Withdrawal from the contract
As a consumer, you have the right to withdraw from the audit service contract within 14 days of its conclusion (sections 19 and 20 of Act No. 108/2024 Coll.); you can also withdraw using the online function under section 20a.
Withdraw from contract hereTerms and Conditions — English common terms
Terms effective from: 05. 11. 2026
Document version: EN 2.2, aligned with the Slovak reference version 2.2. Applies to the order in which this version is accepted.
1. Provider and application
Provider
- Business name: RedBlue s. r. o..
- Registered office and postal complaints address: Pribinova 21/11, 901 01 Malacky, Slovak Republic.
- Company identification number: 57778515.
- Register: Zapísaná v Obchodnom registri Mestského súdu Bratislava III, oddiel: Sro, vložka č. 202232/B.
- Managing director: Jaroslav Krč.
- Email: info.nospam@123audit.sk.
- Telephone: +421 34 202 13 35.
- Website: https://123audit.sk.
- VAT identification: SK2123112068. The total payable price and applicable tax treatment are stated before the binding order.
These Terms and Conditions govern the one-off audit ordered from the Provider. Consumer provisions apply together with the national supplement selected for the Customer’s declared habitual residence; business provisions apply only to genuine B2B orders. The English language alone does not establish habitual residence. A website visit or enquiry alone does not conclude an audit contract.
2. Contract documents
The particular order and package agreement identify the price, scope, parties and delivery conditions. The complete documents are supplied before ordering and confirmed in a retainable email/PDF. B2C customers receive the contract, package Annexes 1, 2 and 3, common Annex 4 and cancellation instructions. Genuine B2B customers receive the B2B contract and Annexes 1 and 2. The Privacy Notice is supplied separately. Mandatory rules on agreed qualities and relevant statements remain unaffected by any document hierarchy.
3. Services
Mini Audit: twelve basic automated public checks, IT-specialist quality approval and a PDF report; no comprehensive manual analysis, executive summary or remediation roadmap.
Complex Audit: the public technical and legal-risk checks in Annex 1, senior manual review, prioritisation, quality approval, PDF report, executive summary and recommendations.
Individual modules: checks of selected areas of the website, ordered online within the Individual Audit offer; the price is the sum of the prices of the selected modules. They are ordered under a separate Individual Audit contract (audit of selected modules) whose scope is limited to the selected modules, and are delivered as a PDF report within that scope with an audit certificate.
An Individual Audit is subject to a separate offer defining its actual scope, price and timing; these standard packages do not silently promise it.
4. Domain, target market and authority
The order covers one main domain and expressly agreed additional targets. Audit target market, report language and Customer’s habitual residence are separate selections. The common default audit target is Slovakia/EU where no other market is selected, and is disclosed before ordering. That choice does not determine contract law.
The Customer confirms that they own the website or are authorised by its owner to commission the agreed audit. Necessary consents from hosting providers and infrastructure owners must cover the actual tests. The Provider may request proportionate evidence of authority.
The Customer supplies accurate domain and contact details, discloses hosting restrictions and known technical risks, and informs the Provider of relevant changes. Internal passwords or access credentials are not required. Liability for inaccurate information is subject to the applicable legal requirements; there is no automatic unlimited indemnity or strict liability imposed on a consumer.
5. Price and payment
The displayed total price shown for your selected package immediately before the binding order and applicable tax treatment are confirmed before the order. The consumer total includes all applicable taxes, charges and electronic delivery. Payment is in advance by an offered card method or transfer; the Provider adds no payment-method surcharge. Additional paid work requires express agreement. Promotions apply on their displayed conditions; later prices do not change concluded contracts. An electronic invoice is supplied. Mandatory rights to withhold payment remain effective.
6. Contract conclusion
The Customer accepts the Provider’s stated offer in the binding contract step using “order with obligation to pay”. The contract is concluded then; payment is a later condition for starting work. Inputs can be corrected beforehand. The service, domain, total price, one-off nature, delivery period and starting conditions are highlighted immediately before acceptance. There are no pre-ticked paid additions or early-start consents. The accepted documents and actual declarations are confirmed on a durable medium before work starts.
