Terms and Conditions

Effective Date: January 10, 2026

1. General Provisions

Orders to D‑Cyber Compliance are exclusively concluded and executed subject to these Terms and Conditions. Conflicting or deviating terms and conditions of the Client shall not apply unless and until they have been expressly acknowledged in writing by D‑Cyber Compliance.

2. Services of D‑Cyber Compliance

2.1

The activity of D‑Cyber Compliance consists – unless otherwise agreed in writing in individual cases – of the independent, expert and instruction-free provision of services and consulting services in the areas of Cyber Security, Compliance, AI Security, Data Protection, Information Security as well as related fields (e.g., assessments, audits, gap analyses, policy development, awareness measures, project and program support).

2.2

A specific economic, technical or legal result is neither owed nor guaranteed. In particular, despite professional and state-of-the-art service provision, no warranty can be given for the complete prevention of security incidents, cyberattacks or compliance violations.

2.3

The Client decides at its sole responsibility on the timing, type and scope of measures recommended by D‑Cyber Compliance or agreed upon with D‑Cyber Compliance. This also applies when D‑Cyber Compliance accompanies or supports the implementation of the agreed measures.

2.4

The content and scope of the services to be provided by D‑Cyber Compliance are derived from the respective order, offer, Statement of Work or comparable service description issued in writing. If the necessity of additional or supplementary services arises during the course of service provision, D‑Cyber Compliance will inform the Client thereof. An order extension shall also be deemed agreed upon if the Client expressly requests or tacitly accepts such services.

2.5

D‑Cyber Compliance bases its work on the information, documents, data and statements provided by the Client as being complete and correct. D‑Cyber Compliance is not obligated to verify these for accuracy, completeness or timeliness or to conduct its own research. This also applies to plausibility checks, risk assessments or evaluations that are based on the information provided.

2.6

Legal or tax advisory activities are not part of the contract. All services of D‑Cyber Compliance do not constitute legal advice within the meaning of the Legal Services Act (Rechtsdienstleistungsgesetz).

2.7

The disclosure, publication or presentation of work results, reports or other documents of D‑Cyber Compliance to third parties requires the prior written consent of D‑Cyber Compliance. This does not result in the inclusion of third parties in the scope of protection of the contractual relationship, even if costs are assumed by third parties.

3. Cooperation Obligations of the Client

3.1

The Client shall provide D‑Cyber Compliance with all information, documents, system access and contact persons required for the provision of services in a timely, complete and truthful manner.

3.2

If the Client fails to perform required acts of cooperation or does not perform them properly, D‑Cyber Compliance is entitled, after prior written notice, to terminate the contract without notice. In this case, D‑Cyber Compliance may invoice either the services rendered up to the time of termination or the agreed or projected total compensation less saved expenses.

3.3

Upon request by D‑Cyber Compliance, the Client shall issue a declaration of completeness confirming the accuracy and completeness of the information provided.

4. Compensation

4.1

Unless otherwise agreed, compensation for the services of D‑Cyber Compliance shall be based on the daily rates, flat fees or prices specified in the offer or Statement of Work plus expenses, incidental costs and disbursements.

4.2

D‑Cyber Compliance is entitled to demand reasonable advance payments or partial payments. The commencement of work generally takes place only after settlement of the first advance invoice.

4.3

If due payment claims are not or not fully settled, D‑Cyber Compliance is entitled to suspend services until full payment and, after unsuccessful setting of an additional deadline, to terminate the contract without notice.

4.4

Time and cost projections by D‑Cyber Compliance constitute non-binding estimates.

5. Extended Agreement for Trainings, Workshops and Events

5.1

In case of cancellation by the Client up to 30 days before the start of the event, 50% of the agreed fee is payable; in case of cancellation within 30 days, the full fee is due. Additionally incurred costs shall be reimbursed.

5.2

In the event of justified cancellation by D‑Cyber Compliance, D‑Cyber Compliance will endeavor to provide equivalent replacement. There is no legal claim to such replacement; payments already made will be refunded.

5.3

Use of presentation or workshop content beyond the agreed purpose requires prior written consent of D‑Cyber Compliance.

6. Payment Terms

6.1

Prices to consumers include sales tax; prices to businesses are quoted plus the applicable statutory sales tax.

6.2

Invoices from D‑Cyber Compliance are due without deduction upon receipt. Advance and partial invoices must be paid no later than five calendar days after the invoice date.

6.3

Default interest shall be calculated in accordance with statutory provisions.

7. Liability

7.1

The liability of D‑Cyber Compliance is excluded – regardless of the legal grounds – unless mandatory statutory provisions provide otherwise.

7.2

The limitation of liability does not apply in cases of intent, gross negligence, damages arising from injury to life, body or health, as well as claims under the Product Liability Act.

7.3

In case of breach of material contractual obligations, the liability of D‑Cyber Compliance is limited to the contract-typical, foreseeable damage and amounts to a maximum of EUR 250,000 per claim.

8. Final Provisions

8.1

Place of performance for all services is Stuttgart.

8.2

Place of jurisdiction is Stuttgart, to the extent legally permissible.

8.3

The law of the Federal Republic of Germany shall apply exclusively, excluding the UN Convention on Contracts for the International Sale of Goods.