Personio
Weighted across nine legal categories. Lower is worse.
Executive summary
Personio sells HR software to companies, so these are business terms rather than consumer terms, and they are written in the careful German style that leaves most of your statutory rights intact. Dispute handling is one of the better parts: no arbitration, no class action waiver, German courts stay open, and changes to the terms come with four weeks of email notice plus a real right to object that keeps you on the old version. The weak spots are money and data reuse. An annual plan renews automatically unless you cancel a full 90 days ahead, refunds and pro rata credits are ruled out almost everywhere, your user count can only go up during the term, and Personio claims all rights in anonymised versions of your data for any purpose it likes, including marketing.
Category breakdown
Acceptance of Terms & Scope
Contract formation and service boundaries
The parties, the product and the way a contract forms are all spelled out clearly. You create an account, which counts as a binding offer, Personio accepts by emailing your login details, and you get a 14 day trial before any paid contract can be signed. The main weakness is layering: these terms sit alongside quote documents, product specific terms and a service description hosted elsewhere, so the full agreement is spread across several documents you have to hunt down.
Key findings
- The contract forms through an active, two step process rather than a buried footer link.
- A free 14 day trial precedes any paid commitment, and only one trial per customer is allowed.
- The agreement pulls in extra documents by reference, including quote documents and service specific terms that are not in this text.
- The service description that defines what the software actually does lives on Personio's website and can be changed there.
- Your own purchasing terms are excluded unless Personio agrees to them in writing, which is one sided but normal for business software.
- Each document carries a version date and the previous version is offered for download, which helps you prove what you agreed to.
Evidence from the document
Personio SE & Co. KG (" Personio ") bietet eine webbasierte HR-Software-as-a-Service (SaaS) (" Software ") für kleine und mittelständische
Mit der Aktivierung des Kontos gewährt Personio de:r Kund:in ein kostenloses Recht zur Nutzung der Software für einen Zeitraum von 14 Tagen zu Testzwecken ("
Services können spezifischen zusätzlichen Bedingungen unterliegen, die für das Vertragsverhältnis des/der Kunden/Kundin gelten und Teil des Vertrags
Abweichende AGB de:r Kund:in finden auf den Vertrag keine Anwendung, es sei denn, Personio stimmt ihrer Anwendung ausdrücklich in Textform zu.
Recommendations
- Download and keep the quote document and any service specific terms, because they form part of your contract and are not on this page.
- Save a dated copy of the service description before you sign, since it defines the functionality you are paying for.
- Ask Personio in writing which additional terms apply to the specific plan and apps you are buying.
User Accounts
Registration, suspension, and termination
Suspension powers are tied to named triggers such as security threats, misuse of unlimited features and payments more than 30 days overdue, and Personio promises advance warning where reasonably possible plus information on restoring service. What is missing is any appeal route if you think a suspension was wrong. Cancellation is straightforward in form, by email, but the annual notice period of 90 days is long, and your trial account is simply locked when the 14 days run out.
Key findings
- Suspension triggers are listed specifically rather than left to sole discretion, and overdue payment gets a notice plus a five day grace period.
- Personio commits to warning you before a suspension where reasonably possible and to telling you how service resumes.
- There is no appeal or human review process described anywhere for suspension or termination.
- Your trial account is locked automatically once the 14 days expire.
- After the contract ends, Personio must hold your personal data for 30 days so you can export it in a machine readable format or ask for deletion.
- Cancellation only needs text form including email, so no phone call or postal letter is required.
Evidence from the document
Nach Ablauf des Testzeitraums wird das Konto de:r Kund:in gesperrt.
Personio benachrichtigt den/die Kund:din im Voraus (soweit dies vernünftigerweise möglich ist) über jede Aussetzung und informiert ihn über die Fortsetzung der Software und Services nach
Der Auftragsverarbeiter ist verpflichtet, die eingebrachten personenbezogenen Daten für einen Zeitraum von 30 Tagen nach Vertragsende aufzubewahren.
