Download our general terms and conditions as a PDF here
Information for our Clients about the latest update of the Terms and Conditions:
We are always looking to improve, which is why we have updated our General Terms and Conditions in the following way to reflect the feedback we have received from our Clients and partners. The wording of the provisions has been streamlined as necessary. The provisions are otherwise similar in substance, except for the following exceptions:
- Fixed grammatical errors.
- Fees, expenses, invoicing and payment terms clarifies that expenses are agreed to in main agreement. Furthermore, headlines for “Subscription Services” and “Invoicing” has been made to clarify the sections of the clause.
- Product liability has updated wording to reflect Danish law.
- Notification of changes has updated wording to specify the relation to subscription services.
- Entering into force updated to May 27, 2026.
Abbreviations used:
- Agreement: The separate agreement between the Client and Bureau Veritas Cybersecurity Nordics.
- The basis of the agreement: The agreement and the terms and conditions, as well as any associated declaration of confidentiality or data processing agreement.
- Bureau Veritas Cybersecurity Nordics: Institute For Cyber Risk.
- T&C: Bureau Veritas Cybersecurity Nordics’ general Terms and Conditions.
Entry into force:
The updated T&C and the associated Privacy Policy will enter into force on May 27, 2026.
- Application
The T&C apply to all Bureau Veritas Cybersecurity Nordics Clients, as well as any services offered by Bureau Veritas Cybersecurity Nordics.
The services must also be regulated in the Agreement, which together with the T&C constitutes the overall basis of the agreement.
This means that the Agreement and the T&C take precedence over any previous oral or written agreement between the Client and Bureau Veritas Cybersecurity Nordics. This also means that changes to and deviations from the T&C must be clearly and clearly stated in the Agreement in order to be valid.
- Fees, expenses,invoicingand payment terms
Bureau Veritas Cybersecurity Nordics is entitled to payment by the Client of the fee specified in the Agreement as well as the expenses related to the provision of the services.
If no specific fee has been agreed prior to the commencement of work, the fee is calculated on the basis of time spent and the general hourly rates set at any given time for the employees who have performed the work.
Unless otherwise agreed in the Agreement in accordance with the fee, Bureau Veritas Cybersecurity Nordics will charge driving outside the Capital Region of Denmark at half the rate as consultancy hours based on the general hourly rates set at any given time for the employees who performed the work here.
Even if a fixed fee has been agreed, Bureau Veritas Cybersecurity Nordics is entitled to calculate a fee for the additional time that Bureau Veritas Cybersecurity Nordics must spend on the provision of the service if, after the conclusion of the Agreement, it transpires that:
- (i) the conditions for the provision of the service have changed materially, or
- (ii) the prerequisites for the provision of the service were not correct or sufficient and these circumstances (i) and (ii) are attributable to the Client.
Task-related costs and disbursements, including reasonable travel costs, accommodation costs, living expenses, etc., must be paid by the Client in addition to the fee. These costs and disbursements are to be agreed with the Client before incurring, and will be invoiced together with or separately from the fee, as agreed between the parties.
Subscription Services:
Subscriptions to Bureau Veritas Cybersecurity Nordics’ dedicated subscription services are invoiced in accordance with the prices in force at any given time. Prices can be quoted by contacting Bureau Veritas Cybersecurity Nordics’ sales department. Unless otherwise specifically stated in the Agreement, all prices are stated in Danish kroner, excluding VAT.
Subscriptions to Bureau Veritas Cybersecurity Nordics’ dedicated subscription services are paid in advance on an ongoing basis for a period determined at a time, depending on the type of subscription.
Prepaid subscriptions are non-refundable.
Bureau Veritas Cybersecurity Nordics reserves the right to charge a fee in connection with the provision of e.g. exceptional support and service for the subscription services.
Invoicing:
Unless otherwise stated in the Agreement, Bureau Veritas Cybersecurity Nordics invoices the work performed once a month on the basis of the time spent on the work in the previous month.
Invoices are due 14 days from the invoice date. Overdue invoices are subject to interest in accordance with the provisions of the Danish Interest Act.
When sending a reminder letter, a reminder fee of DKK 310 per reminder will be charged.
Bureau Veritas Cybersecurity Nordics reserves the right to assign claims to third parties in connection with the surrender to debt collection. This entails a debt collection fee of DKK 100 for the handover to debt collection, as well as any debt collection costs the Client may incur.
Without prejudice against its rights, Bureau Veritas Cybersecurity Nordics has the right to suspend the provision of services, in whole or in part, until invoices due have been paid.
- Client’s obligations
It is a prerequisite for Bureau Veritas Cybersecurity Nordics provision of the services that the Client fulfils the obligations defined in the Agreement, and updates information that may be relevant to the provision of the services.
