This Privacy Policy explains how VitaPlena collects, uses, stores, and protects personal data in connection with the use of the educational platform for oncology nutrition, available at vitaplena.net, as well as through a temporary address of the *.netlify.app type until the primary domain is activated.
VitaPlena provides educational content and doesn't provide diagnosis, treatment, or individual medical consultations. The platform's content doesn't replace consultation with a doctor or other qualified medical professional.
The platform is currently entirely free. No payment data is collected and no subscriptions are processed.
1. Data controller
The controller of personal data is Ana-Marina Bogdanova, a private individual, owner and moderator of VitaPlena, based in Bulgaria.
To contact the controller: anamarinabogdanova04@gmail.com or through the contact form on the site.
2. Platform scope and audience
VitaPlena is a bilingual platform in Bulgarian and English. The expected audience is mostly in Bulgaria, but the English version allows access to international visitors as well.
The platform is intended primarily for cancer patients, their families and caregivers, and, as a secondary audience, for medical professionals, including oncologists and dietitians.
The platform isn't directed at children under 16.
3. What personal data we collect
In the current free version, the site doesn't require registration or a user account. VitaPlena processes only the following categories of data:
- Data from a community access request: name, email address, and free-form text, if the user chooses to fill it in. Providing a name and email is a necessary condition for the request to be reviewed — without them, the request can't be processed.
- Data from contacting the controller: information the user voluntarily provides through the contact form.
- Technical data necessary to deliver and secure the site, processed by the hosting provider Netlify when pages load — for example IP address, date and time of the request, browser, or similar technical information.
The site doesn't support comments, forums, or user-generated content features. No payment data is collected — the paid functionality isn't active.
4. Purposes and legal grounds for processing
| Purpose | Legal basis |
|---|---|
| Reviewing community access requests | User consent given when submitting the request (Art. 6(1)(a)) |
| Communicating with users through the contact form | Steps taken at the user's request prior to entering into a contract / legitimate interest in responding to inquiries (Art. 6(1)(b)/(f)) |
| Security, abuse prevention, and site maintenance | Legitimate interest in maintaining a secure, functioning online service (Art. 6(1)(f)) |
Where processing is based on consent, the user has the right to withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.
5. Health-related data
VitaPlena doesn't require users to provide a diagnosis, medical history, test results, or other health data in order to read the educational content or create an account.
The community access request form has a free-text field. Before submitting, the user sees a clear notice:
"Please don't include health or other sensitive information in this field unless absolutely necessary. If you do choose to include it, by checking the box below you explicitly consent to that information being processed solely for the purpose of reviewing this request."
The form includes a separate checkbox, not pre-checked, for explicit consent to processing any health data included in the free-text field. Without this checkbox, a request containing health information isn't sent.
If a user voluntarily includes information about their health condition, it will be used solely to review that specific request and won't be used for diagnosis, treatment, profiling, or marketing.
6. Data processors and third parties
VitaPlena uses the following external provider, which processes personal data on behalf of the controller only to the extent necessary to provide the service:
- Netlify — site hosting and Netlify Forms, for storing community access requests and contact messages.
Netlify may process data outside the European Economic Area. In such cases, processing takes place under applicable contractual and organizational safeguards, including standard contractual clauses where necessary.
Stripe and payment processing aren't currently active. If paid functionality is introduced in the future, this policy will be updated in advance, before payments are activated.
7. Cookies
In the site's current free version, without user accounts, VitaPlena doesn't use login or session cookies.
The site doesn't use analytics, advertising, or tracking cookies. If such technologies are added in the future (including user accounts or analytics), this policy will be updated in advance and an opt-in/opt-out mechanism will be provided where applicable.
8. Retention periods
- Community access requests are kept for up to 12 months after being reviewed, unless access remains active, after which they're deleted or archived only for good reason.
- Correspondence through the contact form is kept for up to 12 months after the communication on the specific inquiry has concluded.
- Technical logs maintained by Netlify are kept in accordance with Netlify's standard retention policy for operational logs.
9. User rights
Every user has rights regarding their personal data:
- the right to access their personal data and information about how it's processed;
- the right to correct inaccurate or incomplete data;
- the right to erasure of personal data;
- the right to restrict processing;
- the right to data portability, where applicable;
- the right to object to processing based on legitimate interest;
- the right to withdraw consent, where processing is based on consent;
-
the right to lodge a complaint with the competent data protection supervisory authority:
Commission for Personal Data Protection (Bulgaria)
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
website: www.cpdp.bg
To exercise any rights, the user can contact the controller through the contact form on the site. The controller may request additional information to confirm the requester's identity, where necessary.
10. Data security
VitaPlena applies technical and organizational measures appropriate to the nature of the data processed and the risks to users. Access to community requests is reviewed personally by the controller and isn't approved automatically.
Access to data is limited to the people and providers for whom it's necessary.
11. Children
VitaPlena isn't directed at children under 16 and doesn't aim to collect personal data from them.
If the controller determines that personal data of a child has been collected without the required involvement or consent of a parent or guardian, the data will be deleted or its processing will be discontinued, unless another applicable legal basis exists.
12. Automated decision-making, profiling, and marketing
VitaPlena doesn't use automated decision-making that produces legal effects concerning users or similarly significantly affects them. Community access requests are reviewed personally by the controller, without automated approval.
VitaPlena doesn't use advertising trackers, behavioral profiling, or analytics cookies. If a newsletter, marketing communication, or analytics tool is introduced in the future, this policy will be updated and the applicable legal basis, including consent where required, will be secured.
13. Changes to this policy
VitaPlena may update this Privacy Policy when the site's functionality, the providers used, the types of data, or applicable legal requirements change.
In the event of a material change, the updated version will be published on the site with a new "last updated" date. If the change affects processing that requires consent, that consent will be requested separately before the relevant processing begins.