1. Scope of this policy
This policy covers only the public information website at https://resofield.app/.
It does not cover a separate ResoField account or practitioner application. If another ResoField service collects account, client, session or treatment data, the privacy information for that service applies.
2. Who is responsible
ResoField is responsible for the personal data described in this policy.
For a privacy question or request, use the contact page.
3. Data this website processes
The public website may process the following data:
- Technical request data, such as your IP address, requested page, date and time, referrer, browser and device information. The web server and security services use this data to deliver and protect the website.
- Your name, email address, subject, message and any selected category when you submit the contact or support form.
- Page visits and interaction data through Google Analytics, but only after you accept Analytics.
- Your Analytics choice in local storage in your browser so the website can remember it.
- When you create an account through a sign up button on this website, the link tells the app which page you clicked it on and the language of the site. It also carries how your visit started: the first page you opened, the domain name of the website you came from (only the domain name, never the full address) and any campaign tags (utm) in the address. We use no cookies for this. The app keeps these details with your new account and deletes them when the account is deleted.
4. Purposes and legal bases
- We deliver, secure and troubleshoot the website on the basis of our legitimate interest in operating a reliable public website under Article 6(1)(f) GDPR.
- We use contact and support form data to answer your request. Depending on the request, the basis is taking steps before a contract under Article 6(1)(b) GDPR or our legitimate interest in answering enquiries under Article 6(1)(f) GDPR.
- We use Google Analytics only with your consent under Article 6(1)(a) GDPR. You can withdraw that consent through Cookie settings in the footer.
- We remember your choice so we can respect it on later visits.
- We send the page and the source along with a sign up to see which pages help people decide to create an account. The basis is our legitimate interest in improving the website under Article 6(1)(f) GDPR. These details go only to our own app and never to anyone else.
We do not sell personal data and we do not use advertising cookies on this website.
5. Service providers
These providers may process data for the public website:
- Hetzner Online GmbH: Hosts the website and may process server request and security logs. Privacy information.
- Cloudflare: Provides content delivery, traffic routing and protection against abusive traffic. Privacy information.
- Postmark: Delivers contact form messages by email when you submit the form. Privacy information.
- Google Analytics: Processes website usage data only after you accept Analytics. Privacy information.
- Google Fonts: Delivers the website font. Your browser connects to Google when a page loads and may send technical request data such as your IP address. Privacy information.
6. Cookies and browser storage
This public website does not need account or login cookies. Google Analytics stays off until you select Accept analytics. If you accept, Google Analytics may set measurement cookies and process website usage data.
If you reject Analytics, the Analytics script is not loaded. Your choice is saved in local storage in your browser. Use Cookie settings in the footer to change your choice. Clearing browser data can also remove the saved choice.
To pass along how your visit started, the website keeps the first page of your visit, the domain name of the website you came from and any campaign tags in the session storage of your browser. This happens whatever you choose for Analytics, because these details stay with us: they go only to our own app when you create an account, and never to a third party. Session storage disappears when you close the tab.
7. Retention
- Technical and security logs are kept only as long as reasonably needed for website operation, security and fault investigation, subject to the settings of our providers.
- Contact and support messages are kept as long as needed to answer and administer the request and to meet any legal obligations.
- Analytics data is retained according to the active retention setting in the Google Analytics account and Google policy.
- Your local Analytics choice remains in your browser until you change it or clear your browser data.
- The page and source sent with a sign up stay with your account until the account is deleted.
8. Processing outside the EEA
Some providers may process data outside the European Economic Area. Their linked privacy information explains the locations and transfer safeguards they use. Where the GDPR requires a transfer mechanism, this can include an adequacy decision or standard contractual clauses.
9. Your rights
Depending on the law that applies, you may have the right to:
- ask for access to and a copy of your personal data
- ask us to correct or delete personal data
- ask us to restrict processing
- object to processing based on legitimate interests
- receive eligible data in a portable format
- withdraw consent at any time without affecting earlier lawful processing
- complain to your local data protection authority
Use the contact page to exercise a right. We may need information to verify your identity.
10. Security
The website uses HTTPS and access to its operating systems is restricted. We also use traffic protection and keep the website software maintained. No online service can promise absolute security.
11. Children
This public website is not directed at children under 16. We do not knowingly ask children for personal data through it. Contact us if you believe a child has submitted personal data.
12. Changes and contact
We may update this policy when the website or its providers change. The date at the top shows the latest revision.
For a question about this policy, use the contact page.