Die Kündigung muss in Textform (inklusive E-Mail)
Recommendations
- Export your HR data before the trial ends, because the account is locked automatically at day 14.
- Put a reminder in your calendar for the 30 day export window after any contract ends, since data is deleted afterwards.
- If access is suspended, write immediately and ask for the specific trigger relied on, as there is no formal appeal channel.
Intellectual Property & UGC
Content ownership and licensing
You keep ownership of your personal data, and the addendum confirms the data belongs to you. The problem is the anonymisation clause: Personio can anonymise the content you store in the software, then claims to hold all rights in the resulting data and to use it in any manner for development, security, marketing or other purposes. There is no time limit, no revocation, no compensation and no way to opt out. Paid consulting deliverables are also only licensed to you, never assigned.
Key findings
- Personio may anonymise data stored in the software and then claims to hold all rights in it, usable in any manner and for marketing or other unspecified purposes.
- That grant has no end date, no opt out and no revenue sharing, and you agree to it by signing the standard terms.
- The employees whose HR records are anonymised are not parties to the contract and never consent to this themselves.
- Your own licence to the software is non exclusive, non transferable and lasts only as long as the subscription.
- Work products from paid professional services, such as documents Personio creates for you, come with a simple non exclusive licence rather than ownership.
- The data processing addendum does confirm that ownership of your data lies exclusively with you as controller.
Evidence from the document
Um die Software weiterzuentwickeln und zu verbessern, kann Personio nicht-personenbezogene oder anonymisierte Daten verarbeiten. Zu diesem
Der/die Kund:in erklärt sich damit einverstanden, dass Personio alle Rechte an solchen nicht-personenbezogenen oder anonymen Daten hält und diese in beliebiger Weise für Entwicklungs-, Diagnose-, Korrektur-, Sicherheits- sowie Marketing-
räumt Personio dem/der Kunden/Kundin hiermit an den Arbeitsergebnissen des/der Kunden/Kundin (z.B. erstellte Unterlagen) das einfache (d.h. nicht-ausschließliche), nicht übertragbare und nicht unterlizenzierbare Recht ein, die
Personio räumt de:r Kund:in ein nicht ausschließliches, nicht übertragbares und zeitlich begrenztes Nutzungsrecht an der abonnierten Software für die vereinbarte Laufzeit ein.
Recommendations
- If your HR data is sensitive or commercially valuable, negotiate a carve out or a narrowing of the anonymised data clause before signing.
- Ask in writing what anonymised data is actually used for and whether marketing use includes benchmark products sold to others.
- For paid consulting deliverables you expect to own, ask for an assignment or at least a transferable licence in the order document.
Data Privacy
Data collection, usage, and protection
The GDPR processing addendum is genuinely detailed and is incorporated automatically, with you as controller and Personio as processor. Processing is confined by default to the EU, the EEA or countries with an adequacy decision, a data protection officer is appointed, breaches are notified under Article 33, and you get a 30 day export and deletion window at the end. Two things pull the score down: if you object to a new sub-processor and no agreement is reached, Personio can terminate the contract immediately, and the security measures themselves are only visible inside the software and can be changed by Personio.
Key findings
- The processing addendum applies by default and takes precedence over the main terms where they conflict.
- Processing happens in the EU, the EEA or an adequacy country by default, with transfers elsewhere only under GDPR safeguards.
- You get active email notice before a sub-processor changes and 14 days to object on data protection grounds.
- If you object and the parties cannot agree, Personio can terminate the whole agreement with immediate effect, which weakens the objection right in practice.
- Technical and organisational measures are only published inside the software, not publicly, and Personio may update them provided overall security is not reduced.
- On site audits are limited to one unprompted audit per year lasting one day, can be refused entirely if Personio produces certifications instead, and help with impact assessments can be charged for.
