Privacy and Cookie Policy

Version of 11 September 2026. Entity: Przychodnia Weterynaryjna s.c., ul. Kwiatowa 27, 58-125 Pszenno, Poland, tax ID (NIP) 8842751171. Contact: szkolenia@weterynarz.swidnica.pl.

1. Data controller

The controller of personal data is Przychodnia Weterynaryjna s.c., ul. Kwiatowa 27, 58-125 Pszenno, tax ID (NIP) 8842751171. Contact regarding data matters: szkolenia@weterynarz.swidnica.pl.

2. What data we process and why

• User account — form of address, first name, surname, telephone, e-mail, veterinary practice name, password (stored only as a cryptographic hash), and optionally the practice's address, telephone, e-mail and logo. Purpose: maintaining the account, providing materials, personalising document templates. Legal basis: contract (Art. 6(1)(b) GDPR).
• Course registrations — participant data, veterinary practice, number of participants, comments, invoice details (tax ID, name, address). Purpose: organising the course, issuing invoices, settlements. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
• Information about new courses and dates (e-mail) — based on consent given when creating an account (Art. 6(1)(a) GDPR); consent may be withdrawn at any time in the account settings.
• Favourite courses — saved in the account so that we can notify you of a new date. Legal basis: contract.
• Technical data (IP address, server logs) — security and statistics on the operation of the Website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Handling registrations and organising courses with the help of an assistant in the administrator panel — the administrator asks questions about their own data (e.g. who has paid for participation), and answers are generated from data in the Website. Legal basis: the administrator's legitimate interest in efficient handling of registrations (Art. 6(1)(f) GDPR).

3. Retrieving data by tax ID (NIP)

When you tick "I want an invoice" and enter a tax ID (NIP), the Website retrieves publicly available company data (name, address, VAT status) from the Ministry of Finance's register of VAT taxpayers (the "White List"). The tax ID (NIP) is passed only to that register in order to complete the invoice details.

4. Data recipients

• Cloudflare, Inc. — Website hosting, database and file storage (data centres in the EU; standard contractual clauses).
• E-mail delivery service provider (confirmations, password resets, information about courses).
• Accounting firm and invoicing systems — with regard to invoice data.
• Online payment operator — once payments are launched on the Website (we will announce this in the Terms and Conditions).
• Anthropic PBC (USA) — provider of the language model used by the assistant in the administrator panel. Only the data needed to answer a specific question from the administrator is sent to the model (e.g. first name and surname, e-mail, veterinary practice name, registration status). Under the terms of the service, data sent via the API is not used to train models, and any transfer outside the EEA takes place on the basis of standard contractual clauses.
• Public authorities — where required by law.

5. How long we keep data

• Account — until the user deletes the account or after 3 years of inactivity (after prior notification by e-mail).
• Registrations and invoices — 5 years from the end of the tax year (tax regulations).
• Consent to information about courses — until the consent is withdrawn.
• Technical logs — up to 12 months.

6. Your rights

You have the right to access your data, to have it rectified or erased, to restrict or port its processing, to object to processing based on legitimate interest, and to withdraw your consent (without affecting the lawfulness of processing carried out before withdrawal). You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). Providing your data is voluntary, but it is necessary to create an account or register for a course.

7. Cookies and browser storage

The Website uses only essential mechanisms: a login session cookie (HttpOnly, valid for 30 days), and browser storage for your chosen theme (light/dark) and, until the tab is closed, a short name of the source from which you arrived at the site (e.g. “google”, “facebook”), used solely for anonymous statistics. Statistics without cookies: the number of visits and page loading speed are measured by Cloudflare Web Analytics, while our own counter records the type of event (e.g. registration, download), the page, the type of device and the source of entry. The statistics do not contain your IP address, any identifier or any form data. We do not use advertising cookies or third-party tracking tools. For this reason, we do not display a cookie banner — these mechanisms are necessary for the service you request to work.

8. Security

Passwords are stored as salted PBKDF2-SHA256 hashes (100,000 iterations); the connection is encrypted (HTTPS); only the Organiser has access to the administrator panel. Material files and logos are provided only to logged-in users.

9. Changes

We announce changes to the Policy on the Website; the current version is always available at this address.