Privacy notice
In force from 13 August 2026. Version 1.0.
This document sets out what personal data we process, why, for how long and who we make it available to. It is written to the GDPR and covers both the portican.com website and the Portican service.
1. Who processes the data
The controller is Nydrok LLC. Our identification details are on the Contact page. For anything concerning data protection, write to info@portican.com.
2. Two different roles worth telling apart
For data about our clients, meaning the people and companies who rent a store from us, we are the controller: we decide why and how it is processed.
For data about our clients’ customers, meaning the people who buy from stores running on Portican, we are the processor. The purpose and the scope are set by the client as the controller of their own store; we process it on their instruction and to make the store work. If you are a customer of one of those stores, approach that store first. Its own notice is published on its own site.
3. Data we process as controller
Visiting portican.com
| Data | technical data about the visit: IP address, browser type, pages visited, time |
|---|---|
| Purpose | running and securing the site, measuring traffic and how well advertising works |
| Legal basis | legitimate interest in running and securing the site; for measurement and advertising, your consent |
| Retention | server operational logs 90 days; data in measurement tools as configured in each tool, at most 14 months |
Enquiries, registration and running an account
| Data | name, email, phone, company name and billing details, credentials, the content of your correspondence with us |
|---|---|
| Purpose | answering an enquiry, entering into and performing the contract, support, invoicing |
| Legal basis | performance of the contract or steps before entering into it; for accounting documents, a legal obligation |
| Retention | for the term of the contract and 30 days after it ends; accounting documents for as long as the law requires |
Subscription payments
| Data | payment identifier, amount, status, billing details. Card details never reach us and we do not store them. |
|---|---|
| Purpose | taking payment, issuing the document, resolving payment disputes |
| Legal basis | performance of the contract and a legal obligation |
Commercial messages
If you give us consent, or if you are our client, we may send you information about the service and what is new in it. Every such message can be unsubscribed from in one click, or by writing to info@portican.com.
4. Who we share data with
We do not sell data. We share it only with those without whom the service would not work, and always only as far as necessary:
| netcup GmbH | hosting and server infrastructure, servers in the European Union |
|---|---|
| Stripe | processing subscription payments |
| Mailgun (EU) | sending email, European infrastructure |
| WebSupport | mailboxes on the portican.com domain |
| OpenAI | the language model behind the assistant in the admin; it processes the content the store’s staff send to it |
| fal.ai (Features & Labels Inc.) | generating and editing images (product photos, ad images) and the podcast voice from text; it processes the photos, prompts and texts the store’s staff send to it in these tools; based in the United States, with servers in the United States and other countries |
| Datovia | issuing and recording subscription invoices |
| Measurement and advertising providers | only if you consent; the list is in the Cookie notice |
We may also disclose data to public authorities where the law requires it of us.
5. Transfers outside the European Union
The controller is established outside the European Union and some of our processors are based in the United States. This means your data may be processed outside the EU as well. We cover such transfers with the European Commission’s standard contractual clauses, or another instrument the GDPR permits.
The servers the stores themselves run on, and the backups, are in the European Union.
6. How long we keep data
Only as long as we need it for the purpose we obtained it for, or as long as the law requires. The specific periods are given with each purpose above. After a contract ends we keep the store’s data for a further 30 days so that you have time to request it, then delete it, including from backups at the next rotation cycle.
7. Your rights
- to know whether and what data we process about you, and to get a copy of it
- to have incorrect data corrected
- to have data erased where there is no longer a reason to process it
- to restrict processing
- to receive your data in a machine-readable format and move it elsewhere
- to object to processing based on legitimate interest
- to withdraw consent at any time where you gave it; withdrawal does not affect processing before it
- to complain to a supervisory authority, in Slovakia the Office for Personal Data Protection of the Slovak Republic, or to the authority in your own country of residence
Writing to info@portican.com is enough. We answer within one month at the latest.
8. Automated decision making
We make no automated decisions with a legal effect on you, and no profiling with such an effect.
9. Cookies
What we store in your browser and how to change it is in the separate Cookie notice.
10. Changes to this document
We may update this document. We announce material changes to clients by email at least 30 days in advance. The date it takes effect is always at the top.
11. Language versions
This notice is published in several languages. Should the versions differ in meaning, the Slovak version is the reference text and prevails.