7. Consumer early start
If you want performance to begin before the 14-day cancellation period ends, you must expressly request and consent to that start and acknowledge that you will lose the cancellation right once the service has been fully performed. This optional declaration is separate from acceptance of the contract and is not pre-ticked.
Under this common contractual standard, the request is confirmed on a durable medium: you receive and can retain the exact declaration submitted, its date and time and the relevant document versions in an email or attached PDF before work begins. A database entry or a changeable webpage alone is insufficient. Annex 2 contains the wording; applicable national requirements are in Annex 4.
If you do not select early performance, work starts only after the cancellation period has expired and the other starting conditions have been met. The later delivery timeframe is displayed before you order. An accepted order is not cancelled merely because you chose the later start. Cancellation after an early start is governed by section 13 below.
8. Delivery and formats
Mini Audit is normally delivered within 24 hours, no later than seven working days. Complex Audit is normally delivered within five working days, no later than ten working days. Individual modules follow the Complex Audit timeframe. Time runs after confirmed payment, correct details, authority and required cooperation; without valid consumer early-start declarations it starts no earlier than expiry of the cancellation period. Working days are Monday to Friday excluding public holidays at the Provider’s Slovak registered office. Concrete impediments are explained; only actually caused delays from missing cooperation are taken into account. Statutory delay remedies remain intact.
Reports are sent electronically in the agreed language. A PDF reader and email account are needed. Any other relevant functionality, compatibility, interoperability or supplied update information is disclosed before ordering. There are no physical goods or alternative physical delivery options in these packages. The Provider owes applicable service and, where relevant, digital-content/digital-service conformity and necessary updates; report resending is not continuing website monitoring.
9. Scope limits and safety
The audit gives technical findings, information and risk indicators within its agreed scope and at the time of testing. It is not individual legal advice, a legal opinion, penetration testing, an expert witness report, regulatory approval, a certification or a statutory cybersecurity conformity assessment. No complete absence of vulnerabilities or legal deficiencies is guaranteed.
These limits define the service; they do not exclude liability for failure to supply the service actually promised. Legal decisions require appropriate professional assessment, and technical recommendations require assessment against the particular system before implementation.
The Provider uses reasonable care and works only within the agreed, authorised scope. It does not deliberately damage, alter, delete or disable data, bypass protection or seek unauthorised access. Where a check presents a concrete risk, the Provider suspends the affected check and informs the Customer. Any resulting termination or accounting is subject to the contract and applicable law.
Excluded activities include exploitation of vulnerabilities; SQL injection, XSS, CSRF or SSRF for exploitation; brute force or password spraying; bypassing authentication; obtaining administrator or shell access; uploading malicious files; DoS or DDoS; social engineering or phishing; employee or physical security testing; and changes to databases, files or configurations. An unavailable check is reported as unavailable, not as a successful test. Mini contains no active port scanning; any limited Complex scan must be expressly authorised and within Annex 1.
10. Review, confidentiality and personal data
Every report requires IT-specialist quality approval. Complex Audit includes the agreed senior manual assessment. AI tools support work; they do not establish that a finding is verified.
The Provider keeps non-public findings, security information, reports and confidential communications confidential, and binds participating personnel accordingly. Disclosure is limited to authorised persons where necessary to perform the contract, to disclosure authorised by the Customer, or to a legal obligation. Separate data-protection requirements must also be met. This obligation continues after the contract ends.
Personal data are processed under Regulation (EU) 2016/679 (GDPR) and applicable supplementary law. Choosing Slovak contract law does not determine every data-protection issue or supervisory authority. Contact, billing and order data are used to administer the contract; the separately supplied Privacy Notice explains purposes, legal bases, recipients, retention and rights.
Publicly accessible personal data are processed only as necessary for the agreed audit. If the actual activity makes the Provider a processor on the Customer’s behalf, an Article 28 GDPR agreement must be in place before that processing. Acknowledging the Privacy Notice is not blanket consent; any necessary consent is obtained separately and voluntarily.
