Notendario Privacy Policy

The controller of personal data is Telepora s. r. o. Karpatské námestie 7770/10A Bratislava - mestská časť Rača 831 06 Company ID (IČO): 57 420 998 Tax ID (DIČ): 2122728751 e-mail: contact@notendario.com

Contact person: Ján Kuna (jkuna@notendario.com). We do not currently publish a separate contact for the data protection officer; if this changes, we will publish it in the service.

Depending on how you use the service, we may process account and profile data: name, display name, email, login identifiers, authentication method, account settings, and support communication.

We may process content- and organization-related data: notes, tasks, events, tags, calendar data, organizations, membership and roles, encryption settings, shared or public content, and technical or security data necessary to operate and secure the service.

When optional AI features are used, parts of content you provide for that purpose may be sent for processing to the relevant third-party AI provider to the extent necessary to fulfil the request.

For paid plans, we may process billing and identification data, subscription status, and payment references. Payment card data is processed exclusively by a third-party payment service provider; the Controller does not store it in full.

We process personal data to create and manage accounts, maintain notes, tasks and events, work with calendars and tags, manage organizations, and provide service features including optional AI features. The main legal basis is performance of a contract under Article 6(1)(b) GDPR.

We also process data on the basis of legitimate interest under Article 6(1)(f) GDPR, in particular for security, abuse prevention, technical diagnostics, and establishing, exercising, or defending legal claims. We process payments and invoicing for performance of a contract and/or compliance with legal obligations under Article 6(1)(c) GDPR. Where necessary, we also process data on the basis of consent under Article 6(1)(a) GDPR.

We may disclose personal data to processors and service providers who help us operate the service, for example in hosting, database, authentication, email communication, customer support, or AI features.

Payment data is processed by a separate payment service provider (for example, Stripe) as an independent controller or processor under its contractual terms. Within an organization, owners and administrators may view related member data to the extent necessary for operation. We may also provide data to public authorities where required by law.

If we use service providers outside the European Union or European Economic Area (including certain payment, cloud, or AI services), we will use appropriate safeguards required by GDPR, such as standard contractual clauses or another lawful transfer mechanism.

We retain personal data for as long as necessary to operate the service, maintain accounts, fulfil contractual and legal obligations, protect the service, and defend legal claims. Billing data may be retained for the period required by accounting and tax regulations.

Upon a request to delete an account, access may be deactivated immediately. Some data may be deleted or anonymized later; we may retain certain data for legal obligations, security, accounting, tax, or defence of claims.

Under GDPR, you may request access to personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

You may exercise your rights at contact@notendario.com or jkuna@notendario.com. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic or another competent supervisory authority.

The web version of the service may use technical cookies, session identifiers, local storage, and similar technologies for security, authentication, language preferences, and other essential functions. If analytics or other non-essential cookies were enabled, they should be processed only on the appropriate legal basis.

We use reasonable technical and organizational measures to protect personal data, but no system guarantees absolute security or permanent data retention. We recommend regularly backing up important content yourself. If you enter personal data of third parties into the service, you are responsible for having an appropriate legal basis to do so.

We may update this policy from time to time. The current version will be published in the service together with the effective date. Questions or requests regarding personal data: contact@notendario.com or jkuna@notendario.com.