Current website version: 258.202608042104
Last updated: July 25, 2026
1. Data controller
The controller responsible for the personal data processing activities described in this policy is:
VETOFISH SELARL 7 rue de la Salamandre 13220 Châteauneuf-les-Martigues France
- French company registration number — SIRET: 489 800 359 00023
- Email address: contact@vetofish.com
2. Privacy by Design
Vetofish applies the principles of data protection by design and by default, also known as Privacy by Design and Privacy by Default.
Our first objective is not to collect personal data unless they are necessary.
The website has therefore been designed to:
- allow visitors to access its content without creating an account;
- minimise the data recorded during browsing;
- avoid advertising cookies;
- avoid advertising profiling;
- minimise the loading of resources from third-party platforms;
- never sell, rent, or share personal data for commercial purposes.
3. Data processed when you browse the website
The public pages of the Vetofish website may be accessed freely.
You may, in particular:
- read the website’s content;
- access information about our activities and services;
- download publicly available documents;
- view our contact details.
These activities do not require you to create an account or voluntarily provide personal information.
However, limited technical data are processed automatically to operate, secure, and measure the use of the website.
4. Server logs
Like any service available on the Internet, the server hosting this website generates technical logs.
These logs may include:
- the IP address used to access the website;
- the date and time of the request;
- the resource or page requested;
- the server response code;
- technical information about the browser and device;
- the address of the page that referred you to the website, when supplied by your browser.
Purposes
These data are used to:
- operate the website and maintain its availability;
- detect and diagnose technical incidents;
- prevent unauthorised access and intrusion attempts;
- secure the infrastructure;
- identify the origin of a security incident when necessary.
Legal basis
This processing is based on Vetofish’s legitimate interest in operating and securing its website and information systems.
Retention period
Technical logs are retained for a maximum period of six months and are then deleted or automatically overwritten.
They are not used to create commercial visitor profiles.
5. Website analytics with Umami Cloud
Vetofish uses Umami Cloud to obtain general statistics about the use of the website.
The service is provided by:
Umami Software, Inc. 28 Geary Street, Suite 650 #243 San Francisco, California United States
Umami Software acts as Vetofish’s technical service provider and processor for website analytics.
Purposes
The statistics allow Vetofish to:
- identify the most frequently viewed pages and content;
- understand, in general terms, where visits originate;
- detect potential navigation difficulties;
- improve the website’s content, usability, and performance;
- appropriately size its technical infrastructure.
Analytics data are not used to display targeted advertising or make individual decisions about visitors.
Data that may be processed
The analytics information may include:
- the page visited and its title;
- the date and time of the visit;
- the referring website or page;
- browser type;
- operating system;
- device type and screen size;
- browser language;
- estimated country, region, or city;
- campaign parameters that may be included in the visited URL.
The IP address is necessarily received when a request is made to the service. Umami states that it may use the IP address to determine an approximate geographical location but does not retain the complete IP address in the analytics data.
Temporary technical identifiers may be generated to distinguish visits and sessions. These identifiers do not create a user account and are not used to track an individual across multiple websites.
No data entered into an email or into any service external to this website should be included in analytics events sent to Umami.
No advertising cookies or cross-site tracking
Umami is configured without analytics cookies.
Vetofish does not use the service to:
- track visitors across multiple websites;
- combine analytics data with commercial databases;
- create advertising profiles;
- sell or share data for advertising purposes.
Legal basis
This processing is based on Vetofish’s legitimate interest in measuring the use of its website and improving its content, operation, and performance.
Vetofish limits analytics to statistics produced for its own use.
Hosting location
When creating its Umami Cloud account, Vetofish selected hosting within the European Union.
The analytics data associated with the Vetofish account are therefore hosted in the European region offered by Umami Cloud.
However, as Umami Software is a company established in the United States, certain technical access or processing operations from a country outside the European Economic Area cannot be entirely ruled out.
Where data are transferred outside the European Economic Area, the transfer must be covered by a mechanism that complies with the GDPR, such as an adequacy decision or the Standard Contractual Clauses adopted by the European Commission, together with additional safeguards where required.
Retention period
Website analytics data are retained for a maximum period of six months and are then deleted.
If the service is terminated, Umami’s proposed Data Processing Agreement provides for the deletion of the remaining data within no more than ten business days.
6. Cookies and similar technologies
The Vetofish website does not use advertising cookies, profiling cookies, or technologies intended to track visitors across different websites.
No cookie or similar technology requiring prior consent is intentionally placed when visitors browse the public pages of the website.
For this reason, the website does not currently display a cookie consent banner.
The absence of a banner does not mean that no technical data are processed. The limited processing activities relating to server logs and website analytics are described in this Privacy Policy.
Vetofish reviews this configuration whenever the website, its services, or the guidance issued by the relevant supervisory authorities changes.
7. Browser privacy signals
The website does not sell personal data or use browsing data for behavioural advertising, irrespective of any privacy preference signal sent by the visitor’s browser.
The former Do Not Track signal is no longer an actively maintained standard and is not implemented consistently by websites or browsers. It is therefore not the basis of the Vetofish privacy approach.
