Ranedo Terms of Service (2026-10-02)

This is a translation. In case of discrepancies, the Polish version prevails.

§ 1. General provisions and details of the Service Provider

1.1. These Terms set out the rules for the provision of electronically supplied services via the “Ranedo” system, available in particular at ranedo.com, including the terms for concluding and terminating agreements and the complaints procedure. These Terms constitute terms and conditions within the meaning of Article 8 of the Act of 18 July 2002 on the Provision of Electronically Supplied Services (ustawa z dnia 18 lipca 2002 r. o świadczeniu usług drogą elektroniczną).

1.2. The Service Provider is Createin.pl Jarosław Kądzioła, a sole proprietorship registered in the Central Register and Information on Economic Activity (CEIDG), address: ul. Boczna 8, 46-080 Chróścice, tax ID (NIP) 7481531765, REGON 161499368 (the business is not subject to entry in the National Court Register (KRS)), e-mail address: kontakt@ranedo.com, telephone: +48 577 682 359 (the “Service Provider”).

1.3. Ranedo is a SaaS service intended for entrepreneurs running restaurants, food service establishments, hotel establishments or similar businesses. The Service Provider does not conclude Agreements with consumers. Restaurant Guests are not parties to the Agreement.

1.4. The data processing agreement (DPA) (§ 26–31) and Annex 1 (model withdrawal form) form part of these Terms.

1.5. These Terms are made available free of charge before the Agreement is concluded, in a manner that allows them to be downloaded, recorded and printed.

1.6. These Terms apply from the date indicated in the header of the document. Previous versions of the Terms are available at https://ranedo.com/pl/dokumenty/regulamin.

1.7. The Polish version of the Terms is binding. Translations into other languages are for information purposes only.

1.8. The rules on the processing of personal data by the Service Provider as controller are described in the Privacy Policy, and the rules on the use of cookies in the Cookie Policy. These documents are for information purposes and do not form part of the Agreement.

§ 2. Definitions

2.1. The terms used in these Terms have the following meanings:

Ranedo or System — the software made available by the Service Provider via the Internet, together with the Restaurant Websites, the Panel and the applications for venue staff;
Client — an entrepreneur who has concluded the Agreement with the Service Provider;
Entrepreneur with Consumer Rights — a Client who is a natural person and concludes the Agreement directly connected with their business activity, where the content of the Agreement shows that it is not of a professional nature for that person, arising in particular from the subject of the business activity they carry out, as disclosed under the regulations on the CEIDG;
User — a person using the Client’s Account with the Client’s authorisation, in particular an employee or associate of the Client;
Guest — a person using a Restaurant Website or the Client’s services handled in Ranedo, in particular a person placing an order, making a reservation, checked in at the Client’s hotel establishment, participating in a loyalty programme or subscribed to the Client’s newsletter;
Account — the Client’s account in the System;
Panel — the part of the System available after logging in, used to manage the Account, venues and the Restaurant Website;
Restaurant Website — the Client’s website operated in the System (in a subdomain of ranedo.com or under the Client’s own domain), together with the menu, the order form, QR code ordering and the menu widget embedded on other websites;
Plan — a Subscription variant (Start, Plus, Pro) determining the scope of functions, limits and price;
Price List — information on the Plans, Add-on Modules and SMS Packages, their prices and scope, published on ranedo.com and in the Panel;
Billing Period — a month, quarter or year for which the Client pays for the Subscription;
Subscription — the paid right to use the System within the scope of the selected Plan in a given Billing Period;
Trial Period — the first month (30 days) of free use of the System, counted from the activation of the Account;
Add-on Module — a paid function of the System ordered independently of the Plan, where the Price List provides for it as an add-on;
SMS Package — a paid package of SMS messages sent from the System account;
Client Content — information and materials entered into the System by the Client and Users, in particular texts, photos, menus, prices, descriptions, promotions, contact details, terms and conditions and information for Guests;
Agreement — the agreement for the provision of electronically supplied services concluded between the Client and the Service Provider on the terms of these Terms, covering the Trial Period, the Subscription, Add-on Modules and SMS Packages;
Business Day — a day from Monday to Friday, excluding public holidays in Poland;
Durable Medium — in particular an e-mail message sent to the address assigned to the Account.

§ 3. Type and scope of services

3.1. Depending on the Plan, Add-on Modules and configuration, Ranedo enables in particular:

operating a Restaurant Website in a subdomain of ranedo.com or under the Client’s own domain;
managing menus, extras, variants, sets, prices and promotions;
accepting orders for delivery, for collection, at the table via QR code and from hotel rooms;
technical integration of Guests’ online payments with the payment operators with which the Client has concluded agreements;
handling orders via waiter and kitchen screens (KDS), including during brief losses of Internet connection;
accepting reservations, and running the Client’s CRM, loyalty programme and newsletter;
sending e-mail and SMS messages on the Client’s instructions;
sales reports and analytics;
generating model ordering terms and conditions and a personal data processing notice for Guests (§ 14);
a tool for exercising Guests’ rights under the GDPR (searching, exporting and anonymising data);
creating Restaurant Website content with the aid of artificial intelligence (§ 17).

3.2. The scope of functions and the limits of the individual Plans are determined by the Price List at the time the Subscription is ordered.

3.3. Ranedo is an IT tool. The Service Provider does not run a restaurant, sell food or provide food services on behalf of the Client and is not a party to agreements concluded by the Client with Guests.

3.4. The System currently has no separate field for presenting allergens for individual dishes and no function for publishing Guest reviews.

3.5. The Service Provider may develop the System, change the appearance and operation of functions and add new functions. If a change consists in the permanent withdrawal of a function included in the scope of a paid Plan, § 33.4 applies.

3.6. Information on the accessibility of the System and the Restaurant Websites for persons with disabilities is contained in the accessibility statement: https://ranedo.com/pl/deklaracja-dostepnosci.

