{"id":6514,"date":"2026-09-07T18:47:32","date_gmt":"2026-09-07T16:47:32","guid":{"rendered":"https:\/\/wpresswartung.com\/agb\/"},"modified":"2026-09-30T15:28:39","modified_gmt":"2026-09-30T13:28:39","slug":"terms-and-conditions","status":"publish","type":"page","link":"https:\/\/wpresswartung.com\/en\/terms-and-conditions\/","title":{"rendered":"Terms and Conditions"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n
\n
\n \t\t\t\n\tHome\n<\/a>\n\t\t\t\t\t\/<\/span>\n\t\t\t\t\tGeneral Terms and Conditions<\/span>\n\t\t\n<\/div>\n\t\t\t

Terms and Conditions<\/p>\n\t\t\t\t\t

General Terms and Conditions<\/h1>\n\t\t\t\t\t

for WordPress maintenance, monitoring, security and related services<\/p>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

WPress Group LTD \u2013 WPressWartung<\/strong>
As of: 8 September 2026<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

\u00a7 1 Provider<\/h3>

The provider of the services offered under the brand WPressWartung<\/strong> is:<\/p>

WPress Group LTD<\/strong>
under the brand WPressWartung<\/strong><\/p>

Piccadilly Business Centre
Aldow Enterprise Park
Manchester
M12 6AE
United Kingdom<\/p>

Company Number: 16682136<\/strong><\/p>

Website: www.wpresswartung.com<\/a><\/strong><\/p>

\u2013 hereinafter “WPressWartung” or the “Contractor” \u2013<\/p>

\u00a7 2 Scope of application<\/h3>
  1. These General Terms and Conditions apply to all contracts between WPressWartung and its customers for WordPress maintenance, WordPress monitoring, security services, backups, technical support, performance optimisation and related services.<\/li>
  2. The offer is directed exclusively at business operators, companies, legal entities, freelancers and members of the liberal professions who enter into the contract in the course of their commercial or professional activity.<\/li>
  3. Contracts with consumers are not concluded within the scope of the maintenance contracts governed here.<\/li>
  4. Deviating general terms and conditions of the customer shall only apply if WPressWartung has expressly agreed to their inclusion in text form.<\/li>
  5. Individual offers, order confirmations and expressly agreed service descriptions take precedence over these T&Cs.<\/li><\/ol>

    \u00a7 3 Conclusion of contract<\/h3>
    1. The presentation of services on the WPressWartung website does not, in principle, constitute a legally binding offer to enter into a contract, but an invitation to place an order.<\/li>
    2. By completing the online ordering process or by accepting an individual offer, the customer submits a binding offer to enter into a contract.<\/li>
    3. The contract is concluded by:<\/li><\/ol>

      a) express order confirmation by WPressWartung,<\/p>

      b) payment confirmation and activation of the maintenance contract, or<\/p>

      c) commencement of the agreed services.<\/p>

      1. The specific scope of services is determined by the maintenance package selected by the customer or the individual offer.<\/li><\/ol>

        \u00a7 4 Subject matter of the contract<\/h3>
        1. WPressWartung undertakes the technical maintenance and monitoring of the WordPress website or WordPress websites specified by the customer.<\/li>
        2. Depending on the service package booked, the following services in particular may be included:<\/li><\/ol>
          • updating the WordPress core,<\/li>
          • updating WordPress plugins,<\/li>
          • updating WordPress themes,<\/li>
          • technical checks after updates,<\/li>
          • WordPress security monitoring,<\/li>
          • malware scans,<\/li>
          • review of suspicious files,<\/li>
          • login and brute-force monitoring,<\/li>
          • technical error monitoring,<\/li>
          • uptime monitoring,<\/li>
          • SSL certificate monitoring,<\/li>
          • backup creation or backup monitoring,<\/li>
          • restoration from existing backups,<\/li>
          • performance checks,<\/li>
          • cache configuration,<\/li>
          • CDN configuration,<\/li>
          • DDoS protection, where included in the package,<\/li>
          • technical on-page SEO measures, where included in the package,<\/li>
          • technical troubleshooting,<\/li>
          • maintenance reports,<\/li>
          • email support,<\/li>
          • priority support, where booked.<\/li><\/ul>
            1. Only the scope of services agreed at the time of the order or order confirmation is decisive.<\/li>
            2. Services that are not part of the booked maintenance package may be offered and charged separately.<\/li><\/ol>

              \u00a7 5 Services not included<\/h3>

              Unless expressly agreed, the following services in particular are not part of a standard maintenance contract:<\/p>

              • complete redevelopment of a website,<\/li>
              • extensive design changes,<\/li>
              • creation of new subpages,<\/li>
              • creation of texts,<\/li>
              • ongoing content maintenance,<\/li>
              • development of custom plugins,<\/li>
              • extensive PHP, JavaScript or CSS programming,<\/li>
              • repair of extensive existing programming errors,<\/li>
              • SEO campaigns,<\/li>
              • search engine rankings,<\/li>
              • Google Ads campaigns,<\/li>
              • social media marketing,<\/li>
              • legal review of the website,<\/li>
              • creation or review of the imprint and privacy policy,<\/li>
              • legal advice on cookie consent,<\/li>
              • licence fees for external software,<\/li>
              • paid premium plugins or themes,<\/li>
              • removal of extensive malware infections that already existed before the conclusion of the contract, unless expressly included.<\/li><\/ul>

                Additional work may be offered separately after prior consultation.<\/p>

                \u00a7 6 Maintenance and updates<\/h3>
                1. WPressWartung carries out WordPress, plugin and theme updates in accordance with the booked maintenance package.<\/li>
                2. The frequency depends on the respective agreed package.<\/li>
                3. WPressWartung may postpone updates if there are justified grounds to believe that an update:<\/li><\/ol>
                  • contains known errors,<\/li>
                  • is incompatible with the WordPress version in use,<\/li>
                  • could conflict with other plugins or themes in use,<\/li>
                  • could jeopardise the function of the website,<\/li>
                  • or cannot yet be recommended for security or stability reasons.<\/li><\/ul>
                    1. Security-critical updates may be carried out outside the regular maintenance interval if, in WPressWartung’s assessment, this is necessary and technically justifiable.<\/li>
                    2. WPressWartung owes professional performance of the maintenance services, but not complete freedom from defects in software provided by third-party providers.<\/li><\/ol>

                      \u00a7 7 Third-party plugins and themes<\/h3>
                      1. WordPress websites regularly use software from external vendors.<\/li>
                      2. WPressWartung has no influence on the development, discontinuation, licensing or technical quality of such third-party products.<\/li>
                      3. In particular, WPressWartung does not guarantee that:<\/li><\/ol>
                        • plugins will continue to be developed permanently,<\/li>
                        • themes will continue to be developed permanently,<\/li>
                        • software vendors will provide security updates,<\/li>
                        • third-party software will remain permanently compatible with WordPress,<\/li>
                        • third-party software will remain compatible with future PHP versions.<\/li><\/ul>
                          1. Paid plugin and theme licences must in principle be provided by the customer, unless expressly agreed otherwise.<\/li>
                          2. Missing or expired licences may mean that updates cannot be carried out.<\/li><\/ol>