More recent signals, such as Global Privacy Control, may express an objection to the sale or advertising-related sharing of data. As Vetofish already carries out neither data sales nor behavioural advertising, enabling such a signal does not change the website’s normal operation.
8. External resources and services
To limit data exchanges with third parties, the resources required to display the website are hosted directly by Vetofish wherever reasonably possible.
In particular, the website does not directly use the following services to display its pages:
- Google Fonts;
- Google Maps;
- YouTube;
- Vimeo;
- public content delivery networks for its main graphical and typographical resources.
The main exception is the Umami Cloud analytics script described above.
The website may also contain ordinary links to third-party websites or services. These third parties are contacted only when you choose to follow the relevant link.
9. Downloading documents
Public documents made available through the website may be downloaded without registration.
Downloading a document does not result in any specific collection of personal data, except for:
- technical information recorded in the server logs;
- the limited information processed for website analytics.
10. Email communications
The public pages of the website do not contain an integrated contact form.
When you choose to contact Vetofish by email, the data you provide are processed as part of the correspondence and the management of your request.
Depending on the nature of your message, these data may include:
- your name and contact details;
- your position and organisation;
- the content of your request;
- documents you choose to attach;
- information required for a professional or contractual relationship.
You should only provide information that is necessary for Vetofish to process your request.
Processing relating to professional communications, client records, veterinary activities, regulatory obligations, invoicing, or the performance of a contract may be subject to legal bases and retention periods different from those that apply to ordinary website browsing.
11. Links to third-party websites
The website may contain links to third-party services, including professional social networks, registration platforms, scientific publications, or institutional websites.
An ordinary link does not automatically result in data being sent to the linked website. When you click the link and leave Vetofish, the processing of your data is governed by the privacy policy of the relevant third party.
Vetofish is not responsible for the privacy practices or content of external websites.
12. Recipients of personal data
Where necessary and within the scope of their responsibilities, data may be accessible to:
- authorised members of Vetofish;
- providers responsible for hosting, maintaining, or securing the website;
- the Umami Cloud analytics provider;
- administrative or judicial authorities where disclosure is required by law.
Service providers are authorised to process data only for the purposes of the services entrusted to them and in accordance with Vetofish’s instructions.
No personal data generated through website browsing are sold, rented, or disclosed to partners for direct marketing purposes.
13. Website hosting
The Vetofish website is hosted in France by:
OVHcloud 2 rue Kellermann 59100 Roubaix France
The hosting of the website must be distinguished from the hosting of Umami Cloud analytics data, which is configured in the service’s European region.
14. Security
Vetofish implements technical and organisational measures intended to protect the website and the data processed against unauthorised access, loss, destruction, alteration, or disclosure.
These measures include:
- encrypted communications using HTTPS;
- HTTP Strict Transport Security — HSTS;
- a Web Application Firewall;
- protection against unauthorised access attempts;
- security event logging;
- technical access management and restrictions;
- regular backups;
- system maintenance and security updates.
However, no information system can guarantee absolute security. The measures implemented are therefore regularly reviewed in light of the risks and the state of the art.
15. Your rights
Under the GDPR and applicable French data protection legislation, you may have, depending on the processing activity concerned:
- the right to access your personal data;
- the right to rectify inaccurate or incomplete data;
- the right to erasure, subject to the conditions laid down by law;
- the right to restriction of processing;
- the right to object to processing based on legitimate interests;
- the right to data portability where processing is based on consent or a contract and carried out by automated means;
- the right to withdraw your consent where processing is based on consent;
- the right to define instructions regarding the use of your personal data after your death, subject to French law.
The right to data portability does not necessarily apply to technical logs or website analytics.
Vetofish does not make any decision producing legal effects concerning you solely on the basis of automated processing of your browsing data.
16. Exercising your rights
You may exercise your rights or ask a question about the protection of your personal data:
- by email: contact@vetofish.com;
- by post: VETOFISH SELARL, 7 rue de la Salamandre, 13220 Châteauneuf-les-Martigues, France.
To prevent personal data from being disclosed to an unauthorised person, Vetofish may request information necessary to verify your identity where appropriate. A copy of an identity document will only be requested where there is reasonable doubt and only for the information strictly necessary to complete the verification.
Vetofish responds to requests within the time limits set by applicable law.
17. Complaints to a supervisory authority
If, after contacting Vetofish, you believe that your data protection rights have not been respected, you may lodge a complaint with the supervisory authority responsible for data protection in your country of residence, place of work, or the place of the alleged infringement.
In France, the competent authority is the Commission nationale de l’informatique et des libertés — CNIL.
Further information is available at www.cnil.fr.
18. Digital sustainability
Limiting external dependencies and unnecessary data collection also forms part of Vetofish’s digital sustainability approach.
A simple and controlled technical architecture helps to:
- protect visitors’ privacy;
- reduce unnecessary data transfers;
- improve website performance;
- strengthen security;
- reduce the website’s environmental footprint.
Vetofish considers data protection, security, accessibility, performance, and digital sustainability to be complementary objectives.
19. Changes to this Privacy Policy
This Privacy Policy may be amended to reflect:
- changes to the website or its features;
- a change of service provider;
- a change in technical configuration;
- legislative or regulatory developments;
- guidance issued by data protection authorities.
The date of the most recent update is displayed at the top of this page.