Privacy Policy for fsdesk.pl
1. Scope
This Privacy Policy applies to the public fsdesk.pl website and pages operating within it.
It describes the processing of data associated with visiting the website, including technical data, server logs, cookies and data processed through Google Analytics 4.
This policy does not describe the processing of data in the fsDesk mobile application or data processed within fsDesk installations or services used by customers. Such processing may be subject to separate privacy rules or documentation.
2. Data controller
The controller of personal data associated with the use of fsdesk.pl is:
Frigg Systems Sp. z o.o.
ul. Żelazna 2
40-851 Katowice
Poland
KRS: 0000938173
VAT ID: PL6343004578
Frigg Systems Sp. z o.o., with its registered office in Katowice at ul. Żelazna 2, 40-851 Katowice, Poland, is registered by the District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register under KRS number 0000938173, with share capital of PLN 5,000.
For matters related to personal data protection, you may contact us at: gdpr@friggsystems.com.
3. Data we may process
When you use the website, technical information related to your connection to the website may be processed, including in particular:
- the IP address of the device,
- the date and time of the request,
- the address of the requested resource,
- information about the web browser and operating system,
- device information,
- technical information concerning the server response,
- the address of the website from which the user entered the service.
If a user voluntarily provides us with personal data, for example by contacting us by email or through a form available on the website, we process the data to the extent necessary to handle the enquiry, conduct correspondence, prepare a response or take action at the user's request.
4. Server logs
When the website is used, technical information may be automatically stored in server logs or in logs generated by the infrastructure supporting the website.
Logs may include the IP address, date and time of the request, requested resource, browser information, HTTP response code and information necessary for infrastructure diagnostics.
We use log data to ensure website security, diagnose errors and technical issues, prevent abuse and maintain the proper operation of the website.
The legal basis for this processing is our legitimate interest in ensuring the security and proper operation of the website pursuant to Article 6(1)(f) of the GDPR.
6. Google Analytics 4
With the user's consent, we use Google Analytics 4, a service provided by Google Ireland Limited.
Google Analytics enables us to create aggregated statistics about the use of the website, including, among other things:
- the number of users and visits,
- pages visited,
- session duration and flow,
- traffic source,
- approximate location,
- device type,
- operating system and browser type.
We use this data to analyse the operation of the website, identify issues and improve its content and usability.
Google Analytics is activated only after the user has given consent. The legal basis for processing in this respect is Article 6(1)(a) of the GDPR.
In our configuration, consent to analytics does not constitute consent to personalised advertising. Advertising storage, advertising-related user data and ad personalisation remain disabled.
Google Analytics 4 uses an IP address at the time of collection, including for deriving approximate location information, but Google states that IP addresses are not logged or stored in Google Analytics.
Data collected through Google Analytics may be processed using Google infrastructure located outside the European Economic Area. Where this occurs, data transfer mechanisms provided for under applicable data protection law are used.
User-level and event-level data available in Google Analytics is retained for 14 months, in accordance with the configuration of our Google Analytics property. This retention setting does not affect aggregated data available in standard Google Analytics reports.
More information about Google's privacy practices: policies.google.com/privacy .
7. Analytics consent and withdrawal
During the first visit to the website, users can decide whether they consent to the use of Google Analytics and analytics cookies.
The following options are available:
- "Accept" – gives consent to Google Analytics and analytics cookies;
- "Necessary only" – rejects analytics; Google Analytics will not be activated;
- "Settings" – allows the analytics category to be enabled or disabled independently.
Refusing analytics consent does not limit access to the website's basic functionality.
Consent may be changed or withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Users may also delete or block cookies directly through their web browser settings.
8. Data recipients
In connection with operating the website, data may be entrusted or disclosed to entities providing services necessary for its operation, including providers of:
- hosting and server infrastructure,
- IT services,
- infrastructure security and monitoring,
- analytics tools – in the case of Google Analytics, only after appropriate consent has been given.
Data is disclosed only to the extent necessary for the relevant purpose and in accordance with applicable law.
9. User rights
Where provided for by the GDPR, data subjects have the right to:
- access their data,
- rectify their data,
- erase their data,
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time where processing is based on consent.
Where processing is based on consent, withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if they believe that the processing of their personal data infringes applicable data protection law.
10. Security
We use appropriate technical and organisational measures designed to protect data and website infrastructure against unauthorised access, loss, alteration, destruction or unauthorised disclosure.
The scope of the security measures is adjusted to the nature of the data processed and the risks currently identified.
11. Changes to this Privacy Policy
This policy may be updated, in particular, if the way the website operates, the tools we use, the configuration of analytics services or applicable law changes.
The current version of the policy is published on the website together with the date of its most recent update.