Terms & Conditions

Effective Date: August 1. 2026

SCMC Swiss Cybersecurity Management Center GmbH

Version V1, effective 24 August 2026

Welcome to Swiss Cybersecurity Management Center (SCMC). These Terms & Conditions (“Terms”) govern your access to and use of our website, platform, and services. By accessing or using our services, you agree to be bound by these Terms.

0. Definitions

For the purposes of these Terms:

  • “SCMC” refers to Swiss Cybersecurity Management Center.
  • “User” refers to any individual or entity accessing or using the services.
  • “Services” refers to all products, services, content, training, consulting, and functionalities offered by SCMC.
  • “Platform” refers to SCMC’s website, applications, and related systems.
  • “Paid Services” refers to services subject to fees or subscriptions.
  • “Personal Data” has the meaning defined under the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

1. Free Account & No Purchase Obligation

  • Creating an SCMC user account is free of charge.
  • Registration does not create any obligation to purchase, subscribe to, or pay for any product or service.
  • Users may access free services without providing payment information, unless they explicitly choose a paid offering.

2. Scope of Services

SCMC provides cybersecurity-related services, including but not limited to:

  • Cybersecurity consulting and advisory services
  • Training and awareness programs
  • Security assessments and professional services

Specific services may be governed by separate agreements, service descriptions, statements of work, or data processing agreements.

2.1 Standards, Norms and Third-Party Licences

Certain consulting, training and assessment services may refer to national or international standards and norms (e.g. ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27005, IEC 62443, NIST CSF, BSI IT-Grundschutz, NIS2- and DORA-related standards).

  • The text of these standards and norms is protected by copyright and is licensed for a fee exclusively by the respective standards bodies or their authorised distributors (e.g. ISO, IEC, SNV, DIN, NIST, BSI).
  • The acquisition and licensing of such standards and norms is the sole responsibility of the User. SCMC does not provide the texts of these standards, does not redistribute them, and grants neither copies nor sublicences.
  • References made by SCMC to standards, norms, clauses or controls are provided solely for professional guidance and do not replace the official licensed version issued by the respective standards body.
  • Any delay, limitation, or non-performance of services caused by the User's failure to obtain the required standards or norms licences in due time is outside the responsibility of SCMC.

3. Use of Services

Users agree to:

  • Use the Services solely for lawful purposes and in compliance with applicable laws and regulations
  • Refrain from unauthorized access, hacking, penetration testing, reverse engineering, or interference with SCMC systems without prior written authorization
  • Not misuse, resell, sublicense, or exploit the Services outside their intended purpose
  • Respect intellectual property, confidentiality, and security requirements

SCMC may restrict or suspend access where misuse, legal violations, or security risks are identified.

4. User Accounts & Security Responsibilities

Users agree to:

  • Provide accurate, current, and complete registration information
  • Maintain the confidentiality of account credentials
  • Accept responsibility for all activities conducted under their account
  • Promptly notify SCMC of any unauthorized access or suspected security incidents

SCMC may suspend or terminate accounts immediately where required for security, legal compliance, or risk mitigation.

5. Paid Services, Subscriptions & Cancellation

5.1 Conclusion of Contract & Term

  • Paid Services are optional and clearly identified prior to purchase.
  • Paid Services are concluded for the term specified in the offer, the order process, or the invoice (e.g. monthly or annually).
  • Unless otherwise agreed, the subscription renews automatically for the originally selected term.

5.2 Prices & Payment Terms

  • The prices shown in the order process, the offer, or the price list at the time of ordering apply.
  • Unless stated otherwise, all prices are in Swiss francs (CHF). Any applicable value added tax is shown in the order process or on the invoice.
  • Fees are payable in advance for the respective contract term and become due upon conclusion of the contract or at the start of each renewal period.
  • Payments are processed by an external payment service provider (currently Stripe), whose terms additionally apply to payment processing. SCMC does not store complete credit card data.
  • Where payment by invoice has been expressly agreed, invoices are payable within 30 days of the invoice date without deduction.
  • SCMC may adjust its prices. Price changes are announced at least 30 days before the start of the next renewal period and only take effect as of that renewal. Users who do not accept a price change may cancel the subscription with effect from the end of the current contract term.

5.3 Cancellation & Renewal

  • Monthly subscriptions may be cancelled at any time and end upon expiry of the month already paid for.
  • Annual subscriptions must be cancelled no later than 30 days before the end of the current contract term. If not cancelled in time, the subscription renews automatically for a further 12 months.
  • No additional charges are incurred after the cancellation takes effect.

5.4 Refunds

  • Fees already paid are non-refundable, unless mandatory law provides otherwise or explicitly agreed otherwise.

