gained access to confidential information and will cooperate to enforce rights against the third party to the best of their abilities.

5. The Provider as a Processor of Personal Data

5.1. The provider expressly declares that it is familiar with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 april 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR).

5.2. The contracting parties agree that the provider, when providing services under this contract, will have access to personal and confidential data of the client. The provider will process the personal data of users, including name, email address, data about courses (including ISCED fields), descriptions, and/or photographs (optional), content created by users, and data generated through the use of the application (logs, etc.). Therefore, the client authorizes the provider to process the client’s personal data for the purpose of performing services under this contract, and the provider agrees to ensure compliance with the procedures and measures stipulated by the applicable Personal Data Protection Act (Zakon o varstvu osebnih podatkov - ZVOP-2) and GDPR. Personal data will be processed as described in the Privacy Policy for the SOS IB Platform. The client (as the data controller) may inform the provider of how long the personal data of its employees (or collaborators, e.g., professors working under different types of contracts) and students should be processed or stored. The client may also request the deletion of the data. Since the SOS IB platform is internationally accessible, the provider may not be familiar with the laws of all countries, so it is the client’s responsibility to inform the provider of the retention period for personal data or any other instructions regarding data processing. If the client does not provide instructions regarding the retention period or other data processing instructions, personal data will be processed as described in the Privacy Policy for the SOS IB platform. By registering, the client acknowledges and agrees with the described data processing.

5.3. The provider will only process personal data according to the documented instructions of the client, including for transfers of personal data to a third country or international organization, unless required to do so by Union law or the law of a Member State applicable to the provider. In such cases, the processor will inform the controller of this legal requirement before processing the data, unless the relevant law prohibits such notification on important grounds of public interest. The client ensures that it has a lawful basis for processing all personal data (or inviting other individuals to the platform). In the event that the legal basis for processing personal data ceases during the business relationship, the client must inform the provider of this.

5.4. The personal data in the client's records and collections will be protected in accordance with applicable Slovenian and European legislation. This includes all necessary technical and organizational measures to prevent misuse and violations of personal data protection, which the provider will implement. Among other things, the provider will establish internal rules to regulate its own personal data protection practices. Access to personal data will only be granted to authorized individuals or employees, personal data will be stored in locked premises, software allowing access to personal data will be protected by passwords preventing unauthorized access, special types of personal data will be transmitted via telecommunications networks secured by encryption and/or electronic signatures, and regular training on the importance and methods of personal data protection will be conducted for employees. The provider will ensure the supervision and protection of data in the case of subcontractors.

5.5. The provider must allow the client to monitor the implementation of personal data protection procedures and measures. The client may request information and reports from the provider on the provision of certain procedures and personal data protection measures subject to this contract, as well as information about any subcontractors and other relevant information regarding compliance with the provisions of this contract. The client gives the provider general permission to involve other processors, provided the provider ensures the same level of personal data protection standards for subcontractors, which will be recorded in a log and made available to the client upon request.

5.6. The provider ensures that its employees and other individuals performing tasks for it that involve the processing of personal data are bound to confidentiality, either by contract or by applicable law.

5.7. The provider is obligated to promptly notify the client in writing in the event of a personal data breach.

5.8. Where appropriate, the provider will assist the client in fulfilling its obligations to respond to requests from supervisory authorities and to exercise the rights of individuals, such as providing information that must be given to the individual, the right to deletion, the right to correction, the right to restrict processing, the obligation to notify individuals regarding corrections or deletion of personal data or restriction of processing, and the right to data portability. The provider is obligated to promptly notify the client (controller) if it receives a request for access to personal data processed for the controller from any foreign (EU or non- EU) administrative or judicial authority.

5.9. The provider further undertakes to carry out individual tasks related to the processing of the client's personal and confidential data only within the client's authority under this contract and will not process personal and confidential data for any other purpose. Upon termination of this contract or upon the client’s request, the provider must immediately return all processed data and their copies to the client or permanently destroy them.

5.10. The provider may collect and process data from users necessary for analyzing platform performance for the purpose of preparing internal analyses/reports and performing upgrades or improvements to the platform.

6. Use of the SOS IB Platform

6.1. The provider is the exclusive owner of intellectual property rights. Unless otherwise agreed in writing, the client and user are granted only the right to use the solutions and explicitly agree to comply with the legislation governing intellectual property rights, especially copyright law.

