Privacy Policy

Last updated: May 2026
Version: 1.1

1. Controller (Data Controller)

Veg International
Sole proprietor: Aleksandr Zosimenko

Address within the EU (for GDPR purposes):
Pupavova 684/30
841 05 Bratislava – Karlova Ves
Slovakia

Contact email: a.zosimenko@i.ua

This Privacy Policy applies to the website veg.international (hereinafter “Blog” or “Site”), which provides free articles and access to closed / subscription-based materials (paid subscription).

2. Hosting

Our website is hosted on servers located in Ukraine (a country recognised by the European Commission as providing an adequate level of data protection under GDPR – Adequacy Decision).

We have concluded a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR with our hosting provider.

When you access the Site, technically necessary data is processed in server log files (e.g. IP address, date and time of access, accessed URL, referrer URL, browser type, operating system).
The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interest in ensuring the technically error‑free and secure operation of the website).

We use cookies and similar technologies.

Technically necessary cookies are required for the operation of the Blog (e.g. login, subscription status). These are used on the basis of Art. 6 para. 1 lit. f GDPR and Section 25 para. 2 TTDSG (for visitors in Germany/EU).
All other cookies (analytics, marketing, comfort functions) are only set after you give your explicit consent via our Consent Management Platform (CMP). You can grant, manage, and withdraw your consent at any time through the CMP.

The legal basis for non‑essential cookies is Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG.

4. Registration and Free Access

To access free content (public articles) you do not need to register.

If you wish to access closed materials (protected content), you must first register on our Site. During registration we collect:

Username (chosen by you)
Email address
Password (stored in hashed form)

The legal basis for processing this data is Art. 6 para. 1 lit. b GDPR (pre‑contractual measures / performance of a contract – namely granting access to protected content).

5. Subscription (Paid Access to Closed Materials)

Access to premium / closed materials requires a paid subscription. Subscription payments are processed exclusively through Stripe (Stripe Payments Europe Limited).

When you subscribe, we do not store your payment details (credit card, IBAN, etc.). Instead, the following data is transmitted to Stripe:

Email address
Subscription type
Transaction amount
Technical identifiers required for billing

Stripe acts as an independent controller or processor depending on the context. A Data Processing Agreement (DPA) has been concluded with Stripe where required under Art. 28 GDPR.

Data transfers to Stripe (including possible transfers to Stripe’s parent company in the USA) are based on:

EU‑US Data Privacy Framework (where applicable)
Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR

The legal basis for transferring data to Stripe is Art. 6 para. 1 lit. b GDPR (performance of the subscription contract).

6. Web Analysis – Google Analytics 4

We use Google Analytics 4, a web analysis service provided by Google Ireland Limited (and possibly Google LLC in the USA).

Google Analytics helps us understand how users interact with the Blog (pages viewed, time spent, clicks, approximate location, browser and device information). Data may be processed in pseudonymous user profiles.

The legal basis is your consent via our Consent Management Tool (Art. 6 para. 1 lit. a GDPR).

Transfers to the USA are based on the EU‑US Data Privacy Framework and, additionally, Standard Contractual Clauses (Art. 46 GDPR).

You may withdraw your consent for Google Analytics at any time via the CMP.

7. Marketing Tools (Meta Pixel, TikTok Pixel)

We use marketing tools such as the Meta Pixel (Meta Platforms Ireland Limited) and the TikTok Pixel (TikTok Technology Limited) to evaluate visitor actions on our website and display interest-based advertising on the respective platforms.

In this context, visited pages, completed purchases, interactions with content, and technical data may be processed and assigned to the respective users of the platforms. Data may be transferred to the USA and other third countries.

The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR via the consent management tool. Transfers to third countries take place on the basis of the EU-US Data Privacy Framework, where applicable, and additionally on the basis of Standard Contractual Clauses pursuant to Art. 46 GDPR.

If you subscribe to our newsletter (e.g. new articles, subscription offers), we use your email address and – where provided – your name.

Newsletters are sent via a double opt‑in procedure (you must confirm your registration via a link in an email).

The legal basis is Art. 6 para. 1 lit. a GDPR (consent). You may withdraw your consent at any time via the unsubscribe link in every newsletter or by contacting us.

9. Contact Form and Support

If you contact us via the contact form or email (a.zosimenko@i.ua), we process the personal data you provide (name, email address, message content) for the purpose of handling your request.

Depending on the nature of your request, the legal basis is either:

Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries).

Art. 6 para. 1 lit. b GDPR (pre‑contractual / contractual communication), or

10. Disclosure of Your Data to Third Parties

We disclose your personal data only in the following cases:

Hosting provider (Ukraine) – on the basis of a DPA (Art. 28 GDPR).
Google Analytics (Ireland / USA) – based on your consent.
Stripe (EU / USA) – for subscription payment processing (Art. 6 para. 1 lit. b GDPR).
Legal authorities – if required by law or to establish, exercise, or defend legal claims.

We do not sell your personal data to third parties.

11. International Data Transfers

Your data is stored on servers in Ukraine (EU adequacy decision).

Data may be transferred to the USA or other third countries only when using:

Google Analytics
Stripe

These transfers are protected by:

EU‑US Data Privacy Framework (where applicable)
Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR

You may request a copy of the SCC by contacting us.

12. Storage Periods (Deletion of Data)

We store your personal data only as long as necessary for the purposes described in this policy or as required by law.

Data category	Storage period
Registration data (username, email, hashed password)	Until you delete your account or 3 years after last login (if inactive)
Subscription data (payment reference, status)	As long as your subscription is active + 3 years after termination (for tax / legal obligations under Slovak law)
Usage data (server logs)	12 months
Newsletter consent data	Until you withdraw your consent
Contact form inquiries	2 years after final resolution of the inquiry

After the storage period expires, your data will be deleted or anonymised.

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing based on legitimate interests (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7 para. 3 GDPR)

To exercise your rights, contact us at: a.zosimenko@i.ua

We will respond within one month as required by Art. 12 GDPR.

If your request relates to data processed by Stripe (payment information), we will forward your request to Stripe or provide you with their contact details.

14. Right to Lodge a Complaint

If you believe that processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in:

Your country of habitual residence
Your place of work
The place of the alleged violation

The competent authority for Slovakia is:

Úrad na ochranu osobných údajov Slovenskej republiky
(Office for Personal Data Protection of the Slovak Republic)
Hraničná 12, 820 07 Bratislava
Slovakia
Website: https://dataprotection.gov.sk

We process your personal data on the following legal bases:

Art. 6 para. 1 lit. f GDPR – Legitimate interests (server logs, security, contact form handling)

Art. 6 para. 1 lit. a GDPR – Consent (cookies, analytics, newsletter)

Art. 6 para. 1 lit. b GDPR – Performance of a contract (registration, subscription, payment processing)

Art. 6 para. 1 lit. c GDPR – Legal obligations (tax retention periods)

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example due to changes in the law or our services.

The current version will always be published on this page with the “Last updated” date at the top.

If we make significant changes, we will notify you by email (if you have registered or have an active subscription) or via a notice on the Blog.

17. Contact for Data Protection Matters

Veg International
Sole proprietor: Aleksandr Zosimenko
Email: a.zosimenko@i.ua
Postal address (EU): Pupavova 684/30, 841 05 Bratislava – Karlova Ves, Slovakia

For data protection inquiries, please use the email address above.