Entity Identification

The personal data described in this Policy is processed by Oleksii Andriiuk, place of business: Moldavská cesta 506/5, 044 02 Turňa nad Bodvou, Slovenská republika, Company ID (IČO): 57831025, registered in the Živnostenský register Okresného úradu Košice-okolie, č. 830-28791. Tax ID (DIČ): 3122603968. Supervisory authority: Okresný úrad Košice-okolie, odbor živnostenského podnikania. Contact: [email protected].

1. Introduction

Posimos respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use and process it, and what rights you have over your personal data when using our service.

2. Data Controller

Posimos (the "Controller") is the party responsible for the processing of personal data in connection with the provision of this platform's services. For any questions relating to personal data protection, please contact us at: [email protected].

3. Roles in Data Processing

In our relationship with Clients (business owners and their staff), we act as the Controller and independently determine the purposes and means of processing their personal data. With respect to the personal data of a Client's own customers and staff entered into the Service (including End Consumers), we act as a data processor, processing such data solely on the documented instructions of the Client, who acts as the controller of that data and is responsible for its lawful collection. This division of roles is further described in the Data Processing section of our Terms of Service.

4. Data We Collect

We collect and process the following categories of personal data:

Account data: first and last name, email address, phone number, business information (name, address, establishment type).

Operational data: order information, menu items and products, inventory and stock data, staff and shift records.

Technical data: IP address, browser and operating system type, pages visited, dates and times of visits, device information.

Payment data: transaction history, subscription information and status. We do not store payment card numbers - card data is processed directly by the payment provider in accordance with PCI DSS standards.

5. How We Use Your Data

The personal data we collect is used to: provide and maintain the functionality of the Posimos service; process payments and manage subscriptions; send transactional notifications (registration confirmations, invoices, technical notices); improve and develop the platform based on usage analysis; prevent fraud and ensure the security of the service; comply with applicable law.

6. Legal Basis for Processing

We process personal data on the following legal grounds: performance of a contract - to create and administer your account and to provide the Service you have signed up for; legitimate interests - to secure the Service and to analyse usage of the logged-in dashboard in order to maintain, protect, and improve it; compliance with legal obligations - to meet requirements under tax, accounting, and other applicable legislation; consent - for marketing cookies and marketing communications, where consent is required by law. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal. Providing the account data listed above is a requirement for concluding and performing the contract; without it we cannot create or maintain your account.

7. Disclosure to Third Parties

We do not sell, rent, or share your personal data with third parties for commercial purposes. Data may be shared only with the following categories of trusted service providers acting on our behalf: hosting providers (EU), payment provider, analytics and monitoring services, customer-support tools, and internal communication tools. All such providers are required to comply with applicable data protection requirements and to process personal data only on our instructions. We may also disclose personal data at the request of a competent public authority where required by applicable law.

8. International Data Transfers

The production infrastructure of the Service is located in the European Union. Some of our trusted service providers may nevertheless be located outside the European Economic Area (EEA). In such cases, we ensure an adequate level of personal data protection through standard contractual clauses or other safeguards recognised under applicable data protection law.

9. Data Retention

We retain personal data for as long as necessary for the provision of the Service, compliance with legal obligations of the Slovak Republic and the EU, and the establishment or defence of legal claims.

10. Your Rights

Under applicable data protection law, you have the right to: access your personal data and receive a copy of it; rectify inaccurate or incomplete data; request erasure of data in cases provided for by law; restrict the processing of your data; object to the processing of your data; receive your data in a portable, machine-readable format.

To exercise any of these rights, please contact us at: [email protected].

You also have the right to lodge a complaint with a supervisory authority - in particular the Úrad na ochranu osobných údajov Slovenskej republiky (the Office for Personal Data Protection of the Slovak Republic), or the supervisory authority of the EU member state of your habitual residence - if you believe that the processing of your personal data violates applicable law.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. In particular, we use TLS encryption for data in transit, and access to personal data is granted only to authorised staff within the scope of their duties.

12. Cookies

Our service uses cookies and similar tracking technologies to support platform functionality, analyse usage, and improve the user experience. For detailed information about the types of cookies we use and how to manage them, please see our Cookie Policy.

13. Children

The Posimos service is not intended for or directed at persons under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental or guardian consent, please contact us at [email protected] and we will take steps to delete that information.

14. Changes to This Policy

We reserve the right to update this Privacy Policy in response to changes in legislation or our business practices. We will notify you of any material changes in advance - by email to your registered address or by posting a notice on the website. Continued use of the service after the changes take effect constitutes your acceptance of the updated Policy.

15. Contact Information

For questions about this Policy or the processing of your personal data, please contact us: [email protected], phone: +380 73 023 51 20.

16. Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. Analytical and AI-based features of the Service operate on the business data you enter and only provide information for your own decisions.