5.5 Late Payment

  • In the event of default of payment, SCMC may temporarily suspend or terminate access to Paid Services. The obligation to pay amounts already due remains unaffected.

6. Intellectual Property & Feedback

All intellectual property rights in the Services, Platform, and related materials remain exclusively with SCMC or its licensors.

  • No ownership rights are transferred to Users.
  • Users receive a limited, non-exclusive, non-transferable right to use the Services for internal purposes.
  • SCMC may use feedback, suggestions, or recommendations provided by Users without restriction or compensation.

7. Data Protection, GDPR & Swiss FADP

SCMC processes Personal Data in accordance with:

  • The Swiss Federal Act on Data Protection (FADP)
  • The EU General Data Protection Regulation (GDPR), where applicable

Data Protection Roles

  • SCMC acts as a data controller for website, account, and administrative data.
  • SCMC acts as a data processor where it processes Personal Data on behalf of clients, subject to a separate Data Processing Agreement (DPA).

SCMC implements appropriate technical and organizational measures to protect Personal Data. Full details are available in the
👉 Privacy Policy.

8. No Legal or Regulatory Advice

SCMC provides technical and advisory cybersecurity services only.

  • Services do not constitute legal, regulatory, or compliance advice.
  • Responsibility for legal compliance, regulatory obligations, and risk management remains with the User.
  • No guarantee is provided that use of the Services ensures compliance with specific laws, regulations, or standards.

9. Disclaimer of Warranties

The Services are provided “as is” and “as available”, to the maximum extent permitted by Swiss law.

SCMC makes no warranties, express or implied, including but not limited to warranties of fitness for a particular purpose, non-infringement, or uninterrupted availability.

Cybersecurity risks cannot be entirely eliminated, and SCMC does not guarantee prevention of all incidents.

SCMC provides no guaranteed uptime commitment under these standard Terms. Scheduled maintenance will be communicated in advance where reasonably possible. Individual Service Level Agreements (SLAs) may be agreed in separate agreements.

10. Limitation of Liability

To the maximum extent permitted by applicable law:

  • SCMC shall not be liable for indirect, incidental, consequential, or special damages, including loss of data, profit, or business interruption
  • SCMC shall not be liable for damages caused by third parties, client systems, or events beyond SCMC’s reasonable control
  • SCMC’s total liability shall not exceed the fees paid for the relevant Services during the 12 months preceding the claim

Nothing in these Terms excludes liability for gross negligence or willful misconduct, where such exclusion is prohibited under Swiss law.

For free Services, SCMC’s liability is excluded to the fullest extent permitted by law.

11. Indemnification

The User shall release SCMC from any third-party claims arising from the User's culpable breach of these Terms, in particular from:

  • User misuse of the Services
  • Violation of these Terms or applicable laws
  • Unlawful content, data, or instructions provided by the User
  • Use of the Services in a manner not authorized by SCMC

This indemnification obligation does not apply to claims arising from SCMC's activities as a data processor; such claims are governed exclusively by the separate Data Processing Agreement (DPA).

12. Third-Party Services

SCMC may reference or integrate third-party services. SCMC is not responsible for third-party content, availability, or security practices. Use of third-party services is subject to their respective terms.

13. Force Majeure

SCMC shall not be liable for failure or delay due to events beyond reasonable control, including cyber incidents, system outages, natural disasters, war, sanctions, or governmental actions.

14. Termination & Survival

SCMC may suspend or terminate access immediately for violations, security risks, or legal requirements.

Upon termination, the following provisions survive:

  • Intellectual Property
  • Disclaimer of Warranties
  • Limitation of Liability
  • Indemnification
  • Governing Law & Jurisdiction

15. Assignment

Users may not assign or transfer rights or obligations without SCMC’s prior written consent. SCMC may assign these Terms as part of a merger, acquisition, or business transfer.

16. Severability

If any provision of these Terms is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.

17. Entire Agreement & No Waiver

These Terms constitute the entire agreement between SCMC and the User regarding the Services.

Failure to enforce any provision does not constitute a waiver of rights.

18. Governing Law & Jurisdiction

These Terms are governed by Swiss law, excluding conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods (CISG).

Exclusive jurisdiction lies with the courts of the city of Zurich, Switzerland, subject to mandatory provisions of applicable law in the User's jurisdiction.

19. Contact Information

SCMC Swiss Cybersecurity Management Center GmbH
Tiefenhöfe 10
8001 Zürich
Switzerland
📧 Email: info@scmc.ch
🌐 Website: https://www.scmc.ch

Further legal information:
Legal Notice · Privacy Policy · Data Processing Agreement (DPA)