Terms & Conditions
Effective Date: February 1. 2026
Swiss Cybersecurity Management Center (SCMC)
Welcome to Swiss Cybersecurity Management Center (SCMC). These Terms & Conditions (“Terms”) govern your access to and use of our website, platform, and services. By accessing or using our services, you agree to be bound by these Terms.
0. Definitions
For the purposes of these Terms:
- “SCMC” refers to Swiss Cybersecurity Management Center.
- “User” refers to any individual or entity accessing or using the services.
- “Services” refers to all products, services, content, training, consulting, and functionalities offered by SCMC.
- “Platform” refers to SCMC’s website, applications, and related systems.
- “Paid Services” refers to services subject to fees or subscriptions.
- “Personal Data” has the meaning defined under the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).
1. Free Account & No Purchase Obligation
- Creating an SCMC user account is free of charge.
- Registration does not create any obligation to purchase, subscribe to, or pay for any product or service.
- Users may access free services without providing payment information, unless they explicitly choose a paid offering.
2. Scope of Services
SCMC provides cybersecurity-related services, including but not limited to:
- Cybersecurity consulting and advisory services
- Training and awareness programs
- Security assessments and professional services
Specific services may be governed by separate agreements, service descriptions, statements of work, or data processing agreements.
3. Use of Services
Users agree to:
- Use the Services solely for lawful purposes and in compliance with applicable laws and regulations
- Refrain from unauthorized access, hacking, penetration testing, reverse engineering, or interference with SCMC systems without prior written authorization
- Not misuse, resell, sublicense, or exploit the Services outside their intended purpose
- Respect intellectual property, confidentiality, and security requirements
SCMC may restrict or suspend access where misuse, legal violations, or security risks are identified.
4. User Accounts & Security Responsibilities
Users agree to:
- Provide accurate, current, and complete registration information
- Maintain the confidentiality of account credentials
- Accept responsibility for all activities conducted under their account
- Promptly notify SCMC of any unauthorized access or suspected security incidents
SCMC may suspend or terminate accounts immediately where required for security, legal compliance, or risk mitigation.
5. Paid Services, Subscriptions & Cancellation
- Paid Services are optional and clearly identified prior to purchase.
- Users may cancel Paid Services at any time.
- Cancellations take effect at the end of the current billing or service period.
- Fees already paid are non-refundable, unless required by mandatory law or explicitly agreed otherwise.
- No additional charges will be incurred following the effective cancellation date.
6. Intellectual Property & Feedback
All intellectual property rights in the Services, Platform, and related materials remain exclusively with SCMC or its licensors.
- No ownership rights are transferred to Users.
- Users receive a limited, non-exclusive, non-transferable right to use the Services for internal purposes.
- SCMC may use feedback, suggestions, or recommendations provided by Users without restriction or compensation.
7. Data Protection, GDPR & Swiss FADP
SCMC processes Personal Data in accordance with:
- The Swiss Federal Act on Data Protection (FADP)
- The EU General Data Protection Regulation (GDPR), where applicable
Data Protection Roles
- SCMC acts as a data controller for website, account, and administrative data.
- SCMC acts as a data processor where it processes Personal Data on behalf of clients, subject to a separate Data Processing Agreement (DPA).
SCMC implements appropriate technical and organizational measures to protect Personal Data. Full details are available in the
👉 Privacy Policy.
8. No Legal or Regulatory Advice
SCMC provides technical and advisory cybersecurity services only.
- Services do not constitute legal, regulatory, or compliance advice.
- Responsibility for legal compliance, regulatory obligations, and risk management remains with the User.
- No guarantee is provided that use of the Services ensures compliance with specific laws, regulations, or standards.
9. Disclaimer of Warranties
The Services are provided “as is” and “as available”, to the maximum extent permitted by Swiss law.
SCMC makes no warranties, express or implied, including but not limited to warranties of fitness for a particular purpose, non-infringement, or uninterrupted availability.
Cybersecurity risks cannot be entirely eliminated, and SCMC does not guarantee prevention of all incidents.
SCMC provides no guaranteed uptime commitment under these standard Terms. Scheduled maintenance will be communicated in advance where reasonably possible. Individual Service Level Agreements (SLAs) may be agreed in separate agreements.
10. Limitation of Liability
To the maximum extent permitted by applicable law:
- SCMC shall not be liable for indirect, incidental, consequential, or special damages, including loss of data, profit, or business interruption
- SCMC shall not be liable for damages caused by third parties, client systems, or events beyond SCMC’s reasonable control
- SCMC’s total liability shall not exceed the fees paid for the relevant Services during the 12 months preceding the claim
Nothing in these Terms excludes liability for gross negligence or willful misconduct, where such exclusion is prohibited under Swiss law.
For free Services, SCMC’s liability is excluded to the fullest extent permitted by law.
11. Indemnification
The User shall release SCMC from any third-party claims arising from the User's culpable breach of these Terms, in particular from:
- User misuse of the Services
- Violation of these Terms or applicable laws
- Unlawful content, data, or instructions provided by the User
- Use of the Services in a manner not authorized by SCMC
This indemnification obligation does not apply to claims arising from SCMC's activities as a data processor; such claims are governed exclusively by the separate Data Processing Agreement (DPA).
12. Third-Party Services
SCMC may reference or integrate third-party services. SCMC is not responsible for third-party content, availability, or security practices. Use of third-party services is subject to their respective terms.
13. Force Majeure
SCMC shall not be liable for failure or delay due to events beyond reasonable control, including cyber incidents, system outages, natural disasters, war, sanctions, or governmental actions.
14. Termination & Survival
SCMC may suspend or terminate access immediately for violations, security risks, or legal requirements.
Upon termination, the following provisions survive:
- Intellectual Property
- Disclaimer of Warranties
- Limitation of Liability
- Indemnification
- Governing Law & Jurisdiction
15. Assignment
Users may not assign or transfer rights or obligations without SCMC’s prior written consent. SCMC may assign these Terms as part of a merger, acquisition, or business transfer.
16. Severability
If any provision of these Terms is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.
17. Entire Agreement & No Waiver
These Terms constitute the entire agreement between SCMC and the User regarding the Services.
Failure to enforce any provision does not constitute a waiver of rights.
18. Governing Law & Jurisdiction
These Terms are governed by Swiss law, excluding conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods (CISG).
Exclusive jurisdiction lies with the courts of the city of Zurich, Switzerland, subject to mandatory provisions of applicable law in the User's jurisdiction.
19. Contact Information
Swiss Cybersecurity Management Center (SCMC)
Tiefenhöfe 10
8001 Zürich
Switzerland
📧 Email: info@scmc.ch
🌐 Website: https://www.scmc.ch
Further legal information:
Legal Notice · Privacy Policy · Data Processing Agreement (DPA)