§ 4. Technical requirements

4.1. To use Ranedo, the following are required:

a device with Internet access and an up-to-date version of a commonly used web browser with JavaScript, the cookies necessary for logging in and encrypted connections (HTTPS) enabled;
an active e-mail address;
in the case of an own domain — the ability to configure DNS records with the domain registrar;
in the case of Guests’ online payments — an active agreement between the Client and a supported payment operator;
in the case of sending SMS messages — an SMS Package with unused messages.

4.2. Outdated software, disabled JavaScript, network blocking or other settings interfering with communication with the System may cause some functions to operate incorrectly.

§ 5. Conclusion of the Agreement and the Account

5.1. The Agreement is concluded when the Account is approved by the Service Provider. The condition for creating an Account is completing the registration form and ticking the box accepting these Terms, including the data processing agreement (DPA) (§ 26–31). The System records the version of the Terms accepted and the date of acceptance. Creating an Account constitutes an offer to conclude the Agreement. The Service Provider verifies each application and may refuse to approve an Account without giving reasons. The Service Provider notifies the Client of approval or refusal by e-mail sent to the address provided at registration. Until approval, the Client may log in to the Account but has no access to the functions of the System. The data of an Account whose approval has been refused is deleted (anonymised) by the Service Provider 30 days after the refusal.

5.2. When registering via a Google or Facebook account, a screen for accepting these Terms is displayed at the first login. The Account can be used after the Terms have been accepted.

5.3. After registration, the Client confirms the e-mail address by clicking the link sent to that address. Until the address has been confirmed and the Account approved, the Trial Period does not begin and it is not possible to publish the Restaurant Website or accept orders.

5.4. Consent to receiving marketing information from the Service Provider is separate and voluntary. Not giving it does not affect the conclusion or performance of the Agreement. Consent may be withdrawn at any time.

5.5. The person creating the Account represents that they are concluding the Agreement in connection with the Client’s business or professional activity and are authorised to act on the Client’s behalf.

5.6. The Client provides true and up-to-date details and updates them if they change, in particular the invoicing details and the seller details displayed to Guests.

5.7. The Client protects the Account access credentials and does not disclose them to unauthorised persons. The Client assigns roles and permissions to Users in the Panel and is responsible for the actions of persons to whom it has given access to the Account.

5.8. Passwords are stored in hashed form. The Client may enable two-factor authentication (2FA) and should do so if the nature of the data processed or the organisation of its business so requires.

5.9. Any suspected compromise of access credentials or unauthorised access to the Account should be reported without delay to kontakt@ranedo.com.

5.10. When registering an Account, the Client may enter the referral code of a partner in the Ranedo partner programme or create the Account after arriving via a partner’s referral link. The Account is then assigned to that partner once and permanently, and the partner sees in their panel the information needed to settle the commission to the extent described in the Privacy Policy. The assignment does not affect the price or the terms on which the Client uses Ranedo.

§ 6. Trial Period

6.1. The Client may use the Trial Period (the first month — 30 days) once per Account. The Trial Period begins automatically once the Account has been approved by the Service Provider and the e-mail address has been confirmed (§ 5.1, § 5.3).

6.2. The Trial Period is free of charge and does not give rise to any obligation to pay. It does not require payment card details to be provided.

6.3. If the Client does not pay for the Subscription by the end of the Trial Period, access to the Panel is limited to the subscription page, and the Restaurant Website stops accepting orders. Expiry of the Trial Period without payment constitutes the end of the Agreement within the meaning of § 23.6.

6.4. The Client may pay for the Subscription at any time, including after the Trial Period has expired, for as long as the Account exists. Guest data deleted in accordance with § 24 is not restored.

§ 7. Plans, prices and Billing Periods

7.1. On the date these Terms enter into force, the Service Provider offers the following Plans:

Plan	Net price per month	Venues	Users
Start	PLN 79	1	2
Plus	PLN 179	up to 3	up to 10
Pro	PLN 299	up to 6	unlimited

7.2. VAT at the applicable rate (23%) is added to the net prices. The scope of functions of a Plan is determined by the Price List at the time of ordering. The terms of the Enterprise Plan (including prices, limits and any availability guarantees) are set out in an individual agreement.

7.3. The Client chooses a monthly, quarterly or annual Billing Period. The quarterly price is three times the monthly price less 5%. The annual price is ten times the monthly price (two months free of charge).

7.4. The Subscription is payable in advance for the entire Billing Period. Before paying, the Client sees the total gross amount due for the selected Billing Period.

7.5. The price applies until the end of the paid Billing Period. Prices for new orders are determined by the Price List.

7.6. The Service Provider notifies a Client who has a Subscription of any change in the price applicable to that Client on a Durable Medium at least 30 days before the change applies. The new price applies from the first Billing Period beginning after that period has elapsed. A Client who does not accept the new price may cancel the Subscription (§ 23.1) at no additional cost.

7.7. The prices of Add-on Modules and SMS Packages are determined by the Price List in the Panel. Before ordering, the Client sees their scope and price.

§ 8. Payments, subsequent Billing Periods and consequences of non-payment

8.1. Payments for the Subscription, Add-on Modules and SMS Packages are handled by the payment operator Paynow (mBank S.A.) — via BLIK, fast bank transfer or payment card. The Service Provider does not store payment card details.

8.2. The System does not charge the Client’s payment card automatically. The Client pays for each Billing Period itself.

8.3. 7 days before the end of a Billing Period, the System bills the next Billing Period (in the same Plan and of the same length or — if a change to a lower Plan (§ 9.3) or a change in the length of the Billing Period (§ 9.6) has been scheduled — in the new Plan or according to the new length, as applicable, together with the Add-on Modules ordered) and sends the Client an e-mail message with a “Pay” (“Zapłać”) link. Reminders are sent on the payment due date and 5 days after it.

