Privacy policy
What personal data we process, why, for how long, and what rights you have.
Data controller
Kovimatic Limited, registered at 5 Shackleton Grove, Lucan, Co. Dublin, Ireland under company number 679900, is the controller of personal data collected through this site. For any privacy matter, write to info@kovimatic.ie.
What we process, and why
We process only the data you actively give us, plus the minimum technical data needed to run the service securely.
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form | Name, email, company, phone (optional), reason for contact and message. We also record the language and the IP address the message was sent from. | Your consent (Art. 6(1)(a) GDPR), given by ticking the box on the form. The IP address is also processed under our legitimate interest in security and abuse prevention (Art. 6(1)(f)). | 24 months from last contact. |
| Contact request from the demo | Name, email and phone, only if you choose to provide them. It is optional — you can use the demo without leaving any data. | Your consent (Art. 6(1)(a) GDPR). Consent for email contact and for phone contact is collected separately. | 24 months, or until you withdraw consent. |
| Contracting and billing | Identifying and billing details of the customer company and its contact people. | Performance of the contract (Art. 6(1)(b)) and compliance with accounting and tax obligations (Art. 6(1)(c)). | For the duration of the contract and thereafter for the applicable statutory retention periods. |
| Technical and security logs | IP address, browser type, date and time of access. | Our legitimate interest in keeping the service available and secure (Art. 6(1)(f)). | 12 months. |
We do not profile you or take automated decisions producing legal effects concerning you. We do not buy or sell contact databases.
The demo environment
The public demo runs on fictional data and is there for you to explore freely. Please do not enter real personal data into it — yours or anyone else’s. It is a shared evaluation environment, not a production service, and must not be used to process real data.
Who else sees your data
We do not share your data with third parties for their own purposes. We do use suppliers who process it on our behalf, under Article 28 GDPR processing agreements:
- Website hosting and delivery.
- Application and database hosting.
- Transactional email and notification delivery.
You can request the current list of processors by writing to info@kovimatic.ie. We may also disclose data to public authorities where legally required.
International transfers
Our infrastructure is located in the European Union. Where a supplier involves processing outside the European Economic Area, it is covered by a European Commission adequacy decision or by standard contractual clauses, with any additional safeguards required.
Your rights
You may exercise the following rights at any time:
- Access your personal data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Erase your data where it is no longer needed.
- Restrict or object to certain processing.
- Receive your data in a structured, commonly used format (portability).
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Write to info@kovimatic.ie saying which right you wish to exercise. We will respond within one month. There is no charge.
Complaints
If you believe we have not handled your rights properly, you may complain to a supervisory authority. Ours is the Data Protection Commission in Ireland (dataprotection.ie). You may equally complain to the authority in your own country of residence.
Security
We apply technical and organisational measures appropriate to the risk: encryption in transit, role-based access control, isolation between customers, encryption of the most sensitive data categories, and audit logging of access.
Changes to this policy
If we change this policy we will update the date shown at the foot of the page. Where a change is substantial, we will tell you by an appropriate means before it takes effect.