Dated: September 2026
These General Terms and Conditions (T&Cs) govern the business relationships between coosec one GmbH (hereinafter “Provider”) and its customers (hereinafter “Customer”).
The offer is primarily directed at entrepreneurs (§ 14 BGB), legal entities under public law, or special funds under public law. Insofar as contracts are concluded with consumers (§ 13 BGB), the statutory special regulations apply.
The subject matter of the contract is the provision of digital security services, access to SaaS solutions (Software-as-a-Service), and consulting services in the field of IT security, as specified in the respective offer or contract.
The presentation of the services on the website does not constitute a legally binding offer, but an invitation to order.
A contract is concluded by signing an offer, by a written order confirmation by the Provider, or by providing the service (e.g., activating SaaS access).
The Provider makes the agreed services (e.g., security analysis, monitoring platform) available to the Customer. For SaaS services, the software is operated on the Provider’s or a service provider’s servers.
The Provider endeavors to achieve the highest possible availability of its SaaS services (aiming for 99% on an annual average), but cannot guarantee this due to maintenance work or technical faults beyond its control.
Consulting services are services; a specific success is owed only if this is expressly agreed (e.g., as a contract for work).
The prices agreed in the contract or offer apply. All prices are in euros plus the respective statutory value-added tax.
Ongoing costs (SaaS/subscriptions): Billed monthly or annually in advance, unless otherwise agreed.
One-time services (consulting/audits): Billed after service provision or according to agreed milestones.
Invoices are due for payment immediately upon receipt without deductions. If the Customer is in default, the Provider is entitled to temporarily block access to the services.
The Customer is obliged to keep their access data confidential and protect it from access by third parties.
The Customer must not use the services abusively, in particular must not store illegal content or attack the platform’s security mechanisms.
With security analysis (penetration tests, etc.), the Customer ensures that they are authorized to have the systems to be examined investigated and provides the Provider with all necessary information.
Unlimited contracts (subscriptions): Run for an indefinite period and can be terminated by either party with a notice period of 30 days to the end of the month, unless a minimum term has been agreed.
Fixed-term contracts: End automatically upon expiry of the agreed time or provision of the service.
The right to terminate for good cause remains unaffected for both parties.
In the event of defects in the software, the statutory warranty rights apply. The Provider remedies defects at its discretion by subsequent improvement or replacement delivery.
The Provider is liable without limitation for damages arising from injury to life, body, or health, as well as for damages based on intentional or gross negligence.
In the case of slight negligence, the Provider is only liable for the breach of a material contractual obligation (cardinal obligation). In this case, liability is limited to the contractually typical, foreseeable damage.
The Provider is liable for the loss of data only to the extent that the Customer has backed up its data at appropriate intervals and the data can be reconstructed with reasonable effort.
The processing of personal data is carried out in accordance with applicable data protection laws (GDPR). Details are regulated in the privacy policy on the website. To the extent that the Provider acts as a processor, the parties will conclude a corresponding order processing agreement (AVV).
If the Customer is a consumer (§ 13 BGB), they are entitled to a statutory right of withdrawal of 14 days. The right of withdrawal expires prematurely for digital content or services if the Customer has expressly agreed that performance of the contract will begin before the withdrawal period expires and has confirmed their knowledge that they lose their right of withdrawal by doing so.
The Provider reserves the right to change these T&Cs. Changes will be communicated to the Customer (e.g., by email) at least 4 weeks before they take effect. If the Customer does not object within this period, the changes are deemed accepted.
The law of the Federal Republic of Germany applies to the exclusion of the UN Convention on Contracts for the International Sale of Goods.
If the Customer is a merchant, a legal entity under public law, or a special fund under public law, Munich is the exclusive place of jurisdiction for all disputes arising from this contract.
