Privacy notice of vetlek.pet

Version of 23 October 2026. The Polish version is binding.

This notice covers the vetlek.pet site: its forms, visit statistics and the ads on the blog. The VetLek app is covered by the app’s privacy policy.

Controller: The data controller is Mateusz Stopinski, a sole trader doing business as Mateusz Stopinski, Dobieszewice 7a, 88-170 Pakość, NIP 5562821087, REGON 544391580, Poland. For any data protection matter write to [email protected] or to the postal address above, or call +48 574 386 150. We have not appointed a data protection officer.
What we collect: Through the forms we collect only what you type into them: an idea (category, title, description, and optionally your name and e-mail), an application to collaborate (role, full name, e-mail, ways to help, message, links, availability, organisation) or an early-access sign-up (e-mail, type and name of the organisation, town). With each submission we also store a salted hash of your IP address and your browser type - not the IP address itself. The site’s visit statistics are described in the “Visit statistics” section.
Why and on what legal basis: Contacting you about your submission, collaboration or early access - your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to the address above; withdrawal does not affect processing before it. Considering an idea sent without an e-mail, and protecting the forms against spam and abuse (IP hash, browser type, submission limits) - our legitimate interest in developing VetLek and keeping the site secure (Art. 6(1)(f) GDPR). The purpose and legal basis of the visit statistics are described in the “Visit statistics” section.
How long: Until the matter is resolved or you withdraw consent, and no longer than 24 months after our last contact - then we delete the data. Web server logs (IP address, date and time, requested URL, referring page, HTTP status code, browser information) are kept for 14 days. Visit statistics data is kept for 25 months (described in the “Visit statistics” section).
Newsletter: If you sign up for the VetLek newsletter (in the sign-up window, on the card, in the footer, in the sign-up block on a page or on the “Android coming soon” screen), we store: your e-mail address, language, place of sign-up, the date of sign-up and confirmation, the dates of the confirmation requests sent, the version of the consent text and, when you leave, the date and reason. As with the other forms we also store a salted hash of your IP address (not the address itself) and your browser type. The legal basis is your consent (Art. 6(1)(a) GDPR) and your consent to receive commercial information by electronic means (Art. 398 of the Polish Electronic Communications Law). The sign-up takes effect only once you click the link in the confirmation e-mail; without confirmation we send nothing more, and an unconfirmed sign-up is deleted after 7 days. The e-mails are sent for us by Amazon Web Services EMEA SARL (Luxembourg) through Amazon SES, as a processor; this may involve a transfer outside the EEA (described in the “Transfers outside the EEA” section). We keep your address until you leave; after you unsubscribe, or when messages start bouncing or you mark one as spam, we delete it within 30 days at the latest. Database backups are kept for up to 6 months, so the data may remain in them that long; so that restoring a backup does not sign you up again, a separate blocklist file keeps a salted hash of the address (not the address itself) with the time you left, and removes it after 6 months. We count clicks on the links in a message in total for each message - without knowing who clicked - and we neither track whether messages are opened nor build a profile of any person. You can withdraw consent at any time: with the “Unsubscribe” link in every message (also with Gmail’s unsubscribe button) or by e-mail to [email protected]; withdrawal does not affect processing before it. Providing the address is voluntary.
Who we share it with: The data is stored on our server in an OVH SAS data centre in France. Traffic to the site passes through Cloudflare, Inc. (USA), which protects and speeds up connections. Newsletter e-mails are sent for us by Amazon Web Services EMEA SARL (Luxembourg) through the Amazon SES service. All of these providers process data on our behalf under data processing agreements. We never sell data or share it with anyone for their own purposes.
Transfers outside the EEA: Cloudflare and Amazon Web Services may process data in the United States - under the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework or the Commission’s standard contractual clauses. You can ask us for a copy of the safeguards.
Your rights: You have the right to access, rectify and erase your data, to restrict its processing, to data portability, to withdraw consent and to object to processing based on our legitimate interest. Write to the address above - we reply within one month at the latest. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
Do you have to provide data: Providing data in the forms is voluntary. Without the required fields the form cannot be sent, and without an e-mail address we cannot reply. Visit statistics are kept automatically - you can turn them off for your browser with the address vetlek.pet/?nie-licz-mnie=1.
Visit statistics: We keep our own visit statistics for the site, to know how it is used and to improve it. We use no cookies or third-party tools for this. Each time a page of the site is displayed, your browser sends to our server: the address of the page viewed, the address of the referring page and the campaign parameters contained in the link (utm), the device type, browser and operating system, language, screen resolution, how long the page was open, how far you scrolled it, whether you clicked anything on it (including links to the VetLek app and to app stores, and sending a form), as well as the loading time and display stability of the page and information on whether the browser is controlled by software (used to filter out automated traffic). We determine the country from information provided by Cloudflare. We do not store your IP address: the server uses it only in memory (RAM), together with information about your browser, to create a cryptographic hash (HMAC) with a random key that we change every day and delete one day after the end of the day it relates to. Once the key is deleted, the hash can be neither reversed nor linked to visits on any other day - it is used only to count unique visitors on a given day and to combine consecutive page views into one visit. The statistics do not allow us to identify you, and we do not link them to any account in the VetLek app. For the statistics we store nothing in your browser; the one exception is when you turn off the counting of your visits yourself by opening the address vetlek.pet/?nie-licz-mnie=1 - your browser then remembers this choice, which is necessary to respect it (the address vetlek.pet/?nie-licz-mnie=0 reverses it). The legal basis for the processing is our legitimate interest (Art. 6(1)(f) GDPR) in keeping visit statistics and improving the site. We keep the statistical data for 25 months. Web server logs (IP address, date and time, requested URL, referring page, HTTP status code, browser information) are kept for 14 days and used to keep the site secure and to count automated traffic (bots) - from the logs we store only daily totals, without IP addresses. You may object to this processing at any time by writing to [email protected], or turn off the counting of your visits with the address given above.
Cookies: This site uses no cookies; fonts are served from our own server. We keep visit statistics without cookies - they are described in the “Visit statistics” section. In your browser’s storage (localStorage) we keep only three things, all necessary for the site to work, so no consent is needed: the “Join” form draft (key vetlek-join-draft), removed once sent; your choice to turn off the statistics (key vl-nie-licz); and the fact that the newsletter card has already been shown to you or that you signed up (key vl-newsletter, value “shown” or “subscribed”) - without it the card would appear again.
Ads on the blog: The blog shows ads of companies that advertise in the VetLek app and ads of VetLek itself. We use no cookies or tracking for this, build no reader profile and store nothing in your browser. The ads are the same for all readers (at most matched to the category or tag of the post you read). To count views and keep daily limits, the app server stores an HMAC hash of your IP address, which cannot be reversed to the address, for about 2 days. A click on an ad goes through the VetLek app server (app.vetlek.pet), which counts it and redirects to the advertiser’s page. If you are logged in to the VetLek app in the same browser, the click is counted as in the app - in your account’s group and within its daily limit (see the app’s privacy policy); if not, by the hash of the IP address. The “Zgłoś reklamę” (report ad) link sends only the reason and the note you type.
Automated decisions: We make no decisions based solely on automated processing and do not profile visitors.