Privacy

Hosting and server logs

The site is hosted on Firebase Hosting, a Google service. Delivery necessarily processes request data such as IP address, time, requested resource, referrer, browser, and operating system for secure and reliable operation.

The legal basis is Article 6(1)(f) GDPR, our legitimate interest in providing and protecting the website. Hosting and security log retention is controlled by the service provider and kept only as required for operation, abuse prevention, and legal obligations.

Optional Firebase Analytics

Firebase Analytics by Google is disabled until you select “Allow analytics.” After consent, it can process page URL and title, device and browser information, interaction events, Core Web Vitals, generic client-error categories, approximate location derived from the request, and online identifiers. We do not send error messages, stack traces, email addresses, form values, or free-text input.

The legal basis is Article 6(1)(a) GDPR. Google Ireland Limited is a recipient and data may be processed by Google LLC in the United States under applicable transfer safeguards, including the EU-US Data Privacy Framework where applicable and standard contractual clauses.

User- and event-level analytics data is limited to a two-month retention setting; aggregate reports may remain available longer. You can withdraw consent for future collection at any time through “Privacy settings.” Withdrawal does not affect earlier lawful processing.

No newsletter or account

DeskFit Studio does not operate a newsletter, account system, contact form, or email capture. The workstation checklist is delivered directly without registration. If you email us, your message is processed only to answer it and meet applicable record-keeping duties.

Your rights

Depending on the legal requirements, you may request access, correction, deletion, restriction, portability, or object to processing by contacting [email protected]. You may withdraw consent at any time.

You also have the right to complain to a data-protection supervisory authority. For the controller’s Berlin establishment, the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.