Termeni de utilizare

1.1 These Terms govern the use of the peppol-id.eu website (the “Site”).

1.2 The Site is operated by ISSET, s. r. o., Bratislava, Slovak Republic, Identification Number (IČO): 47 544 813, VAT Identification Number (IČ DPH): SK2023941117, registered in the Business Register of the City Court Bratislava III, Section: Sro, Insert No. 94603/B (the “Operator”). Contact email: info [at] peppol-id.eu.

1.3 By using the Site, you agree to be bound by these Terms without reservation. If you do not agree to these Terms, you must stop using the Site.

1.4 The Site provides a free search service for Peppol participants and publicly available statistics about the Peppol network. No registration is required.

2.1 The content of the Site is protected by copyright. Except as expressly permitted by these Terms, it may not be copied, reproduced or otherwise used without the Operator’s prior written consent.

2.2 You may use statistics and charts published on the Site in your own articles and publications, provided that you identify “peppol-id.eu” as the source and include a link to the Site.

2.3 Peppol® is a trademark of OpenPeppol AISBL. The Operator is not affiliated with OpenPeppol AISBL.

3.1 You may use the Site free of charge for lawful purposes, including searching for Peppol participants and viewing statistics. You may use published statistics and charts subject to the conditions set out in clause 2.2.

3.2 When using the Site, you agree in particular:

• to use the Site in accordance with applicable law and these Terms;
• not to interfere with the operation, security or integrity of the Site or circumvent any technical or security measures, including request limits;
• not to engage in automated bulk collection of data, including scraping, place an excessive load on the Site’s servers or attempt to disrupt the availability of the Site, including through denial-of-service attacks;
• not to use the data for unlawful purposes, unsolicited communications or spam, or for the bulk processing of personal data in breach of applicable data protection law;
• not to present the data in a misleading manner and to comply with the attribution requirements set out in clause 2.2.

3.3 The Operator may restrict, temporarily suspend or permanently block access to the Site, impose request limits, or modify, suspend or discontinue the Site or any part of it at any time, particularly in the event of a breach of these Terms or a threat to the operation or security of the Site.

4.1 The Site does not require registration and does not collect personal data through forms. Searches relate to publicly available business information.

4.2 The Site uses only cookies necessary for its technical operation and functionality, namely a session cookie and a cookie used to remember the selected country. Consent is not required for the use of these cookies.

4.3 We use a self-hosted instance of GoatCounter for privacy-friendly, cookieless traffic analytics. It is not used to track users across different websites. We do not use advertising cookies or third-party analytics tools.

4.4 The Operator processes server logs, including IP addresses, for the purposes of operating and securing the Site, based on its legitimate interests.

4.5 The Operator does not sell personal data. Questions concerning data protection may be sent to info [at] peppol-id.eu.

5.1 The information available on the Site is obtained from public sources within the Peppol network, including SML and SMP data. The Operator uses reasonable efforts when collecting and processing this information. Market-share figures for service providers, also known as Access Points, are estimates derived from publicly available DNS records and SMP metadata.

5.2 The Operator does not guarantee the completeness, accuracy or timeliness of the information and, to the extent permitted by applicable law, is not liable for any loss or damage arising from its use. The Site and its content are provided “as is”.

6.1 The participant and company information published on the Site is obtained from official, publicly available sources, in particular the Peppol Directory and public business registers such as SIRENE/INSEE (France), the Crossroads Bank for Enterprises (KBO/BCE, Belgium) and equivalent national registers. The Site reproduces this information and is not its source. The Operator does not create the underlying records and does not independently verify their accuracy. Such business registers are public by law in the interest of commercial transparency and, where so provided by the source, are made available for reuse as open data under the applicable open licence (for example, the French SIRENE database under the Etalab Open Licence).

6.2 Purpose. The Site is a directory that enables any business to verify and assess a Peppol participant in connection with a commercial relationship: whether the participant exists and is currently registered and reachable in the Peppol network, whether the underlying entity is active, whether it is registered for VAT, together with further information useful for identifying and characterising the counterparty, verifying its business status and, where relevant, issuing a correct invoice. This processing serves legitimate business verification, due diligence and invoicing purposes. These purposes constitute the legitimate interests on which the Operator relies under Article 6(1)(f) GDPR. The additional register-derived information is limited to business-related information which the source register itself continues to make publicly available. Where a natural person is subject to restricted diffusion, the Site does not publish the name and forename(s), precise address or other data which the source has withheld from public diffusion. Some of the remaining business information may nevertheless constitute personal data within the meaning of the GDPR, which the Operator processes on the basis set out in this section.

6.3 Some participants are natural persons, for example sole traders, whose registered business address may be the same as their home address. Where the published information constitutes personal data, the Operator processes it on the basis of the legitimate interests set out in clause 6.2, namely the verification and assessment of participants in the Peppol network in connection with commercial relationships, business due diligence and invoicing (Article 6(1)(f) GDPR). The information is made publicly available to users of the Site. As this data is not obtained directly from the individuals concerned, this section forms part of the information provided to data subjects pursuant to Article 14 GDPR. In relying on this basis, the Operator has weighed its legitimate interest against the interests and fundamental rights of the individuals concerned, taking into account that the information relates to a professional activity, is already public at source, and is limited as described in clause 6.2.

6.4 The authoritative record for register-sourced data is the source register itself. Where an inaccuracy originates in that register, the data subject should normally also request its correction from that register; once the source register is updated, the Site will reflect the change at its next data refresh. This does not affect the data subject’s rights against the Operator under the GDPR. The Site likewise reflects the Peppol network as it currently stands: a participant that ceases to be registered in the Peppol network is removed from the active directory, and departed participants are not retained as active listings. A participant record is published for as long as the participant remains registered in the Peppol network; once the participant is removed from the network, the participant page ceases to be served as an active listing and is de-indexed, subject to limited technical records, logs and backups. For French participants, the diffusion status and the scope of information made publicly available, including the restricted-diffusion status known as “non-diffusion”, are managed by INSEE.

6.5 An individual whose personal data appears on the Site may request access to and rectification of their personal data, object to the processing, request restriction or erasure and, where applicable, exercise the right to data portability and other rights available under applicable data protection law, by contacting info [at] peppol-id.eu. The Operator will respond within the period required by law. Where a data subject objects to the processing under Article 21 GDPR, the Operator will assess the objection individually, taking into account the grounds relating to the data subject’s particular situation; where the processing is based on legitimate interest, the Operator will not continue the processing unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds relating to the establishment, exercise or defence of legal claims. Where the data originates from a public register, the Operator may decline a request for erasure or restriction where the applicable conditions for that right under the GDPR are not met or where the GDPR otherwise permits the processing to continue. Individuals also have the right to lodge a complaint with a data protection supervisory authority.

7.1 These Terms are governed by the laws of the Slovak Republic.

7.2 The Operator may amend these Terms at any time. Any revised version becomes effective upon its publication on the Site.

7.3 These Terms are effective as of 19 August 2026.