Contents
-
Operator
-
What technologies we use
-
Overview of storage used
-
Consent and technically necessary storage
-
Security of the login cookie
-
External services
-
Management and removal
-
Changes to this document
This document describes technologies that store information on the devices of website visitors and persons using the Provider's application.
1. Operator
The operator of the website and application and the provider of the AI voice assistant service is Fastlajna s.r.o., with its registered office at Školská 1736/12, Nové Město, 110 00 Praha 1, Company ID (IČO) 29543908, registered in the Commercial Register maintained by the Municipal Court in Prague, file no. C 448213 (hereinafter the "Provider"). Contact: hello@fastlajna.cz.
2. What technologies we use
We always use technically necessary technologies or technologies expressly requested by the user. With your consent, we also use analytics cookies of the Google Analytics (GA4) service to understand website traffic and improve the site. Without consent, analytics does not run and no analytics cookies are stored (see Art. 4). We do not use advertising or profiling cookies and do not deploy tools for tracking visitor behaviour across third-party websites.
The rules set out in this document also apply to similar technologies, in particular the browser's localStorage and sessionStorage.
3. Overview of storage used
| Name | Technology | Where used | Purpose | Storage period |
|---|---|---|---|---|
refresh_token | HttpOnly cookie | the Provider's application (Fastlajna) after login | Securely maintaining a logged-in session and issuing a short-lived access token | at most 7 days; the value rotates upon renewal of the session |
app_locale | localStorage | the Provider's application | Remembering the language chosen by the application user | until the choice is changed or browser data is deleted |
assistant_wizard_calendar_pending | sessionStorage | Assistant creation wizard | Returning to the correct step after connecting Google Calendar | until the return is completed or the tab is closed |
fastlajna_cookie_consent | cookie (domain .fastlajna.cz, shared across subdomains) | public website and application | Storing the current choice made in this banner so that it is not shown repeatedly across the fastlajna.cz sites | up to 1 year; until the version of the information changes or it is deleted |
_ga | cookie (Google Analytics) | public website and application, only after consent is given | Distinguishing visitors for traffic measurement (statistics) | up to 2 years |
_ga_<measurement ID> | cookie (Google Analytics) | public website and application, only after consent is given | Maintaining session state for the Google Analytics 4 service | up to 2 years |
The application's short-lived access token is held only in the operating memory of the open page and, once the page is closed, is not retained in cookies or in local storage.
4. Consent and technically necessary storage
The storage of information on the terminal equipment and access to it is governed by § 89(3) of Act No. 127/2005 Sb., on Electronic Communications; technically necessary storage and storage for the provision of a service expressly requested by the user do not require consent. The subsequent processing of personal data is governed by the GDPR and is described in the document Information on the Processing of Personal Data.
We use technically necessary storage without consent because it is required for the security and provision of functions expressly requested by the application user.
The Google Analytics analytics cookies are optional and are stored solely on the basis of your prior consent. Until consent is given, Google Analytics is loaded in consent mode (Google Consent Mode) with the default state "denied", in which it stores no analytics cookies on the device. Clicking "I agree" activates analytics measurement and the corresponding cookies; clicking "I do not agree" keeps them off. We store your choice in a cookie on the .fastlajna.cz domain so that it applies jointly to the website and the application and is not shown repeatedly.
You may withdraw or change your consent at any time by deleting the cookies in your browser (see Art. 7); the banner will then be shown again. We may expand the scope of optional technologies in the future only with prior consent — we will change the version of this document and request a new choice.
5. Security of the login cookie
The refresh_token cookie is not accessible to JavaScript (HttpOnly), is transmitted only over HTTPS in the production environment (Secure), and uses the SameSite=Lax restriction. It contains a random session identifier (refresh token), not a password. The server stores only its cryptographic hash, and the token rotates upon renewal of the session.
6. External services
Links to social networks are ordinary links, and their providers cannot store cookies through the Provider's pages before a click. Google OAuth (login and connecting Google Calendar) and the Payment Service Provider's secure payment interface (Stripe; hereinafter the "PSP") open only after an express action and may use technologies on their own domains in accordance with their own policies.
Google Analytics. After consent is given, we use the Google Analytics 4 service operated by Google Ireland Limited; processing may involve the transfer of data to third countries on the basis of the European Commission's Standard Contractual Clauses. Acting as a processor, Google processes in particular a truncated IP address and cookie identifiers to produce website traffic statistics. Further information is available in the document Information on the Processing of Personal Data.
Google Search Console. To monitor the website's performance in Google Search, we use the Google Search Console tool. It stores no cookies or other data on visitors' devices; ownership of the domain is verified only by a technical DNS record, and the tool works with data that Google collects within its search service.
7. Management and removal
Cookies and local storage can be removed in the browser settings. Removing refresh_token will log the application user out. Removing the language preference will return the application to the browser's language. You can withdraw consent to analytics by deleting the cookie storing your choice (fastlajna_cookie_consent) — the banner will then be shown again and you can choose "I do not agree"; alternatively, delete the analytics cookies _ga and _ga_… directly.
8. Changes to this document
The current version is always available on this page. Upon the introduction of a new purpose, a new category of optional technologies, or a significant change in recipients, we will request a new choice.