                            \u00a7 8 Monitoring<\/h3>
                            1. Where monitoring is part of the booked package, WPressWartung automatically monitors certain technical parameters of the supported website.<\/li>
                            2. This may in particular include:<\/li><\/ol>
                              • HTTP and HTTPS availability,<\/li>
                              • server responses,<\/li>
                              • WordPress errors,<\/li>
                              • SSL certificates,<\/li>
                              • security events,<\/li>
                              • login activity,<\/li>
                              • malware indicators,<\/li>
                              • technical outages.<\/li><\/ul>
                                1. The term 24\/7 monitoring<\/strong> refers to continuous automated technical monitoring.<\/li>
                                2. 24\/7 monitoring does not mean that the website is permanently observed manually by an employee.<\/li>
                                3. Specific response or resolution times only apply if they have been expressly agreed as a service level agreement or as part of the booked package.<\/li>
                                4. Monitoring systems may generate false alarms or detect technical events with a delay.<\/li>
                                5. Detection of all outages, attacks or security problems with one hundred percent certainty cannot be guaranteed.<\/li><\/ol>

                                  \u00a7 9 Security measures<\/h3>
                                  1. Where part of the maintenance package, WPressWartung may carry out security measures that are necessary in its professional judgement.<\/li>
                                  2. This may in particular include:<\/li><\/ol>
                                    • malware scans,<\/li>
                                    • file checks,<\/li>
                                    • login protection,<\/li>
                                    • brute-force protection,<\/li>
                                    • IP blocking,<\/li>
                                    • firewall rules,<\/li>
                                    • password changes,<\/li>
                                    • deactivation of compromised user accounts,<\/li>
                                    • deactivation of vulnerable plugins,<\/li>
                                    • security updates,<\/li>
                                    • CDN and DDoS protection measures.<\/li><\/ul>
                                      1. If there is an immediate danger to the website, personal data or other systems, WPressWartung may carry out appropriate immediate measures.<\/li>
                                      2. This may in particular include the temporary deactivation of a plugin, theme, user account or vulnerable function.<\/li>
                                      3. The customer will be informed of material measures as promptly as possible.<\/li><\/ol>

                                        \u00a7 10 Backups<\/h3>
                                        1. Where backups are part of the booked maintenance package, WPressWartung creates or monitors regular backup copies.<\/li>
                                        2. Backups may in particular contain:<\/li><\/ol>
                                          • WordPress files,<\/li>
                                          • databases,<\/li>
                                          • Uploads and media files,<\/li>
                                          • Plugins,<\/li>
                                          • Themes,<\/li>
                                          • Technical configurations.<\/li><\/ul>
                                            1. The standard backup retention period is 14 days<\/strong>.<\/li>
                                            2. After 14 days have elapsed, older backups may be automatically deleted or overwritten.<\/li>
                                            3. Backups serve in particular to enable recovery following:<\/li><\/ol>
                                              • faulty updates,<\/li>
                                              • technical malfunctions,<\/li>
                                              • data loss,<\/li>
                                              • malware infections,<\/li>
                                              • security incidents,<\/li>
                                              • damaged WordPress installations.<\/li><\/ul>
                                                1. A complete restoration can only take place insofar as technically usable backups are available.<\/li>
                                                2. WPressWartung cannot guarantee that data can be restored that was already damaged or deleted before the backup was created.<\/li>
                                                3. The customer remains entitled, and is advised in the case of particularly business-critical data, to keep additional backup copies of its own.<\/li><\/ol>

                                                  \u00a7 11 Restoration<\/h3>
                                                  1. If a maintained website is impaired due to a technical problem, update or security incident, WPressWartung may attempt to restore a previous working state.<\/li>
                                                  2. The following may be used for this purpose in particular:<\/li><\/ol>
                                                    • existing backups,<\/li>
                                                    • database backups,<\/li>
                                                    • plugin rollbacks,<\/li>
                                                    • theme rollbacks,<\/li>
                                                    • manual repair measures.<\/li><\/ul>
                                                      1. There is no entitlement to the restoration of data for which no technically usable backup exists.<\/li><\/ol>

                                                        \u00a7 12 Hosting and WPressSites.com<\/h3>
                                                        1. Where hosting is part of the booked offering, the hosting infrastructure is provided via WPressSites.com<\/strong>.<\/li>
                                                        2. The customer’s contracting party remains WPress Group LTD, unless a different contracting party is expressly named in the order or order confirmation.<\/li>
                                                        3. The specific scope of hosting services results from the respective order or service description.<\/li>
                                                        4. If the customer uses its own hosting provider, WPressWartung assumes no responsibility for technical faults or outages that fall within that provider’s area of responsibility.<\/li>
                                                        5. This includes in particular:<\/li><\/ol>
                                                          • server outages,<\/li>
                                                          • network disruptions,<\/li>
                                                          • database problems,<\/li>
                                                          • DNS disruptions,<\/li>
                                                          • email disruptions,<\/li>
                                                          • hardware problems,<\/li>
                                                          • changes to server configurations,<\/li>
                                                          • data center outages.<\/li><\/ul>
                                                            1. Within the scope of the maintenance contract, WPressWartung supports the customer with technical fault analysis, insofar as this is possible and reasonable.<\/li><\/ol>

                                                              \u00a7 13 CDN and BunnyCDN<\/h3>
                                                              1. Where included in the booked package or technically necessary, WPressWartung may use a content delivery network to improve performance, availability and security.<\/li>
                                                              2. In particular, BunnyCDN \/ bunny.net<\/strong> is used for this purpose.<\/li>
                                                              3. A CDN may be used in particular for:<\/li><\/ol>
                                                                • delivery of static content,<\/li>
                                                                • caching functions,<\/li>
                                                                • performance optimization,<\/li>
                                                                • reduction of server load,<\/li>
                                                                • network optimization,<\/li>
                                                                • DDoS protection,<\/li>
                                                                • security functions.<\/li><\/ul>
                                                                  1. In this process, technical connection data such as IP addresses, requested URLs, browser information, request headers and timestamps may be processed.<\/li>
                                                                  2. Details on the processing of personal data under data protection law additionally arise from the data processing agreement.<\/li><\/ol>

                                                                    \u00a7 14 Customer’s Duties to Cooperate<\/h3>
                                                                    1. The customer provides WPressWartung with all information and access required to perform the agreed services.<\/li>
                                                                    2. This may include in particular:<\/li><\/ol>
                                                                      • WordPress administrator access,<\/li>
                                                                      • hosting access,<\/li>
                                                                      • Plesk or comparable administration access,<\/li>
                                                                      • SFTP\/FTP access,<\/li>
                                                                      • SSH access,<\/li>
                                                                      • database access,<\/li>
                                                                      • DNS access,<\/li>
                                                                      • CDN access.<\/li><\/ul>
                                                                        1. The customer ensures that the access credentials provided are correct and functional.<\/li>
                                                                        2. The customer informs WPressWartung of material changes to the website or infrastructure insofar as these may affect the maintenance service.<\/li>
                                                                        3. If changes made by the customer cause technical problems that go beyond the agreed scope of maintenance, the resolution may be charged separately.<\/li><\/ol>

