Privacy Policy & Data Protection (GDPR)

This privacy policy describes how personal data is collected, used, and protected through the Kontacta platform, in compliance with the General Data Protection Regulation (EU Regulation 2016/679 - GDPR) and applicable international legislation.

1. Data Controller

The Data Controller for data collected through the showcase website is the Kontacta platform management team, reachable at: info@kontacta.net or via the official contact form.

2. Kontacta's Role: Controller vs Data Processor

For the purposes of GDPR:

• Kontacta as Data Controller: For website browsing data, corporate account (Tenant) registrations, and contact/quote inquiries.
• Kontacta as Data Processor: For subscriber lists, emails, and phone numbers uploaded or synchronized by Tenant users within their dedicated workspace. Each Tenant remains the Data Controller regarding their subscribers and guarantees lawful consent (e.g. opt-in).

3. Categories of Data Processed

• Browsing data: Anonymized IP addresses and system logs for security and abuse prevention.
• Registration and contact details: Full name, corporate email, company name, encrypted credentials.
• Campaign data and telemetry: Aggregated open rates, click-through data, and deliverability metrics required for service execution.

4. Purpose and Legal Basis for Processing

Personal data is processed for the following purposes:

• Execution of contractual or pre-contractual agreements (service delivery, workspace management, and email sending).
• Compliance with legal, regulatory, and tax obligations.
• Legitimate interest in maintaining platform security, infrastructure integrity, and spam prevention.

5. Security Measures & Data Isolation

Kontacta adopts an isolated multi-tenant architecture with dedicated databases and containerized runtime environments. SMTP credentials and internal secrets are encrypted at rest with industry-standard 256-bit AES-GCM. All web and API traffic is secured via HTTPS/TLS v1.3.

6. Data Retention

Data is retained only as long as necessary to provide the requested services or until account deletion by the tenant, except where legally required otherwise.

7. Data Subject Rights

Users may exercise their rights under GDPR Articles 15-22 (access, rectification, erasure, restriction of processing, data portability, and objection) at any time by sending a request to info@kontacta.net or through our website contact form.