Privacy and cookie policy
Version: 2026-11-10 · The timeslots.pl information website
This policy describes the public timeslots.pl website and its enquiry forms. Separate Time Slots applications and demo services may have different privacy arrangements; this policy does not cover data entered into those applications.
1. Controller and contact
The controller is Prodefinity Sp. z o.o., ul. Bernardyńska 4/311, 50-156 Wrocław, Poland, KRS 0000461210, NIP 8992743687. To contact us about your personal data or exercise your rights, email biuro@prodefinity.com or write to the postal address above.
2. Forms, correspondence and security
The contact form sends us your name, email, telephone number, subject and message. The demo request sends your first and last names, email, telephone number, company, position, the information source you select and your chosen language. Telephone number, position and information source are optional. Form submissions are delivered to our office by email. Please do not include sensitive information or other people's data that is unnecessary for your enquiry.
- Replies, offers and demo requests: where you request steps before entering into a contract, the basis is Article 6(1)(b) GDPR. For other enquiries, including contact on behalf of a company, the basis is Article 6(1)(f) GDPR: our legitimate interest in handling enquiries and correspondence.
- Security and spam prevention: we process technical connection data, including the IP address, request information and time. For contact form submissions flagged as spam, we record the date, IP address, submitted email and reasons for rejection. The basis is Article 6(1)(f) GDPR: our legitimate interest in protecting the website, forms and correspondence against abuse.
- Legal claims: where necessary to establish, exercise or defend a claim, the basis is Article 6(1)(f) GDPR: our legitimate interest in protecting our rights.
Providing form data is voluntary and is not a statutory requirement. Fields marked as required are needed to use the relevant form; it cannot be submitted without them. You can also contact us directly by email. Handling your enquiry does not require consent to analytics, videos or marketing.
3. Cookies and browser storage
A cookie is a small piece of information stored by your browser. We also use localStorage. These technologies can hold identifiers, so we do not automatically consider the data anonymous.
| Name / service | Purpose and activation | Device storage period |
|---|---|---|
PHPSESSID | A session for form security (CSRF and spam prevention), language settings and submission messages. Operates independently of optional consent. | A session cookie, until the browser session ends. A browser's session restore feature may extend this period. |
timeslots_privacy_consent | localStorage: remembers your separate analytics, marketing and YouTube choices and their validity. | Your choice remains valid for up to 180 days after saving; you can change it earlier. The site asks again once that period expires. A localStorage entry does not have an automatic browser expiry. |
_ga, _ga_* | Google Analytics 4: distinguishing browsers and sessions and measuring website use. Only with analytics consent. | Up to 180 days from creation, without renewing expiry on later visits. You can delete them earlier. |
| Google Ads and Google Signals | Google Ads: advertising measurement and personalisation, including identifiers and cookies such as _gcl_*. Google Signals: associating Analytics data with information about signed-in Google users for reporting. Both require separate marketing consent on this website; Signals also requires analytics consent. | Depends on the active feature and identifier; see Google's cookie information. |
| YouTube | The player from youtube-nocookie.com loads only after separate YouTube consent and may use identifiers or browser storage. | Depends on the player technology and Google settings; see Google's cookie information. |
Technical functions deliver the website, support forms and respect your settings. Optional analytics, marketing and embedded YouTube require prior consent for the relevant category. Browsing, scrolling or submitting a form does not give that consent.
4. Optional analytics
Analytics consent allows Google Analytics 4 to run to understand website use and improve it. Data may include browser and session identifiers, visited pages, interaction types and times, referral sources, and device and browser information. Connecting to Google also discloses your IP address. The basis for processing personal data for this purpose is consent (Article 6(1)(a) GDPR).
Analytics consent covers statistics for this website. It does not include advertising personalisation or sharing form data for advertising. Analytics uses identifiers and is not described as fully anonymous.
5. Optional marketing: Google Ads and Google Signals
Separate marketing consent allows configured Google Ads features to measure advertising effectiveness and personalise advertising. Data may include advertising identifiers, ad clicks, pages visited, actions taken, and device and browser information. The legal basis is consent (Article 6(1)(a) GDPR).
Google Signals associates Google Analytics data with information about signed-in Google users for behavioural reporting. Because it links information in this way, we require both analytics and separate marketing consent on this website. Using data for advertising is distinct from this reporting and also requires marketing consent. Consent does not replace service settings or the Google user's privacy settings.
