Komputex Privacy Policy

1. Data controller

The controller of personal data processed in connection with the komputex.eu corporate website and direct business communications is Prem Kamal Sp. z o.o., operating under the Komputex brand (“Komputex”, “we”, “us”).

General and privacy enquiries: kontakt@komputex.eu. Technical integration and Komputex Connect enquiries: integrations@komputex.eu.

2. Scope of this policy

This policy applies to the komputex.eu corporate website, correspondence sent to Komputex, and Komputex Connect integration data to the extent that Komputex acts as a data controller.

Individual products or customer deployments, including Smakigo or systems implemented for clients, may have separate privacy notices appropriate to their functionality and data-processing model.

3. Website technical data

When you use komputex.eu, our hosting and security infrastructure may process technical information required to deliver and protect the website, such as IP address, request date/time, requested URL, browser/device information and security events.

This information is primarily used to maintain availability, diagnose faults, prevent abuse and protect the infrastructure.

4. Information you provide when contacting us

If you contact us by email or regarding a service, we may process information contained in your message, including your name, email address, company, telephone number (if provided), enquiry content and information required to prepare an offer or provide the requested service.

Please do not send personal information that is not necessary for the matter you are contacting us about.

5. Komputex Connect and marketplace/POS integrations

Komputex Connect is being developed as an integration layer between ordering marketplaces and restaurant POS systems. When a specific integration is authorised by an eligible merchant/restaurant, the service may process information made available by the relevant marketplace or POS to the extent necessary to operate that integration.

This may include merchant/store identifiers, order identifiers, products and modifiers, quantities, prices, order status, fulfilment type (delivery/pickup), timestamps, operational information and a limited amount of customer information contained in the order where the platform provides it under its rules and it is required to fulfil the order.

Integration data is used to receive, normalise, route and synchronise orders, handle failures, monitor integration quality, maintain security and provide technical support. We do not use marketplace order data to build advertising profiles and we do not sell personal data.

The parties' legal roles may vary by integration and contract. Where Komputex processes personal data solely on behalf of a restaurant or another controller, Komputex acts on that controller's documented instructions and under the applicable data-processing arrangement.

6. Purposes and legal bases

Depending on the context, we process data for the following purposes:

• responding to enquiries, preparing an offer, taking steps before entering into a contract or performing a contract — Article 6(1)(b) GDPR;
• website and systems security, abuse prevention, troubleshooting and establishing, exercising or defending legal claims — legitimate interests, Article 6(1)(f) GDPR;
• ordinary B2B communication and management of customer/partner relationships — legitimate interests, Article 6(1)(f) GDPR;
• compliance with legal, tax or accounting obligations — Article 6(1)(c) GDPR;
• operating an authorised integration under the relevant contract and, where we act as processor, under the controller's documented instructions.

7. Recipients and service providers

Information may be made available to service providers that support our business, such as hosting, email, IT infrastructure, security, backup, accounting and technical-service providers. For Komputex Connect, data may be transmitted between an authorised marketplace and the target POS system where this is necessary for the integration.

We disclose only the information required for the relevant service, integration or legal obligation.

8. Transfers outside the EEA

If a technology provider or integration partner processes personal data outside the European Economic Area, we use the safeguards required by the GDPR as applicable to the particular service, such as an adequacy decision or Standard Contractual Clauses where required.

9. Retention

We keep personal data no longer than necessary for the purpose for which it was collected. Correspondence and information related to offers or contracts may be retained for the duration of the relationship and afterwards where necessary for accounting, legal obligations or the establishment, exercise or defence of claims. Technical and security logs are retained according to the operational and security configuration of the infrastructure.

Komputex Connect integration data is retained only as necessary for order processing, troubleshooting, security and accountability, subject to contractual and legal requirements.

10. Your rights

Where provided by the GDPR, you may request access to your data, rectification, erasure, restriction of processing and data portability, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact kontakt@komputex.eu. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO).

11. Cookies and analytics

In the current version of the komputex.eu corporate website, we do not include our own advertising or analytics scripts and do not intentionally place non-essential tracking cookies. Hosting or security infrastructure may use technical mechanisms that are necessary to deliver and protect the website.

If we later introduce analytics, marketing tools or other non-essential technologies that require consent, we will update this policy and implement an appropriate consent mechanism before using them.

12. Security

We use technical and organisational measures appropriate to the nature of the service and the risk, including access controls, system protections and limiting access to information to people and systems that require it for their tasks.

For API integrations, authentication credentials and tokens are intended to be handled server-side and are not intended for public disclosure or inclusion in client-side code.

13. Changes to this policy

This policy may be updated as our website, products, mobile applications and integrations develop. The current version will be published at https://komputex.eu/en/privacy/.