Last updated: 5 October 2026
This agreement governs the terms of the service contract for the services that can be purchased on this website, entered into by MaadixZone, hereinafter MAADIX, with registered office at Calle Bejar 20, 4º 2º 08014 Barcelona, Spain, Tax ID (NIF) B66869249, registered in the Barcelona Commercial Register, Volume 45650, Folio 207, Sheet 494628, 1st Entry, and any natural or legal person, whether an individual or a professional, who wishes to purchase one or more of the services provided by MAADIX, hereinafter referred to as the CLIENT.
The purpose of this contract is to set out the legal, technical and financial terms governing the service contracts between MAADIX and the CLIENT.
These general terms of service apply to all hosting services offered by MAADIX and purchased by the CLIENT, and specifically included on the maadix.net website.
The service consists of the configuration and installation of the MaadiX system and of the software chosen by the CLIENT on a server provided by MAADIX. The hardware that MAADIX makes available for this service is located in data centres operated by professional external companies in the sector, which MAADIX subcontracts in order to provide the service to the CLIENT and which are identified in clause 7.3.
The duration of the contract depends on the service chosen by the client and is automatically renewed under the same terms with each payment the CLIENT makes to renew the service.
General prices are available on the maadix.net website.
The CLIENT and MAADIX may agree on specific prices for special services that are not among those offered by MAADIX on the website.
MAADIX may update its prices at any time. Price changes shall not be retroactive and shall only apply from the first renewal of the contract. MAADIX is obliged to notify the CLIENT of any price changes, and the CLIENT may either accept them or cancel the service.
MAADIX undertakes to make the purchased services available to the CLIENT as quickly as possible. This is estimated to take between 30 minutes and 96 hours from the CLIENT's effective payment of the order.
If MAADIX has not made the service available to the client within a maximum of 96 hours, the CLIENT shall be entitled to terminate the contract and to a full refund of the amount paid.
The CLIENT will receive all the technical information needed to access the purchased service.
Pursuant to Spanish Law 34/2002 on Information Society Services and Electronic Commerce, MAADIX shall be obliged to suspend the purchased service when formally required to do so by a judicial authority.
MAADIX provides the CLIENT with technical information and guides to make the tools easier to use, as well as a technical support contact.
MAADIX is obliged to notify the CLIENT of any change to the general terms of service. The CLIENT may terminate the contract immediately if they do not agree with such changes.
MAADIX undertakes to carry out maintenance, updates and improvements to the infrastructure. If such work involves a temporary interruption of the service, MAADIX undertakes to notify the CLIENT.
Under no circumstances may the CLIENT claim any compensation from MAADIX for direct or indirect, personal or commercial losses arising from such an interruption.
MAADIX accepts no liability for damage to the hardware.
MAADIX will make use of all the guarantees offered by the company that owns the data centre on behalf of the CLIENT.
Under no circumstances may the CLIENT hold MAADIX liable in the event of fire, explosion, failure of transmission networks, collapse of facilities, epidemic, earthquake, flood, power failure, war, strike, boycott or any other event of force majeure.
MAADIX is not liable for any misuse of the services by the CLIENT, who shall not be entitled to any compensation if they have acted negligently. MAADIX recommends changing all passwords and is not responsible for the security or storage of the passwords chosen by the CLIENT.
MAADIX is not liable for damage caused by the fault, negligence or omission of third parties over whom MAADIX has no power of control or supervision.
The CLIENT is responsible for taking all necessary measures to safeguard the integrity of their data. Unless the CLIENT has purchased the optional backup service, MAADIX does not make backups of the CLIENT's data and accepts no responsibility for them. If the CLIENT purchases this service, MAADIX will make backups at the frequency and keep them for the retention period stated in the service description, and its liability shall be limited to making the backups correctly under those terms.
MAADIX is not liable for the total or partial destruction of information transmitted or stored as a result of errors directly or indirectly attributable to the CLIENT or their collaborators. In the event of a service failure due to a fault established against MAADIX, indirect damages such as commercial loss, loss of orders, loss of profits or loss of customers are expressly excluded.
