Privacy notice

01 What this notice covers

This notice explains how we handle the personal data of visitors to www.finpl.ai: what we learn about you when you visit, why, on what legal basis, and what rights you have.

It does not cover the processing of data inside the FINPLAI application at our customers' sites. There we act as a processor, and the terms are set by a separate data processing agreement concluded with each customer.

02 Who the controller is

We have not appointed a data protection officer, as we do not meet the conditions under which the GDPR requires one. For any data protection matter, use the contact above.

03 Cookies and analytics

This site uses no cookies. It runs no analytics tool, no advertising script, no tracking pixel and no social media buttons. We do not build visitor profiles and we pass your behaviour on the site to no one.

That is why you will not find a cookie consent banner here — there is nothing to ask consent for.

The site also loads nothing from third-party servers. Fonts, images and scripts all come from our own domain, so no third party learns about your visit.

04 What is stored in your browser

So that you don't have to set the same thing on every visit, the site keeps two small items in your browser's local storage. They are not cookies, they are never sent to our server, and they cannot identify you.

Both are created only by your own choice, and you can remove them at any time by clearing site data in your browser.

05 What data we process

Server logs

The site runs on Azure Static Web Apps. Like any web server, it keeps operational logs containing the IP address, browser type and version, time of access and the address of the page visited. They serve to operate and secure the site, in particular to detect attacks and faults.

Legal basis: our legitimate interest in the secure and functional operation of the site under Art. 6(1)(f) GDPR.

When you contact us

If you email or call us, we process the data you give us — usually your name, email, phone, company name and the content of your message. We use it solely to reply to you and, where relevant, to agree on working together.

Legal basis: steps taken at your request prior to entering into a contract under Art. 6(1)(b) GDPR, or our legitimate interest in answering an enquiry under Art. 6(1)(f).

Providing the data is voluntary. Without contact details, however, we cannot reply to you.

06 Who receives the data

We do not sell personal data and we do not pass it to anyone for their own purposes. We involve only the processors without whom we could not run the site and company email:

• Microsoft Ireland Operations Limited — website hosting (Azure Static Web Apps) and company email. The site is operated in the West Europe data region, that is, within the European Union.

We deliberately do not transfer data outside the European Union. Should such a transfer nevertheless occur on the part of our provider, it takes place under the standard contractual clauses approved by the European Commission.

07 How long we keep data

• Server logs — for as long as the hosting provider retains them under the standard settings of the service; they are then deleted automatically.
• Email correspondence — for the duration of the discussion and thereafter for as long as our legitimate interest in evidencing it lasts, at most 3 years from the last message. If a contract results, statutory retention periods apply.

08 Your rights

In relation to your personal data, the GDPR gives you the right to:

• know what data we hold about you and obtain a copy of it,
• have inaccurate data corrected,
• have data erased where we no longer have grounds to process it,
• have processing restricted,
• receive the data in a machine-readable format and have it transferred elsewhere,
• object to processing based on our legitimate interest.

Just write to jan.husek@finpl.ai. We will respond within one month at the latest.

If you believe we are handling your data improperly, you may contact the supervisory authority: Office for Personal Data Protection, Pplk. Sochora 727/27, 170 00 Prague 7, Czech Republic, www.uoou.cz. We would appreciate hearing from you first, though.

09 Changes to this notice

We may update this notice if the site or the law changes. The current version is always at this address; the effective date and version number are shown below the heading.