                                                                          \u00a7 15 Lawfulness of the Website and Content<\/h3>
                                                                          1. The customer is solely responsible for the lawfulness of the content published and the services offered on its website.<\/li>
                                                                          2. This applies in particular to:<\/li><\/ol>
                                                                            • copyright,<\/li>
                                                                            • trademark rights,<\/li>
                                                                            • competition law,<\/li>
                                                                            • data protection law,<\/li>
                                                                            • information obligations,<\/li>
                                                                            • imprint,<\/li>
                                                                            • privacy policy,<\/li>
                                                                            • cookie and consent management,<\/li>
                                                                            • lawful processing of personal data.<\/li><\/ul>
                                                                              1. WPressWartung does not provide legal advice within the scope of the maintenance contract.<\/li>
                                                                              2. The customer ensures that it holds the necessary rights to all content it provides.<\/li><\/ol>

                                                                                \u00a7 16 Access Credentials and Security<\/h3>
                                                                                1. WPressWartung treats access credentials provided to it as confidential.<\/li>
                                                                                2. Where technically possible, separate user accounts should be set up for WPressWartung.<\/li>
                                                                                3. WPressWartung may recommend or require the use of appropriate security measures, in particular:<\/li><\/ol>
                                                                                  • secure passwords,<\/li>
                                                                                  • two-factor authentication,<\/li>
                                                                                  • individual user accounts,<\/li>
                                                                                  • restricted user permissions.<\/li><\/ul>
                                                                                    1. The customer must not publish access credentials in an unsecured manner or pass them on to unauthorized third parties.<\/li><\/ol>

                                                                                      \u00a7 17 Maintenance Windows and Interruptions<\/h3>
                                                                                      1. Maintenance, security, backup and restoration work may lead to brief interruptions of the website.<\/li>
                                                                                      2. Where possible, WPressWartung will try to minimize the impact on ongoing operations.<\/li>
                                                                                      3. In the case of urgent security measures, prior notice may be omitted.<\/li><\/ol>

                                                                                        \u00a7 18 Fees and Prices<\/h3>
                                                                                        1. The fee results from the order, the booked maintenance package or an individual quotation.<\/li>
                                                                                        2. Unless stated otherwise, all prices are exclusive of any applicable value added tax or other taxes required by law.<\/li>
                                                                                        3. The tax treatment is shown on the respective invoice in accordance with the applicable statutory provisions.<\/li>
                                                                                        4. Where a reverse-charge procedure applies, the customer is responsible for the proper tax treatment on its side.<\/li>
                                                                                        5. Additional services outside the booked maintenance package are only charged following corresponding agreement.<\/li><\/ol>

                                                                                          \u00a7 19 Payment Methods<\/h3>

                                                                                          WPressWartung may offer the following payment methods in particular:<\/p>

                                                                                          1. Credit card<\/strong><\/p>

                                                                                          For payment by credit card, billing takes place monthly.<\/p>

                                                                                          The maintenance contract is cancellable monthly.<\/p>

                                                                                          2. PayPal<\/strong><\/p>

                                                                                          For payment via PayPal, billing takes place monthly.<\/p>

                                                                                          The maintenance contract is cancellable monthly.<\/p>

                                                                                          3. SEPA direct debit<\/strong><\/p>

                                                                                          For payment by SEPA direct debit, billing takes place monthly.<\/p>

                                                                                          The maintenance contract is cancellable monthly.<\/p>

                                                                                          4. Invoice \/ bank transfer<\/strong><\/p>

                                                                                          For payment by invoice or bank transfer, an annual contract with a contract term of 12 months<\/strong> is concluded.<\/p>

                                                                                          The annual fee becomes due in accordance with the invoice issued.<\/p>

                                                                                          \u00a7 20 Contract Term and Termination<\/h3>

                                                                                          <\/p>

                                                                                          20.1 Monthly Contracts<\/h4>
                                                                                          1. For credit card payment, PayPal and SEPA direct debit, the contract is concluded for an indefinite period with monthly billing.<\/li>
                                                                                          2. The customer may terminate the contract at the end of the respective monthly billing period.<\/li>
                                                                                          3. Termination may be given in text form, in particular by email.<\/li>
                                                                                          4. Billing periods that have already begun are generally not refunded pro rata.<\/li><\/ol>

                                                                                            20.2 Annual Contracts for Purchase on Invoice<\/h4>
                                                                                            1. For payment by invoice or bank transfer, the minimum contract term is 12 months<\/strong>.<\/li>
                                                                                            2. The contract may be terminated with a notice period of 30 days to the end of the contract term<\/strong>.<\/li>
                                                                                            3. If no timely notice of termination is given, the contract is extended in each case by a further twelve months.<\/li>
                                                                                            4. Termination may be given in text form, in particular by email.<\/li><\/ol>

                                                                                              20.3 Extraordinary Termination<\/h4>

                                                                                              The right of both parties to extraordinary termination for good cause remains unaffected.<\/p>

                                                                                              Good cause may exist in particular in the case of:<\/p>

                                                                                              • significant default in payment,<\/li>
                                                                                              • unlawful use of the maintained systems,<\/li>
                                                                                              • attacks on WPressWartung’s systems,<\/li>
                                                                                              • repeated serious breaches of the duties to cooperate,<\/li>
                                                                                              • use of the website for unlawful purposes.<\/li><\/ul>

                                                                                                \u00a7 21 Default in Payment<\/h3>
                                                                                                1. Invoices are to be paid within the payment period stated on the invoice.<\/li>
                                                                                                2. If a recurring payment fails, WPressWartung may inform the customer of the failed payment and request a new payment.<\/li>
                                                                                                3. If the customer is in significant default in payment despite a reminder, WPressWartung may temporarily suspend the maintenance and monitoring services until payment has been made.<\/li>
                                                                                                4. Statutory claims arising from default in payment remain unaffected.<\/li><\/ol>

                                                                                                  \u00a7 22 No Guarantee of Results<\/h3>

                                                                                                  WPressWartung gives no guarantee of:<\/p>

                                                                                                  • a particular Google ranking,<\/li>
                                                                                                  • particular SEO results,<\/li>
                                                                                                  • particular loading times,<\/li>
                                                                                                  • particular Core Web Vitals values,<\/li>
                                                                                                  • a particular revenue,<\/li>
                                                                                                  • a particular conversion rate,<\/li>
                                                                                                  • absolute protection against hackers,<\/li>
                                                                                                  • complete freedom from malware at all times,<\/li>
                                                                                                  • uninterrupted availability of a website,<\/li>
                                                                                                  • the permanent functionality of third-party plugins or themes.<\/li><\/ul>

