Invoice-tool terms
This English summary explains the operative rules of Ganado Faktura. The authoritative legal text remains the Czech version. Effective 7 October 2026 · version 2026-10-16.
Provider: Ganado international s.r.o., IČO 19322119, VAT ID CZ19322119, registered office Příčná 1892/4, Nové Město, 110 00 Praha 1, registered in the Commercial Register kept by the Municipal Court in Prague, section C, insert 384722; e-mail info@ganado.cz.
Service and responsibility
Faktura technically creates invoices and related documents from user input. It is not accounting, tax or legal advice. The user is responsible for the lawful basis, accuracy, tax treatment, numbering and final content, and must not enter special-category data, passwords or access credentials.
Storage, sync and statutory archive
Without sign-in, drafts and documents remain in browser storage. Signing in enables a server archive and cross-device sync. Ganado Core runs sign-in and the archive on Ganado’s own server in the Czech Republic; Cloudflare delivers the HTTPS requests. Signed-in document content is retained until 31 December of the tenth calendar year after its year of issue at most. This is the service maximum, not a calculation of the issuer’s statutory retention period. Voiding preserves the original document and number; it is not deletion.
Account closure can be requested from the sign-in address at info@ganado.cz. At closure the user chooses either to close the account and keep the archive, or to export and delete. Keeping the archive stops sign-in and shared links. On the user’s instruction Ganado then keeps the Faktura archive without sign-in or link access: each document for the period above, the rest of the archive (supplier details and their history, client directory, numbering and minimal usage records) until the last document is deleted, and the sign-in address to verify later requests. On a request from that address, after verifying entitlement, Ganado provides a copy of an original document with the same number and content and states whether and when it was voided. The archive can be deleted on request at any time. Export and delete means the user exports the documents they must retain and Ganado deletes the archive. An account without documents is deleted at closure either way. Ganado handles a closure or deletion request without undue delay and within 30 days of verifying it, and confirms it by e-mail to the sign-in address. Faktura is a creation tool and convenience archive, not a replacement for the issuer’s statutory accounting archive or independent backup.
PDF and hosted links
After a new document is successfully issued, Faktura may prepare one vector PDF in the background so the first download does not wait for a cold render. Opening an archived document does not generate a PDF until download. Ganado’s own infrastructure processes validated input only for that render, the browser may cache the file in memory for the same immutable snapshot, and neither PDF nor HTML is written to the Faktura application database.
A hosted invoice link can be viewed by anyone who has it and is stored for no more than 30 days. A managed signed-in link is checked against the durable non-voided snapshot on every read and is denied after voiding, account removal or mismatch. An anonymous capability link remains readable until revocation succeeds or it expires.
Online payment of Ganado’s own invoices
Selected hosted Ganado invoices allow payment of the full amount in CZK or EUR through available Apple Pay. Only server verification confirms payment; closing the wallet or a browser message alone does not. Bank instructions may remain hidden until the payment is resolved to prevent a second payment. Payment does not change the document as issued, its tax point or its confirmed service month.
Data processing for online payment.
Processing on the user’s behalf
Where the user controls personal data included in an invoice, Ganado acts as processor under Article 28 GDPR to store, sync, render and share the document on the user’s documented instructions and, for a kept archive, to keep it and provide copies. Ganado processes the data otherwise only where Union or Member State law requires it, and informs the user first unless that law prohibits it. The data may cover supplier and recipient identity, contact, address, tax, bank, payment, line-item, date and amount details. Data subjects may include the user, sole traders, customers, suppliers, contacts and their staff.
Ganado limits access to persons bound by confidentiality, applies appropriate security, assists with data-subject requests and with the user’s obligations under Articles 32 to 36 GDPR (security, breach notification and communication, impact assessments and prior consultation), and notifies the user without undue delay after becoming aware of a personal data breach affecting the user’s data.
Closing the account ends sign-in and shared links; it ends the processing only when the user chooses export and delete. With a kept archive, processing ends when the archive’s last document is deleted after the period above, or earlier on request. Until then the user may ask for the data to be returned rather than only deleted: a signed-in user exports documents in the tool (PDF, ISDOC archive); from a kept archive Ganado provides, on a verified request, PDF copies of the documents and the rest of the archive in a machine-readable format. When processing ends, Ganado deletes all personal data in the archive, including the sign-in address kept to verify requests, unless Union or Member State law requires its storage. The 30-day deadline and e-mail confirmation above apply.
Copies end with the data. Managed shared links stop when the account is closed, and their stored copies expire within 30 days of the link’s creation. Older transitional sync copies expire at the end of their 90-day TTL. Ganado removes an e-mailed copy from its mailbox after sending it. Encrypted database backups may still hold the data after deletion; they are not available or used in ordinary operation, and a restore from a backup repeats the deletion.
Ganado makes available the information needed to demonstrate compliance with these obligations and allows for and contributes to audits, including inspections, by the user or an auditor the user mandates. An audit is announced in writing at least 30 days in advance unless a supervisory authority requires a shorter period; the auditor must be bound by confidentiality, and the audit must not endanger the security of the service or other users’ data. Each party bears its own costs.
Ganado uses the listed subprocessors—principally Cloudflare, Upstash and Google—for their stated technical roles, imposes data-protection obligations corresponding to these terms on them by contract and remains liable to the user for their performance. It informs the user of every intended addition or replacement at least 14 days in advance by e-mail to the sign-in address and in the privacy notice, and the user may object on data-protection grounds before the change takes effect. A new subprocessor does not start processing the user’s data before that period ends. Where the period cannot be kept, for example after a security incident or a provider’s withdrawal, Ganado asks for the user’s express consent, uses a subprocessor the user has already authorised, or suspends the affected function until then. If Ganado does not accommodate an objection, the user may stop using the affected function or close the account as above. Ganado will notify the user if it considers an instruction to infringe data-protection law. The user must provide a lawful instruction and required privacy notice to invoice recipients.
Availability and law
Ganado does not promise uninterrupted availability and may change the tool. To the extent permitted by law, Ganado is not liable for indirect loss, lost profit or loss of browser-local data. Czech law governs the service.