Privacy Policy

tologistiko — last updated 1 September 2026

Who we are

This policy covers tologistiko, an accounting and invoicing service provided at app.tologistiko.com. tologistiko is a service of:

TKOCY LTD (Reg. HE399700)
Panagias Evaggelistrias 89B, 4156 Limassol, Cyprus
info@tologistiko.com

Our role depends on which data is in question, as set out immediately below.

Our two roles

It matters which role we are in:

• For information about our own account holders — the businesses that subscribe to tologistiko — we are the controller.
• For the information an account holder puts into their workspace, such as their own customers, invoices and bank transactions, we act as a processor on their instructions. That account holder is the controller of that data, and their own privacy policy governs it.

Bank account information

Where the bank reconciliation feature is enabled, the service connects to the account holder's own business bank account through Enable Banking, a licensed Account Information Service Provider, under an open banking consent granted by that account holder.

Access is read-only. The service cannot move, transfer or authorise money, and banking credentials are never entered into tologistiko — they are entered only on the bank's own website.

The data retrieved consists of account transaction records, namely:

• transaction date, amount and currency
• the payment reference or description supplied by the payer
• the counterparty's name and IBAN
• the bank's transaction identifier

It is used for one purpose: matching incoming payments to the invoices they belong to, and recording those payments against the correct invoice.

Who we share it with

Nobody, beyond what is needed to run the service. Data is stored in a database on our server and is not sold, rented or disclosed to third parties. It is not used for advertising, for profiling, or for automated decision-making producing legal effects about individuals. Our sub-processors are our hosting provider and, where bank reconciliation is used, Enable Banking, which transports transaction data from the bank.

How long we keep it

Account data is retained while the account is active, and afterwards only for as long as accounting, tax or legal obligations require. Bank consent expires automatically and must be renewed periodically; the account holder can withdraw it at any time through their own bank, without affecting the rest of the service.

Your rights

If your personal data appears in records held in tologistiko, you have the right under the GDPR to request access to, correction of, or erasure of your personal data, to restrict or object to processing, and to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus. Contact us using the address below and we will respond within one month.

Contact

For any data protection question or request, email info@tologistiko.com or write to us at Panagias Evaggelistrias 89B, 4156 Limassol, Cyprus.