                                                                                                    \u00a7 23 Liability<\/h3>
                                                                                                    1. No provision of these Terms limits or excludes liability to the extent that such an exclusion would be impermissible under the law of England and Wales.<\/li>
                                                                                                    2. In particular, liability is not excluded for:<\/li><\/ol>
                                                                                                      • death or personal injury caused by negligence,<\/li>
                                                                                                      • fraud or fraudulent misrepresentation,<\/li>
                                                                                                      • or other liability that cannot be limited by law.<\/li><\/ul>
                                                                                                        1. To the extent permitted by law, WPressWartung is not liable for indirect or consequential damages.<\/li>
                                                                                                        2. To the extent permitted by law, WPressWartung is in particular not liable for:<\/li><\/ol>
                                                                                                          • loss of profit,<\/li>
                                                                                                          • loss of revenue,<\/li>
                                                                                                          • loss of business opportunities,<\/li>
                                                                                                          • damage to reputation,<\/li>
                                                                                                          • indirect economic losses.<\/li><\/ul>
                                                                                                            1. To the extent permitted by law, WPressWartung’s total liability arising out of or in connection with the respective maintenance contract is limited to the fees actually paid by the customer for the maintenance contract concerned in the twelve months preceding the event giving rise to liability.<\/li>
                                                                                                            2. This limitation of liability does not apply to liability that cannot be effectively limited by law.<\/li>
                                                                                                            3. WPressWartung is not liable for disruptions that lie exclusively within the area of responsibility of external service providers and for which WPressWartung is not responsible.<\/li><\/ol>

                                                                                                              \u00a7 24 Force Majeure<\/h3>

                                                                                                              WPressWartung is not liable for delays or failures caused by events beyond WPressWartung’s reasonable control.<\/p>

                                                                                                              This includes in particular:<\/p>

                                                                                                              • natural disasters,<\/li>
                                                                                                              • war,<\/li>
                                                                                                              • terrorism,<\/li>
                                                                                                              • governmental measures,<\/li>
                                                                                                              • widespread internet outages,<\/li>
                                                                                                              • telecommunications disruptions,<\/li>
                                                                                                              • power outages,<\/li>
                                                                                                              • data center outages,<\/li>
                                                                                                              • large-scale cyberattacks on central infrastructure.<\/li><\/ul>

                                                                                                                \u00a7 25 Data Protection and Data Processing<\/h3>
                                                                                                                1. Both parties undertake to comply with the data protection provisions applicable to them.<\/li>
                                                                                                                2. Where WPressWartung processes personal data on behalf of the customer, the following data processing agreement additionally applies.<\/li>
                                                                                                                3. The data processing agreement forms part of the maintenance contract.<\/li>
                                                                                                                4. For personal data that WPress Group LTD processes for its own purposes, in particular:<\/li><\/ol>
                                                                                                                  • contract administration,<\/li>
                                                                                                                  • invoicing,<\/li>
                                                                                                                  • accounting,<\/li>
                                                                                                                  • payment processing,<\/li>
                                                                                                                  • customer communication,<\/li><\/ul>

                                                                                                                    WPress Group LTD generally acts as an independent controller.<\/p>

                                                                                                                    \u00a7 26 Confidentiality<\/h3>
                                                                                                                    1. WPressWartung treats the customer’s non-public information as confidential.<\/li>
                                                                                                                    2. This applies in particular to:<\/li><\/ol>
                                                                                                                      • access credentials,<\/li>
                                                                                                                      • customer data,<\/li>
                                                                                                                      • databases,<\/li>
                                                                                                                      • technical configurations,<\/li>
                                                                                                                      • business processes,<\/li>
                                                                                                                      • security information.<\/li><\/ul>
                                                                                                                        1. The obligation of confidentiality continues after termination of the contract.<\/li><\/ol>

                                                                                                                          \u00a7 27 Termination of the Contract<\/h3>

                                                                                                                          Upon termination of the maintenance contract:<\/p>

                                                                                                                          1. the obligation to continue maintenance and monitoring ends;<\/li>
                                                                                                                          2. access credentials set up for WPressWartung may be deactivated or deleted;<\/li>
                                                                                                                          3. personal data is deleted or returned in accordance with the data processing agreement;<\/li>
                                                                                                                          4. data in existing backups may remain until the regular backup retention period of no more than 14 days has expired, before it is automatically deleted or overwritten.<\/li><\/ol>

                                                                                                                            Statutory retention obligations remain unaffected.<\/p>

                                                                                                                            \u00a7 28 Changes to the Technical Infrastructure<\/h3>
                                                                                                                            1. WPressWartung may change the technical systems, security solutions, monitoring services and infrastructure components it uses, provided the essential scope of services is not unreasonably impaired as a result.<\/li>
                                                                                                                            2. Changes of sub-processors are additionally subject to the provisions of the data processing agreement.<\/li><\/ol>

                                                                                                                              \u00a7 29 Communication<\/h3>

                                                                                                                              Contract-related notices may generally be given electronically by email.<\/p>

                                                                                                                              The customer is obliged to keep a current business email address on file.<\/p>

                                                                                                                              \u00a7 30 Governing Law<\/h3>

                                                                                                                              To the extent permitted by law, all contractual relationships between WPress Group LTD and the customer are governed by the law of England and Wales<\/strong>.<\/p>

                                                                                                                              Mandatory statutory provisions whose application cannot be effectively excluded remain unaffected.<\/p>

                                                                                                                              \u00a7 31 Jurisdiction<\/h3>

                                                                                                                              To the extent permitted by law, disputes arising out of or in connection with the contractual relationship are subject to the exclusive jurisdiction of the courts of England and Wales<\/strong>.<\/p>

                                                                                                                              To the extent legally permissible, Manchester, United Kingdom<\/strong>, is agreed as the place of jurisdiction.<\/p>

                                                                                                                              \u00a7 32 Final Provisions<\/h3>
                                                                                                                              1. Should an individual provision of these Terms be or become invalid or unenforceable, this generally does not affect the validity of the remaining provisions.<\/li>
                                                                                                                              2. To the extent legally permissible, the invalid provision will be replaced by the applicable statutory provisions.<\/li>
                                                                                                                              3. Amendments to individual contractual agreements generally require text form, unless a stricter form is prescribed by law.<\/li><\/ol>

                                                                                                                                <\/h1>

                                                                                                                                <\/h1>

                                                                                                                                DATA PROCESSING AGREEMENT<\/h3>

                                                                                                                                pursuant to Art. 28 GDPR and the corresponding provisions of the UK GDPR<\/h4>

                                                                                                                                <\/p>

                                                                                                                                between<\/p>

                                                                                                                                the respective customer of WPressWartung<\/strong><\/p>

                                                                                                                                \u2013 hereinafter the “Controller” \u2013<\/p>

                                                                                                                                and<\/p>

                                                                                                                                WPress Group LTD<\/strong>
                                                                                                                                trading under the brand WPressWartung<\/strong><\/p>

                                                                                                                                Piccadilly Business Centre
                                                                                                                                Aldow Enterprise Park
                                                                                                                                Manchester
                                                                                                                                M12 6AE
                                                                                                                                United Kingdom<\/p>

