FAQ
Frequently asked questions on GDPR, EU AI Act, NIS2, Whistleblower Protection (HinSchG), Anti-Discrimination (AGG + EU Pay Transparency) and our Compliance Kits.
Money-back & guarantee
Should template content be legally proven incorrect (attorney letter from an EU-licensed lawyer or written statement from a competent supervisory authority such as BfDI, DSB, EDÖB, BSI), within 60 days from delivery we refund the full purchase price plus documented consequential costs — up to a maximum of 2× the purchase price. Details in Terms § 8.
B2B-only: Compliance-Kit is offered exclusively to businesses (§ 1 UGB / § 14 BGB). There is no consumer right of withdrawal under FAGG. Instead, the provider grants the 60-day money-back guarantee per Terms § 8. Details on Withdrawal.
An attorney letter from an EU-licensed lawyer or a written statement from a competent supervisory authority (BfDI, DSB, EDÖB, BSI). The defect must concern an objectively incorrect or unlawful content statement — not a mere adaptation recommendation or stylistic question.
Licence & ownership
Yes — ownership instead of subscription. You buy the Word templates once and keep them forever. No cloud dependency, no data loss on cancellation, fully in your control. The standard licence covers your company + corporate group companies in the sense of § 15 AktG.
As long as the kit runs in its current major version, you receive updated templates free of charge — for authority interpretation changes (BfDI, EDPB, DSB, EDÖB), new supreme-court case law (CJEU, BAG, OGH) and known follow-up phases of a regulation (e.g. EU AI Act Annex III from 2 August 2026). For a substantially new regulation: 50% existing-customer discount. Details in Terms § 7.
+50% surcharge extends the licence to 3 additional companies without a corporate group link in the sense of § 15 AktG. The three additional companies must be named at contract conclusion. Details in Terms § 6.
You can continue to use the templates already delivered indefinitely. Only the update obligation ends with the last delivered version. See business-closure clause in Terms § 5.
We use Paddle as Merchant of Record (MoR). The contractual counterparty for the payment processing depends on your domicile:
- EEA buyers: Paddle.com Market B.V., Spuistraat 282, 1012 VX Amsterdam (NL)
- Outside EEA: Paddle.com Market Limited, London (UK), or Paddle.com, Inc., New York (USA)
Paddle issues the invoice with correctly shown VAT and automatically handles B2B reverse-charge with a valid VAT-ID. The contractual counterparty for the licence and the content of the Compliance-Kit templates remains Ens Naturale e.U. (Cosmin Birtalan, Vienna). Details on data transfer and legal bases: see Privacy Policy section 4.1.
EU AI Act
Yes. About 90% of affected companies are deployers. Article 26 defines extensive obligations.
Article 4 has been in force since 2 February 2025. All employees who use AI systems must be trained.
Up to EUR 35 million or 7% of worldwide annual turnover for prohibited practices.
Our EU AI Act Kit contains an 8-step inventory + risk classification template. Time required: 2-4 weeks for a typical SME.
NIS2
Yes. NIS2 applies EU-wide. The German NIS2UmsuCG entered into force on 6 December 2025 (BSI registration deadline 6 March 2026); the Austrian transposition is in force as well.
From 50 employees + EUR 10 million turnover (important entities) or 250 employees + EUR 50 million (essential entities).
8-12 weeks with template-based work, 6-9 months from scratch. Our NIS2 Kit accelerates implementation by 80%.
GDPR
Yes. There has been no ROPA exemption since 25 May 2018 — even for sole proprietors. Article 30 GDPR applies.
Yes, with EU Data Boundary + DPA + risk assessment after Schrems II. Documented in the GDPR Kit.
HinSchG (Whistleblower Protection)
Yes. HinSchG/HSchG mandatory from 50 employees. From 250 employees: extra obligations. Group exception applies for international groups.
Not legally mandatory, but strongly recommended (BAG, CJEU). Without anonymity many cases never reach the system.
AGG & EU Pay Transparency
EU Pay Transparency Directive (2023/970) transposition deadline 7 June 2026. From 100 employees: extensive obligations including Pay Gap reporting.
From 1 employee. § 13 AGG has no headcount threshold. Even sole-proprietor companies must designate a complaints office.
Documents are requested in writing → on-site or remote inspection → questionnaire → interim report. Our kits map to this exact process.