In addition, the Client must make timely decisions and obtain the necessary approvals from management for Bureau Veritas Cybersecurity Nordics to provide the services.
The above implies that the Client – where relevant to the delivery of the service – must make the necessary resources available to Bureau Veritas Cybersecurity Nordics so that Bureau Veritas Cybersecurity Nordics can deliver the service to the Client without unnecessary complications, for example: Provision of employees’ relevant information, guest parking, a suitable office environment, necessary access cards, etc.
- Subscription
An agreement on subscription to a service or product, hereinafter collectively referred to as services, from Bureau Veritas Cybersecurity Nordics is entered into, depending on the service in question, either by registering on Bureau Veritas Cybersecurity Nordics’ website or by direct contact with Bureau Veritas Cybersecurity Nordics.
For a detailed description of Bureau Veritas Cybersecurity Nordics’ services and subscription forms, please refer to Bureau Veritas Cybersecurity Nordics’ sales department.
When entering into the subscription agreement, the Client undertakes to provide correct information to Bureau Veritas Cybersecurity Nordics. If the information provided by the Client changes, the Client must notify Bureau Veritas Cybersecurity Nordics in writing.
- Rights
Bureau Veritas Cybersecurity Nordics has the ownership and all intellectual property rights to software developed by Bureau Veritas Cybersecurity Nordics, as well as website, web, newsletters, etc. prepared by Bureau Veritas Cybersecurity Nordics. This applies to both current and future editions of the above. Any unauthorized use, distribution, illegal title, or copying of the above material or any part thereof is prohibited and will be prosecuted.
- Indemnification
Bureau Veritas Cybersecurity Nordics’ services covered by this Agreement are provided on an “as is” basis.
Bureau Veritas Cybersecurity Nordics is liable for damages in accordance with the general rules of Danish law of tort to the extent that the liability deviates from the scope of the limitations of liability below.
For liability that includes Bureau Veritas Cybersecurity Nordics’ professional liability, the liability is limited to a maximum amount in accordance with Bureau Veritas Cybersecurity Nordics’ insurance terms and conditions entered into at any given time.
Bureau Veritas Cybersecurity Nordics’ liability under the Agreement may notwithstanding the foregoing never exceed the fee received by Bureau Veritas Cybersecurity Nordics’ for the part of the work that gives rise to liability.
Bureau Veritas Cybersecurity Nordics’ liability does not cover indirect losses and consequential damages, including operating losses, increased operating expenses or loss of profit.
Bureau Veritas Cybersecurity Nordics’ liability does not extend to delays or defects in a service caused by delays, interruptions or disruptions in the communication infrastructure or the conditions of other suppliers for which Bureau Veritas Cybersecurity Nordics is not independently responsible, including delays caused by Bureau Veritas Cybersecurity Nordics’ carriers, subcontractors or other business partners.
Bureau Veritas Cybersecurity Nordics’ liability does not include losses incurred by the Client or third parties as a result of the Client’s use of results from the service, except to the extent that such losses are a direct result of Bureau Veritas Cybersecurity Nordics’ gross negligence, wilful misconduct, or material breach of this Agreement, in which case liability shall be capped at the fee received by Bureau Veritas Cybersecurity Nordics for the part of the work.
If a third party makes a claim against Bureau Veritas Cybersecurity Nordics or Client for liability under this provision, the other party shall be notified immediately.
- Product liability
Bureau Veritas Cybersecurity Nordics is liable for damages in accordance with the general rules of Danish law of tort to the extent that the liability deviates from the scope of the limitations of liability below.
For liability that includes Bureau Veritas Cybersecurity Nordics’ product liability, the liability is limited to a maximum amount in accordance with Bureau Veritas Cybersecurity Nordics’ insurance terms and conditions entered into at any given time.
Bureau Veritas Cybersecurity Nordics’ liability under the Agreement may notwithstanding the foregoing never exceed the fee received by Bureau Veritas Cybersecurity Nordics for the part of the work that gives rise to liability.
Bureau Veritas Cybersecurity Nordics’ liability does not include indirect losses and consequential damages, including operating losses, increased operating expenses, lost profit or expenses in connection with loss of data, as well as damage caused by the service to real or movable property.
Bureau Veritas Cybersecurity Nordics’ liability does not extend to delays or defects in a service caused by delays, interruptions or disruptions in the communication infrastructure or the conditions of other suppliers for which Bureau Veritas Cybersecurity Nordics is not independently responsible, including delays caused by Bureau Veritas Cybersecurity Nordics’ carriers, subcontractors or other business partners.
