Data Protection Notice

This translation is provided for information only; in the event of any discrepancy, the Romanian version prevails.

1. Introduction

This Data Protection Notice describes how Cats' LadyVet ("we", "us", "our") collects, uses and protects your personal information when you use our contact form.

We are committed to protecting your privacy and to complying with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).

2. Data controller

Cats' LadyVet
Email: contact (at) catsladyvet.ro or via the contact form

3. What data we collect

Through the contact form, we collect the following personal information:

  • Your full name – to identify you and address you properly
  • Your email address – so that we can reply to your request
  • The subject of your message – to understand the nature of your request
  • Your message – the content of the question or request you wish to send us
  • Technical data for spam protection – your IP address and browser information, processed by Cloudflare Turnstile (see section 9)

4. Purposes of processing

Your personal data are collected and processed for the following purposes:

  • To answer your questions and requests
  • To provide you with the information you requested about our services
  • To keep a record of communications with clients and prospective clients
  • To improve the quality of our services

5. Legal basis for processing

We process your personal data on the basis of:

  • Your consent – given by ticking the consent box for the processing of personal data in the contact form
  • Legitimate interest – to respond to your requests and to communicate with you

6. Data storage and security

Your personal data are stored safely in a secure database with restricted access. We implement appropriate technical and organisational measures to protect the data against unauthorised access, loss, destruction or alteration.

Messages sent through the contact form are also forwarded by email to our official address.

7. Retention period

Your personal data will be kept for as long as necessary to fulfil the purposes mentioned above or as required by applicable law:

  • The copy of the message in the website's database – deleted automatically 30 days after it is sent. Exception: if the message could not be forwarded by email, we keep it in the database until we retrieve it, then delete it manually
  • The message received by email – at most 3 years after the last communication if there is no ongoing contractual relationship, or in accordance with legal archiving obligations if there is one
  • Backups – the website's database, and therefore also the messages from the last 30 days, is backed up automatically, encrypted, once a week. We keep the last 4 copies on the server (about 4 weeks), and an encrypted copy on our own storage device is deleted after 12 weeks. Backups are used only to restore the website after an incident
  • Copies made before technical work on the website – deleted automatically after 7 days
  • The website's technical log – website events, including the result of the form submission and the IP address: at most 10,000 entries (about one month); the oldest are deleted automatically

8. Recipients of the data

Your personal data may be accessed by:

  • Authorised Cats' LadyVet staff responsible for responding to requests
  • IT service providers who maintain and secure our systems (under strict confidentiality obligations)
  • Cloudflare, Inc. – only the technical data needed for the anti-spam check, not the content of your message (see section 9)

We do not sell, rent or share your personal data with third parties for marketing purposes.

9. Protecting the form against spam

Cloudflare Turnstile

To protect the contact form against automatically sent messages (spam), we use the Cloudflare Turnstile service, provided by Cloudflare, Inc. (USA). When you open the contact page and submit the form, Turnstile checks, in your browser, whether the form is being filled in by a person or by an automated program.

For this check, Cloudflare receives technical data: your IP address, information about your browser and device (for example, the browser identifier – the "User-Agent" – and technical characteristics of the connection) and the address of the page containing the form. Cloudflare does not receive the content of your message, or the name, email address or subject entered in the form.

The sole purpose is to protect the form against spam and abuse. The legal basis is our legitimate interest in protecting our website and communications (Article 6(1)(f) GDPR). For this check, Cloudflare acts as our processor. According to its own policy, Cloudflare may also use the same technical data to improve its bot detection system, in which case it acts as a separate controller. Cloudflare states that it does not use these data to identify, profile or target individuals.

The data may be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework and also uses the standard contractual clauses approved by the European Commission.

More details: Cloudflare Turnstile Privacy Policy and Cloudflare Privacy Policy.

Our own check

The form also includes a check performed only on our server: a hidden field, which visitors do not see or fill in, and a minimum time for completing the form. No other services are involved and no data are sent outside the server.

Server logs

On our server we keep, for statistical purposes, the result of the anti-spam check (passed or failed), without the content of the message and without your contact details. The server's technical logs keep the IP address for up to 120 days, for security and statistics.

10. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access – you can request a copy of the personal data we hold about you
  • Right to rectification – you can ask us to correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten") – you can request the deletion of your personal data in certain circumstances
  • Right to restriction of processing – you can ask us to restrict the processing of your data in certain situations
  • Right to data portability – you can ask for your data to be transferred to another controller
  • Right to object – you can object to the processing of your data in certain circumstances
  • Right to withdraw consent – you can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, please contact us at contact (at) catsladyvet.ro or via the contact form.

11. Right to lodge a complaint

If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) – the Romanian National Supervisory Authority for Personal Data Processing
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania
Phone: +40.318.059.211 or +40.318.059.212
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro

12. Changes to this notice

We reserve the right to update this Data Protection Notice periodically to reflect changes in our practices or in the applicable legislation. Changes will be published on this page together with the date of the last update.

Last updated:

13. Contact

If you have any questions or concerns about this Data Protection Notice or our privacy practices, please contact us:

Email: contact (at) catsladyvet.ro or via the contact form