Privacy policy

1. Data controller

The data controller is FRESHTO Sp. z o.o., Obrońców Bydgoszczy 1, 85-054 Bydgoszcz, Poland, KRS 0000983486. Contact: info@freshto.vision.

Where a retail chain uses the Service for its employees, the chain is the controller of its employees’ and business data and Freshto acts as processor under a data processing agreement.

2. What data we process

Website: technical data sent by your browser (IP address, browser type, pages visited, time of visit). The Website does not use advertising trackers. If analytics are introduced, they will be described here and, where required, subject to your consent.

Forms: the name, email address, company, number of stores, country and message you submit when you request a demo or contact us.

Service: account data (email, name, role, store), assortment data, tasks and their results (product, date, action, time, user), device data needed for operation (device identifier, operating system, app version) and support communication.

The Service does not collect precise location data.

3. Purposes and legal bases

Providing the Website and the Service, including authentication, task generation, synchronisation and reporting (performance of a contract, Art. 6(1)(b) GDPR).

Responding to demo requests and other enquiries (pre-contractual steps, Art. 6(1)(b), and legitimate interest, Art. 6(1)(f)).

Security, abuse prevention, troubleshooting and improving the Service using aggregated data (legitimate interest, Art. 6(1)(f)).

Sending product information to existing customers where permitted, and marketing communications with your consent (Art. 6(1)(a)); you can withdraw consent at any time.

Compliance with legal obligations such as accounting (Art. 6(1)(c)).

4. Recipients and processors

We use hosting, email and support providers acting as processors under contracts that meet Art. 28 GDPR. We do not sell personal data.

The mobile application is distributed through app stores (such as Google Play), which process data under their own privacy policies.

We may disclose data when required by law or to protect our rights, your safety or the safety of others.

5. International transfers

Data is processed in the European Economic Area where possible. Where a provider processes data outside the EEA, we rely on an adequacy decision or the European Commission’s standard contractual clauses. The hosting location of the Service is being confirmed and will be stated here.

6. Retention

Form submissions are kept for as long as needed to handle the request and for up to 24 months afterwards unless a contract follows.

Service data is kept for the duration of the contract and deleted or anonymised within 90 days after termination, unless the law requires longer retention.

Server logs are kept for up to 12 months.

7. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability and to withdraw consent at any time without affecting prior processing.

To exercise these rights contact info@freshto.vision. You also have the right to lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO).

8. Children

The Website and the Service are intended for businesses and are not directed at children under 16. We do not knowingly collect data from children.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, role-based access and logging of administrative actions.

10. Changes

We may update this policy. The current version is always published on this page with the date of the last update.