8.4. For 7 days from the payment due date (grace period), the Client retains full access to the System.

8.5. After the grace period has expired, until payment is made, the Panel operates in read-only mode only, and the acceptance of Guest orders via the Restaurant Website, QR codes and the widget is suspended.

8.6. If the Client does not pay within 30 days of the payment due date, the Subscription expires, which constitutes the end of the Agreement within the meaning of § 23.6. The Service Provider does not pursue payment for the unpaid Billing Period.

8.7. Payment during the grace period or in read-only mode immediately restores full access to the System. Payment made after the Subscription has expired, using a link previously sent by the System, restores the Subscription.

§ 9. Change of Plan

9.1. The Client may at any time change the Plan and the length of the Billing Period in the Panel.

9.2. When changing to a higher Plan, the Client pays a proportional surcharge for the days remaining until the end of the current Billing Period; a day that has begun counts as a full day. The higher Plan takes effect immediately after the surcharge has been paid.

9.3. A change to a lower Plan takes effect at the beginning of the next Billing Period, after the Client has confirmed the list of its consequences displayed in the Panel together with the date of the change. Until that date, the Client uses all the functions of the existing Plan, and the next Billing Period is billed at the price of the new Plan. The Client may revoke the change in the Panel until the date of the change. During the Trial Period, a change of Plan takes effect immediately. Consequences of downgrading the Plan:

functions not covered by the new Plan stop working;
venues and Users exceeding the limit of the new Plan are deactivated — the Client chooses which remain active;
data is not deleted;
on a change to the Start Plan, the own domain stops working, and traffic is redirected to the ranedo.com subdomain.

9.4. A change to a lower Plan does not entitle the Client to a refund of the price difference for the current, paid Billing Period or to have it recorded as an Account balance. The venues and Users selected by the Client upon the change remain active; the System deactivates the others exceeding the limit of the new Plan on the date of the change.

9.5. The Account balance (in particular arising from billing adjustments made by the Service Provider) is credited towards subsequent payments. Any Account balance unused by the date on which the Agreement ends is refunded by the Service Provider, at the Client’s request submitted within 30 days of the end of the Agreement, by bank transfer to the bank account indicated.

9.6. The Client may change the length of the Billing Period (monthly, quarterly or annual, § 7.3). The change takes effect at the beginning of the next Billing Period. The current, paid Billing Period is not subject to recalculation, surcharge or refund. The next Billing Period is billed at the price for the new length. The Client may revoke the change in the Panel until the date of the change. During the Trial Period, and where the current Billing Period has not been paid, the change takes effect immediately. Where the Client simultaneously changes to a higher Plan, the surcharge (§ 9.2) is calculated according to the existing length of the Billing Period, and the new length applies from the next Billing Period.

§ 10. Invoices

10.1. The automatic statement for a Billing Period generated by the System, bearing a number in the format “ROZ-YYYY-NNNNN”, is an information document summarising the payment — it is not a VAT invoice.

10.2. The VAT invoice for the Subscription, Add-on Modules and SMS Packages is issued by the Service Provider outside the System, in its own accounting system, in accordance with the Goods and Services Tax Act (ustawa o podatku od towarów i usług) (the “VAT Act”), including — where the law so requires — in the National e-Invoicing System (Krajowy System e-Faktur, KSeF), and a copy of it in PDF format is made available in the Panel (Subscription → Invoices). The Client accepts receiving invoices in electronic form.

10.3. The invoicing details, including the tax ID (NIP), are provided by the Client, who is responsible for their correctness.

§ 11. Add-on Modules and SMS Packages

11.1. Add-on Modules are payable according to the Price List in the Panel. The fee for an Add-on Module is billed together with the fee for the Billing Period, unless the Panel indicates otherwise.

11.2. SMS Packages (100, 500 or 1000 messages) are a paid add-on; the price is shown in the Panel. All SMS messages sent by the System for the Client — campaigns, test messages, order and reservation confirmations for Guests and staff notifications — are sent from the System account via SMSAPI (LINK Mobility Poland sp. z o.o.), which acts as a sub-processor in this respect (§ 30), and are deducted from the SMS Package. One message from the SMS Package corresponds to one SMS part: up to 160 characters without Polish diacritical characters, or up to 70 characters if the text contains them. Longer text is split into parts (of 153 or 67 characters each) and each part reduces the SMS Package by one message. Before sending, the Panel shows how many messages the text will use.

11.3. Unused messages from an SMS Package expire at the end of the Agreement and cannot be exchanged for money, except in the case of withdrawal from the Agreement by an Entrepreneur with Consumer Rights within the statutory time limit and termination of the Agreement for reasons attributable to the Service Provider.

11.4. SMS messages are sent exclusively from the System account; the Client does not connect its own account with an SMS operator. When the SMS Package runs out of messages, the System does not send SMS messages, and the Service Provider informs the Client of this by e-mail. A message that could not be sent for technical reasons is not deducted from the SMS Package — the System retries sending it; if the retries fail, the message is not sent and is not deducted from the SMS Package.

11.5. The Client is responsible for the content of the messages sent and for holding the recipients’ consents to receive commercial information and direct marketing required by the Electronic Communications Law (ustawa — Prawo komunikacji elektronicznej). Sending unsolicited commercial information is prohibited.

§ 12. Own domain

12.1. Connecting an own domain to the Restaurant Website is available in the Plus and Pro Plans.

12.2. The Client registers and maintains the domain with a registrar of its choice. The domain remains the property of the Client. The Service Provider is not a domain registrar and is not responsible for the registrar’s services.

12.3. The Client confirms its right to the domain by adding, with the registrar, a TXT record _ranedo-verify.<domain> and the CNAME or A records indicated in the Panel.