Evidence from the document
Personio handelt als Auftragsverarbeiter für die in der Software gespeicherten und verarbeiteten Kundendaten und der/die Kund:in ist der/die für diese Daten
Die Erbringung der vertraglich vereinbarten Datenverarbeitung findet ausschließlich in einem Mitgliedstaat der Europäischen Union, einem anderen
Der Auftragsverarbeiter informiert den für die Verarbeitung Verantwortlichen in Textform durch aktive Benachrichtigung (E-Mail), wenn er beabsichtigt, eine/n Unterauftragnehmer:in herauszunehmen oder eine:n neue:n zu
Können die Parteien im Falle eines Widerspruchs keine Einigung erzielen, so kann der Auftragsverarbeiter die Vereinbarung mit sofortiger Wirkung
Der Verantwortliche ist berechtigt, jederzeit bis zum Ablauf dieser Frist in Textform die Herausgabe der personenbezogenen Daten in einem maschinenlesbaren Format oder die Löschung der gespeicherten
Recommendations
- Download the current sub-processor list and the security measures document from inside the software and keep dated copies.
- Diary the 14 day objection window for sub-processor change emails, since silence counts as approval.
- Ask for the audit certifications or third party reports up front so you know what will be offered instead of an on site audit.
- Tell your employees that their records may be anonymised and reused, since that use is agreed by you rather than by them.
Payment & Subscriptions
Billing and subscription management
Everything is disclosed openly, but the substance is heavily one sided. An annual plan renews automatically for another full year unless someone cancels 90 days in advance, which is a long window to miss. Refunds are excluded almost everywhere, including for downgrades, and your minimum user count can only be increased during the term, never reduced. Annual list price increases of up to five percent cannot be challenged at all, and job advert credits expire without compensation.
Key findings
- Annual contracts renew automatically for a further year unless cancelled 90 days before the renewal date, while monthly contracts need only 15 days notice.
- There is no right to any refund, pro rata or otherwise, when you downgrade a plan or drop apps.
- The agreed user count can only be raised during the subscription term, so you keep paying for seats you no longer need.
- Personio can raise list prices once a year, and you can only object if the rise exceeds five percent, within two weeks.
- Unused job advert credits roll over once and then expire with no refund, and all credits are forfeited when the contract ends.
- Cancellation itself is simple and can be done by email, with no phone call or retention process required.
Evidence from the document
Nach Ablauf der Mindestlaufzeit verlängert sich der Vertrag automatisch um ein Jahr, bis eine der Parteien den Vertrag mit einer Frist von 90 Tagen vor dem Verlängerungsdatum
Ein Anspruch auf eine (anteilige) Rückerstattung besteht
Die Nutzerzahl wird zunächst im Angebot festgelegt und kann anschließend während der Laufzeit des Abonnements nur erhöht
Beträgt die Preiserhöhung mehr als 5 % des bisherigen Preises, kann der/die Kund:in dieser Listenpreiserhöhung innerhalb einer Frist von zwei Wochen ab Mitteilung
Eine Erstattung der Paket-Gebühr für ungenutzte bzw. verfallene Stellenanzeigen ist
Recommendations
- Set a calendar reminder at least four months before every annual renewal date, because the 90 day notice window is easy to miss.
- Buy the smallest user count you can justify, since the number can go up during the term but never down.
- Treat prepaid job advert credits as use it or lose it and track the expiry of carried over credits.
- Ask for a contractual cap on annual price rises before signing, because increases up to five percent cannot be refused.
Limitation of Liability
Risk allocation and legal protection
This follows the standard German structure, which is reasonable by international comparison: full liability for injury to life, body or health, for intent and gross negligence, for guarantees and under product liability law, and for slight negligence only where a core contractual duty was breached, capped at foreseeable typical damage. The reductions to watch are the shortened 12 month limitation period for defect claims, the exclusion of no fault liability for defects present at the start, the data loss cap tied to your own backups, and a clause that blocks you from raising defects you could have spotted during the trial.
Key findings
- Liability for death, personal injury, intent, gross negligence, guarantees and product liability is expressly preserved.
- For slight negligence, liability is limited to breaches of core duties and capped at the foreseeable typical damage.
