Privacy Policy

This policy describes how iPub Solutions s.r.o. processes personal data on the ipub.solutions website and in the Darwin Cloud service (cloud.ipub.solutions), to which Darwin cashdesks connect, and what rights you have under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

Data controller

iPub Solutions s.r.o.
Mlýnská 1400/3, 466 01 Jablonec nad Nisou, Czech Republic
Company ID (IČO): 04988345, VAT ID: CZ04988345
Registered in the Commercial Register kept by the Regional Court in Ústí nad Labem, Section C, File 37343.
E-mail: info@ipub.solutions, phone: +420 602 13 13 98

When we are the controller and when the processor

We process the data of website visitors and of our Darwin Cloud customers and users as the controller: we decide why and how we process it. It is described in the sections “The ipub.solutions website” and “Darwin Cloud: customers and users”.

The data a venue keeps in its cashdesk (for example about its staff, loyalty card holders or suppliers), which the cashdesk stores in Darwin Cloud, we process as a processor for that venue. The venue is the controller; we only store and display the data on its instructions. It is described in the section “Data we process for venues”.

The ipub.solutions website

  • “Leave us your number, we'll call you” form: name and phone number.
  • “Write to us” form: name, e-mail address, optionally phone number, and the content of your message.
  • Communication with us: the data you give us yourself by e-mail or phone.

We use the data only to call you back or answer your enquiry, or to prepare an offer you asked for. The legal basis is taking steps prior to entering into a contract at your request (Article 6(1)(b) GDPR) and our legitimate interest in answering the enquiry you sent us (Article 6(1)(f) GDPR). The content of the forms reaches us by e-mail and we handle it in our request handling system.

Darwin Cloud: customers and users

If you have a Darwin Cloud account with us or access to one, we process:

  • Customer company details: name, company ID, registered address, register file number, contact e-mail and phones, website and bank account number. At registration we look the company up by its ID in the public ARES register.
  • Account users: e-mail address, login identifier, role in the account, invitations (who invited whom and when, and when the invitation was accepted) and acceptance of the terms and conditions.
  • Phone verification: the verified phone number and the one-time code we send you by text message. We store the code only in irreversibly encrypted form.
  • Cashdesks: device identifier, computer name, the e-mail used when pairing the cashdesk with the account, and the time of the last connection.
  • Payments and billing: payments received to our bank account (payer's account number and name, message for the recipient, variable symbol, amount), invoices and credit movements.
  • Change records: who changed cashdesk or account settings in the portal, and when.
  • Technical records: IP address, time and requested address in the server's records, and the application's operational records, which may contain a user's e-mail and identifier.

We process this data to provide the service to you, sign you in, pair cashdesks, send you operational e-mails (invitations, low credit warnings) and bill the service (Article 6(1)(b) GDPR). We keep invoices and payments because accounting and tax laws require it (Article 6(1)(c) GDPR). Phone verification and technical records protect the service against misuse and keep it running and secure (our legitimate interest, Article 6(1)(f) GDPR).

Data we process for venues

A Darwin cashdesk stores a copy of its database and regular backups in Darwin Cloud. These may contain personal data the venue keeps about other people:

  • Cashdesk staff: names, permissions, sales, cancellations and discounts of individual staff members; in the backups also attendance and cashdesk login details.
  • Loyalty cards: card number, the holder's name, address, e-mail and phone, points and discounts.
  • Suppliers and customers: name, address, company ID, VAT ID, phones, e-mail, bank account and contact person.
  • Accounts and documents: names of accounts and tables (which may contain a guest's name), the texts of receipts, closings and stock documents, and notes the staff write into them.
  • The certificate for the registration of sales with its password, which the venue uploads in the portal, only until we hand it over to the cashdesk.

We process this data only to provide Darwin Cloud to the venue (viewing sales and documents, changing settings, backups) and only on its instructions. We do not use it for any other purpose. If you want to exercise your rights regarding this data, please contact the venue that keeps it. We will gladly help the venue handle your request.

Who we share data with

We run the website, Darwin Cloud, e-mail and our request handling system on our own servers. We do not sell data. We share it with third parties only in these cases:

  • Google: if you sign in to Darwin Cloud with a Google account, Google verifies your identity and we receive your e-mail address from it.
  • GoSMS: the provider through which we send the text message with the verification code receives your phone number and the code.
  • Česká spořitelna: keeps our bank account, through which payments for the service reach us.
  • Public authorities: only where the law requires it.

How long we keep the data

  • Enquiries from the website: for as long as it takes to handle them and then for no more than 2 years from our last exchange.
  • Darwin Cloud account: for the duration of the contract. After the account is cancelled, everything keeps working for 30 days. Then we delete the cashdesk data, backups, users and contact details. We keep only the company's identification details, invoices, payments and credit movements, for the period required by accounting and tax laws.
  • Cashdesk data: for the duration of the account.
  • Backups: according to the rules the venue sets in the portal, at most until the account is deleted.
  • Text message verification codes: valid for 10 minutes, deleted at the latest one day after they expire.
  • The application's operational records: 30 days.

Cookies, browser storage and external services

Neither the website nor Darwin Cloud uses cookies or analytics tools.

The website forms are protected by Cloudflare Turnstile, which confirms the form is not being sent by a bot. For this, Cloudflare processes your IP address, details of your browser and connection (User-Agent, TLS fingerprint) and the website address. It uses this data to detect bots and to improve this protection, for which it acts as a controller; see the Turnstile privacy policy. The website's fonts are loaded from Google Fonts and some scripts from the jsDelivr and cdnjs (Cloudflare) CDNs. These services therefore see your IP address when the page is displayed, but we do not pass the content of the forms to them.

After you sign in, Darwin Cloud stores login tokens in your browser's storage, so you do not have to sign in again, together with the time ranges you used last. Signing in would not work without it.

Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. Just write to us at info@ipub.solutions.

If you believe we process your data in breach of the law, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz, or with the supervisory authority in your EU country.

This policy is effective from 25 October 2026.