The controller of the personal data of Clients (account holders) is the Operator: Bartecki Group sp. z o.o., with its registered office at ul. Franciszka Ilskiego 2B/8, 04-479 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under no. 0000720383 (District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the KRS), share capital PLN 5,000.00, NIP 5223114944, REGON 369554818, e-mail: kontakt@tentermin.pl, data-protection matters: iod@tentermin.pl.
For the personal data of the Client's End Users, the Client is the controller and the Operator acts as a processor (see the Data Processing Agreement). This Policy concerns data for which the Operator is the controller (Client accounts and use of the Platform).
Data may be entrusted, under data processing agreements, to processors supporting the Service: the hosting provider, the e-mail provider, the SMS gateway (SMSAPI / LINK Mobility sp. z o.o.) and the push-notification provider (Google - Firebase Cloud Messaging). The payment provider - Paynow, the online payment system of mBank S.A. (technically operated by mElements S.A., a company of the mBank Group) - acts as a separate, independent controller of payers' data for the purpose of executing payments and its own legal obligations (payment-services and AML law); its processing is governed by the payment provider's own privacy policy.
Website analytics (Matomo) is self-hosted on the Operator's own infrastructure - no separate recipient, sub-processor or third-party analytics provider is involved.
The full, current list of sub-processors (with name, address, purpose and location) is publicly available: tentermin.pl/podprocesorzy.
Data is kept for the term of the Agreement and afterwards for periods required by law (e.g. accounting) or until the limitation of claims. If you do not confirm your e-mail address within 4 h of signing up, we delete the account together with the data you entered; only a statistical note that a registration was not completed remains, without the address, name or salon name.
You have the right to access, rectification, erasure (anonymization), restriction, objection and data portability, and to lodge a complaint with the President of the Personal Data Protection Office (PUODO). To exercise your rights, write to: iod@tentermin.pl.
The Platform uses only cookies necessary for authentication and security (session, CSRF). We do not use analytical or marketing cookies.
To measure traffic on our own pages (information page, sign-up, legal documents) we use Matomo, self-hosted on the Operator's infrastructure. The tracker runs without cookies, honours the browser's Do Not Track signal, and the IP address is anonymized (truncated) before storage. The data is not shared with any third party and does not leave the EEA. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring and improving our own pages); you may object at any time under Art. 21 GDPR. We do not run this analytics on salon booking pages (/s/...) nor inside the salon panel.
Data is processed within the EEA. The push-notification provider (Google) may process device identifiers outside the EEA (e.g. in the USA) on the basis of appropriate safeguards (EU Standard Contractual Clauses / the EU-US Data Privacy Framework). The Operator may update this Policy; material changes are announced via the Platform.