End User Licence Agreement (EULA) for the use of the One Access App

1. Preamble, Definitions, Parties, Scope

This End User Licence Agreement ("EULA") governs the use of the One Access App mobile application by consumers and businesses. The contracting party is Sensorberg GmbH, Chaussestrasse 86, 10115 Berlin, Germany, available at support@sensorberg.com ("Provider").

"User" is any person who installs the app, registers and agrees to this EULA. Users can be main users or recipients.

"Operator" is the Provider's Customer (e.g. self-storage operator, co-working space, office landlord) who uses the app as a service and assigns access to its end Customers.

"Main User" is the End Customer of the Operator (e.g. tenant of a storage unit or office space) who receives access authorisation from the Operator. Main Users can use the app themselves and pass on access to Recipients.

"Recipient" is a person who is invited by the Main User via the sharing function. Only upon acceptance of the invitation and agreement to this EULA does the Recipient become a User.

This EULA applies in the European Union, the United Kingdom, Switzerland, Norway and Peru.

2. Consumer information

(1) Use of the app is free of charge for end users. Any fees charged by an Operator for the use of its facilities are based on a separate contractual relationship between the User and the Operator. No payment obligations arise towards the Provider.

(2) Conclusion of contract: The contract for the use of the App is concluded when the User accepts this EULA during onboarding, either (i) when creating an account by pressing the “Sign up” (or equivalent) button, or (ii) when activating a pre-provisioned account (set up by an Operator or booking provider) by pressing “Continue” (or equivalent). By pressing the respective button, the User agrees to this EULA and confirms that they have taken note of the Privacy Policy. The EULA and the Privacy Policy are provided in a manner that allows reasonable notice and review prior to acceptance.

(3) Corrections: Entries can be changed or corrected at any time until confirmation.

(4) Contract language: The contract and communication languages are German and English. For users in Germany, the German version is authoritative. Your man-datory consumer protection rights under the law of your country of residence remain unaffected.

(5) Storage and retrieval: The text of the contract is stored by the Provider. The currently valid version of the EULA can be accessed at any time in the app.

(6) Term: The contract is concluded for an indefinite period and can be terminated by the User at any time by uninstalling and ceasing all use of the app. Uninstalling the App ends the licence and deactivates the App’s authentication account, but does not delete identities, access rights or access logs managed by Operators or booking providers. Such matters are governed by the Operator’s terms and by the Privacy Policy.

(7) Out-of-court proceedings: There are no out-of-court complaint or redress procedures in which the Provider participates.

(8) System requirements, compatibility, interoperability: Use of the App requires a compatible device, a supported operating system version, a data connection and – for access functions – enabled Bluetooth (BLE); additional device services (e.g., location, NFC) may be required. The current minimum requirements and any known compatibility/interoperability limitations are available in the app store listing and the in-app information.

(9) Feature availability / premium features: Access Sharing and other premium features are only available if activated by the relevant Operator. End Users have no entitlement to activation. Any Operator-imposed conditions or fees are governed by the Operator’s terms and are outside this EULA.

3. Subject matter

The App enables digital access control and - where activated by the relevant Operator - the sharing of access authorisations (“Key Sharing”). The Provider only grants the User rights of use to the software in accordance with Section 4. Ownership of the software is not transferred.

4. Granting of rights of use

(1) The Provider grants the User a simple, non-transferable, non-sublicensable and revocable right to install the App on their own devices and to use it for the purposes intended under this EULA, within the scope of the permissions and features made available by the relevant Operator (if any). The licence is solely for exercising digital access rights assigned to the User by the relevant Operator or by a Main User.

(2) No ownership or other rights to the app are transferred. All rights to the app, including all further developments, modifications and trademarks, remain with the Provider or its licensors.

(3) The licence is valid for the duration of the installation and active use of the app. The licence shall also expire upon termination of this agreement or uninstallation of the app.

(4) All rights not expressly granted remain reserved by the Provider.

5. Permitted use and prohibitions

(1) The User may only use the app within the scope of its intended functionality. Any use outside the key sharing mechanism is prohibited.

(2) In particular, the User is prohibited from

a) reproduce, distribute or make the app or parts thereof publicly available,

b) sell, rent, lease, transfer or otherwise make the app or access rights available to third parties outside the intended sharing mechanism without permission,

c) determine the source code of the app through reverse engineering, decompilation or disassembly, unless expressly permitted by law,

d) to circumvent technical protection measures or access restrictions,

e) use the app with unauthorised devices, systems or manipulations,

f) create modifications, translations or derivative works of the app, unless this is permitted by mandatory law,

g) use the app for illegal purposes or in an abusive manner.

