This privacy policy explains what personal data we process on Uratujkota.pl, for what purposes and on what legal bases, who we may entrust it to, and what rights you have under the GDPR. We make sure to collect only the data necessary to run a cat adoption portal.
1. Data controller
The controller of your personal data is the operator of the Uratujkota.pl service (the "Controller" or "we"). For matters concerning the protection of personal data, you can contact us at kontakt@uratujkota.pl.
The service is in development ahead of its public launch — the Controller's full registration details will be completed in this policy before the production release.
2. What data we process
Depending on how you use the service, we process the following categories of data:
- Account data — the email address, username and phone number you provide at registration, along with information about email confirmation and the consents you have given.
- Caretaker profile — data linked to your profile in the adoption module, including your display name and the contact details used in listings.
- Cats and adoption listings — information about the cats you publish (description, age, health status, vaccinations, photos) and the content of the listings you create.
- Addresses — saved addresses (postal code, city, voivodeship, optionally street) used when creating listings; the exact address is never published — only the city and voivodeship are publicly visible.
- Technical data — essential cookies and basic browsing data required for the secure operation of the service (see the cookies section).
3. Purposes and legal bases of processing
We process your data for the following purposes and on the following legal bases:
- Running your account and providing the service — including creating an account, publishing listings and matching adoptions (Art. 6(1)(b) GDPR — performance of a contract for the provision of electronic services).
- Consent — processing based on freely given consent, e.g. the data processing consent at registration, which you may withdraw at any time (Art. 6(1)(a) GDPR).
- Legitimate interest — ensuring the security of the service, preventing abuse, and system maintenance and diagnostics (Art. 6(1)(f) GDPR).
- Legal obligations — where the law requires us to process or retain certain data (Art. 6(1)(c) GDPR).
4. Cookies
We use only essential cookies that are necessary for the correct and secure operation of the service. They do not require consent because the service could not function without them:
- Security cookie (CSRF / antiforgery) — protects forms against cross-site request forgery attacks.
- Authentication session cookie — keeps you signed in after authentication.
- Language preference cookie — remembers the chosen interface language (Polish or English).
- Cookie consent cookie — remembers that you have seen the cookie notice, so the banner does not appear again.
We currently use no analytics, marketing or tracking cookies, and no third-party profiling services. If we introduce any in the future, we will ask for your consent first and update this policy.
5. Recipients and processors
We do not sell your personal data. We may entrust it to trusted providers who process it on our behalf and according to our instructions — e.g. server infrastructure (hosting) providers and the email delivery service (such as email confirmation and password reset). Such providers act under data processing agreements.
The contact details given in a listing (e.g. email address and phone number) are visible to signed-in users interested in adoption — you share them voluntarily so they can contact you about an adoption.
6. Data retention
We retain account data and the linked profile for as long as you hold an account in the service. After you delete your account, the data is irreversibly anonymized — we remove identifying data (email address, username, phone number, addresses), and the associated content is no longer linked to you.
We may retain some data longer where this is necessary to fulfil legal obligations or to establish, exercise or defend legal claims.
7. Your rights
In connection with the processing of your personal data, you have the following rights:
- Right of access to your data and to obtain a copy of it.
- Right to rectification of inaccurate or outdated data.
- Right to erasure ("right to be forgotten").
- Right to restriction of processing.
- Right to data portability — to receive your data in a structured, commonly used format.
- Right to object to processing based on legitimate interest.
- Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
- Right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
8. How to exercise your rights
You can exercise some of these rights yourself directly in the service, without contacting us:
- Data export — under "Account → Export data" you can download a copy of your data (exercising the rights of access and portability).
- Account deletion — under "Account → Delete account" you can permanently and irreversibly delete your account and anonymize your data (exercising the right to erasure).
For any other matter, write to us at kontakt@uratujkota.pl — we will respond without undue delay.
9. Contact
For any matter concerning your personal data or this policy, you can contact us at kontakt@uratujkota.pl.
10. Changes to this policy
This policy may be updated from time to time, e.g. as the service evolves or the law changes. The current version is always available on this page, and we indicate the date of the last update at the top. We will announce any significant changes in the service.