- Defect claims become time barred after 12 months rather than the longer statutory period, and strict no fault liability for defects existing at the start is excluded.
- For data loss, Personio only pays what recovery would have cost if you had kept proper regular backups.
- You cannot rely on defects that were known or present during the free trial if you did not report them before signing the paid contract.
- Availability is promised at 99 percent on annual average, but no service credit or other remedy is attached to missing it.
Evidence from the document
Bei entgeltlicher oder unentgeltlicher Leistungserbringung haftet Personio gemäß den gesetzlichen Bestimmungen für Schäden aus der Verletzung des Lebens, des Körpers oder der Gesundheit sowie
Mängelansprüche verjähren innerhalb von 12 Monaten.
Die verschuldensunabhängige Haftung für anfängliche Mängel gemäß § 536a I Alt. 1 BGB ist
Bei Verlust von Daten haftet Personio nur für denjenigen Aufwand, der bei ordnungsgemäßer und regelmäßiger Datensicherung durch den Kunden für die Wiederherstellung der Daten erforderlich gewesen
Der/die Kund:in kann sich nicht auf Mängel und sonstige Abweichungen von der Servicebeschreibung berufen, die bereits im Testzeitraum bekannt oder vorhanden
Recommendations
- Test the software thoroughly during the 14 day trial and report every defect in writing before you sign, or you lose the right to raise it.
- Keep your own independent backups of HR data, because the data loss remedy assumes you already have them.
- Raise any defect claim well inside 12 months, since the limitation period is shortened.
- Do not rely on the 99 percent availability figure as a financial protection, because it carries no compensation.
Indemnification
Legal responsibility allocation
There is no general indemnity in the main terms, which is unusual and good. The only one appears in the job advert bundle terms, and it is fault based: it is triggered by you breaching a job portal's terms or posting adverts unlawfully, not by mere use of the service. It also comes with real procedural protections, since Personio must notify you promptly, must not admit liability, and must let you run the negotiations. The list of protected parties is Personio alone, with no chain of affiliates and licensors.
Key findings
- The main software terms contain no customer indemnity at all.
- The only indemnity is limited to third party claims arising from your breach of a job portal's terms or unlawful job adverts.
- Personio must notify you without delay, must make no admission of liability, and must let you conduct the negotiations at your cost.
- Only Personio is indemnified, with no extension to affiliates, partners, licensors or successors.
- There is no express carve out for claims caused by Personio's own fault, and no reciprocal indemnity from Personio.
- A separate payroll clause puts sole liability on you for any claim caused by inaccurate, incomplete or late information you supplied.
Evidence from the document
Der/die Kunde/Kundin wird Personio von diesen Ansprüchen unverzüglich freistellen, Personio bei der Rechtsverteidigung angemessene Unterstützung bieten und Personio von den Kosten der Rechtsverteidigung freistellen.
Voraussetzung für die Freistellungspflicht nach Ziffer 6.1 ist, dass Personio den/die Kunden/Kundin über geltend gemachte Ansprüche unverzüglich schriftlich oder in Textform informiert, keine Anerkenntnisse oder gleich kommende Erklärungen
Jeder Anspruch, der aufgrund von ungenauen, unvollständigen oder verspäteten Informationen entsteht, die vom/von der Kund:in bereitgestellt werden, liegt in der alleinigen Haftung de:r
Recommendations
- Read each job portal's own terms before posting, since your indemnity exposure is defined by rules Personio did not write.
- Ask for wording that excludes claims caused by Personio's own errors from the indemnity.
- For payroll, keep dated records of the data you submitted and of your approval of each payroll run.
Modification of Terms
How agreements can be changed
This is one of the strongest sections. Personio must announce changes by email at least four weeks before they take effect, and the announcement has to spell out the change, your right to object, the deadline and the consequence of staying silent. If you object in time the change simply does not happen and the contract carries on unchanged. The catch is that Personio can then terminate the contract with one month's notice, which makes objecting a real risk, and silence still counts as consent.
