1. Controller
The data controller is Ing. Adam Fojtík, ID No. 04737261, Družstevní I 228, Hrádek na Vlárské dráze, 763 21 Slavičín, Czech Republic. Privacy requests may be sent to support@cotterminal.com.
2. Data we process
We process account information such as email address, profile preferences, authentication identifiers, subscription status, support communications and technical security logs. Stripe processes payment-card information; COT Terminal does not store full card numbers.
3. Purposes and legal bases
- Provide accounts, trials and subscriptions — performance of a contract.
- Process payments and maintain accounting records — performance of a contract and legal obligations.
- Secure, diagnose and improve the service — legitimate interests in reliable and safe operation.
- Respond to requests and exercise legal claims — contract, legal obligations and legitimate interests.
4. Service providers
We use Supabase for authentication and application data, Stripe for billing, Vercel for hosting and deployment, and necessary email or support providers. These providers process data under their own contractual and security frameworks. Data may be processed outside the European Economic Area using legally recognised transfer safeguards where required.
5. Retention
Account data is retained while the account is active and for a reasonable period afterwards. Billing and accounting records are kept for periods required by law. Security logs are retained only as long as reasonably necessary for security and diagnostics.
6. Your rights
Depending on applicable law, users may request access, correction, deletion, restriction, portability or objection to processing. Users may also lodge a complaint with the Office for Personal Data Protection in the Czech Republic or their local supervisory authority.
7. Security
We use access controls, encrypted connections and specialised payment processing. No online service can guarantee absolute security; suspected incidents should be reported without delay.
8. Changes
Material changes will be reflected on this page and, where appropriate, communicated to registered users.