12.4. A domain not verified within 30 days of being added in the Panel is released; the Client receives information about this by e-mail.

12.5. After the domain has been verified, the Service Provider provides a TLS certificate. Issuing the certificate may take up to several Business Days.

12.6. After a change of Plan to Start, the own domain stops working, and traffic is redirected to the ranedo.com subdomain. After the end of the Agreement, the own domain no longer serves the Restaurant Website. The Client may point the domain to another provider at any time.

§ 13. Service availability and support

13.1. The Service Provider provides the services with the due diligence required of a professional IT service provider. The Service Provider does not guarantee uninterrupted availability of the System 24 hours a day or any specific level of availability (SLA).

13.2. The Service Provider may carry out technical work, updates and security changes causing temporary unavailability of the System. Where possible, the Service Provider announces planned technical breaks in advance and carries them out outside peak hours in the food service industry.

13.3. Technical support is provided by e-mail at kontakt@ranedo.com on Business Days, 9:00–17:00.

13.4. In the Pro Plan, support is prioritised: requests from Clients on this Plan are handled first, and the aim is to provide a first response within 1 Business Day. This is a target, not a guaranteed response time.

13.5. Availability guarantees with compensation for failure to meet them are possible only under an Enterprise agreement.

13.6. The Service Provider is not responsible for the operation of services provided independently by third parties, in particular the Client’s payment operators, domain registrars, telecommunications operators and Internet service providers.

§ 14. The Client as the seller towards Guests

14.1. The Client is solely the seller of meals, beverages and other products and the service provider towards Guests. Agreements concerning orders, reservations, deliveries, hotel stays and the loyalty programme are concluded between the Client and the Guest. The Service Provider is not a party to them and does not act as an intermediary in payments.

14.2. To make it easier for the Client to fulfil its obligations as a seller, the System:

labels the order button with the words “Order with obligation to pay” (“Zamawiam z obowiązkiem zapłaty”);
displays next to that button the seller details (name, address and tax ID (NIP) from the restaurant settings in the Panel) and links to the Client’s ordering terms and conditions and personal data processing notice;
generates from the Client’s data model ordering terms and conditions and a personal data processing notice, published at fixed addresses of the Restaurant Website (/regulamin and /prywatnosc).

14.3. The model ordering terms and conditions and personal data processing notice are an aid, not legal advice. The Client verifies them before publication, may supplement them or replace them with its own text in the Panel and is responsible for their content and lawfulness.

14.4. The Client independently determines and is responsible for, in particular:

the truthfulness and completeness of the seller details displayed to Guests;
the offer, prices (including total prices with taxes and delivery costs), descriptions and availability of products;
information on allergens and other food information required by Regulation (EU) No 1169/2011;
compliance with the regulations restricting the sale of alcoholic beverages, including the prohibition on their distance sale;
recording sales and issuing fiscal receipts — the System does not print fiscal receipts;
compliance of promotions and price reductions with the regulations on price information;
the fulfilment, refusal, cancellation and timeliness of orders, delivery and collection terms, and food quality and safety;
handling Guests’ complaints and payment refunds;
information obligations towards consumers, including information on the right of withdrawal or its absence;
the accessibility of Client Content for persons with disabilities, in particular alternative texts for photos and the contrast of colours selected by the Client;
the lawfulness of marketing activities (§ 32).

14.5. The order form contains an optional field “Allergies and intolerances” (“Alergie i nietolerancje”). Information provided in this field is data concerning health. The Client, as controller, is responsible for the legal basis for its processing and for ensuring that its staff use it solely for the safe preparation of the order (§ 28.3).

§ 15. Guest payments

15.1. The System enables the technical integration of the Restaurant Website with the following payment operators: PayU S.A., PayPro S.A. (Przelewy24) and Krajowy Integrator Płatności S.A. (Tpay). A Guest may also pay on receipt of the order if the Client makes this option available.

15.2. The Client uses its own agreement and its own account with the payment operator. Guests’ online payments go directly to the Client’s account with that operator.

15.3. The Service Provider does not provide payment services, does not accept funds due to the Client and does not act as an intermediary in settlements between the Client and the Guest.

15.4. The Client, in cooperation with its payment operator, is responsible for refunds to Guests, chargebacks and other settlements related to orders.

15.5. The Service Provider is not liable for unavailability, refusal of authorisation or delays attributable to the payment operator, unless they result from culpable conduct of the Service Provider.

§ 16. Third-party services

16.1. To provide the services, the Service Provider uses the suppliers listed in § 30 and in the Privacy Policy.

16.2. Services which the Client uses under its own agreements — in particular payment operators, the domain registrar, analytics and advertising tools (e.g. Google Analytics, Google Tag Manager, Meta Pixel) and embedded maps and videos — are services of the Client’s suppliers. The Service Provider is not responsible for their operation or for their processing of data.

16.3. Analytics and advertising tools enabled by the Client on the Restaurant Website are activated only after the Guest has given consent in the cookie banner of the Restaurant Website. The Client is responsible for the lawfulness of their configuration.

§ 17. Functions using artificial intelligence

17.1. The Restaurant Website content wizard uses language models provided by OpenAI. Only information entered by the Client (e.g. a description of the venue and the menu) is passed to the wizard, without Guest data.

17.2. The Client does not enter into the wizard Guests’ personal data, special categories of personal data, payment card details, passwords or other confidential information.

17.3. Content generated by artificial intelligence is marked in the Panel as generated. It may be incomplete, imprecise or incorrect. The Client verifies it before publication, in particular prices, product ingredients, allergens, restaurant details and other factual statements, and is responsible for the published content.

17.4. The AI functions are not used to make decisions regarding Guests that produce legal effects concerning them or similarly significantly affect them.

