Terms and Conditions for Avencyx Academy open programs

2. Subject matter

2.1. Avencyx provides the participant with the training service described on the program page at the date of enrollment: syllabus, duration, format, materials, assessment and certificate, under the conditions stated there and in these terms.

2.2. The program page, the Avencyx Academy Standards and the privacy notice form part of the contract. In case of inconsistency, these terms prevail, then the program page.

3. Enrollment and conclusion of the contract

3.1. Enrollment begins with the submission of the application, as the email prepared by the form on the site and sent by the participant to academy@avencyx.com. Submitting the application is a request, not a reservation; Avencyx replies within three business days and may accept or decline the application, based on the audience and prerequisites published for the program. A refusal is reasoned and involves no cost.

3.2. On acceptance, Avencyx sends the written confirmation and, after receiving the invoicing details, the pro forma invoice with the bank-transfer details. The contract is concluded on the date the participation fee is received. Seats are reserved in order of receipt of payment, within the available places.

3.3. If the fee is not received within the period stated in the confirmation, the seat is released and the application remains valid for a later edition, by agreement of the parties.

3.4. The participant declares that the information in the application is accurate and that they meet the published prerequisites. Avencyx may refuse participation or exclude the participant if the information proves false in respects essential to the program.

4. Price and payment

4.1. The participation fee is the one displayed on the program page at the date the application is submitted, expressed in euros, with VAT stated separately and as a total. The invoice is issued in RON at the BNR exchange rate on the invoice date.

4.2. Payment is made exclusively by bank transfer to the account indicated on the pro forma invoice, quoting the payment reference stated on it.

4.3. The fee includes the three course days, the materials, assessment with written feedback, the certificate or certificate of attendance, access to the materials for 12 months, lunch and coffee breaks and, for the Avencyx Professional Cybersecurity & AI program, a hardware security key. It does not include travel, accommodation, the participant's equipment or tool subscriptions, which are not required to complete the exercises.

5. Confirmation, postponement and cancellation of an edition by Avencyx

5.1. An edition is confirmed at a minimum of 10 enrolled participants, at least 10 days before the first course day. If the number is not reached, Avencyx notifies participants in writing and offers them, at their choice, a seat at a later edition or a full refund of the fee, within 14 days of the participant's choice.

5.2. Avencyx may reschedule an edition for reasons beyond its control (unavailability of the trainer or venue, force majeure). The participant chooses between the new date and a full refund. Avencyx is not liable for the participant's travel or accommodation expenses.

5.3. Avencyx may change the venue within Bucharest, with at least 5 days' notice, or replace the co-trainer. A change of lead trainer entitles the participant to choose between attending and a full refund.

6. Transfer and postponement by the participant

6.1. The participant may transfer their seat to another person who meets the program's prerequisites, up to three business days before the first course day, at no cost, by written notice to academy@avencyx.com. The new participant completes the application form and accepts these terms.

6.2. The participant may postpone their participation to a later edition of the same program, once, by written notice at least seven days before the first course day. If no edition the participant can attend is organized within 12 months, the fee is refunded in full.

6.3. No-show, or cancellation notified less than seven days before the course, does not entitle the participant to a refund, except for the right of withdrawal under Article 7 and proven force majeure (Article 13), in which case postponement applies.

7. The consumer's right of withdrawal

7.1. A participant who concludes the contract as a consumer — a natural person acting for purposes outside their trade, business, craft or profession — has the right to withdraw from the contract within 14 days of its conclusion (Article 3.2), without giving any reason and without cost, under Romanian Government Emergency Ordinance no. 34/2014.

7.2. Withdrawal is communicated by an unequivocal statement, by email to academy@avencyx.com, before the period expires. The model withdrawal form annexed to GEO no. 34/2014, which you receive with your enrollment confirmation, may be used but is not mandatory. Avencyx acknowledges receipt and refunds the amounts received within 14 days of receiving the statement, using the same means of payment, unless the participant agrees otherwise.

7.3. If the first course day is scheduled before the 14-day period expires, the consumer participant expressly requests, by ticking the corresponding box in the application form, transcribed into the application email, that performance of the service begin during the withdrawal period. In that case, if they withdraw after the course has started, they owe an amount proportionate to the part performed until the withdrawal was communicated, relative to the total price; once the service has been fully performed, the right of withdrawal ends, and the participant acknowledges this through the same box.

7.4. The right of withdrawal does not apply to participants enrolled for professional purposes or to contracts concluded with legal entities. Article 6 applies to them.

8. Participant obligations and code of conduct

8.1. The participant attends with the equipment indicated on the program page and in the preparation guide, and completes the required preparation before the course. Avencyx is not liable for the inability to complete exercises caused by non-compliant equipment or by restrictions imposed by the participant's IT administrator.

