Legal
Privacy and GDPR
How we process the personal data of people using this site and the BeanFlow application.
Last updated: 2026-09-21 · Version: 2026-09-15
A working document for the time the product is being built: counsel has not been through it yet. The operator's registration details come from the installation's configuration — square brackets in the text mean this installation has not filled them in.
Data controller
The controller is Jakub Pawlak, VAT ID 5214016567, CEIDG, REGON 525133602. For anything concerning personal data, write to kontakt@beanflow.pl.
What we collect
On this site: only what you enter yourself in the contact or sign-up form (name, e-mail address, roastery name, message). The site uses no tracking cookies and no third-party analytics. In the application: your account details and the operational data your roastery enters.
Cookies and browser storage
We use no advertising or analytics cookies, which is why we do not ask for consent. This site stores nothing in your browser. The application stores only what it cannot work without: sign-in session cookies (for as long as you are signed in; “Remember me” extends them at your request) and, in browser storage, your language and theme, the order basket in the portal, and the data needed to work offline. When an error occurs in the application, its technical description — without form contents and without passwords — goes to our own diagnostics server. You can clear this storage at any time in your browser settings; you will be signed out.
Why we process it
To answer your message (Art. 6(1)(b) and (f) GDPR), to create and run your account in the service, and to issue accounting documents (Art. 6(1)(b) and (c) GDPR).
How long we keep it
Contact data — until the correspondence ends, plus the limitation period for claims. Account data — for the term of the agreement and the period required by accounting law.
Who we entrust it to
Infrastructure and e-mail providers acting on our instructions under data processing agreements.
Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to lodge a complaint with your supervisory authority.