17.5. To the extent required by Article 50 of Regulation (EU) 2024/1689 (Artificial Intelligence Act), the System discloses the use of AI and marks content generated by AI. The Client does not remove such markings where their retention is required by law.

17.6. The Service Provider may apply limits on the number of content generations in a given period.

§ 18. Client Content and prohibited activities

18.1. It is prohibited to provide via Ranedo content of an unlawful nature, in particular content:

infringing copyright, industrial property rights or personal rights of third parties;
unlawfully using personal data;
misleading consumers or infringing the regulations on advertising and commercial information;
containing malware or code disrupting the operation of the System;
used for phishing, spam or other unlawful activity.

18.2. The following are also prohibited:

circumventing Plan limits, AI content generation limits and System security measures;
automated extraction of data from the System (scraping) and placing an excessive load on the System;
testing the System for vulnerabilities without the prior written consent of the Service Provider;
attempts to access the data of other Clients or the Service Provider’s infrastructure;
reselling or making the System available to third parties without the Service Provider’s consent, except for making Restaurant Websites available to Guests.

§ 19. Reporting illegal content and moderation

19.1. With regard to Restaurant Websites and Client Content, the Service Provider provides a hosting service within the meaning of Regulation (EU) 2022/2065 (Digital Services Act, DSA).

19.2. The Service Provider’s point of contact for the authorities of the Member States, the European Commission, the European Board for Digital Services and for recipients of the service is kontakt@ranedo.com. Contact is possible in Polish and English. Information for notifiers is available at https://ranedo.com/pl/dsa.

19.3. Anyone may report content they consider illegal using the form at https://ranedo.com/pl/dsa. The “Report illegal content” (“Zgłoś nielegalne treści”) link is located in the footer of ranedo.com and of every Restaurant Website. A notice contains:

the exact URL of the content;
an explanation of why the notifier considers the content illegal;
the notifier’s full name and e-mail address — providing these details is optional, except for notices concerning the offences referred to in Articles 3 to 7 of Directive 2011/93/EU;
a statement that the notifier is acting in good faith and that the information in the notice is accurate and complete.

19.4. The notifier receives confirmation of receipt of the notice with its number — on screen and by e-mail, if an e-mail address was provided.

19.5. The Service Provider handles notices without delay, diligently and objectively. Decisions are made by a human; the Service Provider does not use automated decision-making or automated content moderation tools.

19.6. If content is illegal or infringes these Terms, the Service Provider may remove the content or disable access to it, suspend the Restaurant Website or suspend the Account. The measure is proportionate to the seriousness of the infringement.

19.7. The Service Provider informs the Client of a restrictive decision by e-mail, providing a statement of reasons: the type and scope of the restriction, the facts and circumstances on which the decision was based, information on whether the decision was taken as a result of a notice, the legal basis or the provision of these Terms, and information on the possibility of appeal.

19.8. The Client may appeal against the decision by replying to the message with a statement of reasons within 14 days of receiving it. The appeal is reconsidered by the Service Provider. Irrespective of the appeal, the Client is entitled to take legal action before the courts.

19.9. A notifier who has provided an e-mail address receives information on the decision taken regarding the notice and on the possibility of challenging it.

19.10. If the Service Provider becomes aware of information indicating that a criminal offence threatening the life or safety of persons has been committed, it informs the competent law enforcement authorities without delay.

§ 20. Intellectual property rights

20.1. The rights to the System, its code, interface, templates and other materials of the Service Provider belong to the Service Provider or its licensors. The Agreement does not transfer these rights to the Client.

20.2. The Client retains the rights to Client Content and grants the Service Provider a non-exclusive, royalty-free licence to record, reproduce, process and make Client Content publicly available to the extent and for the time necessary to provide the services.

20.3. The Client represents that it has the right to use Client Content and to grant the licence referred to in clause 20.2.

§ 21. Liability

21.1. The Service Provider is not liable for the manner in which the Client conducts its business, the quality of meals, the performance of deliveries, the truthfulness of Client Content, the content of document templates published by the Client, food-related obligations or settlements between the Client and Guests.

21.2. In relations with a Client who is not an Entrepreneur with Consumer Rights, the Service Provider’s liability for lost profits is excluded.

21.3. In relations with a Client who is not an Entrepreneur with Consumer Rights, the Service Provider’s aggregate liability under the Agreement is limited to the total fees actually paid by the Client for Ranedo in the 12 months preceding the event giving rise to the damage.

21.4. The limitations of liability do not apply to damage caused intentionally or to liability that cannot be excluded or limited under mandatory provisions of law, including liability for infringement of the regulations on the protection of personal data to the extent that those regulations preclude its limitation.

21.5. The limitations of liability in clauses 21.2 and 21.3 do not apply to an Entrepreneur with Consumer Rights.

§ 22. Complaints

22.1. Complaints concerning Ranedo services may be submitted by e-mail to kontakt@ranedo.com.

22.2. A complaint should contain details allowing the Client to be identified, a description of the problem, the date on which it occurred and the expected resolution. The absence of information not needed to handle the complaint does not result in its rejection.

22.3. The Service Provider handles a complaint within 14 days of receiving it and replies by e-mail. If additional information is needed, the Service Provider may request it.

22.4. The provisions of this section do not limit the rights of an Entrepreneur with Consumer Rights described in § 25.

§ 23. Cancellation of the Subscription and termination of the Agreement

23.1. The Client may cancel the Subscription in the Panel at any time. Cancellation takes effect at the end of the paid Billing Period; until then, the Client retains access to the System and may resume the Subscription.

23.2. No refund is given for the current, paid Billing Period, except in the case of:

withdrawal from the Agreement by an Entrepreneur with Consumer Rights within the statutory time limit (§ 25);
termination of the Agreement for reasons attributable to the Service Provider;
termination of the Agreement by notice given by the Service Provider under clause 23.5;
termination of the Agreement in connection with an objection to a new sub-processor (§ 30.6) or with an amendment to these Terms (§ 33.4).

