Privacy policy

Controller

The portal operator (the data controller) - contact details are available from the administrator.

Contact in data protection matters: —.

What data we process

• identification and contact data: e-mail address, name (if provided), company and language,
• sign-in data: time of sign-in, one-time codes (stored only as a hash), session data,
• technical data: IP address (shortened in the log; the full address is kept only for 30 days for security purposes), country determined from the IP address, browser type,
• activity log: viewed and downloaded documents, use of public links, changes made in the portal.

Purposes and legal basis

• providing access to product documentation for business partners and their employees - Art. 6(1)(b) GDPR (contract) and Art. 6(1)(f) GDPR (our legitimate interest in providing technical documentation to customers),
• ensuring security, detecting abuse and investigating incidents (audit log, alerts) - Art. 6(1)(f) GDPR,
• statistics on the use of documentation (aggregated) - Art. 6(1)(f) GDPR,
• service notifications: a weekly summary of new and updated documents in your products (only when something has changed) - Art. 6(1)(b) and (f) GDPR; you can unsubscribe with one click in every message or in "My account",
• fulfilling legal obligations and defending against claims - Art. 6(1)(c) and (f) GDPR.

We do not use your data for marketing, profiling or automated decision-making with legal effects. Security alerts are reviewed by an administrator.

Recipients

Service providers acting on our behalf (processors): hosting provider, Microsoft (Microsoft 365 / SharePoint, e-mail delivery). They process data only on our instructions under a data processing agreement (Art. 28 GDPR). If data is transferred outside the European Economic Area, this takes place on the basis of an adequacy decision or standard contractual clauses.

How long we keep data

• account data: as long as access to the portal is granted to you; after deactivation - until the cooperation ends and claims expire,
• activity log: 365 days (full IP address: 30 days),
• sign-in codes: until used or expired (10 minutes), sessions: up to 12 hours.

Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability and to object to processing based on our legitimate interest. In the "My account" section you can download a copy of your data and send a deletion request. You also have the right to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).

Providing an e-mail address is necessary to use the portal.

Cookies

The portal uses only strictly necessary cookies - no analytics, advertising or third-party cookies, so no consent is required:

• sid - sign-in session (expires after 12 hours or on sign-out),
• lc - sign-in in progress (10 minutes),
• lang - chosen language (1 year),
• theme - chosen light/dark mode (1 year),
• tz - browser time zone used to display times (1 year),
• oidc_* - administrator sign-in with a company account (10 minutes).

Passkeys

If you add a passkey, we store only the key identifier, its public key, a usage counter, the name you gave it and the dates it was added and last used. Your fingerprint, face image or PIN never leave your device – the portal never receives them. You can remove a passkey at any time in "My account"; signing in with the e-mail code keeps working.

Additional strictly necessary cookies:

• pkc - sign-in or passkey registration in progress (5 minutes),
• pkp - hides the suggestion to add a passkey (1 year).