                                                                                                                                Company Number: 16682136<\/strong><\/p>

                                                                                                                                \u2013 hereinafter the “Processor” \u2013<\/p>

                                                                                                                                DPA \u00a7 1 Subject Matter<\/h3>
                                                                                                                                1. This data processing agreement governs the processing of personal data by WPress Group LTD on behalf of the Controller.<\/li>
                                                                                                                                2. The agreement applies insofar as WPress Group LTD can access the Controller’s personal data in the course of WordPress maintenance, technical support, monitoring, security monitoring, data backup or support.<\/li>
                                                                                                                                3. The DPA supplements the main contract existing between the parties.<\/li>
                                                                                                                                4. In the event of a conflict between the data protection provisions of the main contract and this DPA, the provisions of this DPA take precedence with regard to the data processing.<\/li><\/ol>

                                                                                                                                  DPA \u00a7 2 Subject Matter and Duration of the Processing<\/h3>
                                                                                                                                  1. The subject matter of the processing is the technical support of the WordPress website or websites operated by the Controller.<\/li>
                                                                                                                                  2. The processing takes place for the duration of the respective maintenance or service contract.<\/li>
                                                                                                                                  3. After the end of the contract, personal data is deleted or returned in accordance with the provisions of this DPA.<\/li><\/ol>

                                                                                                                                    DPA \u00a7 3 Nature and Purpose of the Processing<\/h3>

                                                                                                                                    Personal data may be processed in particular for:<\/p>

                                                                                                                                    • WordPress maintenance,<\/li>
                                                                                                                                    • WordPress updates,<\/li>
                                                                                                                                    • plugin updates,<\/li>
                                                                                                                                    • theme updates,<\/li>
                                                                                                                                    • fault analysis,<\/li>
                                                                                                                                    • fault resolution,<\/li>
                                                                                                                                    • security monitoring,<\/li>
                                                                                                                                    • malware detection,<\/li>
                                                                                                                                    • login monitoring,<\/li>
                                                                                                                                    • server and log file analysis,<\/li>
                                                                                                                                    • uptime monitoring,<\/li>
                                                                                                                                    • backup creation,<\/li>
                                                                                                                                    • backup storage,<\/li>
                                                                                                                                    • restoration,<\/li>
                                                                                                                                    • performance optimization,<\/li>
                                                                                                                                    • support,<\/li>
                                                                                                                                    • technical administration,<\/li>
                                                                                                                                    • CDN and security measures.<\/li><\/ul>

                                                                                                                                      DPA \u00a7 4 Categories of Personal Data<\/h3>

                                                                                                                                      Depending on the respective website, the following personal data in particular may be processed:<\/p>

                                                                                                                                      • first name and last name,<\/li>
                                                                                                                                      • address,<\/li>
                                                                                                                                      • email address,<\/li>
                                                                                                                                      • telephone number,<\/li>
                                                                                                                                      • IP address,<\/li>
                                                                                                                                      • username,<\/li>
                                                                                                                                      • user ID,<\/li>
                                                                                                                                      • customer number,<\/li>
                                                                                                                                      • technical identifiers,<\/li>
                                                                                                                                      • login data,<\/li>
                                                                                                                                      • server and log data,<\/li>
                                                                                                                                      • browser information,<\/li>
                                                                                                                                      • device information,<\/li>
                                                                                                                                      • contact form content,<\/li>
                                                                                                                                      • comments,<\/li>
                                                                                                                                      • order data,<\/li>
                                                                                                                                      • WooCommerce customer data,<\/li>
                                                                                                                                      • billing data,<\/li>
                                                                                                                                      • delivery information,<\/li>
                                                                                                                                      • communication data,<\/li>
                                                                                                                                      • newsletter data,<\/li>
                                                                                                                                      • technical website data.<\/li><\/ul>

                                                                                                                                        DPA \u00a7 5 Categories of Data Subjects<\/h3>

                                                                                                                                        Data subjects may in particular be:<\/p>

                                                                                                                                        • website visitors,<\/li>
                                                                                                                                        • customers,<\/li>
                                                                                                                                        • prospects,<\/li>
                                                                                                                                        • newsletter subscribers,<\/li>
                                                                                                                                        • registered users,<\/li>
                                                                                                                                        • WooCommerce customers,<\/li>
                                                                                                                                        • employees,<\/li>
                                                                                                                                        • applicants,<\/li>
                                                                                                                                        • suppliers,<\/li>
                                                                                                                                        • business partners,<\/li>
                                                                                                                                        • service providers,<\/li>
                                                                                                                                        • contact persons of the Controller.<\/li><\/ul>

                                                                                                                                          DPA \u00a7 6 Special Categories of Personal Data<\/h3>
                                                                                                                                          1. Depending on the Controller’s business activities, special categories of personal data may also be found on the website.<\/li>
                                                                                                                                          2. The Controller informs WPressWartung if special categories of personal data are regularly processed via the maintained website and this gives rise to particular security requirements.<\/li>
                                                                                                                                          3. WPressWartung processes such data exclusively within the scope of the agreed technical services and instructions.<\/li><\/ol>

                                                                                                                                            DPA \u00a7 7 Responsibility of the Controller<\/h3>
                                                                                                                                            1. The Controller remains responsible for the lawfulness of the collection and processing of the personal data.<\/li>
                                                                                                                                            2. The Controller is in particular responsible for:<\/li><\/ol>
                                                                                                                                              • the existence of a legal basis,<\/li>
                                                                                                                                              • information obligations,<\/li>
                                                                                                                                              • data subject rights,<\/li>
                                                                                                                                              • privacy policies,<\/li>
                                                                                                                                              • consents,<\/li>
                                                                                                                                              • cookie consent,<\/li>
                                                                                                                                              • retention and deletion periods,<\/li>
                                                                                                                                              • lawfulness of the content.<\/li><\/ul>
                                                                                                                                                1. WPressWartung generally makes no independent decisions on the purposes of processing the customer data.<\/li><\/ol>

                                                                                                                                                  DPA \u00a7 8 Duty to Follow Instructions<\/h3>
                                                                                                                                                  1. WPressWartung processes personal data exclusively on documented instructions from the Controller, unless a legal obligation requires other processing.<\/li>
                                                                                                                                                  2. The main contract, this DPA, as well as documented support requests and email instructions constitute documented instructions.<\/li>
                                                                                                                                                  3. Additional instructions may be given in text form.<\/li>
                                                                                                                                                  4. If WPressWartung considers an instruction to be impermissible under data protection law, the Controller will be informed thereof.<\/li>
                                                                                                                                                  5. The instruction in question may be suspended until the matter is clarified.<\/li><\/ol>

                                                                                                                                                    DPA \u00a7 9 Confidentiality<\/h3>
                                                                                                                                                    1. WPressWartung ensures that persons with access to personal data are bound to confidentiality or are subject to an appropriate statutory duty of secrecy.<\/li>
                                                                                                                                                    2. Access to personal data is granted only to persons who need this access to provide the agreed services.<\/li>
                                                                                                                                                    3. The obligation of confidentiality continues beyond the termination of the respective contract.<\/li><\/ol>

                                                                                                                                                      DPA \u00a7 10 Security of Processing<\/h3>
                                                                                                                                                      1. Taking into account:<\/li><\/ol>
                                                                                                                                                        • the state of the art,<\/li>
                                                                                                                                                        • the costs of implementation,<\/li>
                                                                                                                                                        • the nature and scope of the processing,<\/li>
                                                                                                                                                        • the purpose and context of the processing,<\/li>
                                                                                                                                                        • the likelihood and severity of possible risks<\/li><\/ul>