In these cases, the Service Provider refunds the fee in proportion to the unused part of the paid Billing Period.

23.3. The Service Provider may suspend the provision of services after calling on the Client to remedy the infringement within a specified time limit if the Client uses the System in a manner contrary to the law or these Terms, infringes the rights of third parties, threatens the security of the System or of other Clients, or attempts to gain unauthorised access to data or infrastructure. If the infringement poses a direct and serious threat to security, personal data or other persons, the suspension may take place without prior notice; in that case the Service Provider informs the Client of the reason, insofar as the law and security considerations permit.

23.4. The Service Provider may terminate the Agreement with immediate effect if the Client materially infringes these Terms or the law and, in the case of an infringement that can be remedied, where the Client has failed to remedy it despite being called upon to do so. The Service Provider may also terminate the Agreement with immediate effect where the continued provision of services would be unlawful.

23.5. The Service Provider may terminate the Agreement for important reasons (in particular the discontinuation of the Ranedo services) with 30 days’ notice, by making a statement on a Durable Medium.

23.6. The Agreement ends upon:

expiry of the Trial Period without payment for the Subscription;
the end of the Billing Period in which the Client cancelled the Subscription;
expiry of the Subscription due to non-payment (§ 8.6);
termination of the Agreement by either party or withdrawal from it;
deletion of the Account.

23.7. After the Agreement ends, the Account remains in the System with access limited to the subscription page, which allows the Subscription to be purchased again. Maintaining such an Account is free of charge. Guest data is deleted in accordance with § 24.

23.8. The Account administrator may at any time order the deletion of the Account in the Panel, confirming this with the password and the Account name. For 14 days from the order, the Client may revoke it in the Panel; during that time, access to the Panel is limited to the Account deletion screen, and the Restaurant Website stops accepting orders. Unpaid invoices do not prevent the deletion of the Account. After that period has elapsed, the Service Provider deletes (anonymises) the data of the Account, Users and Guests; accounting documents (payments, invoices, Subscription history) are retained for 5 years in accordance with the accounting regulations and the VAT Act.

§ 24. Data after the end of the Agreement

24.1. Before the Agreement ends, the Client may export data from the Panel, in particular orders, CRM customers and the list of newsletter subscribers (CSV), as well as the data of individual Guests (JSON, using the GDPR tool).

24.2. Guest data is automatically anonymised or deleted 30 days after the end of the Agreement. During that time, the Client may resume the Subscription; after that period has elapsed, the data is not restored. The Client may instruct that the data be deleted earlier.

24.3. Backup copies are overwritten no later than after 90 days. Data remaining only in backup copies is not used for any purpose and may be restored only to rebuild the infrastructure after a failure.

24.4. Client Content and Account data remain in the System until the Account is deleted (§ 23.8). After the Agreement ends, the Restaurant Website does not accept orders and may be disabled.

§ 25. Entrepreneur with Consumer Rights

25.1. Ranedo is intended for entrepreneurs. A Client who is an Entrepreneur with Consumer Rights enjoys the protection provided for in Article 385⁵ of the Civil Code (Kodeks cywilny) and in Article 7aa of the Act of 30 May 2014 on Consumer Rights (ustawa z dnia 30 maja 2014 r. o prawach konsumenta) (the “Consumer Rights Act”) to the extent that those provisions grant it. The mere fact of running a sole proprietorship does not determine this status.

25.2. An Entrepreneur with Consumer Rights may withdraw from the Agreement without giving reasons within 14 days of the date of its conclusion and, in the case of the purchase of a Subscription, an Add-on Module or an SMS Package, within 14 days of the date of purchase. To meet the deadline, it is sufficient to send the statement before it expires, e.g. by e-mail to kontakt@ranedo.com. The model form constituting Annex 1 may be used, but this is not mandatory. The Service Provider confirms receipt of the statement by e-mail without delay.

25.3. If an Entrepreneur with Consumer Rights expressly requests that the provision of a paid service begin before the time limit for withdrawal from the Agreement expires and then withdraws from it, they will pay an amount proportional to the extent of the performance provided up to the moment of withdrawal.

25.4. After an effective withdrawal, the Service Provider refunds the payments, subject to clause 25.3, without delay and no later than 14 days after receiving the statement, using the same payment method, unless the Client agrees to another method that does not involve any costs for the Client.

25.5. Towards an Entrepreneur with Consumer Rights, the Service Provider is liable for the conformity of the digital service with the Agreement on the terms set out in Chapter 5b of the Consumer Rights Act. In the event of non-conformity, the Client may demand that the service be brought into conformity with the Agreement. If bringing it into conformity is impossible, would require excessive costs, has not taken place within a reasonable time, or the non-conformity is material or persists despite attempts to remedy it, the Client may make a statement on a price reduction or on withdrawal from the Agreement; withdrawal is not available where the non-conformity is immaterial. The Service Provider refunds the amounts due within 14 days of receiving the statement.

25.6. The limitations of liability in § 21.2 and 21.3 and the provision on the competent court in § 34.3 do not apply to an Entrepreneur with Consumer Rights.

§ 26. Data processing agreement — nature and roles of the parties

26.1. The provisions of § 26–31 constitute a data processing agreement within the meaning of Article 28 of Regulation (EU) 2016/679 (GDPR) between the Client and the Service Provider. The Client concludes it by accepting these Terms at registration (§ 5.1).

26.2. With regard to the data of Guests and the data of the Client’s employees and associates processed in the System for the Client’s purposes, the Client is the controller, and the Service Provider is a processor acting solely on behalf of the Client.

26.3. If the Client is itself a processor acting for another controller, the provisions of § 26–31 apply accordingly as a sub-entrustment of processing, provided that the Client has that controller’s consent to the sub-entrustment.

