Security • Operations • Support
Security and Support
Registered office: 9700 Szombathely, Szent Imre herceg utca 76/a., Hungary
Guesthouse site: 9476 Zsira, Salamonfai utca 30., Hungary
Company registration number: 18-09-103456
Tax number: 11512354-2-18
Representative: Keszei-Timár Andrea
NTAK registration number: EG19013209
1. Purpose
The purpose is to define the main measures supporting website availability, data security, maintainability, troubleshooting and restoration.
2. Administrative access and MFA
- WordPress administration is restricted to authorised users.
- Strong unique passwords are required; multi-factor authentication can be applied at WordPress or hosting level.
- Administrative access is granted only when operationally necessary and revoked promptly when no longer required.
3. CAPTCHA and form protection
Public forms use CAPTCHA protection, server-side checks, WordPress nonces and field validation. This includes booking, gift-card requests, contact forms and newsletter subscription.
4. WAF and firewall protection
Server-side or WordPress security layers can be used to filter common attack patterns, malicious requests, brute-force attempts and vulnerability exploitation.
5. Backups and restoration
- File-level backup of hosting/FTP content and SQL database backup.
- Retention window: 30 days.
- Full backups for the first 14 days, followed by incremental backups.
- Encrypted storage in a Hungarian DC10 TIER III certified data centre.
- Restoration based on an authorised support ticket, with a target time of no more than +2 business days.
6. WordPress self-service backup
Authorised users can also create full exports and import them using the All-in-One WP Migration tool in WordPress, at a frequency of their choice.
7. Auditing and logging
Web-server logs, WordPress administrative events and technical errors related to the booking and email functions can be logged and reviewed when needed.
8. Update procedure
WordPress core, plugins and the custom Napvirág-Ház theme are updated in a controlled manner. A backup is recommended before updates, followed by functional checks of booking, gift card, CAPTCHA and email delivery.
9. IT support
The agreement includes 12 months of Hungarian-language IT support for operational issues, essential technical questions and normal website operation.
10. Responsibilities
The beneficiary is responsible for the accuracy of business and legal content. Technical operation, backup, restoration and support are provided within the applicable service agreements.
Effective: from the launch date of the website.