Privacy policy
Last updated: 26 Mar 2026
1. Definitions used in the document
1.1 Administrator of Personal Data - The administrator of personal data is IKOL INC. 265 Franklin St, Suite 1702, Boston, Massachusetts, 02110, United States of America.
1.2. Personal data - all information concerning an identified or identifiable natural person is considered personal data. Personal data is any information on the basis of which the identity of a natural person can be directly or indirectly identified.
1.3. Entrusting personal data - transfer of personal data to another entity for a specific purpose and scope within the scope of the contract.
1.4. Cookies - small text elements used to store information in web browsers. Cookies are used on computers, phones and other devices to store and receive identification data and other information.
1.5. Data processing - perform any operations on personal data, such as collecting, recording, storing, processing, altering, making available and deleting them, regardless of the form in which these operations are performed.
1.6. GDPR - means Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
1.7. User - a legal person, a natural person or an organizational unit without legal personality.
2. General information
2.1. The User's personal data are processed in accordance with the GDPR.
2.2. The Personal Data Controller has appointed a Data Protection Inspector, who can be contacted by e-mail: [email protected] or in writing (Attn Data Protection Inspector IKOL INC. 265 Franklin St, Suite 1702, Boston, Massachusetts, 02110, United States of America). The Data Protection Inspector can be contacted in all matters concerning the processing of personal data and the exercise of rights related to the processing of data.
3. Purpose of the processing, the legal basis of the processing and the duration of the processing
3.1 Administrator processes personal data for the purpose:
3.1.1. Conclusion and performance of a contract - data stored for the entire duration of the contract and for the entire duration of the active user account, depending on what will last longer. (legal basis; Article 6(1b) GDPR)
3.1.2. the performance of legal obligations, such as the issue and storage of accounting documents - the data are processed during the performance of their duties (legal basis; Article 6 (1c) of the GDPR) and the period during which the tax regulations require the data to be kept.
3.1.3. direct marketing of our goods and services - data stored for the entire duration of the contract and for the entire duration of the active user account depending on the user will last longer (legal basis: our legitimate interest in Art. 6.1f GDPR).
3.2. In the case of the User's consent to the processing of data, the content of the consent will be precisely defined by the Administrator.
3.3. Providing the data is voluntary, but necessary for the performance of the contract, their non-submission prevents the conclusion of the contract.
3.4. Administrator does not process data that would entail a high risk of violating the rights or freedoms of Users.
4. Data processing categories
4.1. Administrator processes only ordinary personal data, i.e. name and surname, address, e-mail address, telephone number, business details.
4.2. Administrator collects information about users at the moment of:
4.2.1. visiting the website ikol.com, business.ikol.com or using mobile applications listed on abovementioned websites
4.2.2. filling in the contact form
4.2.3. conclusion of Contract
4.3. The Personal data provided by the User to the Administrator is processed solely for the purpose of the proper performance of the Agreement..
4.4. When mobile applications are used, upon user's consent, applications may use device location data, including background location data, as well as activity data. The sole purpose of processing location and activity data is to make it available to the user as part of provided services.
5. User's rights
5.1. Any User has the right to:
5.1.1. access to User data
5.1.2. data revisions and corrections
5.1.3. data processing restrictions (applicability to the application)
5.1.4. file a complaint to the President of the Office for Personal Data Protection in the event that it considers that the processing of data violates the provisions of law.
5.1.5.Deletion of data (in case of unjustified data processing)
5.1.6. withdrawal of consent to the processing, except that the withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal
5.2. The User may exercise the rights listed in points 5.1.1. through 5.1.6. by contacting the Administrator's Personal Data Inspector.
6. Categories of recipients
6.1. The data controller on the basis of an agreement may entrust the processing of personal data to other entities for the purpose of proper performance by these entities of an activity related to the Administrator's activity.
7. Cookies
7.1. Administrator uses cookies. The information collected in this way allows you to adjust the services and preferences of Users using the Administrator's websites and the IKOL INC.
7.2. The User can delete cookies by selecting the appropriate settings in the web browser used. Removal, blocking or limitation of cookies may cause difficulties in using the website, and even prevent the use of some of its options.
7.3. Detailed provisions for cookies are set out in the Cookies Use Policy.
8. Final provisions
8.1. Administrator makes every effort to ensure that the data is stored in a secure manner and access to it is kept to a minimum.
8.2. Administrator's pages may contain links to other websites. The Administrator recommends that you read the privacy policy of another website. This privacy policy applies only to websites operated by the Administrator.
8.3. Administrator reserves the right to make changes to this document. Each new Privacy Policy will bear a date from which it applies.