26.4. With regard to data relating to the Service Provider’s own relationship with the Client — in particular Account and User data for the purposes of login, security, billing and contact — the Service Provider is a separate controller. The rules for this processing are described in the Privacy Policy.

26.5. The Client, as controller, is responsible for having a legal basis for processing Guest data, including data on allergies and intolerances, and for providing Guests with the information required by Articles 13 and 14 GDPR.

§ 27. Subject matter, duration, nature and purpose of processing

27.1. The Client entrusts the Service Provider with the processing of personal data to the extent necessary to provide the Ranedo services.

27.2. The entrustment continues for the term of the Agreement and for the time needed to delete the data after it ends (§ 24).

27.3. The purpose of processing is the technical support of the Client’s business by means of Ranedo, in particular accepting, fulfilling and storing orders, geocoding delivery addresses, handling reservations and hotel stays, running the CRM, loyalty programme and newsletter, sending e-mail and SMS messages on the Client’s instructions, abandoned cart reminders, handling the Restaurant Website contact form, notifications to staff devices, reports and the exercise of Guests’ rights.

27.4. Processing includes in particular the collection, recording, organisation, storage, consultation, retrieval, disclosure to the Client, transmission in accordance with the Client’s instructions, export, restriction, anonymisation and erasure of data, carried out by automated means in the System.

§ 28. Categories of data subjects and types of data

28.1. The entrustment covers the data of:

Guests: persons placing orders, making reservations, checked in at the Client’s hotel establishment, CRM customers (including those recorded with a telephone number only), loyalty programme participants, subscribers to the Client’s newsletter, campaign recipients, persons writing via the Restaurant Website contact form and persons who have abandoned a cart;
the Client’s employees and associates using User Accounts.

28.2. Depending on the functions used by the Client, the scope of data includes:

first name, surname, telephone number, e-mail address, delivery address;
the content and history of orders and order notes;
information on allergies and intolerances provided voluntarily by the Guest (data concerning health);
reservation data;
hotel stay data: first name, surname, telephone, dates of stay, room number;
CRM data and staff notes about the Guest;
marketing consents to contact by e-mail and SMS together with the date and source of their granting, newsletter subscription data (including double opt-in confirmations) and campaign recipient data;
loyalty programme points and history;
the content of messages from the Restaurant Website contact form;
the contents of abandoned carts;
IP addresses recorded in security mechanisms (e.g. attempt limits) and entries in the event log;
User data: first name, surname, e-mail address, role, permissions, assignment to venues, history of actions in the Panel.

28.3. A Guest may provide information on allergies and intolerances in an optional field of the order form, accompanied by the notice: “Only provide what is needed to prepare your order safely. This information will be seen by the restaurant’s service staff and kitchen.” The information is saved in the order, visible to the Client’s service staff and kitchen, stored together with the order, does not create a separate allergy profile in the CRM and is covered by the GDPR tool. The basis for processing on the Client’s side is, as a rule, the Guest’s explicit consent expressed by voluntarily providing the information (Article 9(2)(a) GDPR); the Client is responsible for assessing and documenting this basis.

28.4. Apart from the field referred to in clause 28.3, the System is not intended for processing special categories of personal data. The Client does not enter data concerning health or other data referred to in Articles 9 and 10 GDPR into CRM notes or other text fields.

§ 29. Obligations of the Service Provider as processor

29.1. The Service Provider processes the entrusted data only on documented instructions from the Client, unless required to do so by European Union or Polish law; in such a case, it informs the Client of that legal requirement before processing, unless that law prohibits such information. Documented instructions are these Terms, the settings and actions performed by the Client in the Panel and instructions sent by e-mail.

29.2. The Service Provider does not use the entrusted data for its own purposes, in particular for its own marketing.

29.3. The Service Provider ensures that persons authorised to process the data have committed themselves to confidentiality or are under a statutory obligation of confidentiality.

29.4. The Service Provider applies the technical and organisational measures required by Article 32 GDPR, in particular:

encryption of connections (TLS);
storage of passwords in hashed form;
two-factor authentication — mandatory for the Service Provider’s operators and available to Clients;
encryption in the database of payment gateway keys and other secrets;
roles and permissions restricting access to data;
an event log ensuring accountability;
encrypted backup copies;
limits on login attempts and other operations (rate limiting).

29.5. The System provides the Client with a GDPR tool that makes it possible to search for a Guest by e-mail address or telephone number, export their data (JSON) and anonymise it. The tool covers orders, the CRM record, reservations, hotel stays, newsletter subscription, campaign recipients, contact form messages, abandoned carts and marketing consents.

29.6. To the extent that the Client cannot fulfil a Guest’s request itself, the Service Provider carries out the Client’s instruction concerning the Guest’s rights under Chapter III GDPR within 7 days of receiving it. A Guest’s request addressed directly to the Service Provider is forwarded to the Client without delay.

29.7. Taking into account the nature of processing and the information available to it, the Service Provider assists the Client in fulfilling its obligations under Articles 32 to 36 GDPR.

29.8. The Service Provider immediately informs the Client if, in its opinion, an instruction from the Client infringes the GDPR or other data protection provisions.

29.9. The Service Provider makes available to the Client the information necessary to demonstrate compliance with the obligations laid down in Article 28 GDPR.

§ 30. Sub-processors

30.1. The Client grants the Service Provider general authorisation to engage further processors (sub-processors) to the extent necessary to provide the services.

