You keep ownership of your personal data, and the addendum confirms the data belongs to you. The problem is the anonymisation clause: Personio can anonymise the content you store in the software, then claims to hold all rights in the resulting data and to use it in any manner for development, security, marketing or other purposes. There is no time limit, no revocation, no compensation and no way to opt out. Paid consulting deliverables are also only licensed to you, never assigned.
Suspension powers are tied to named triggers such as security threats, misuse of unlimited features and payments more than 30 days overdue, and Personio promises advance warning where reasonably possible plus information on restoring service. What is missing is any appeal route if you think a suspension was wrong. Cancellation is straightforward in form, by email, but the annual notice period of 90 days is long, and your trial account is simply locked when the 14 days run out.
The parties, the product and the way a contract forms are all spelled out clearly. You create an account, which counts as a binding offer, Personio accepts by emailing your login details, and you get a 14 day trial before any paid contract can be signed. The main weakness is layering: these terms sit alongside quote documents, product specific terms and a service description hosted elsewhere, so the full agreement is spread across several documents you have to hunt down.
Everything is disclosed openly, but the substance is heavily one sided. An annual plan renews automatically for another full year unless someone cancels 90 days in advance, which is a long window to miss. Refunds are excluded almost everywhere, including for downgrades, and your minimum user count can only be increased during the term, never reduced. Annual list price increases of up to five percent cannot be challenged at all, and job advert credits expire without compensation.
The GDPR processing addendum is genuinely detailed and is incorporated automatically, with you as controller and Personio as processor. Processing is confined by default to the EU, the EEA or countries with an adequacy decision, a data protection officer is appointed, breaches are notified under Article 33, and you get a 30 day export and deletion window at the end. Two things pull the score down: if you object to a new sub-processor and no agreement is reached, Personio can terminate the contract immediately, and the security measures themselves are only visible inside the software and can be changed by Personio.
This is one of the strongest sections. Personio must announce changes by email at least four weeks before they take effect, and the announcement has to spell out the change, your right to object, the deadline and the consequence of staying silent. If you object in time the change simply does not happen and the contract carries on unchanged. The catch is that Personio can then terminate the contract with one month's notice, which makes objecting a real risk, and silence still counts as consent.
This follows the standard German structure, which is reasonable by international comparison: full liability for injury to life, body or health, for intent and gross negligence, for guarantees and under product liability law, and for slight negligence only where a core contractual duty was breached, capped at foreseeable typical damage. The reductions to watch are the shortened 12 month limitation period for defect claims, the exclusion of no fault liability for defects present at the start, the data loss cap tied to your own backups, and a clause that blocks you from raising defects you could have spotted during the trial.
There is no general indemnity in the main terms, which is unusual and good. The only one appears in the job advert bundle terms, and it is fault based: it is triggered by you breaching a job portal's terms or posting adverts unlawfully, not by mere use of the service. It also comes with real procedural protections, since Personio must notify you promptly, must not admit liability, and must let you run the negotiations. The list of protected parties is Personio alone, with no chain of affiliates and licensors.
There is no arbitration clause, no class action waiver, no jury trial waiver and no shortened deadline for bringing disputes, so ordinary court routes stay open. German law applies, the UN sales convention is excluded, and the exclusive venue is Munich but only to the extent legally permitted, which preserves mandatory jurisdiction rules. The drawbacks are practical rather than structural: Munich may be far from you, and the professional services terms restrict your ability to set off or withhold payment.