--- draft: false title: "CDM Service Terms" publishDate: "2026-08-08 10:00" --- # CDM Service Terms **Version of 8 August 2026.** These terms apply only as the CDM node of an accepted, immutable agreement root. The root pins this version and the exact Core Terms. The signed Order, service schedule, data-processing agreement and other schedules named there remain separate, versioned children or negotiated documents. ## CDM-1 — Business service and authority 1. **CDM** is Coflnet's container and waste-logistics platform and is offered only to entrepreneurs acting for their trade or business (§ 14 BGB), legal persons under public law and public-law special funds. A person ordering for an organization confirms authority to represent it. 2. CDM supports operational workflows; it does not itself perform disposal, transport, regulatory classification or legal compliance. The customer remains responsible for its logistics decisions, permits, records and instructions unless an Order expressly assigns a task to Coflnet. ## CDM-2 — Order controls service scope 1. The Order or incorporated service schedule must state the enabled workspace, users and roles, locations, workflows, integrations, usage limits, price, term, support, service level, backup/retention settings, export format and any implementation work. These terms do not promise an unstated scope. 2. A negotiated Order overrides a provision only where it expressly identifies the affected clause. The data-processing agreement controls processing on documented instructions; its security and subprocessor schedules control that subject matter. The Core Terms control otherwise. 3. Customer acceptance and production activation are separate. Coflnet may keep processing of operational personal data disabled until the Order, an Article 28 GDPR data-processing agreement and the applicable subprocessor information are complete. ## CDM-3 — Customer data and instructions 1. The customer controls the lawfulness, accuracy and permitted use of data it or its users provide, including addresses, coordinates, orders, photographs, electronic signatures, signer/device/location evidence and driver or vehicle positions. It must give required employee, driver, recipient and other notices and have a legal basis for every instruction. 2. Coflnet processes customer personal data only on documented instructions and under the data-processing agreement. Coflnet is independently responsible for its own account, billing, security and legal-compliance data as described in the Privacy Policy. 3. The customer must configure roles and integrations according to least privilege, protect administrator access, promptly remove former users and not upload special-category or criminal-offence data unless the Order and data-processing agreement expressly support it. ## CDM-4 — Integrations and operational outputs 1. An integration is enabled only if named in the Order or workspace. The customer authorizes transmissions it configures—for example start and destination coordinates to a routing provider—and remains responsible for the connected account and third-party terms. 2. Routes, arrival estimates, signatures, photos, status and automated suggestions are operational aids. The customer must review them where safety, legal duties, billing or rights of another person depend on the result. 3. Coflnet will not materially use confidential customer logistics data to train a general model unless a separate agreement expressly identifies the data and purpose. ## CDM-5 — Availability, changes and security 1. Availability, maintenance, support, recovery targets and service credits exist only to the extent stated in the applicable service-level schedule. Statutory rights and expressly agreed remedies remain unaffected. 2. Each party applies the security measures allocated to it in the Order and data-processing agreement. The customer must promptly report compromised credentials and security incidents affecting the workspace. 3. Coflnet may change CDM as permitted by the Core Terms, Order and mandatory law. A new document or dependency version does not change the accepted root automatically. ## CDM-6 — Termination, switching and export 1. Term, ordinary termination and any minimum commitment follow the Order. Extraordinary termination rights remain unaffected. 2. On request and subject to the Order, Coflnet provides the agreed export and reasonable transition assistance. Where Regulation (EU) 2023/2854 (Data Act) applies to CDM as a data-processing service, the incorporated Article 25 switching schedule controls switching, notice, transition, export, charges and continuity; this sentence does not replace that required schedule. 3. After the agreed retrieval period, Coflnet deletes or returns customer data as required by the data-processing agreement, except data that law requires it to retain. ## CDM-7 — Warranty, liability and venue 1. Warranty and liability follow the Core Terms and any express service-level remedy. Nothing limits liability that cannot legally be limited. 2. German law applies under the Core Terms. The exclusive venue provision applies only where its statutory prerequisites are met, including for merchants, public-law entities and public-law special funds; it does not convert another organization into an entrepreneur or remove a mandatory venue.