SLIM / Legal

Legal

Data processing agreement

For institutions that need the GDPR paperwork, in terms a person can read.

Last updated September 2026

Roles

Your institution is the data controller. Poqet is the processor. We process personal data only on your instructions.

What is processed

Names, email addresses and activity records of the people using the product.

Sub-processors

Our hosting provider in the EU. We will tell you before that list changes.

Security

Access controlled by organisation-wide roles, full audit trail, archive rather than delete, encrypted in transit and at rest.

Breach

We will tell you without undue delay, with what we know, including what we do not yet know.

Deletion and return

On termination we return or delete personal data as you instruct, after you have exported what you want.

Signing it

Ask and we will send the document. It is short.

TODO: this is a plain-language summary written to be readable. It needs a lawyer’s pass before launch, and the binding document will be the one they produce.

Questions go to daniel.pondelicek@poqet.cz.