Privacy & cookies policy
How CellsDesk processes personal data and uses cookies.
1. Who is responsible for your data
The controller of personal data processed on cellsdesk.com is CellsDesk, ul. Jachtowa 7/2, 84-230 Rumia, Poland, tax ID (NIP) 5882286916 (“CellsDesk”, “we”). Contact for all privacy matters: contact@cellsdesk.com.
2. What data we process and why
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Visiting the website | IP address, browser type, pages requested, date and time (server logs) | Delivering the site, security, error diagnosis | Art. 6(1)(f) – our legitimate interest in running a secure website |
| Newsletter sign-up | Email address, dates of sign-up, confirmation and unsubscription, page where you signed up, a pseudonymised network identifier (hashed IP address, changed daily) to prevent abuse | Sending the CellsDesk Weekly newsletter (double opt-in: you are subscribed only after clicking the confirmation link) | Art. 6(1)(a) – your consent, which you can withdraw at any time |
| Contact by email or form, article proposals | Name, email, message content, company | Answering your enquiry, business correspondence | Art. 6(1)(f) – legitimate interest in replying; Art. 6(1)(b) where the enquiry concerns a contract (e.g. advertising) |
| Adding a company or submitting an event | Contact person's name, work email, company details you provide | Verifying and publishing the listing, contacting you about it | Art. 6(1)(b) – handling your request; Art. 6(1)(f) for verification |
| Advertising customers | Contact and billing details | Concluding and performing the contract, invoicing, accounting | Art. 6(1)(b) and Art. 6(1)(c) – contract and legal (tax) obligations |
| Basic visit statistics (no cookies) | Page viewed, referring website, campaign tags in the link (utm_*), device class (mobile/tablet/desktop) and a pseudonymous identifier calculated from the IP address and browser type that changes every day; the IP address itself is not stored | Counting visits and seeing which pages and sources bring readers | Art. 6(1)(f) – our legitimate interest in understanding how the site is used. Nothing is stored on or read from your device. You can opt out with your browser's "Do Not Track" or Global Privacy Control setting |
| Analytics (only after consent) | Pseudonymous online identifiers, pages viewed, approximate location, device data | Measuring traffic and improving the site; counting clicks on sponsored placements | Art. 6(1)(a) – your consent given in the cookie banner |
Providing data is voluntary, but without an email address we cannot send the newsletter or reply to you.
3. Cookies and similar technologies
We use only the following:
- Your consent choice – stored in your browser's local storage (
cd-consent) so we don't ask again. Necessary; no consent required. - Our own visit statistics use no cookies and no local storage – see the table above.
- Google Analytics 4 – cookies
_gaand_ga_*, valid for up to 2 years, set only after you click “Accept”. IP anonymisation is enabled.
You can change your decision at any time via Cookie settings (also in the footer) or by deleting cookies in your browser. If we start showing ads from Google AdSense, we will ask for your consent through a separate consent message before any advertising cookies are used, and update this policy.
4. Who receives your data
- Hosting provider – OVH (servers in the EU), which stores the website and server logs on our behalf.
- Email provider – the provider of our cellsdesk.com mailbox, for correspondence.
- Google Ireland Ltd. – Google Analytics, only with your consent.
- Accounting and legal advisers – where needed for invoicing or legal obligations.
- Newsletter and forms – we run our own system: form submissions and the subscriber list are stored in a database on our OVH hosting in the EU, and emails are sent through our OVH mailbox. We don't use an external newsletter provider. Links in the newsletter pass through cellsdesk.com so we can count clicks per issue (e.g. on sponsored banners); we don't record who clicked and don't use tracking pixels.
Some pages load content from third-party servers, which therefore receive your IP address: fonts from Google Fonts, illustrative photos from Wikimedia Commons (Wikimedia Foundation, USA), and map tiles from OpenStreetMap on company profiles.
5. Transfers outside the EEA
Google and the Wikimedia Foundation may process data in the USA. Google LLC is certified under the EU–US Data Privacy Framework; other transfers rely on the European Commission's standard contractual clauses.
6. How long we keep data
- Newsletter: until you unsubscribe or withdraw consent; unconfirmed sign-ups are deleted after 30 days. After unsubscribing we keep your address and the unsubscription date for up to 3 years to prove consent was handled correctly.
- Form submissions (contact, company listings, events, article proposals): up to 3 years after the matter is closed.
- Correspondence: up to 3 years after the matter is closed, or longer if needed to establish or defend legal claims.
- Contract and invoice data: for the period required by tax law (generally 5 years from the end of the year in which the tax obligation arose).
- Server logs: up to 12 months.
- Basic visit statistics: up to 400 days; the daily identifier cannot be linked across days.
- Analytics data: 14 months in Google Analytics.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise your rights, write to contact@cellsdesk.com.
You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Automated decisions
We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
9. Third-party content
News headlines link to articles on other websites, and sponsored placements link to advertisers' websites. Those sites have their own privacy policies; we are not responsible for how they process data.
10. Changes
We may update this policy when our services or the law change. The date of the latest version is shown at the top of this page.