11. Retention
The Customer may keep the delivered report permanently. For four years after delivery, the Provider will resend the stored report on request. Resending does not repeat or update the audit. There is no 30-day access limit for the Mini Audit report.
Under the common retention model, audit content is normally stored for four years after delivery and contract documents for ten years after conclusion; invoices follow applicable statutory retention rules. Any longer retention for a specific dispute is limited to the data and period actually necessary. The Privacy Notice supplies the legal bases and exceptions. Retention and link availability do not shorten statutory claims or limitation periods.
A further audit is a separate order. There is no automatic renewal, subscription or continuing monitoring.
12. Consumer complaints and remedies
The Provider must supply a service that conforms to the contract, with the care and skill required by applicable law. The applicable national rules supplementing this common provision are in Annex 4. Agreed qualities, relevant statements and statutory rights remain effective.
Report a problem to info.nospam@123audit.sk or the postal address in section 1, describing the issue and, if available, the order reference. A particular form, a seven-day reporting deadline or possession of an order code is not a condition of consumer rights. The Provider acknowledges the complaint promptly in writing and states the proposed remedy and timeframe; a rejection is explained in writing.
Under the common contractual commitment, complaints are handled and an accepted defect is remedied within the notified period, no later than 30 days after receipt. This is an additional contractual maximum, not a statutory waiting period: any obligation to act sooner, within a reasonable time, without significant inconvenience and free of charge takes precedence. Statutory price reduction, termination, refund, payment-withholding and damages rights remain available where their conditions are met; the Provider does not have sole discretion to choose the consumer’s remedy.
A subsequent change to the audited website does not by itself make an accurate report defective. This does not excuse a defect present in the service when supplied.
13. Consumer cancellation
You may cancel this distance service contract without giving a reason within 14 days from conclusion of the contract (Article 9 of Directive 2011/83/EU). Payment does not start a new cancellation period. Sending your decision before the deadline is sufficient. If the required cancellation information was omitted, the period is extended by 12 months after the original period would have expired; if supplied within that extension, the period ends 14 days after you receive the information (Article 10; national provisions in Annex 4).
You may use any unequivocal statement, including email to info.nospam@123audit.sk, a letter to the Provider’s registered office, the attached model form, or the online cancellation function at https://123audit.sk/en/withdrawal. The function is labelled “withdraw from contract here”, followed by “confirm withdrawal”, and is prominently displayed, easily accessible and continuously available throughout the cancellation period. It lets you enter or confirm your name, identification of the contract and electronic contact for the acknowledgement. We acknowledge an online cancellation without undue delay on a durable medium, recording the statement and its submission date and time. A reason, a marketing consent, a particular order code or agreement to a deduction is not required to exercise the right.
We refund payments received without undue delay and no later than 14 days after being informed of cancellation, using the original means of payment unless you expressly agree to another fee-free method (Article 13). No separate electronic delivery charge applies.
If you expressly requested an early start and received the required information, you may owe a proportionate amount for the service actually supplied until you informed us of cancellation (Article 14(3)). It is based on the total agreed price or, if excessive, the market value. Annex 1 explains the evidence of completed phases. Starting a scan does not establish entitlement to the full price. You bear no such cost if you did not expressly request the early start or were not given the required information about cancellation or proportionate payment (Article 14(4); Annex 4).
Any supported proportionate charge is itemised separately. Under the common contractual refund arrangement, a deduction from your refund requires your express agreement after you receive the calculation. Cancellation does not depend on that agreement. No other cancellation penalty is charged.
For this paid service, the cancellation right is lost only after full performance if performance began with your prior express consent and acknowledgement that you would lose that right on full performance (Article 16(a)). Full performance includes the agreed checks, quality review and delivery of all agreed reports. Payment, scan start or a preview alone is insufficient. Defect and damages rights survive. We do not invoke a loss of the right merely because an audit report is personalised or supplied digitally.