In any event, the total damages and interest that may be charged to MAADIX should its liability be engaged shall be limited to the amount actually paid by the CLIENT to MAADIX for the period concerned or invoiced to the CLIENT by MAADIX, or to the amount corresponding to the price of the part of the service for which MAADIX has been held liable.
When creating their client account, and each time they subsequently change it, the CLIENT undertakes to provide MAADIX with accurate and up-to-date contact details so that MAADIX can establish a channel of communication with the CLIENT.
The CLIENT is solely responsible for the passwords needed to use their service and for storing them.
The CLIENT shall bear all the consequences in the event of loss or theft of their passwords.
The CLIENT is responsible for the content published on the purchased servers and for the communications carried out through them. Accordingly, the CLIENT undertakes to use them responsibly and assumes full responsibility for anything they publish.
MAADIX periodically releases new versions of the MaadiX system, which may include improvements and security fixes, and notifies the CLIENT whenever one is available. To apply it, the CLIENT only needs to click the update button in their server's control panel, without having to carry out any manual technical operation. The CLIENT undertakes to apply these updates within a reasonable time after being notified and bears any consequences of not doing so, in particular those relating to the security of the server and the data it contains.
Likewise, the CLIENT is the controller of the personal data they store or process on their server, and guarantees that such data has been obtained and is processed in accordance with data protection law. The terms under which MAADIX acts with regard to that data are set out in clause 7.
The contract ends on its expiry date. It may be renewed from the maadix.net website by the CLIENT paying the corresponding price.
MAADIX undertakes to send the CLIENT at least two reminders before the contract expires and one notice after it has expired. If the CLIENT does not respond within 7 days of the contract's expiry, MAADIX shall consider the contract terminated.
Once the contract has been terminated, MAADIX will securely delete the purchased server and all the data it contains, including any backups, unless a legal provision requires them to be kept. The CLIENT must therefore export all the information they wish to keep before that date.
The personal data that the CLIENT provides in order to purchase and manage the service, such as their name or company name, tax ID, address, email address and payment details, is processed by MAADIXZONE S.L (hereinafter, MAADIX) as data controller. Full company details for MAADIX can be found in the website's legal notice.
MAADIX processes this data in order to manage the purchase and provision of the service, issue invoices and manage payments, maintain with the CLIENT the communication channel provided for in clause 4 in order to notify them of changes, incidents or updates, and comply with its legal obligations. The legal basis for the processing is the performance of the contract and, as regards invoicing and accounting, compliance with legal obligations, in accordance with Article 6(1)(b) and (c) of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
The data will be kept for as long as the contractual relationship lasts. Once it has ended, the data will be kept duly blocked for the periods during which legal liabilities may arise, in particular for six years for commercial and accounting purposes and for the limitation period of tax obligations, after which it will be deleted.
MAADIX does not disclose the CLIENT's personal data to third parties, except where necessary to process payments or where there is a legal obligation to do so, as is the case with the Tax Authority, the courts or the financial institutions involved in payments. If the CLIENT chooses to pay with PayPal, the data needed for the payment is disclosed to PayPal (Europe) S.à r.l. et Cie, S.C.A., which processes it as an independent controller under its own privacy policy and may transfer it outside the European Economic Area with the safeguards set out therein. Other than in that case, the data is stored on MAADIX's own infrastructure, hosted on the servers of the providers identified in clause 7.3, and does not leave the European Economic Area.
MAADIX applies to this data the security measures described in clause 7.2. In the event of a security breach affecting it, MAADIX will notify the Spanish Data Protection Agency within a maximum of 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of the individuals concerned, and will also inform the CLIENT where it is likely to result in a high risk to their rights and freedoms.
The CLIENT may at any time exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to contact[at]maadix.net. The right to erasure does not extend to data that MAADIX is required to keep for legal, administrative or security reasons. If the CLIENT considers that the processing of their data does not comply with the law, they may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es). Further information can be found in the privacy policy.
With regard to the personal data that the CLIENT stores or processes on their server, for which they are the controller under clause 4, MAADIX acts as data processor within the meaning of Article 28 GDPR. This clause constitutes the data processing agreement between the parties and has the same duration as the service contract.
