General Terms and Conditions

Provider: P1R4T3 Security. E-mail: rharan@p1r4t3.hu. Website: p1r4t3.hu. Hosting provider: Rackhost Zrt. (Hungary). The provider's full company details (company name, registered office, registration number, tax number) are set out in the proposal and the agreement (Hungarian Act CVIII of 2001, section 4).

P1R4T3 Security is not on the vulnerability assessor register of the Supervisory Authority of Regulated Activities (SZTFH) and therefore does not perform vulnerability assessments mandatory under Act LXIX of 2024. A voluntary security assessment does not replace a mandatory assessment under the Act.

These Terms become part of the agreement between the Client and the Tester if the Tester made them available before contracting and the Client accepted them (Civil Code 6:78(1)). The parties may agree individually to depart from them; the individual agreement then prevails (Civil Code 6:81).

The agreement is concluded by written acceptance of the Tester's proposal and signature of the service agreement. The proposal is valid for the period stated in it. The language of the agreement is Hungarian, or English on request.

Testing may begin only once the Tester holds the authorization signed by the Client. Without it the Tester does not begin, and any delay is at the Client's risk.

The service is an engagement of due care: the Tester acts with professional care but does not warrant that all vulnerabilities will be found or that the system is secure. The report reflects the state at the time of testing.

The P1R4T3 Platform is available during the term for managing findings, documents and messages. The Tester grants access by invitation, and the Client is responsible for the secure use of its accounts. The Tester does not guarantee uninterrupted availability and gives advance notice of planned maintenance where possible.

The Client provides the necessary access and information, ensures backups, appoints an emergency contact, and disables test accounts after testing. Credentials are shared only through a secure channel agreed by the parties.

The Client is responsible for delay arising from failure to cooperate; deadlines are then extended proportionately.

The fee is set out in the proposal. The payment deadline is as in the proposal or, failing that, 30 days. In case of delay the Tester may claim default interest under Civil Code 6:155 and the recovery cost lump sum under Act IX of 2016.

The Client acknowledges that testing may cause temporary outage or slowdown even when carried out with care. The Tester is not liable for such effects arising from conduct in line with the authorization.

The Tester's liability for damage caused by breach is limited, per event and in total, to the net fee under the agreement and does not extend to lost profit.

This limitation does not apply to intentional damage or to breach harming human life, physical integrity or health (Civil Code 6:152).

The parties treat information received as trade secrets. The Tester names the Client or results as a reference only with written consent. The Client may freely use the report internally and towards authorities, auditors and business partners; the Tester's methodology and tools remain its intellectual property.

The privacy notice and, where necessary, the data processing agreement govern the processing of personal data.

The parties are not liable for delay due to unavoidable circumstances beyond their control. Termination is governed by Civil Code 6:278.

The Tester may amend these Terms; amendments apply to new agreements after publication, and to ongoing ones only with the Client's acceptance.

Hungarian law, in particular the Civil Code, governs these Terms and the agreements. The parties first seek to settle disputes by negotiation; failing that, the Hungarian court with jurisdiction proceeds.