Bureau Veritas Cybersecurity Nordics’ liability does not include losses incurred by the Client or third parties as a result of the Client’s use of results from the service.
If a third party makes a claim against Bureau Veritas Cybersecurity Nordic or Client for liability under this provision, the other party shall be notified immediately.
- Force majeure
Bureau Veritas Cybersecurity Nordics cannot be held liable for non-performance if the non-performance is due to circumstances that Bureau Veritas Cybersecurity Nordics could not reasonably foresee and that either make it impossible or unreasonably burdensome for Bureau Veritas Cybersecurity Nordics to fulfil.
- Rights of third parties
Bureau Veritas Cybersecurity Nordics guarantees that no third party has any rights in countries within the EU, the United States and Canada that may prevent or increase the cost of the Client’s use of the service. If notice is given and/or legal action is brought against the Client alleging infringement of the rights of a third party, the Client is obliged to immediately notify Bureau Veritas Cybersecurity Nordics in writing.
- Confidentiality, Disclosure ofClientInformation and Reference
Bureau Veritas Cybersecurity Nordics’ employees are subject to a duty of professional secrecy under employment law, and Bureau Veritas Cybersecurity Nordics undertakes to treat all Client information with the necessary confidentiality. To the greatest extent possible, similar confidentiality is imposed on Bureau Veritas Cybersecurity Nordics’ Clients and business partners with
Notwithstanding the above, Bureau Veritas Cybersecurity Nordics reserves the right to loyally use the Client as a reference when this is done without obligation to the Client, as well as to disclose general company information for marketing purposes to our partners in One Cyber Group.
- Personal data
Where the General Data Protection Regulation (GDPR) requires a data processing agreement, these are entered into separately as part of the Contractual Basis.
Bureau Veritas Cybersecurity Nordics’ data processing agreements follow the Danish Data Protection Agency’s standard contract forms.
For Bureau Veritas Cybersecurity Nordics’ general processing of personal data, please refer to Bureau Veritas Cybersecurity Nordics’ Privacy Policy, which is available on Bureau Veritas Cybersecurity Nordics’ website: www.ifcr.dk/privatlivspolitik
- Term and termination
The subscription period is set out in the Agreement. If the Client does not terminate the subscription agreement in writing with the above-mentioned notice until the end of a subscription period, the agreement will automatically continue with a corresponding subscription period at the terms and prices in force at any given time.
Subscriptions without a predetermined expiration date of the subscription period will run until it is terminated by Bureau Veritas Cybersecurity Nordics or the Client.
The Client has the right to terminate the subscription agreement with 3 months’ notice. Bureau Veritas Cybersecurity Nordics may terminate the subscription agreement at any time with a notice of 1 month. In the event of termination by the Bureau Veritas Cybersecurity Nordics, the amount paid in advance shall be refunded proportionately.
For voucher solutions, all relevant terms and conditions will be stated in the Agreement, including any expiry date and conversion.
- Notification of changes
General trading conditions may be unilaterally amended by the Bureau Veritas Cybersecurity Nordics with a notice of 30 days.
The Client will be notified either via the e-mail provided by the Client or via www.ifcr.dk to the extent necessary. Changes that are of a purely favourable nature for the Client may be implemented without prior notice.
For Bureau Veritas Cybersecurity Nordics’ dedicated subscription services, Bureau Veritas Cybersecurity Nordics is entitled to make indexation of all amounts without further notice. The indexation may be made as of 1 July each year. The indexation follows the development in the Net Price Index from Statistics Denmark, however, the Bureau Veritas Cybersecurity Nordics regulates by a minimum of 2.5%.
- Breach of contract
Bureau Veritas Cybersecurity Nordics reserves the right to terminate the Agreement with immediate effect in the event of the Client’s breach of the Agreement, including abuse of IP rights or non-payment. The same applies where the Client is placed under bankruptcy or other insolvency proceedings, including, but not limited to, suspension of payments, whether at its own request or at the request of a third party.
- Dispute andjurisdiction
The legal relationship between Bureau Veritas Cybersecurity Nordics and the Client is governed by Danish law.
Any dispute arising on the basis of the Contractual Basis shall be attempted to be resolved amicably between Bureau Veritas Cybersecurity Nordics and the Client.
Disputes that cannot be resolved amicably between Bureau Veritas Cybersecurity Nordics and the Client will be settled by the Danish courts.
The jurisdiction is the Court of Lyngby.
- Contact
Bureau Veritas Cybersecurity Nordics
Nærum Hovedgade 10A – 2850 Nærum
Phone: 70 209 209 – E-mail: info@ifcr.dk – Website: www.ifcr.dk – CVR: 40105394