(3) Violations of these obligations may result in the blocking of access or the termination of the licence without notice and may give rise to claims for damages.

6. Role model and key sharing rules

(1) Invitations are sent exclusively via the function provided in the app. Where the Operator has enabled Access Sharing for the Main User, Main Users can invite Recipients by entering their email address, selecting permissions and confirming the process. Recipients only become users after registering and explicitly agreeing to this EULA; only then may they use the access.

(2) The Main User remains responsible for the selection, information and control of their recipients. Actions of Recipients are attributed to them insofar as they initiate them or violate duties of care. Authorisations may be limited in time and revoked at any time. Misuse includes, in particular, the forwarding of invitations, manipulation of the app or unauthorised disclosure of access. The forwarding of invitations, invitation links or tokens to third parties is not permitted. Main Users must ensure that any sharing complies with their agreement with the Operator and any applicable facility policies.

(3) In cases of misuse, the Provider may issue warnings, block access or terminate the contractual relationship without notice.

(4) The Operator remains solely responsible for defining and enforcing facility access rules and for ensuring that access sharing complies with its rental agreements and organisational policies. The Provider is not a party to those arrangements and does not assume any duty to review or enforce them; the App is a tool. Operator-imposed fees or restrictions, and any deletion or retention of identities, rights or logs at Operator level, are governed by the Operator’s terms. The Provider may implement Operator-configured settings (e.g., access scopes, expiry, revocation) and, where necessary, suspend or revoke access authorisations on the Operator’s instruction.

7. User obligations

Users must keep their devices and the app up to date, keep their access data secret and report any loss or suspected compromise immediately. Invitations may only be sent to authorised persons. Access must be revoked immediately if it is no longer required or if misuse is suspected.

8. Availability, support, updates

The Provider shall endeavour to make the app available within reasonable limits. Maintenance windows and disruptions may limit availability. Feature availability (including Access Sharing) depends on Operator activation, hardware and system configuration; there is no entitlement to the provision of specific features. There is no entitlement to continuous or extended availability. Updates are provided regularly. Support is available at https://sensorberg.atlassian.net/servicedesk

9. Liability and warranty

(1) The Provider shall be liable without limitation in cases of intent and gross negligence, for damage resulting from injury to life, limb or health, and in accordance with the German Product Liability Act (Produkthaftungsgesetz - ProdHaftG). Guarantees shall only be assumed if they are expressly designated as "guarantees".

(2) In cases of simple negligence, the Provider shall only be liable for breach of essential contractual obligations (essential obligations); in this case, liability shall be limited to the foreseeable damage typical for this type of contract. Otherwise, liability for simple negligence is excluded.

(3) Essential contractual obligations are obligations whose fulfilment is essential for the proper execution of this contract and on whose fulfilment the user may regularly rely. These include in particular:

a) the provision and maintenance of the basic functions of the app to the extent specified in the contract (authentication, granting, updating and revoking digital access authorisations, triggering opening processes for activated access points),

b) providing necessary security updates and patches to maintain the IT security of the app,

c) the proper administration of access data and authorisations within the app, in particular the correct assignment of user accounts and access rights,

d) the provision of a reasonable communication interface to operator systems, insofar as this is contractually required,

e) the logging of relevant accesses and system events to the extent necessary to prevent misuse, as described in the Privacy Policy, which can be found here.

(4) The above liability provisions apply accordingly to the Provider's legal representatives and vicarious agents.

(5) In the case of provision free of charge, there shall be no entitlement to specific functions or rectification of defects, unless mandatory statutory rights prevent this. In the event of future provision for a fee, the obligations for digital products pursuant to Sections 327 et seq. of the German Civil Code (BGB) shall apply in addition.

10. Third-party content, third-party software, app store clauses

The App may contain third-party software components. Where such components are subject to separate licence terms, those terms will be made available to Users in the App information or within the App itself and shall take precedence over this EULA in case of conflict. Apple Inc. and Google LLC are not contractual partners of this EULA. Claims in connection with the App shall be made exclusively against the Provider. Users are obliged to comply with the App Store terms and conditions.

11. Contract term and termination

(1) The contract is for an indefinite period.

