Draft pending review by a lawyer. Version of 04.11.2026.
Privacy Policy
Download as PDF · version of 04.11.2026
This translation is provided for convenience. The Polish version is the legally binding one.
1. Controller
The controller of personal data is Fire Protection Solutions Jakub Baran, ul. Grzybowa 7A/2, 05-825 Grodzisk Mazowiecki, tax ID (NIP) 6182094888, statistical number (REGON) 528892780, e-mail biuro@fp-solutions.pl, tel. +48 790 782 993. We have not appointed a data protection officer (we are not required to); for all matters concerning your data, please write to the address above.
2. What data we process, why and for how long
| Data | Purpose | Legal basis (GDPR) | How long |
|---|---|---|---|
| e-mail, password (hash only), account type, language, notification settings, 2FA secret; when signing in with Google or Microsoft — the account identifier with that provider | maintaining the Account, signing in | Art. 6(1)(b) — contract | until the Account is deleted |
| billing details: company name or first name and surname, address, tax ID (NIP) / EU VAT number, invoice e-mail | settlements, invoices, KSeF (National e-Invoicing System), verification of the NIP (Ministry of Finance register) and EU VAT number (VIES) | Art. 6(1)(b) and (c) — contract, tax obligation | 5 years from the end of the year in which the tax obligation arose |
| payment data: Stripe payment and customer identifiers, card type and last 4 digits, Balance and top-up history (full card details are held only by Stripe) | payments, prepayment, handling payment disputes | Art. 6(1)(b), (c) and (f) | card — until it is removed; accounting data — 5 years |
| Model file, Results, calculation log, preview frames | performing the Job | Art. 6(1)(b) | 30 days from the end of the Job |
| order record: time, IP address, declarations made (consent to start before the 14-day period expires, scope of the service), price estimate | proof of conclusion of the contract, complaints, payment disputes | Art. 6(1)(c) and (f) | until the limitation period for claims expires (up to 6 years) |
| history of Jobs and events (including administrator access) | settlements, complaints, transparency | Art. 6(1)(b) and (f) | until the Account is deleted; accounting data 5 years |
| visit statistics (Umami, on our own server): page visited, referring page, country, browser and device type — no cookies, no stored IP address | improving the Service | Art. 6(1)(f) — legitimate interest | up to 2 years, aggregate data only |
| IP address, server logs, date and time of requests | security, abuse detection | Art. 6(1)(f) — legitimate interest | up to 90 days |
Providing your e-mail address and billing details is voluntary, but without them you cannot create an Account or order calculations. We do not carry out profiling and do not make decisions based solely on automated processing that produce legal effects concerning you. The settlement method (prepayment or payment after completion) results from verification of the NIP in the Ministry of Finance register, of the EU VAT number in VIES, or of a saved card — you can contest this by writing to us.
3. Who we entrust data to (subprocessors)
| Entity | Role | Where | Transfer basis |
|---|---|---|---|
| Hetzner Online GmbH | portal servers, Results storage, computing servers | Germany (Nuremberg, Falkenstein), Finland (Helsinki) — when no machines are available in Germany | data processing agreement (Art. 28 GDPR); data in the EU |
| Stripe Payments Europe, Limited | card, BLIK and Przelewy24 payments; saved card | Ireland; some processing in the USA | Stripe also acts as an independent controller; transfer to the USA: EU-US Data Privacy Framework and standard contractual clauses |
| Sendinblue SAS (Brevo) | sending e-mails (confirmations, invoices, notifications) | France | data processing agreement; data in the EU |
| ING Bank Śląski S.A. (ING Księgowość) | issuing invoices, submission to KSeF | Poland | data processing agreement; tax obligation |
| Google Ireland Ltd., Microsoft Ireland Operations Ltd. | signing in — only if you choose it | Ireland; possible transfer to the USA | independent controllers; Data Privacy Framework |
| GitHub Inc. | application code, administrative operations log (may contain e-mail addresses and Job identifiers) and encrypted (AES-256) backups of the database and invoices, kept up to 12 months | USA | data processing agreement, Data Privacy Framework and standard contractual clauses |
Invoice data is sent to the National e-Invoicing System (Krajowy System e-Faktur, KSeF) as required by law. We check NIP numbers in the public register of the Ministry of Finance and EU VAT numbers in the European Commission's VIES system.
4. Model files
.fds files may contain building design data and sometimes personal data (e.g. designers' names). We treat them as confidential: only the computing processes and the administrator (for diagnostic purposes) have access to them, and every instance of administrator access is recorded and visible to you in the Job history. For businesses, we act in this respect as a processor under the data processing agreement.
5. Your rights
You have the right to access your data and obtain a copy of it, to rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. You can delete your Account and Jobs in the settings or by writing to biuro@fp-solutions.pl — we reply within one month. You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
6. Security
We store passwords only as cryptographic hashes, connections are encrypted (TLS), two-step login is available, computing servers exist only for the duration of a Job and have no open external access other than the channel to the portal, and we back up the database daily. We will notify the President of UODO of a personal data breach within 72 hours, and the persons concerned, where there is a high risk to them, without undue delay.
7. Cookies
The Service uses only files necessary for it to work (session, form protection, selected language), which is why we do not display a consent banner. Details: cookie information.
Service provider: Fire Protection Solutions Jakub Baran, ul. Grzybowa 7A/2, 05-825 Grodzisk Mazowiecki, NIP 6182094888, REGON 528892780, e-mail biuro@fp-solutions.pl, tel. +48 790 782 993.