Skip to content

Privacy Policy

Last updated: March 2026

1. Data Controller

The data controller for your personal data is Kohls RCM Pawel Kohls, Lechicka 59, 61-695 Poznan, Poland, VAT ID: PL5542524133. You can contact us regarding data protection at [email protected].

2. What Data We Collect

  • Account data: Email address, username
  • Billing data: Processed by Stripe — we do not store your card details
  • Usage data: Instance configuration, storage usage, backup history
  • Login events: IP address, browser user agent, and timestamp for each login — retained for a minimum of 12 months
  • Technical data: Server access logs including IP addresses, request URLs, and timestamps
  • Communication data: Messages sent through our contact form

3. How We Use Your Data

  • Providing and maintaining our services
  • Processing payments and managing subscriptions
  • Communicating with you about your account
  • Responding to support requests
  • Ensuring security and preventing abuse
  • Complying with legal obligations

Legal basis (GDPR Art. 6): contract performance, legitimate interest, consent, legal obligation.

4. Payment Processing

Payments are processed by Stripe, Inc. Your card details are sent directly to Stripe and are never stored on our servers. Stripe acts as a data processor under GDPR. See Stripe's Privacy Policy.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe — payment processing
  • Infrastructure providers — server hosting (EU-based)
  • Cloudflare — DNS and CDN services
  • Law enforcement — when required by valid legal process (court order, subpoena), or when we have a good-faith belief that disclosure is necessary to prevent imminent harm

6. Data Storage

Your data is stored on servers in the European Union. Billing records are retained for 5 years as required by Polish tax law. Login events and access logs are retained for a minimum of 12 months for security and legal compliance purposes. After account deletion, personal data is removed within 30 days, except where retention is required by law or for ongoing legal proceedings.

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Portability — receive your data in a structured format
  • Restriction — restrict processing of your data
  • Objection — object to processing based on legitimate interest
  • Withdraw consent — where processing is based on consent

Contact [email protected]. We respond within 30 days. You may also lodge a complaint with the Polish Data Protection Authority (UODO).

8. Cookies

We use essential cookies for session management and authentication only. We do not use advertising or tracking cookies.

9. Contact