                                                                                                                                                          WPressWartung implements appropriate technical and organizational measures.<\/p>

                                                                                                                                                          1. The aim is in particular to ensure:<\/li><\/ol>
                                                                                                                                                            • confidentiality,<\/li>
                                                                                                                                                            • integrity,<\/li>
                                                                                                                                                            • availability,<\/li>
                                                                                                                                                            • resilience of the systems,<\/li>
                                                                                                                                                            • recoverability.<\/li><\/ul>
                                                                                                                                                              1. The essential technical and organisational measures are set out in the TOM annex to this contract.<\/li><\/ol>

                                                                                                                                                                DPA \u00a7 11 Sub-processors<\/h3>
                                                                                                                                                                1. The controller grants WPress Group LTD a general authorisation to engage sub-processors.<\/li>
                                                                                                                                                                2. WPress Group LTD may engage sub-processors to the extent this is necessary for the provision of the agreed services.<\/li>
                                                                                                                                                                3. WPress Group LTD ensures that sub-processors assume appropriate data protection obligations.<\/li>
                                                                                                                                                                4. WPress Group LTD remains responsible to the controller for the proper involvement of its sub-processors under data protection law, to the extent provided by law.<\/li>
                                                                                                                                                                5. WPress Group LTD may add, replace or remove sub-processors.<\/li>
                                                                                                                                                                6. Material changes will be notified to the controller in an appropriate manner, for example:<\/li><\/ol>
                                                                                                                                                                  • by email,<\/li>
                                                                                                                                                                  • via the customer portal,<\/li>
                                                                                                                                                                  • via a current list of sub-processors on the website.<\/li><\/ul>
                                                                                                                                                                    1. The controller may object within 14 days of notification for comprehensible data protection reasons.<\/li>
                                                                                                                                                                    2. If the parties cannot find an appropriate replacement or a reasonable solution, the affected service may be terminated.<\/li><\/ol>

                                                                                                                                                                      DPA \u00a7 12 Hosting via WPressSites.com<\/h3>
                                                                                                                                                                      1. The hosting infrastructure used for maintenance, hosting, backup and technical services may be provided via WPressSites.com<\/strong>.<\/li>
                                                                                                                                                                      2. To the extent WPressSites.com is a service or platform of WPress Group LTD, the processing is carried out directly by the processor.<\/li>
                                                                                                                                                                      3. To the extent further infrastructure, server, data centre or cloud providers are used to provide WPressSites.com, they may be engaged as sub-processors.<\/li>
                                                                                                                                                                      4. WPress Group LTD ensures that the required data protection agreements are in place with such sub-processors.<\/li><\/ol>

                                                                                                                                                                        DPA \u00a7 13 BunnyCDN \/ bunny.net<\/h3>

                                                                                                                                                                        The following may be used for CDN, performance and, where applicable, security functions:<\/p>

                                                                                                                                                                        BunnyWay d.o.o.<\/strong>
                                                                                                                                                                        Dunajska cesta 165
                                                                                                                                                                        1000 Ljubljana
                                                                                                                                                                        Slovenia<\/p>

                                                                                                                                                                        Service: bunny.net \/ BunnyCDN<\/strong><\/p>

                                                                                                                                                                        Purpose:<\/p>

                                                                                                                                                                        • content delivery network,<\/li>
                                                                                                                                                                        • caching,<\/li>
                                                                                                                                                                        • website acceleration,<\/li>
                                                                                                                                                                        • performance optimisation,<\/li>
                                                                                                                                                                        • technical security functions,<\/li>
                                                                                                                                                                        • DDoS protection,<\/li>
                                                                                                                                                                        • delivery of website resources.<\/li><\/ul>

                                                                                                                                                                          In this context, IP addresses, request data, URLs, header information and technical log data in particular may be processed.<\/p>

                                                                                                                                                                          DPA \u00a7 14 Further sub-processors<\/h3>

                                                                                                                                                                          WPress Group LTD may engage further technical sub-processors, in particular for:<\/p>

                                                                                                                                                                          • server infrastructure,<\/li>
                                                                                                                                                                          • data centres,<\/li>
                                                                                                                                                                          • backups,<\/li>
                                                                                                                                                                          • monitoring,<\/li>
                                                                                                                                                                          • security,<\/li>
                                                                                                                                                                          • email services,<\/li>
                                                                                                                                                                          • technical communication,<\/li>
                                                                                                                                                                          • support systems.<\/li><\/ul>

                                                                                                                                                                            The current list of the material sub-processors may be published separately by WPress Group LTD or made available to the controller on request.<\/p>

                                                                                                                                                                            DPA \u00a7 15 Third-country transfers<\/h3>
                                                                                                                                                                            1. Personal data will only be transferred outside the European Economic Area to the extent the requirements of the applicable data protection laws are met.<\/li>
                                                                                                                                                                            2. To the extent personal data is transferred from the European Economic Area to WPress Group LTD in the United Kingdom, the transfer may be based on a valid adequacy decision of the European Commission.<\/li>
                                                                                                                                                                            3. Should a corresponding adequacy decision be repealed, suspended or no longer applicable, the parties will, where necessary, use an alternative permissible transfer basis.<\/li>
                                                                                                                                                                            4. These may include, in particular:<\/li><\/ol>
                                                                                                                                                                              • Standard Contractual Clauses of the European Commission,<\/li>
                                                                                                                                                                              • other transfer mechanisms permitted by law.<\/li><\/ul>
                                                                                                                                                                                1. If sub-processors transfer data to further third countries, WPress Group LTD ensures that the required transfer basis is in place in each case.<\/li><\/ol>

                                                                                                                                                                                  DPA \u00a7 16 Data subject rights<\/h3>

                                                                                                                                                                                  WPressWartung supports the controller to an appropriate extent with requests from data subjects concerning:<\/p>

                                                                                                                                                                                  • access,<\/li>
                                                                                                                                                                                  • rectification,<\/li>
                                                                                                                                                                                  • erasure,<\/li>
                                                                                                                                                                                  • restriction of processing,<\/li>
                                                                                                                                                                                  • data portability,<\/li>
                                                                                                                                                                                  • objection,<\/li>
                                                                                                                                                                                  • other statutory data subject rights.<\/li><\/ul>

                                                                                                                                                                                    Requests received directly by WPressWartung that relate to the controller’s data will, as a rule, be forwarded to the controller.<\/p>

                                                                                                                                                                                    WPressWartung does not respond to such requests independently, unless it is legally obliged to do so.<\/p>

                                                                                                                                                                                    DPA \u00a7 17 Personal data breaches<\/h3>
                                                                                                                                                                                    1. If WPressWartung becomes aware of a personal data breach affecting data processed by the controller, WPressWartung will inform the controller without undue delay.<\/li>
                                                                                                                                                                                    2. To the extent known and available, the information will contain in particular:<\/li><\/ol>
                                                                                                                                                                                      • a description of the incident,<\/li>
                                                                                                                                                                                      • the affected systems,<\/li>
                                                                                                                                                                                      • the type of data affected,<\/li>
                                                                                                                                                                                      • possible impacts,<\/li>
                                                                                                                                                                                      • countermeasures already taken.<\/li><\/ul>
                                                                                                                                                                                        1. WPressWartung supports the controller to an appropriate extent in assessing and handling a data protection incident.<\/li>
                                                                                                                                                                                        2. The decision on notifications to data protection supervisory authorities or data subjects lies in principle with the controller, unless WPressWartung itself is legally obliged to do so.<\/li><\/ol>