(2) Termination by the User: The User may terminate the contract at any time by uninstalling and ceasing all use of the app; this will terminate the licence immediately. Alternatively, the User may declare termination by deleting their user account in the app or by notifying Sensorberg GmbH in text form via https://sensorberg.atlassian.net/servicedesk

(3) Ordinary termination by the Provider: The Provider may terminate the contract in writing with 14 days' notice. This also applies if the app is discontinued in whole or in part or if significant technical or organisational changes make this necessary.

(4) Extraordinary termination and blocking: The Provider may terminate the contract without notice for good cause. Good cause shall include, in particular, serious or repeated violations of this EULA, misuse of the app or access, circumvention of security mechanisms, security-related incidents, legal or official prohibitions, and false information provided by the User. As a less severe measure, the Provider may temporarily block access.

(5) Effects of termination: Upon termination of the contract, the rights of use shall expire and digital access tokens shall be deactivated. Invitations issued by the User shall be revoked to the extent technically possible. Access rights set up by the Operator shall remain unaffected. Statutory retention and deletion obligations for log data shall continue to apply.

(6) Fees: See Section 3. The app is free of charge for end users. Any fees charged by the Operator shall remain unaffected by termination and shall be clarified outside this EULA.

12. Changes to the EULA

(1) The Provider may amend this EULA if there is a valid reason and the amendment is reasonable for the user. Valid reasons are:

a) changes to laws, regulations or official/judicial requirements;

b) requirements relating to IT security, data protection or compliance (e.g. closing security gaps);

c) technical adjustments to the app or its infrastructure that are necessary for secure and stable operation;

d) the addition, modification or discontinuation of functions, provided that this does not shift the contractual balance to the detriment of the user;

e) organisational changes at the provider (e.g. change of subcontractors, support processes), provided that this does not result in any disadvantages for the user;

f) editorial clarifications, corrections and formatting without material effect.

(2) Limits: Main performance obligations shall not be changed to the detriment of the user. The app is free of charge; no payment obligations shall be introduced. Changes must not shift the contractual balance unreasonably to the detriment of the user.

(3) Procedure: The Provider shall inform the User of material changes in good time before they take effect in text form (in-app or by email), stating the content of the changes, the reasons and the planned date. The period shall be at least 30 days from receipt of the notification. Security-related changes that must be implemented immediately may, in exceptional cases, be made without notice; the user shall be informed immediately afterwards.

(4) Right of objection: The User may object to material changes until they take effect. If the User objects, they may no longer use the app once the change takes effect; continued use under the old version shall only be possible if this is technically and organisationally reasonable. The User's right to terminate use at any time by uninstalling the app remains unaffected.

(5) Obtaining consent: For significant changes to the detriment of the user, in particular to sections 4–6 and 9–11, the Provider shall obtain express consent (e.g. renewed click wrap).

(6) Fictitious consent only in the case of insignificant changes: Insignificant changes that do not disadvantage the user shall be deemed accepted if the user does not object within the period specified in paragraph 3 and has been expressly informed of the significance of their silence. This includes, in particular, clarifications, purely editorial adjustments and the discontinuation of rarely used ancillary functions without disadvantages for the User.

13. Applicable law and place of jurisdiction

(1) German law applies; the UN Convention on Contracts for the International Sale of Goods (CISG) does not apply.

(2) This choice of law applies to consumers only insofar as consumers are not deprived of the protection of mandatory provisions of the law of the country in which they have their habitual residence (Art. 6 para. 2 Rome I Regulation). This choice of law shall not result in consumers losing the protection of mandatory provisions of their country of residence. This applies in particular to provisions which cannot be deviated from by agreement under the law of the country of residence.

(3) For consumers (Sec. 13 BGB), the statutory courts of their country of residence shall have jurisdiction. No deviating agreements on jurisdiction shall be made.

(4) For traders (Sec. 14 BGB), the place of jurisdiction is the registered office of the provider.

14. Final provisions

(1) Should any provision be invalid, this shall not affect the validity of the remaining provisions. The invalid provision shall be replaced by the statutory provisions (Sec. 306 BGB).

(2) The assignment of claims of the User arising from this contract requires the prior consent of the Provider; the assignment of monetary claims remains permissible without consent.

(3) Changes and notifications shall be made in writing.

(4) In the relationship between the User and the Operator, the Operator's terms and conditions shall take precedence insofar as they regulate access to the facility; this EULA exclusively regulates the use of the app.

15. Availability and versioning

The EULA is permanently available in the app. Upon registration, consent is documented with a time stamp and user ID. In the event of significant changes, consent will be obtained again. The German and English language versions apply; in case of doubt, the German version takes precedence.

Version: 1.0 / Status: October 2025