Skip to content

Privacy policy

Effective from
Last updated

In short

We process only the data Garnify needs to work: your account details and what you enter into the system yourself. We process your clients’ and staff’s data on your behalf and do not use it for our own purposes.

PLACEHOLDER — summary to be approved by a lawyer

1. Who we are

PLACEHOLDER · legal text — to be drafted by a lawyer

This section will name the company that provides Garnify, how to contact us, and when we act as a controller and when as a processor.

1.1. Terms

Controller
The company that decides why and how personal data is processed.
Processor
The company that processes data on the controller’s behalf and on its instructions.
Data subject
The person whose data is processed — for example, your client or a bartender.
Personal data
Any information that can identify a person.

2. What data we process

PLACEHOLDER · legal text — to be drafted by a lawyer

This will list the categories of data Garnify processes as a controller:

  • Account data — name, email, phone, company
  • Billing data — invoices and payment status
  • Usage data — sign-in time, device, error logs
  • Communication with us — emails and chat messages

3. Purposes and legal basis

PLACEHOLDER · legal text — to be drafted by a lawyer

The table will show why we process each category of data, on what basis and how long we keep it.

  • Account data

    Purpose
    Creating the account and signing in
    Legal basis
    Performance of a contract
    Retention period
    to be confirmed
  • Billing data

    Purpose
    Invoicing and accounting
    Legal basis
    Legal obligation
    Retention period
    to be confirmed
  • Usage data

    Purpose
    Security and fixing errors
    Legal basis
    Legitimate interests
    Retention period
    to be confirmed
  • Communication

    Purpose
    Answering questions
    Legal basis
    Legitimate interests
    Retention period
    to be confirmed

4. When we are a processor

PLACEHOLDER · legal text — to be drafted by a lawyer

This will explain how Garnify’s role as a controller is separated from its role as a processor.

5. Confidentiality, sub-processors and data transfers

PLACEHOLDER · legal text — to be drafted by a lawyer

This section will describe which service providers we entrust data to, where the data is located and how it is protected if it is transferred outside the European Economic Area.

List of sub-processors

6. Retention and security

PLACEHOLDER · legal text — to be drafted by a lawyer

This will state how long data is kept, where the servers are located and what technical and organisational measures protect it.

7. Your rights

PLACEHOLDER · legal text — to be drafted by a lawyer

This will list your rights: to access your data, correct it, erase it, restrict processing, object and receive your data in a portable format, as well as the right to lodge a complaint with the Data State Inspectorate.

8. Cookies

PLACEHOLDER · legal text — to be drafted by a lawyer

More about cookies will be in the Cookie policy.

9. Changes to this policy

PLACEHOLDER · legal text — to be drafted by a lawyer

This will describe how we will announce changes to this policy and from when they take effect.

10. Contact

PLACEHOLDER · legal text — to be drafted by a lawyer

This will give the controller’s contact details and the email for data protection questions.