                                                                                                                                                                                          DPA \u00a7 18 Data protection impact assessment<\/h3>

                                                                                                                                                                                          Taking into account the available information and the nature of the processing, WPressWartung appropriately supports the controller with:<\/p>

                                                                                                                                                                                          • data protection impact assessments,<\/li>
                                                                                                                                                                                          • security assessments,<\/li>
                                                                                                                                                                                          • consultations with supervisory authorities,<\/li><\/ul>

                                                                                                                                                                                            to the extent this concerns the processing carried out by WPressWartung on behalf of the controller.<\/p>

                                                                                                                                                                                            DPA \u00a7 19 Right of control and audit<\/h3>
                                                                                                                                                                                            1. On reasonable request, WPressWartung will provide the controller with information necessary to assess compliance with this DPA.<\/li>
                                                                                                                                                                                            2. The controller may carry out reasonable audits or have them carried out by an independent auditor bound to confidentiality.<\/li>
                                                                                                                                                                                            3. Audits must:<\/li><\/ol>
                                                                                                                                                                                              • be announced in good time,<\/li>
                                                                                                                                                                                              • take place during normal business hours,<\/li>
                                                                                                                                                                                              • be limited to the necessary scope,<\/li>
                                                                                                                                                                                              • protect trade secrets and the data of other customers.<\/li><\/ul>
                                                                                                                                                                                                1. Where possible, documentation, certificates, security information or remote audits should be used first.<\/li>
                                                                                                                                                                                                2. If an individual on-site audit requested by the controller causes considerable additional effort, this may be charged after prior agreement.<\/li>
                                                                                                                                                                                                3. This does not apply if an audit has become necessary due to a significant data protection violation demonstrably caused by WPressWartung.<\/li><\/ol>

                                                                                                                                                                                                  DPA \u00a7 20 Deletion and return<\/h3>
                                                                                                                                                                                                  1. After the end of the processing, WPressWartung will delete personal data or return it, at the controller’s choice, unless statutory obligations require further retention.<\/li>
                                                                                                                                                                                                  2. Access credentials and administrative user accounts may be deleted or deactivated after the end of the contract.<\/li>
                                                                                                                                                                                                  3. For technical reasons, personal data may still be contained in existing backup copies.<\/li>
                                                                                                                                                                                                  4. The regular backup retention period is 14 days<\/strong>.<\/li>
                                                                                                                                                                                                  5. After this backup period has expired, the corresponding backup copies are deleted or overwritten in the regular backup cycle.<\/li>
                                                                                                                                                                                                  6. During this period, backup copies may in principle only be used for security and recovery purposes.<\/li><\/ol>

                                                                                                                                                                                                    DPA \u00a7 21 Rectification and restriction<\/h3>

                                                                                                                                                                                                    WPressWartung rectifies, deletes or restricts personal data on the documented instructions of the controller, to the extent technically possible and legally permissible.<\/p>

                                                                                                                                                                                                    DPA \u00a7 22 WPress Group LTD’s own responsibility<\/h3>

                                                                                                                                                                                                    This DPA does not apply to personal data that WPress Group LTD processes for its own business purposes.<\/p>

                                                                                                                                                                                                    This includes in particular:<\/p>

                                                                                                                                                                                                    • the customer’s contact person data,<\/li>
                                                                                                                                                                                                    • contract data,<\/li>
                                                                                                                                                                                                    • billing data,<\/li>
                                                                                                                                                                                                    • accounting records,<\/li>
                                                                                                                                                                                                    • payment information,<\/li>
                                                                                                                                                                                                    • support communication relating to its own contractual relationship.<\/li><\/ul>

                                                                                                                                                                                                      For such processing, WPress Group LTD acts in principle as an independent controller.<\/p>

                                                                                                                                                                                                      DPA \u00a7 23 Final provisions<\/h3>
                                                                                                                                                                                                      1. This DPA applies together with the respective main contract.<\/li>
                                                                                                                                                                                                      2. To the extent mandatory data protection law contains stricter requirements, these statutory requirements prevail.<\/li>
                                                                                                                                                                                                      3. In all other respects, the governing law and jurisdiction provisions of the main contract apply, to the extent permissible under data protection law.<\/li><\/ol>

                                                                                                                                                                                                        ANNEX 1 \u2013 TECHNICAL AND ORGANISATIONAL MEASURES<\/h3>

                                                                                                                                                                                                        <\/p>

                                                                                                                                                                                                        1. Access control<\/h4>

                                                                                                                                                                                                        WPressWartung applies appropriate measures to prevent unauthorised access to systems.<\/p>

                                                                                                                                                                                                        Depending on the technical system, these include in particular:<\/p>

                                                                                                                                                                                                        • individual user accounts,<\/li>
                                                                                                                                                                                                        • role-based access rights,<\/li>
                                                                                                                                                                                                        • secure passwords,<\/li>
                                                                                                                                                                                                        • two-factor authentication, where available,<\/li>
                                                                                                                                                                                                        • limitation of administrative privileges,<\/li>
                                                                                                                                                                                                        • blocking of access that is no longer needed.<\/li><\/ul>

                                                                                                                                                                                                          2. Authorisation control<\/h4>

                                                                                                                                                                                                          Access to customer systems and personal data is granted only to persons who need this access for their work.<\/p>

                                                                                                                                                                                                          Permissions are granted in accordance with the principle of least privilege.<\/p>

                                                                                                                                                                                                          3. Transmission security<\/h4>

                                                                                                                                                                                                          For administrative and other suitable data transfers, encrypted connections are used where technically supported.<\/p>

                                                                                                                                                                                                          These include in particular:<\/p>

                                                                                                                                                                                                          • HTTPS\/TLS,<\/li>
                                                                                                                                                                                                          • SSH,<\/li>
                                                                                                                                                                                                          • SFTP,<\/li>
                                                                                                                                                                                                          • encrypted administration interfaces.<\/li><\/ul>

                                                                                                                                                                                                            Insecure transmission methods should be avoided where a secure alternative is available.<\/p>

                                                                                                                                                                                                            4. System and application security<\/h4>

                                                                                                                                                                                                            Depending on the system concerned, WPressWartung applies appropriate security measures, in particular:<\/p>

                                                                                                                                                                                                            • regular updates,<\/li>
                                                                                                                                                                                                            • security patches,<\/li>
                                                                                                                                                                                                            • malware scans,<\/li>
                                                                                                                                                                                                            • firewall functions,<\/li>
                                                                                                                                                                                                            • login protection,<\/li>
                                                                                                                                                                                                            • brute-force protection,<\/li>
                                                                                                                                                                                                            • security monitoring.<\/li><\/ul>