6.2. By concluding the contract (or registering), the client gains the right to use the solutions solely for its own internal business use and not for further reuse in the course of its business (e.g., distribution, whether paid or unpaid).

7. Limitation of Liability

7.1. The provider assumes no responsibility for:
- Internet outages;
- Service disruptions caused by incorrect or improper use of the services;
- Service interruptions due to network failures of contractual partners, power outages, or other technical issues that may temporarily affect the use of the service;
- Use of the website or platform in violation of generally known rules for safe internet usage;
- Any undesired consequences suffered by the user due to improper use of the platform.

7.2. The provider is not liable for any direct, indirect, incidental, or special business or non-business damages, including financial losses, resulting from the use or inability to use the platform, unauthorized access to or modification of the client’s data, declarations or actions by any third party in the course of providing services, or any other matter related to the provision of services.

7.3. The provider is not liable for any damages or delays in fulfilling its obligations under these terms, especially if the failure or delay is caused by circumstances beyond the provider's reasonable control.

7.4. The client understands and agrees that they cannot claim any amount from the provider for loss of profit, data, or goodwill, or for any direct, incidental, indirect, or other damages related to claims arising from the business relationship, regardless of whether the possibility of such loss or damage was foreseeable.

7.5. The SOS IB platform will generally be available for use 24 hours a day, year-round. The provider reserves the right to temporarily restrict access to the platform for technical reasons or equipment replacements. Due to maintenance requirements, the provider also reserves the right to impose longer access restrictions to the platform.

8. Complaints

8.1. Any user complaints can be submitted via email to: international@vsr.si or by regular mail to: Stegne 21C, 1000 Ljubljana. The provider will make every effort to establish an appropriate system for handling complaints and will treat each complaint procedure confidentially. The user must immediately notify the provider of any errors. For matters not covered by these general terms with respect to transactions involving legal entities, the provisions of the Obligations Code (Obligacijski zakonik – OZ) of the Republic of Slovenia shall apply.

9. Obligations Under the Digital Services Act

9.1. In accordance with Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market for Digital Services and amending Directive 2000/31/EC (Digital Services Act) the following entity is designated as the contact point for authorities in Member States, the Commission, and the board, as well as the contact point for service recipients:

VISOKA ŠOLA ZA RAČUNOVODSTVO IN FINANCE, LJUBLJANA
(COLLEGE OF ACCOUNTING AND FINANCE LJUBLJANA)
Address: Stegne 21C, 1000 Ljubljana, Slovenia. Email: international@vsr.si
Phone: 00386 (0) 2 229 80 83

9.2. Users who believe that the SOS IB platform contains information they consider illegal content should report it to: international@vsr.si.

9.3. Reports of illegal content must include:

- A reasoned explanation of why the individual believes the information is illegal content;
- A clear specification of the exact electronic location of the information, such as a precise URL or URLs, and additional information, if necessary, to identify the illegal content;
- Their name and email address, except in cases involving offenses under Articles 3 to 7 of Directive 2011/93/EU;
- A statement confirming that the individual or entity submitting the report is acting in good faith and believes the information and claims in the report are accurate and complete.

9.4. When a report includes the contact information of the individual who submitted it, you will receive a confirmation of receipt. We will inform you of our decision without unnecessary delay. We will provide information on possible legal remedies regarding this decision. The mentioned processing does not use automated means.

9.5. In the event that content is removed by disabling access to it, temporarily suspended, or the provision of the entire service or part of it is terminated, or in the event that a user's account is temporarily disabled or terminated, the provider will provide a clear and specific explanation for the restriction in accordance with Article 17 of the Digital Services Act.

9.6. The provider does not use automated tools for content moderation, including algorithmic reviews. All reports will be reviewed by human moderators.

10. Final Provisions

10.1. A party may terminate the contractual relationship by submitting a deletion request to the provider. In case of inactivity, the profile will be deleted as described in the Privacy Policy for the SOS IB Platform.

10.2. The provider does not recognize any out-of-court dispute resolution provider as competent to resolve consumer disputes. The link to the Online Dispute Resolution platform is: https://ec.europa.eu/consumers/odr/main/?event=main.home2.show

10.3. The contracting parties agree to resolve any potential disputes amicably. If an amicable resolution is not possible, the court in Ljubljana shall have jurisdiction. The law of the Republic of Slovenia applies.

These general terms and conditions take effect from 22. 10. 2024.