Procurement, legal and security at a glance.

Company

hackers&wizards GmbH

Address

Osterstraße 95, 20259 Hamburg, Germany

Commercial register

Amtsgericht Hamburg, HRB 198840

VAT ID

DE463065921

Managing directors

Benedikt Stemmildt, Stefan Munz, each with sole power of representation

Orders, invoices and payments

accounting@hackersandwizards.dev

E-invoice

XRechnung or ZUGFeRD, if you request it with your order

Insurance

IT professional liability insurance with Markel; each limit is available up to three times per insurance year:

• EUR 1 million per claim for financial loss
• EUR 3 million for personal injury and property damage

Certificate available on request.

Your offer sets out each of these terms.

Ordering

To accept our offer, simply reply to it; no signature is needed.

Under a framework agreement, you order through your usual work order.

Contract type

All services are provided under a service contract (Dienstvertrag) with no acceptance step: training, mentoring, assessment, pilot and implementation.

Training

• EUR 1,500 per participant for a two-day team training
• EUR 750 for a one-day training

You pay for no more than 10 participants; up to 12 can attend.

Mentoring

On call after every two-day team training: you book the hours your team needs, typically 2 to 4 a week over 4 to 12 weeks, at EUR 250 per hour, billed monthly as delivered. At those hours that is about EUR 2,000 to EUR 12,000 on top of the training.

Assessment and pilot

Readiness Assessment: EUR 15,000, fixed price.

The scope and price of a Factory Pilot follow from your assessment.

Payment terms

Your offer states the payment term:

• 15 days net for trainings and mentoring
• 30 days for larger projects

A framework agreement takes precedence over both.

All prices are net, plus VAT. Travel is charged at cost, once you have approved it.

Large organizations

One team at a time, 8 to 12 people per training.

The fee for two-day team trainings drops by 5% from 5 groups booked in one order, by 10% from 10 and by 15% from 15. The discount applies to every group in that order. Mentoring stays at the hourly rate.

EnablementTraining a large engineering organization →

Cancellation

• Free of charge up to four weeks before the date
• 50% of the fee between four and two weeks before
• 100% less than two weeks before

Plus any travel costs already incurred.

Rescheduling is free if a new date within eight weeks is agreed at the same time.

Liability

Agreed individually in your contract or framework agreement.

Results

What your team builds belongs to you and stays in your repository.

Our generic training material remains ours; your team may continue to use it internally.

Your assessment report and the pilot's code are yours; the methods behind them stay ours.

NDA

We sign yours.

Everyone working on your engagement also signs an NDA with us that passes your NDA's obligations on to them.

DPA (AVV)

We sign yours wherever your data protection officer requires one. It covers:

• Training: participants' names and email addresses, for attendance certificates and the feedback survey
• Assessment or pilot: the data you grant access to

Team and subcontractors

• Practitioners from our network of more than 70, selected for technical fit, language and seniority
• We plan for the same people to stay with you for the whole engagement
• Assessments and Factory Pilots are delivered with our delivery partner re:cinq
• Every subcontractor is named and agreed in your offer; hackers&wizards remains your contractual partner

Your code

In a training, trainers never receive, clone or store your code: your team works in its own code on its own machines.

On an assessment or pilot, the agreed team:

• works only in your systems, using accounts you provide
• sees only the code and data you grant access to
• copies nothing to its own systems

The assessment can also be run without code access.

AI tools and providers

We use them with your code and data only where you provide or approve them.

No model is trained on your data.

Your contract sets out individually which tools and providers are used and where your data goes.

Technical and organisational measures

• Encrypted company devices
• Multi-factor sign-in with hardware keys
• Personal accounts only
• Need-to-know access, reviewed every month
• Encrypted transfer and backups
• Separate storage for each client

Based on CIS Benchmarks and BSI IT-Grundschutz, with an annual self-assessment. We are not ISO 27001 certified.

We attach them to your DPA, together with our list of subprocessors.

Deletion

We return or delete confidential information within 30 days of the end of the engagement, or within 30 days of your request, whichever comes first.

Security incidents

Report incidents to summon@hackersandwizards.dev.

If an incident affects your information, we notify you within 24 hours of becoming aware of it.

Works council

The training counts as vocational training under §§ 96 to 98 BetrVG. The works council:

• is consulted
• co-determines how in-company training is carried out
• can propose participants

The tools your team uses in and after the training may fall under § 87 (1) no. 6 BetrVG.

Later changes to roles or to how teams are organised fall under § 90 BetrVG, which includes the use of artificial intelligence, and under § 111.

BetrVG, gesetze-im-internet.de → (opens in a new tab)

Participant data

Names and email addresses, used for the attendance certificates.

AI Act Article 4

Since 2 February 2025, Article 4 has required companies that deploy AI systems to take measures that support their staff's AI literacy.

A training with an attendance certificate for every participant is a measure you can document.

Article 4, AI Act Service Desk of the European Commission → (opens in a new tab)