Privacy Policy - r²eko PATH

Last updated: February 2026

1. Data Controller

r2eko Artur Owczarek
ul. Piotrkowska 55/205, 90-413 Łódź, Poland

Contact for data protection matters: privacy@r2eko.com

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• First name
• Last name
• Password (stored in encrypted form)

2.2 Profile Information (Optional)

You may choose to provide additional information:

• Street address
• City
• Postal code
• Country
• Company name
• Tax ID (for business accounts)

2.3 Recommendations

When submitting recommendations:

• Title
• Description
• Email and phone number (guest submissions only)

2.4 Orders

When placing orders:

• Points used
• Product selection
• Order history

2.5 Technical Data

• Authentication tokens (stored locally on your device)
• API request logs (for service operation)

3. Data We Do NOT Collect

• GPS location or real-time tracking
• Camera or photo library access
• Contact list
• Device identifiers for advertising
• Third-party analytics or tracking data

4. Purpose of Data Processing

We process your data for the following purposes:

• Account management - to create and maintain your account
• Service delivery - to provide app functionality (orders, recommendations, map features)
• Communication - to respond to your inquiries and send service-related notifications
• Legal compliance - to fulfill legal obligations

5. Legal Basis (GDPR)

We process your data based on:

• Contract performance (Art. 6(1)(b) GDPR) - necessary for providing our services
• Consent (Art. 6(1)(a) GDPR) - for optional profile information
• Legal obligation (Art. 6(1)(c) GDPR) - for tax and accounting requirements

6. Data Retention

• Account data: Retained until you delete your account
• Order history: Retained for the duration of your account
• Technical logs: Retained for up to 30 days

When you delete your account, your personal data is permanently removed from our systems.

7. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Hosting, email services (under data processing agreements)
• Map services: Mapbox (for map display functionality - no personal data shared)
• Legal authorities: When required by law

8. Your Rights (GDPR)

You have the right to:

• Access - request a copy of your personal data
• Rectification - correct inaccurate data
• Erasure - request deletion of your data ("right to be forgotten")
• Data portability - receive your data in a portable format
• Restriction - limit how we process your data
• Object - object to data processing
• Withdraw consent - at any time, without affecting prior processing

To exercise these rights, contact us at: privacy@r2eko.com

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS encryption for all data transmission
• Secure password hashing
• Access controls and authentication
• Regular security assessments

10. International Transfers

Your data is processed within the European Economic Area (EEA). If any transfer outside the EEA occurs, we ensure appropriate safeguards are in place.

11. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes through the app or email.

13. Contact Us

For questions about this privacy policy or your data:

Email: privacy@r2eko.com

Data Controller:
r2eko Artur Owczarek
ul. Piotrkowska 55/205, 90-413 Łódź, Poland