Key findings
- Changes require four weeks of advance email notice, and the notice must flag the change, the objection right, the two week deadline and the effect of silence.
- If you object in time, the change does not take effect and the contract continues on the existing terms.
- Personio may respond to your objection by terminating the contract on one month's notice, which chills the objection right.
- Silence for two weeks is treated as consent to the change.
- Price adjustments are expressly prospective and do not apply to periods you have already paid for.
- Some changes, such as those needed for legal compliance or to close security holes, are reserved without the objection procedure, along with changes Personio judges to be predominantly to your benefit.
Evidence from the document
Personio hat das Recht, diese AGB jederzeit zu
Änderungen und Ergänzungen dieser AGB werden de:r Kund:in per E-Mail an die angegebene E-Mail-Adresse spätestens vier Wochen vor dem geplanten Inkrafttreten der Änderungen bekannt gegeben.
Widerspricht der/die Kund:in einer Änderung im Sinne dieser Ziffer 12 gemäß den jeweiligen Mitteilungspflichten, so wird die vorgeschlagene Änderung nicht wirksam und der Vertrag wird zu den bisherigen Bedingungen fortgesetzt.
In diesem Fall behält sich Personio das Recht vor, den Vertrag außerordentlich mit einer Frist von einem Monat zu
Die Preisanpassungen gelten nicht für Zeiträume, für die der/die Kund:in bereits bezahlt hat.
Recommendations
- Make sure the registered contact email is a monitored shared mailbox, because the two week objection clock starts from that email.
- Diarise the objection deadline as soon as a change notice arrives, since silence is treated as agreement.
- Weigh the termination risk before objecting, and ask whether Personio will waive that right for the change in question.
- Keep the archived previous versions offered on the page as evidence of what you originally agreed to.
Governing Law & Disputes
Jurisdiction and conflict resolution
There is no arbitration clause, no class action waiver, no jury trial waiver and no shortened deadline for bringing disputes, so ordinary court routes stay open. German law applies, the UN sales convention is excluded, and the exclusive venue is Munich but only to the extent legally permitted, which preserves mandatory jurisdiction rules. The drawbacks are practical rather than structural: Munich may be far from you, and the professional services terms restrict your ability to set off or withhold payment.
Key findings
- No mandatory arbitration, no class action waiver and no jury trial waiver appear anywhere in the documents.
- German law governs and the UN Convention on Contracts for the International Sale of Goods is excluded.
- Munich is the exclusive venue, but only to the extent legally permitted, which acts as a savings clause.
- The data processing addendum uses the same German law and Munich venue, so disputes are not split across systems.
- You may only set off claims against Personio that are undisputed, legally established or ready for judgment.
- The same restriction applies to withholding payment, and the counterclaim must arise from the same contract.
Evidence from the document
Auf den Vertrag zwischen den Parteien findet das Recht der Bundesrepublik Deutschland unter Ausschluss des UN-Kaufrechts
Ausschließlicher Gerichtsstand für alle Streitigkeiten aus und/oder im Zusammenhang mit dem Vertrag zwischen Personio und dem/der Kunden/Kundin ist, soweit gesetzlich zulässig
Gegen Forderungen von Personio kann der/die Kunde/Kundin nur mit solchen Gegenforderungen aufrechnen, die unbestritten, rechtskräftig festgestellt oder entscheidungsreif
Zur Ausübung eines Zurückbehaltungsrechts ist der/die Kunde/Kundin nur insoweit befugt, als die Gegenforderung, auf die der/die Kunde/Kundin das Zurückbehaltungsrecht stützt, unbestritten, rechtskräftig festgestellt oder
Recommendations
- Budget for litigating in Munich if you are based elsewhere, since venue is exclusive where the law allows it.
- Do not withhold payment over a disputed claim, because set off and retention are restricted to undisputed or established claims.
- If you are outside Germany, check with local counsel whether your own mandatory jurisdiction rules override the Munich clause.
Ex-TerCo provides automated analysis of legal documents for informational purposes. This is not legal advice. Terms can change at any time.