The processing carried out by MAADIX consists of hosting and storing such data on its infrastructure and, where the CLIENT has purchased the optional backup service, making and keeping those backups, for the sole purpose of providing the purchased service. The nature of the data and the categories of data subjects are determined exclusively by the CLIENT, and MAADIX has no knowledge of them.
MAADIX will process the data only on the documented instructions of the CLIENT, which are deemed to be set out in these terms and in any written requests made by the CLIENT. If MAADIX considers that an instruction infringes data protection law, it will inform the CLIENT immediately. MAADIX will not use the data for its own purposes or disclose it to third parties, except to sub-processors authorised under clause 7.3 or where required by law or by a court order, in which case it will inform the CLIENT beforehand unless prohibited by law.
MAADIX will not access the data that the CLIENT stores on their server unless the CLIENT expressly requests an intervention and provides a means of access. In that case, access will be limited to what is strictly necessary to carry out the intervention. MAADIX guarantees that the persons authorised to access its infrastructure and its clients' servers have committed themselves to confidentiality.
Updates and applications that the CLIENT installs from the control panel are applied through a configuration management system that only runs when the CLIENT triggers it. This system only modifies the configuration and software of the MaadiX system and does not access the data that the CLIENT stores on their server.
MAADIX will implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR, including isolation between the virtual servers of different clients, restricted access control to the infrastructure, the periodic release of security updates for the MaadiX system, and system monitoring. Applying these updates on the server is the responsibility of the CLIENT, in accordance with clause 4. These measures are without prejudice to the CLIENT's responsibilities regarding their passwords and the integrity of their data set out in clauses 3 and 4.
The CLIENT grants MAADIX a general authorization to engage other data processors. At present, the only sub-processors are Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) and OVH Hispano S.L. (C/ Alcalá 21, 5ª planta, 28014 Madrid, Spain), which provide the dedicated physical servers and the data centres, located in France, Germany and/or Finland, and a self-employed technical contractor established in Spain, who provides system administration services with access to MAADIX's infrastructure and whose identity will be disclosed to the CLIENT upon request.
MAADIX has entered into data processing agreements with these providers, imposing on them the same data protection obligations as those set out in this clause.
MAADIX will inform the CLIENT of any intended change of sub-processors at least 15 days in advance. If the CLIENT does not agree with the change, they may terminate the contract on the same terms as provided for in clause 2 for changes to the general terms.
Since the CLIENT manages the data hosted on their server, it is the CLIENT who deals directly with requests from data subjects to exercise their rights. If MAADIX receives such a request, it will forward it to the CLIENT without delay. MAADIX will assist the CLIENT, insofar as possible and taking into account the nature of the processing, so that the CLIENT can meet their obligations regarding security, notification of security breaches and, where applicable, impact assessments.
If MAADIX becomes aware of a security breach affecting the data hosted on the CLIENT's servers, it will notify the CLIENT without undue delay and, in any case, within a maximum of 48 hours, through the communication channel provided for in clause 4, together with the information available to it on the nature of the breach, its likely consequences and the measures taken or proposed to address it. It is for the CLIENT, as controller, to decide whether to notify the breach to the supervisory authority and to the individuals concerned.
On termination of the contract, the data hosted on the server will be deleted on the terms set out in clause 5.
MAADIX will make available to the CLIENT the information necessary to demonstrate compliance with the obligations set out in this clause and will allow audits to be carried out by the CLIENT or by an auditor appointed by the CLIENT. Audits must be requested with reasonable prior notice, shall be at the CLIENT's expense and shall be carried out in a way that does not compromise the security of the infrastructure or the confidentiality of other clients' data. MAADIX will keep a record of the processing activities it carries out on behalf of its clients, in accordance with Article 30(2) GDPR.
Please contact us by writing an email to: contact [at] maadix [dot] net
PGP Key: 0xE5BB2110.asc
Fingerprint: EF80 C4FB CC27 7A3E 8D0B 0DD9 B48B 2A9B E5BB 2110