General terms and conditions
The basis of our collaboration, transparent and in plain language.
This text is a template and must be adapted to your service model and reviewed legally before publication.
1. Scope
These general terms and conditions (GTC) apply to all contracts between Helvetic-Stack Kollektivgesellschaft (KLG), trading under the Security-Stack brand (the “Provider”), and its customers regarding security assessments, managed security services, training and related consulting. Deviating terms apply only if agreed in writing.
2. Conclusion of contract
Quotes from the Provider are valid until the date stated in them, otherwise for 30 days from issue. The contract comes into effect when the customer confirms the quote in writing.
3. Scope of services
The scope of services follows from the quote or the service description of the selected package. Services not expressly agreed are charged on a time and materials basis.
Security measures reduce risk but cannot eliminate it entirely. The Provider owes professional execution according to the recognised state of the art, but gives no guarantee that security incidents will not occur.
4. Customer cooperation
The customer provides the information, access and contact persons required for the delivery of services in good time. For testing of systems not owned by the customer, written authorisation from the owner must be provided.
The Provider’s recommendations only take effect once implemented. If the customer decides against recommended measures, the customer bears the resulting risk.
5. Prices and payment
All prices are in Swiss francs plus statutory VAT. Recurring services are invoiced periodically in advance; project work is invoiced on completion or according to the agreed payment plan. The payment term is 30 days from the invoice date.
6. Term and termination
Managed security contracts are concluded for an indefinite period and may be terminated by either party at the end of a month, observing the agreed notice period. After the contract ends, the customer receives the available documentation of the managed environment.
7. Confidentiality
Both parties treat all information received in the course of the collaboration as confidential. This obligation survives the end of the contract. The Provider names customers as references only with their explicit consent.
8. Data protection
The processing of personal data is governed by the privacy policy and by any separate data processing agreements.
9. Liability
The Provider is liable for damage caused by intent and gross negligence. Liability for slight negligence as well as for indirect damage, consequential damage and lost profit is excluded to the extent permitted by law. In any case, liability is limited to the fee paid in the contract year concerned.
10. Final provisions
Should individual provisions of these GTC be invalid, the validity of the remaining provisions remains unaffected. Swiss law applies exclusively, excluding conflict-of-law rules. The place of jurisdiction is the Provider’s registered seat in Bonstetten.