DiabScale Website Privacy Policy
Effective Date: August 22, 2026
This Privacy Policy describes how we process the personal data of visitors to the websites at https://diabscale.ai and https://vitascale.io (the “Website”). It is published at https://diabscale.ai/website-privacy-policy/.
Processing within the DiabScale mobile application and the server-side services it relies on is covered by a separate Privacy Policy, published at https://diabscale.ai/privacy-policy/.
1. Data Controller and Contact
The controller is VP200 sp. z o.o., ul. Domańskiego 112a, 45-289 Opole, Poland (KRS 0000973664, NIP 754-335-11-38, REGON 522251034).
Data protection contact: [email protected].
2. Scope of This Policy
This Policy covers use of the Website only. It does not cover the mobile application or the user account created inside it — those are described by the separate document referenced above.
3. What We Process and Why
| Category | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Contact form data (name, email address, message) | Answering your enquiry and handling the matter | Art. 6(1)(b) and (f) GDPR | 12 months after the correspondence ends |
| Email address subscribed to the newsletter | Direct marketing | Art. 6(1)(a) GDPR | Until consent is withdrawn |
| Server logs (IP address, date and time, URL, browser type) | Keeping the Website running and secure, diagnostics | Art. 6(1)(f) GDPR | No longer than 12 months; longer only as far as necessary to investigate a security incident or to pursue legal claims |
| Data from cookies and similar technologies | Functionality, statistics, marketing | Art. 6(1)(f) or (a) GDPR; Art. 173 of the Polish Telecommunications Law | As set out in Section 6 |
Providing your data is voluntary. Without the form data we cannot answer you, and without an email address we cannot send the newsletter.
4. Forms
Data submitted through a form reaches our mailbox and our enquiry-handling system. We do not use it for anything other than handling the matter you contacted us about, unless you separately consent to something else.
5. Server Logs
The server records technical information about every request. Logs are not combined with data that identifies a person directly and serve only to keep the Website running and to detect abuse.
6. Cookies
| Type | Example files | Purpose | Lifetime |
|---|---|---|---|
| Necessary | session files, the record of your choice in the cookie banner | Session handling, core Website functions and remembering your consent decision | Until the browser is closed; the consent record up to 12 months |
| Statistical | _ga, _ga_5VS8RSR25K (Google Analytics 4) | Measuring traffic and how the Website is used | 2 years |
| Marketing | _fbp (Facebook Pixel) | Remarketing and measuring advertising performance | 90 days |
Regardless of how long the files themselves live, event data collected in Google Analytics 4 is retained for 14 months and then deleted.
Statistical and marketing scripts — Google Analytics, the Facebook Pixel, the MailerLite form and the YouTube player — are blocked until consent is given and store nothing in the meantime. Cookies other than necessary ones are set only after you consent through the banner. You can change or withdraw that consent at any time in the banner settings, and delete stored files in your browser settings. Withdrawal does not affect the lawfulness of processing carried out before it.
7. Third-Party Tools and Recipients
Data may be entrusted to:
- Our hosting provider — itDesk Sp. z o.o.
- Google Ireland Ltd. — Google Analytics 4 (measurement ID G-5VS8RSR25K) for traffic statistics, and YouTube, which serves the embedded video
- Meta Platforms Ireland Ltd. — Facebook Pixel (ID 1718827832286139) for advertising measurement and remarketing
- MailerLite — newsletter sign-up and delivery; the form script loads only after marketing consent is given
- Providers of accounting and legal services, to the extent necessary to provide them
- Public authorities, where required by law
The typefaces used on the Website are hosted on our own server. Using the Website does not connect you to Google Fonts servers.
8. Transfers Outside the EEA
Some of the tools listed in Section 7 may process data outside the European Economic Area. Such transfers rely on an adequacy decision (the EU–US Data Privacy Framework) or on Standard Contractual Clauses, under Art. 45 and 46 GDPR.
9. Your Rights
You have the right to access your data, rectify it, erase it, restrict its processing, port it, object to processing based on legitimate interest, and withdraw consent at any time. Requests go to [email protected] and are answered within 30 days.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
10. Security
The Website is served over TLS only. Access to data is limited to authorised personnel, and our systems are kept updated and backed up.
11. Profiling and Automated Decisions
We do not subject Website visitors to decisions based solely on automated processing that would produce legal effects or similarly significantly affect them.
12. Changes to This Policy
Updates are published at https://diabscale.ai/website-privacy-policy/ at least 14 days before taking effect. Purely informational changes that do not restrict the rights of Website visitors may take effect on the day they are published.
13. Contact
Questions and requests concerning this Policy: [email protected] or VP200 sp. z o.o., ul. Domańskiego 112a, 45-289 Opole, Poland.