Choosing analytics does not give marketing consent. Submitting a form does not give marketing consent either. Your choices here govern activation on this website; they do not change your Google account settings. Advertising features may create audience groups and personalise advertising, but we do not use them to make decisions producing legal or similarly significant effects on you.
6. YouTube videos
Videos are optional. Before consent, a locally hosted message appears instead of the player. After consent, your browser connects to YouTube (Google), disclosing information including your IP address, browser, device, page and playback activity. We use youtube-nocookie.com privacy-enhanced mode; this does not mean that Google processes no data.
Our basis for activating the service and the associated processing is consent (Article 6(1)(a) GDPR). Google's subsequent processing is explained in its privacy policy. The player may show advertisements according to YouTube and the video owner's settings. Following a link from the player to YouTube means using a separate website.
7. Recipients and international transfers
Authorised staff and hosting, email and technical service providers may access data as needed to deliver their services. Data may also be disclosed to authorities entitled to receive it by law.
Website hosting is provided by STATNET Online Maciej Dolny, ul. Kasztanowa 62, 85-605 Bydgoszcz, Poland. The servers hosting the website are located in the European Union.
When the relevant service is enabled, recipients include Google Ireland Limited (Ireland) and Google's service providers, including Google LLC (USA). Google may process data outside the European Economic Area (EEA). Google's published arrangements describe adequacy decisions, including the EU–US Data Privacy Framework, and Standard Contractual Clauses where applicable. Details and links to safeguards are available in Google's data transfer information. You may also contact us for information or a copy of the relevant safeguards.
8. Retention
- Correspondence and demo requests: We retain correspondence while handling an enquiry or discussing an offer. We close the matter after providing a final response or ending discussions without entering into a business relationship. If a contract is concluded, we retain messages documenting its terms, performance and settlement throughout its performance and settlement. After the matter is closed or the contract is settled, we keep only documents required by law and messages necessary to establish, pursue or defend specific legal claims. We delete them when the applicable statutory retention period or the limitation period for the relevant claim expires; if proceedings are underway, necessary evidence is retained until their final conclusion and enforcement of the decision. Other correspondence is deleted when the matter is closed or the contract is settled.
- Logs: STATNET Online retains server logs for up to 30 days. Contact the controller about the website's separate spam prevention records and their deletion.
- Google Analytics: Google Analytics 4 is set to a 14-month retention period for data covered by its retention setting. For user-level data, each new activity resets this period; this does not reset the retention period of all earlier events. Once the applicable period expires, Google deletes the data on a monthly cycle. Age, gender and interest data have a retention period of 2 months. The retention setting does not apply to standard aggregated reports or determine retention periods in other Google services.
- Google services: sections 4–6 describe Google Analytics, Google Ads, Google Signals and YouTube and the consent required to use them. Further information about Google's processing is available in its privacy policy and data retention policy. Withdrawing consent stops further activation of the relevant service on this website, but does not automatically erase data already sent to Google.
- Session and privacy choices on your device: as described in section 3. You can clear device data earlier in your browser settings.
9. Your choices and withdrawing consent
You can reject all optional services or choose analytics, marketing and YouTube separately. Rejection does not prevent you from reading the site or using its forms; video playback requires YouTube consent. Change your choice with the button below or the “Privacy settings” link in the footer.
Withdrawing consent stops further activation of the relevant service on this website. It does not affect the lawfulness of earlier processing or automatically erase data already sent to recipients. You can exercise your rights to request deletion. Cookies and other domains' stored data can also be cleared in your browser; this website cannot access all data held by Google.
10. Your rights
Where the GDPR conditions apply, you may request access, rectification, erasure and restriction of processing. Data portability applies to automated processing based on consent or a contract. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to processing for direct marketing at any time. You may withdraw consent at any time. Send requests to the contact address in section 1.
You may lodge a complaint with the President of Poland's Personal Data Protection Office (uodo.gov.pl) or another competent supervisory authority.
We do not make decisions on this website based solely on automated processing, including profiling, that produce legal or similarly significant effects on you. Forms use an automatic spam filter; if it rejects your enquiry, please contact us by email. Optional analytics can group visits according to how visitors use the website.