Privacy policy
This policy describes what personal data we process in connection with FingerFood Manager — a platform for running a catering business — on what basis, and for how long.
Who the controller is
The data controller is BDS Experts Leszek Szejka, registered at ul. Lipowa 61, 44-102 Gliwice, Poland, entered in the Polish Central Register and Information on Economic Activity (CEIDG), tax identification number (NIP) 6312579527, REGON 362171913. For anything concerning personal data, write to contact@fingerfood-manager.com.
Cookies and analytics on this site
fingerfood-manager.com sets at most two first-party cookies of its own: one remembering the language of the site, and one remembering your decision on the cookie banner. The language cookie is stored when you agree on the banner or when you explicitly switch languages; if you decline, the language is read from your browser's settings on each visit and nothing is stored. The typefaces are fetched at build time and served from our own origin, so they send nothing to anyone. If — and only if — you accept on the banner, we additionally load Google Analytics 4, which sets its own first-party cookies (_ga and _ga_ followed by the property id) and tells us which pages are read, for how long, and roughly where visitors arrived from. Google acts as our processor for those statistics; advertising features and cross-site tracking are not enabled. Nothing is requested from Google before you accept, and declining means no such request is ever made. You can change your mind at any time using the "Cookie settings" link in the footer, which brings the banner back.
Data in the application
The application at app.fingerfood-manager.com processes two things: the account details of whoever signs in (e-mail address, name, role), and the business data a catering company enters — orders, customers, products, price lists and costs. The second belongs to the catering company, and we process it solely to provide the service. The application uses only cookies that are strictly necessary to keep you signed in — they require no consent, and we set no others.
Signing in
Sign-in is either through Google or with an e-mail address and password. When you use Google we receive only an identifier, your e-mail address and basic profile details — we have no access to your mail, calendar or files. FingerFood Manager's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Passwords are stored only as a hash.
Legal basis
Account and business data are processed to perform the contract (GDPR Article 6(1)(b)). Contact details of people who write to us with an enquiry are processed on the basis of our legitimate interest in answering it (Article 6(1)(f)). We make no automated decisions about anyone and profile no one.
Who we entrust data to
The infrastructure runs on Microsoft Azure in the Poland Central region, so data stays within the European Union. Google sign-in happens on Google's side, where they act as a separate controller. E-mail to a catering company's own customers leaves through the SMTP server that company configures, not ours. Service messages from the platform itself — such as subscription notices — are sent through our own e-mail provider. Where you have consented to analytics on this marketing site, Google processes the resulting statistics on our behalf; without that consent no data reaches them at all.
How long we keep data
Account data is kept for the duration of the contract. Business data remains available for 90 days after it ends, and is then deleted. Backups are overwritten on a 6-month cycle. Correspondence about enquiries is kept for as long as handling the matter requires, and no longer than a year.
Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to its processing, and to receive it in a portable form. Where the data was entered by a catering company using the platform, that company is the controller — we act as a processor and will pass such a request on to them.
Complaints
If you believe we process your data unlawfully, you may complain to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Changes
We will notify registered users by e-mail of material changes to this policy before they take effect. The date of the last update is shown at the top of this page.