Privacy policy

The controller of your personal data is the operator of the Uratujkota.pl service (the "Controller" or "we"). For matters concerning the protection of personal data, you can contact us at kontakt@uratujkota.pl.

The service is in development ahead of its public launch — the Controller's full registration details will be completed in this policy before the production release.

• Account data — the email address, display name and phone number you provide at registration, along with information about email confirmation and the consents you have given.
• Caretaker profile — data linked to your profile in the adoption module, including your display name and the contact details used in listings.
• Cats and adoption listings — information about the cats you publish (description, age, health status, vaccinations, photos) and the content of the listings you create.
• Addresses — saved addresses (postal code, city, voivodeship, optionally street) used when creating listings; the exact address is never published — only the city and voivodeship are publicly visible.
• Technical data — essential cookies and basic browsing data required for the secure operation of the service (see the cookies section).

• Running your account and providing the service — including creating an account, publishing listings and matching adoptions (Art. 6(1)(b) GDPR — performance of a contract for the provision of electronic services).
• Consent — processing based on freely given consent, e.g. the data processing consent at registration, which you may withdraw at any time (Art. 6(1)(a) GDPR).
• Legitimate interest — ensuring the security of the service, preventing abuse, and system maintenance and diagnostics (Art. 6(1)(f) GDPR).
• Legal obligations — where the law requires us to process or retain certain data (Art. 6(1)(c) GDPR).

• Security cookie (CSRF / antiforgery) — protects forms against cross-site request forgery attacks.
• Authentication session cookie — keeps you signed in after authentication.
• Language preference cookie — remembers the chosen interface language (Polish or English).
• Cookie consent cookie — remembers that you have seen the cookie notice, so the banner does not appear again.

We do not sell your personal data. We may entrust it to trusted providers who process it on our behalf and according to our instructions — e.g. server infrastructure (hosting) providers and the email delivery service (such as email confirmation and password reset). Such providers act under data processing agreements.

The contact details given in a listing (e.g. email address and phone number) are visible to signed-in users interested in adoption — you share them voluntarily so they can contact you about an adoption.

We retain account data and the linked profile for as long as you hold an account in the service. After you delete your account, the data is irreversibly anonymized — we remove identifying data (email address, display name, phone number, addresses), and the associated content is no longer linked to you.

We may retain some data longer where this is necessary to fulfil legal obligations or to establish, exercise or defend legal claims.

Deleted photos are moved to a private copy that is not publicly accessible and is erased automatically, typically within 15 days of the deletion. The same mechanism covers photos removed together with an account — it is a safeguard against accidental deletion, not a separate data set.

• Right of access to your data and to obtain a copy of it.
• Right to rectification of inaccurate or outdated data.
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object to processing based on legitimate interest.
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

You can exercise some of these rights yourself directly in the service, without contacting us:

• Data export — under "Account → Export data" you can download a copy of your data (exercising the rights of access and portability).
• Account deletion — under "Account → Delete account" you can permanently and irreversibly delete your account and anonymize your data (exercising the right to erasure).

For any other matter, write to us at kontakt@uratujkota.pl — we will respond without undue delay.

For any matter concerning your personal data or this policy, you can contact us at kontakt@uratujkota.pl.

This policy may be updated from time to time, e.g. as the service evolves or the law changes. The current version is always available on this page, and we indicate the date of the last update at the top. We will announce any significant changes in the service.