                                                                                                                                                                                                              5. Availability control<\/h4>

                                                                                                                                                                                                              To reduce the risk of data loss and outages, the following may in particular be used:<\/p>

                                                                                                                                                                                                              • backups,<\/li>
                                                                                                                                                                                                              • monitoring,<\/li>
                                                                                                                                                                                                              • recovery procedures,<\/li>
                                                                                                                                                                                                              • CDN systems,<\/li>
                                                                                                                                                                                                              • technical security measures.<\/li><\/ul>

                                                                                                                                                                                                                6. Backups<\/h4>

                                                                                                                                                                                                                Where included in the booked maintenance package:<\/p>

                                                                                                                                                                                                                • backups are created or monitored regularly;<\/li>
                                                                                                                                                                                                                • the regular retention period is 14 days;<\/li>
                                                                                                                                                                                                                • backups may be used for recovery after technical faults.<\/li><\/ul>

                                                                                                                                                                                                                  7. Monitoring<\/h4>

                                                                                                                                                                                                                  Technical systems may be monitored automatically for:<\/p>

                                                                                                                                                                                                                  • outages,<\/li>
                                                                                                                                                                                                                  • security events,<\/li>
                                                                                                                                                                                                                  • WordPress errors,<\/li>
                                                                                                                                                                                                                  • malware indicators,<\/li>
                                                                                                                                                                                                                  • SSL issues.<\/li><\/ul>

                                                                                                                                                                                                                    <\/p>

                                                                                                                                                                                                                    8. Confidentiality<\/h4>

                                                                                                                                                                                                                    Persons with access to personal data are bound to confidentiality.<\/p>

                                                                                                                                                                                                                    Access is limited to the necessary group of persons.<\/p>

                                                                                                                                                                                                                    9. Incident management<\/h4>

                                                                                                                                                                                                                    For identifiable security incidents, appropriate organisational procedures exist for:<\/p>

                                                                                                                                                                                                                    • assessment,<\/li>
                                                                                                                                                                                                                    • containment,<\/li>
                                                                                                                                                                                                                    • documentation,<\/li>
                                                                                                                                                                                                                    • technical remediation,<\/li>
                                                                                                                                                                                                                    • informing the affected clients.<\/li><\/ul>

                                                                                                                                                                                                                      10. Recovery<\/h4>

                                                                                                                                                                                                                      Where technically possible, data and websites can be restored after technical incidents using existing backups.<\/p>

                                                                                                                                                                                                                      11. Regular review<\/h4>

                                                                                                                                                                                                                      Technical and organisational measures are reviewed at appropriate intervals and in the event of material technical changes, and adjusted where necessary.<\/p>

                                                                                                                                                                                                                      12. Sub-processor management<\/h4>

                                                                                                                                                                                                                      External service providers who may gain access to personal customer data in the course of processing on behalf of the controller are engaged in an appropriate manner under data protection law.<\/p>

                                                                                                                                                                                                                      ANNEX 2 \u2013 SERVICES CURRENTLY USED<\/h3>

                                                                                                                                                                                                                      WPressSites.com<\/h4>

                                                                                                                                                                                                                      Purpose:<\/strong><\/p>

                                                                                                                                                                                                                      • hosting,<\/li>
                                                                                                                                                                                                                      • server infrastructure,<\/li>
                                                                                                                                                                                                                      • backup infrastructure,<\/li>
                                                                                                                                                                                                                      • technical provisioning of WordPress systems.<\/li><\/ul>

                                                                                                                                                                                                                        Possible data:<\/strong><\/p>

                                                                                                                                                                                                                        • website data,<\/li>
                                                                                                                                                                                                                        • databases,<\/li>
                                                                                                                                                                                                                        • IP addresses,<\/li>
                                                                                                                                                                                                                        • log data,<\/li>
                                                                                                                                                                                                                        • user information,<\/li>
                                                                                                                                                                                                                        • customer data of the controller.<\/li><\/ul>

                                                                                                                                                                                                                          To the extent WPressSites.com is operated directly by WPress Group LTD, the processing is carried out by WPress Group LTD itself.<\/p>

                                                                                                                                                                                                                          BunnyWay d.o.o. \/ bunny.net<\/h4>

                                                                                                                                                                                                                          BunnyWay d.o.o.<\/strong>
                                                                                                                                                                                                                          Dunajska cesta 165
                                                                                                                                                                                                                          1000 Ljubljana
                                                                                                                                                                                                                          Slovenia<\/p>

                                                                                                                                                                                                                          Service:<\/strong><\/p>

                                                                                                                                                                                                                          BunnyCDN \/ bunny.net<\/p>

                                                                                                                                                                                                                          Purpose:<\/strong><\/p>

                                                                                                                                                                                                                          • content delivery network,<\/li>
                                                                                                                                                                                                                          • performance,<\/li>
                                                                                                                                                                                                                          • caching,<\/li>
                                                                                                                                                                                                                          • network optimisation,<\/li>
                                                                                                                                                                                                                          • DDoS and security functions.<\/li><\/ul>

                                                                                                                                                                                                                            Possible data:<\/strong><\/p>

                                                                                                                                                                                                                            • IP addresses,<\/li>
                                                                                                                                                                                                                            • requested URLs,<\/li>
                                                                                                                                                                                                                            • technical request data,<\/li>
                                                                                                                                                                                                                            • browser information,<\/li>
                                                                                                                                                                                                                            • timestamps,<\/li>
                                                                                                                                                                                                                            • technical log data.<\/li><\/ul>

                                                                                                                                                                                                                              Consent to the DPA<\/h1>

                                                                                                                                                                                                                              By concluding the maintenance contract and engaging WPressWartung, the parties agree to this data processing agreement, to the extent WPress Group LTD processes personal data on behalf of the customer.<\/p>

                                                                                                                                                                                                                              The main contract, including this DPA, may be concluded and documented electronically.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/section>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                                                                                                                                                                                                                              Home \/ General Terms and Conditions Terms and Conditions General Terms and Conditions for WordPress maintenance, monitoring, security and related […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Terms & Conditions | WPressWartung","_seopress_titles_desc":"General terms and conditions for WPressWartung's WordPress maintenance services.","_seopress_robots_index":"yes","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"Terms and conditions","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"full-width-container","site-content-style":"unboxed","site-sidebar-style":"unboxed","ast-global-header-display":"","ast-banner-title-visibility":"disabled","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-6514","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/wpresswartung.com\/en\/wp-json\/wp\/v2\/pages\/6514","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wpresswartung.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/wpresswartung.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/wpresswartung.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wpresswartung.com\/en\/wp-json\/wp\/v2\/comments?post=6514"}],"version-history":[{"count":2,"href":"https:\/\/wpresswartung.com\/en\/wp-json\/wp\/v2\/pages\/6514\/revisions"}],"predecessor-version":[{"id":6516,"href":"https:\/\/wpresswartung.com\/en\/wp-json\/wp\/v2\/pages\/6514\/revisions\/6516"}],"wp:attachment":[{"href":"https:\/\/wpresswartung.com\/en\/wp-json\/wp\/v2\/media?parent=6514"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}