8.2. The participant undertakes: to work only on the cases, data and practice accounts provided by Avencyx or, where the program provides for it, on their own devices and accounts; not to investigate real people during the course; not to bring or enter into the exercises data belonging to clients, patients, sources or other third parties; not to use the techniques learned to access systems, accounts or data that do not belong to them, or to test other people without their consent; to treat as confidential information about other participants, their devices, practices and the situations they describe; to apply the techniques learned only within the legal limits of their profession.

8.3. The participant does not record the course sessions by audio, video or screen capture and does not photograph other participants without their consent.

8.4. A serious or repeated breach of these obligations entitles Avencyx to exclude the participant from the course, without refund of the fee, and to refuse enrollment in future editions.

9. Course materials and intellectual property

9.1. The course materials (manual, worksheets, checklists, templates, cases, presentations) are the property of Avencyx or are used with the rights holders' consent. The participant receives a personal, non-transferable right to use them for their own professional activity, including the right to adapt the templates for their own use.

9.2. Reproducing, distributing, publishing or using the materials to deliver training to third parties, for a fee or free of charge, is not permitted without Avencyx's written consent.

9.3. The work produced by the participant (the OSINT dossier, the security plan) belongs to the participant. Avencyx uses it exclusively for assessment and feedback and does not publish or reuse it without written consent.

9.4. Online access to the materials is provided for 12 months from the end of the edition, including updates published in that period.

10. Confidentiality

10.1. Avencyx does not publish the list of participants and does not use the participant's name, image or organization in promotional material without their written consent, requested separately from enrollment. Avencyx does not record audio or video of the sessions.

10.2. Participants' confidentiality obligation towards other participants (Article 8.2) survives the end of the course.

11. Assessment and certificate

11.1. Assessment is carried out against the criteria and weights published on the program page at the date of enrollment. The result and written feedback are communicated within five business days of the end of the course or of receipt of the work, as applicable. The pass mark is 70%. The participant may resubmit the work once, within 30 days of the result being communicated, at no cost.

11.2. The Avencyx Academy certificate is issued to participants who have passed the assessment; the others receive a certificate of attendance. The certificate is Avencyx's own document, without national recognition and not issued under a program authorized by a public authority; it does not confer a regulated professional status. Avencyx keeps a register of certificates issued and confirms the authenticity of a certificate at the request of any person who provides its number.

11.3. Appeals regarding the assessment are submitted within 10 days of the result being communicated and are reviewed by the lead trainer together with a second Avencyx assessor; the reply is communicated within 10 business days.

12. Liability

12.1. Avencyx undertakes to deliver the program with the diligence of a professional, in accordance with the published description and the Avencyx Academy Standards. Training is an obligation of means: Avencyx does not guarantee a particular professional outcome, the outcome of an investigation, the admissibility of evidence or the absence of security incidents after the course.

12.2. Configurations made by the participant on their own devices and accounts during the exercises are made by the participant, under guidance, and remain their responsibility. The participant is advised to back up their data before the course. Avencyx is not liable for data loss, account lockouts or other effects of configurations made by the participant contrary to instructions or on non-compliant equipment.

12.3. The participant is responsible for how they apply the techniques learned outside the course and for complying with the legal limits of their profession. The course content does not constitute legal advice.

12.4. To the extent permitted by law, Avencyx's liability towards the client for any claim related to a program is limited to the participation fee received for that participant. This limitation does not apply to damage caused intentionally or by gross negligence and does not affect consumers' statutory rights.

13. Force majeure

13.1. Neither party is liable for non-performance caused by unforeseeable and insurmountable events beyond its control, including measures by public authorities that make in-person delivery impossible. In such cases, the edition is rescheduled under Article 5.2. For the participant, medically documented illness during the course period entitles them to postponement under Article 6.2, regardless of the notice period.

14. Personal data

14.1. Participants' personal data is processed in accordance with the Privacy Notice for Avencyx Academy programs, available at /academy/privacy/, which forms part of these terms.

15. Complaints and disputes

15.1. Complaints are sent to academy@avencyx.com. Avencyx acknowledges receipt within two business days and replies within ten business days.

15.2. Consumers may contact the Romanian National Authority for Consumer Protection (ANPC, anpc.ro) and may use alternative dispute resolution through SAL entities, under Romanian Government Ordinance no. 38/2015.

15.3. The contract is governed by Romanian law. Disputes not settled amicably fall under the jurisdiction of the Romanian courts; for consumers, the competent court is determined according to the legal rules protecting them.

16. Changes to these terms

16.1. Avencyx may amend these terms for future editions. An enrollment is governed by the version in force on the date the contract is concluded, as communicated in the confirmation. Previous versions are available on request.

17. Contact

TOP CYBER TECH S.R.L. — Avencyx Academy · academy@avencyx.com · Intrarea Constantin Simionescu 19, Sector 1, Bucuresti, Romania, 012255