30.2. On the date these Terms enter into force, the sub-processors are:

Entity	Registered office	Scope	Place of processing
Hostinger International Ltd.	Cyprus	VPS server and database	data centre in Vilnius (Lithuania), EEA
OVH SAS	France	e-mail: notifications and confirmations sent to Guests and Clients	EEA
LINK Mobility Poland sp. z o.o. (SMSAPI)	Poland	sending SMS messages from SMS Packages purchased in Ranedo	EEA
Geoapify GmbH	Germany	geocoding of delivery addresses	EEA
OpenStreetMap Foundation (Nominatim service)	United Kingdom	fallback geocoding of the delivery address when Geoapify does not respond	United Kingdom — a third country covered by a European Commission adequacy decision
OpenAI Ireland Ltd.	Ireland	Restaurant Website content wizard — without Guest data	USA — standard contractual clauses or the EU–US Data Privacy Framework
Browser Web Push services (Google, Apple, Mozilla)	—	delivering notifications to the Client’s staff devices; the content of notifications is end-to-end encrypted in accordance with the Web Push standard	depending on the browser, including outside the EEA

30.3. Cloudflare, Inc. handles only the DNS of the Service Provider’s domains (without proxying traffic) and does not process Guest data.

30.4. Suppliers which the Client uses under its own agreements — PayU S.A., PayPro S.A. (Przelewy24), Krajowy Integrator Płatności S.A. (Tpay), analytics and advertising tools (e.g. Google Analytics, Google Tag Manager, Meta Pixel) and embedded maps and videos — are not sub-processors of the Service Provider. The Client independently determines their role in its processing.

30.5. The Service Provider imposes on sub-processors data protection obligations corresponding to the obligations under § 26–31 and is liable to the Client for their performance of those obligations. Data is transferred to a third country only on the basis of the mechanisms provided for in Chapter V GDPR.

30.6. The Service Provider informs the Client of its intention to add or replace a sub-processor at least 14 days in advance by e-mail and by a message in the Panel. Within that time, the Client may raise an objection justified by the protection of personal data. If the parties do not resolve the issue, the Client may terminate the Agreement before the new sub-processor begins to be used and receives a refund proportional to the unused part of the paid Billing Period.

§ 31. Breaches, audit and end of the entrustment

31.1. The Service Provider notifies the Client of a breach of the protection of the entrusted data without undue delay, and no later than within 48 hours of becoming aware of it, and provides the information the Client needs to fulfil its obligations under Articles 33 and 34 GDPR. Information not available at the time of notification is provided by the Service Provider in phases.

31.2. The Client may request the information necessary to assess the compliance of processing with the GDPR. If this is insufficient, the Client may conduct an audit or commission an independent auditor bound by confidentiality to conduct it.

31.3. An audit takes place no more than once a year, after notifying the Service Provider at least 14 days in advance, unless a personal data breach has occurred, there is a reasonable suspicion of non-compliance or a supervisory authority so requires. An audit may not compromise the security of other Clients’ data, the Service Provider’s trade secrets or the continuity of operation of the System. The costs of the audit are borne by the Client.

31.4. After the Agreement ends, the Service Provider deletes the entrusted data in accordance with § 24, unless the Client instructs earlier deletion or the law requires further retention. Data is returned by means of the export available in the Panel before the Agreement ends (§ 24.1).

§ 32. Marketing conducted by the Client

32.1. Ranedo provides tools for sending e-mail and SMS messages, running a newsletter with a double opt-in mechanism, a loyalty programme and abandoned cart reminders.

32.2. The Client is the controller of the data used in its marketing and is responsible for the legal basis for processing and for the consents to contact by e-mail, SMS and telephone required by the Electronic Communications Law.

32.3. The Client respects the withdrawal of consent, objections to marketing and unsubscriptions from the newsletter.

32.4. The Service Provider performs marketing operations only on the Client’s instructions and does not use Guest data for its own marketing.

§ 33. Amendments to the Terms

33.1. The Service Provider may amend these Terms for important reasons, in particular in the event of a change in the law, a change in the functions of the System, the billing method, suppliers or the need to increase security.

33.2. The Service Provider informs the Client of an amendment on a Durable Medium at least 14 days before it enters into force, unless earlier introduction of the amendment is necessary due to legal requirements, the security of the System or the prevention of abuse.

33.3. An amendment to these Terms does not increase the price for a period already paid.

33.4. If the Client does not accept an amendment, it may, before the amendment enters into force, terminate the Agreement with effect from the day preceding the entry into force of the amendment. If the amendment enters into force during a paid Billing Period and worsens the terms on which the services are provided, the Client receives a refund proportional to the unused part of that period.

§ 34. Final provisions

34.1. The Agreement is governed by Polish law, subject to mandatory provisions granting an Entrepreneur with Consumer Rights more extensive protection.

34.2. The parties shall first seek to resolve any dispute amicably.

34.3. Disputes with a Client who is not an Entrepreneur with Consumer Rights are resolved by the court having jurisdiction over the Service Provider’s registered office.

34.4. The invalidity or ineffectiveness of any provision of these Terms does not affect the validity of the remaining provisions.

34.5. Contact with the Service Provider: e-mail kontakt@ranedo.com, telephone +48 577 682 359, address: ul. Boczna 8, 46-080 Chróścice.

Annex 1. Model withdrawal form

(complete and return this form only if you wish to withdraw from the Agreement; it is available only to an Entrepreneur with Consumer Rights)

Addressee: Createin.pl Jarosław Kądzioła, ul. Boczna 8, 46-080 Chróścice, e-mail: kontakt@ranedo.com
I/We(*) hereby give notice that I/we(*) withdraw from my/our(*) agreement for the supply of the Ranedo digital service: Subscription / Add-on Module / SMS Package(*) ……………………………
Date of conclusion of the agreement / purchase(*): ……………………………
Full name and business name of the entrepreneur: ……………………………
Tax ID (NIP): ……………………………
Address: ……………………………
E-mail address assigned to the Account: ……………………………
Signature (only if this form is sent on paper): ……………………………
Date: ……………………………

(*) Delete as appropriate.

Ranedo Terms of Service