Anwendbare Rechtsräume untersuchen

Jurisdiction & Applicability Research

Establish which laws and regulatory frameworks govern the product before drafting or reviewing any clause. Never infer the full legal regime from interface language or billing currency alone.

Applicability Analysis Framework

1. Provider Establishment & Role:
   • Identify the legal entity's country of establishment, corporate registration duties, and operational role (trader/merchant of record, platform intermediary, data controller, data processor, AI provider, or AI deployer).
2. Territorial & Market Scope:
   • Determine where the service is offered or where users are monitored:
     • Establishment trigger (e.g., GDPR Art. 3(1), national e-commerce/corporate disclosure laws).
     • Targeting / monitoring trigger (e.g., GDPR Art. 3(2), EU Consumer Rights / Digital Content Directives targeting consumers' habitual residence, UK GDPR/Consumer Rights Act, US state privacy/auto-renewal laws).
   • Evaluate targeting indicators holistically: accepted billing/shipping countries, localized domains, marketing campaigns, local payment methods, and governing-law clauses.
3. User & Customer Segmentation:
   • B2C (Consumers): Mandatory statutory protections apply (pre-contractual disclosures, 14-day withdrawal rights and digital-content waiver rules, online cancellation/withdrawal functions, unfair contract terms control, local mandatory consumer protections).
   • B2B (Business customers): Greater contractual freedom, commercial liability caps, custom billing/renewal terms, and mandatory Data Processing Agreements (Art. 28 GDPR) when processing customer personal data.
   • Mixed B2B/B2C flows: Decide whether to apply consumer protections across the board or maintain clearly separated B2B/B2C terms and checkout verification.
   • Minors & vulnerable groups: Check age-gating, parental consent thresholds (e.g., GDPR Art. 8), and youth protection rules.
4. Product & Sector Triggers:
   • Identify domain-specific regimes triggered by product features: ePrivacy / terminal storage (cookies, SDKs), direct marketing, recurring subscription rules, EU AI Act transparency/risk rules, payment services / tax invoicing, or sector confidentiality.

Applicability & Source Matrix

Map each applicable regime cleanly:

• Regime / Statute -> Triggering Fact (Who / Where / Feature) -> Affected Document or Flow -> Mandatory Law vs. Commercial Choice.

Guardrails

• Never assume B2B status merely because a user enters a company name if consumers can sign up through the same self-serve flow.
• Never assume a choice-of-law clause overrides mandatory consumer or data protection rules of a targeted consumer's habitual residence.
• Flag ambiguous multi-jurisdiction exposure as a targeted question for legal counsel.