14. Liability
The Provider is responsible under applicable law for its promised work. The Provider’s liability to consumers is not capped at the audit price, and there is no blanket exclusion of consequential loss or statutory remedies. The technical scope is not a waiver of liability for failure within that scope. Genuine B2B liability follows the B2B agreement and Slovak law; these terms add no fixed liability cap. In the B2B agreement the parties define the extent of foreseeable loss under § 379 of the Slovak Commercial Code (loss up to the audit price, unless the Customer notified specific risks or the protected value in writing before conclusion); that agreement is not a waiver of the right to damages before the breach of duty (§ 386(1) of the Slovak Commercial Code).
15. Suspension and termination
Before a binding offer is accepted, the Provider may decline an enquiry outside the offered service or without necessary authority. After conclusion, suspension or termination requires a valid legal or contractual ground; there is no unrestricted right to cancel an accepted order.
Where authority is missing, the requested activity is unlawful or a concrete security risk exists, affected checks may be suspended and the Customer is informed promptly. Where reasonable, the Customer is given an opportunity to clarify the position or supply necessary cooperation. Only delay actually caused by missing cooperation is taken into account.
If performance cannot lawfully continue, unearned advance payments are refunded without undue delay. A claim for work already performed or expenses requires a proper legal basis and evidence. Scan start alone does not justify keeping the entire price. Consumer cancellation, delay and defect rights remain unaffected.
A genuine business Customer may cancel before actual work starts with a full refund. After work starts, only evidenced work and reasonably incurred legally recoverable expenses are accounted for under the B2B agreement. Scan start alone is not a fixed 100% cancellation charge.
16. Complaints and dispute resolution
Please first send complaints or a request for redress to info.nospam@123audit.sk. The Provider communicates in English for this contract and supplies its response on a durable medium. If a request for redress is rejected or unanswered within 30 days, a consumer may apply for alternative dispute resolution subject to the applicable rules.
Annex 4 identifies the competent ADR and supervisory contacts and any relevant cross-border assistance. Jurisdiction is not inferred merely from the document language. The Provider fulfils its statutory cooperation duties. An authority complaint, voluntary assistance and an ADR proceeding are distinct routes; none removes access to competent courts.
SOI ADR: Bajkalská 21/A, P. O. BOX 29, 827 99 Bratislava 27, Slovak Republic; ars.nospam@soi.sk, adr.nospam@soi.sk; https://www.soi.sk/alternativne-riesenie-spotrebitelskych-sporov. The process accepts Slovak or English and is free, subject to admissibility. Cross-border assistance: https://www.eccireland.ie/contact-us/. Full contacts and the distinction from supervisory complaints are in Annex 4.
17. Governing law, language and changes
This contract is governed by the law of the Slovak Republic. If you are a consumer habitually resident in another country and this contract falls within Article 6(1) of Regulation (EC) No 593/2008 (Rome I), this choice of law does not deprive you of the protection of provisions of the law of your habitual residence which cannot be derogated from by agreement and which would apply in the absence of this choice (Article 6(2) Rome I).
The contract language is English. The Customer expressly agrees in the acceptance step to receive and accept the documents in English, which the Customer understands. The common Slovak master is the maintenance basis; an undisclosed Slovak text has no automatic priority. Consumer jurisdiction follows applicable law, including Articles 17–19 of Regulation (EU) No 1215/2012; no exclusive Slovak forum is imposed on consumers. Genuine B2B orders use Slovak law and the separate valid court agreement in their B2B contract.
New versions apply to new contracts only. The invalidity of any provision does not affect the validity of the remaining provisions (§ 41 of the Slovak Civil Code). As against a business Customer, an invalid provision is replaced by the provision that comes closest to the purpose of the original one. As against a consumer, an unfair or ineffective term is not replaced by a term with a similarly restrictive effect; the statutory rules apply instead (§ 53(5) of the Slovak Civil Code, Article 6(1) of Directive 93/13/EEC). Mandatory consumer rights and Annex 4 prevail over an inconsistent restriction. Statutory consumer statements require no additional contractual formality.
18. Your complete documents
The binding contract step supplies the order-specific agreement, scope, declarations, these terms and the applicable consumer documents in one retainable package. The national supplement is selected from your declared habitual residence, not from English alone. If that combination is not supported, contact us before ordering. Previously accepted contracts retain their accepted version.