Privacy policy
Effective from 2 November 2026.
This is an English translation. The binding text is the Czech version (Zásady ochrany osobních údajů).
VegStyle is a dating site and community for people who eat vegetarian, vegan and similar. This policy explains what personal data we process about you, why, for how long and what your rights are.
1. Who processes your data
The controller of your personal data is Dodo reklama s.r.o., company ID 08797307, registered office Vlastina 889/23, 161 00 Prague 6, Czech Republic, entered in the Commercial Register kept by the Municipal Court in Prague, section C, file 325508 (“we”).
Contact for personal data matters: e-mail info@it-online.cz, or the contact form on the Support page. We have not appointed a data protection officer because the law does not require us to.
2. What data we process and why
2.1 Account and profile
| Data | Purpose | Legal basis |
|---|---|---|
| e-mail, nickname, password (stored only as a hash, never readable) | creating the account, signing in, password reset, service e-mails | performance of a contract (Art. 6(1)(b) GDPR) |
| date of birth | checking that you are 18; showing your age in the profile | performance of a contract |
| gender, who you are looking for, eating style, type of relationship | showing your profile, search and suggestions of suitable people | performance of a contract |
| town (not an address) | search by distance and the member map | performance of a contract |
| photos | profile; a main photo is required (terms, art. 4) | performance of a contract |
| other details you fill in yourself (hobbies, personality, looks, languages and more) | showing your profile according to the visibility you set, search | performance of a contract |
Every profile detail has its own setting for who can see it: all signed-in members, only your connections, or only you. Visitors who are not signed in cannot see profiles.
2.2 Sensitive data
You may voluntarily state your sexual orientation, religion, beliefs, political views or health data (for example a medical diet). These are special categories of personal data. We process them only with your explicit consent (Art. 9(2)(a) GDPR), which you give by ticking a box when you fill them in. By default only you can see them. You can withdraw your consent at any time by deleting the detail from your profile.
For profiles taken over from the previous website we moved these details with the visibility “only me”, and after your first sign-in we ask whether you want to keep them (consent) or delete them.
2.3 Location and map
We store only the town you choose from the list. For the map we round it and shift it by 0.3 to 1.5 km, so even we do not know your exact location. On the map you can appear with a photo, without a photo, or not at all. When you use “Where I am now” in search, the location from your device is used only to calculate distances and is not stored.
2.4 Messages and content
| Data | Purpose | Legal basis |
|---|---|---|
| private messages | delivery to the other member | performance of a contract |
| posts, recipes, comments and reactions in communities | showing them to community members | performance of a contract |
| recipes you publish in the community cookbook yourself | publication on the website with your nickname, without your profile photo | your consent for each recipe; can be withdrawn |
| recommended places and Veggie tables | showing them to members; the exact meeting place is visible only to signed-in members | performance of a contract |
| connections, carrots, blocks | running the dating site | performance of a contract |
| answers in the Taste match game | calculating the match with others and daily suggestions | performance of a contract |
The administrators cannot see the content of private messages. The exception is a message you report to us: the moderator sees a copy of the reported message, not the whole conversation.
2.5 Verified profile
When you ask for verification, you send a selfie with a given gesture. Only the administrator sees it, compares it with your main photo, and we delete the selfie once a decision is made. Only the fact that and when the profile was verified remains. Legal basis: performance of a contract (verification is a voluntary service). We do not create biometric templates from the selfie and do not evaluate it automatically.
2.6 Safety and moderation
| Data | Purpose | Legal basis |
|---|---|---|
| reports (who, whom, reason, copy of the reported content) | dealing with breaches of the rules | legitimate interest in a safe environment (Art. 6(1)(f) GDPR) |
| record of a block between members | spotting a member blocked by several people | legitimate interest |
| checking texts for offensive words | preventing vulgarity and insults (the text is only compared with a list, no profile is created) | legitimate interest |
| hash of the e-mail of an account closed for breaking the rules | preventing repeated registration | legitimate interest; we store only a one-way hash, not the address |
| shortened IP address and time of sign-in and registration attempts | protection against abuse and bots | legitimate interest |
| a request from the Support form (nickname or name, e-mail, type of request, message, screenshots, possibly the nickname of a reported member); for a signed-in member or a matching e-mail, a link to the account | handling the request, technical problem, report or application, reply by e-mail | legitimate interest in handling the request; for requests to exercise your rights, compliance with a legal obligation (Art. 6(1)(c) GDPR) |
2.7 Notifications
- E-mails: we always send service e-mails (verification, new password, administrator action). You can turn off the e-mail about a new message while you are offline in your Profile.
- Phone notifications: only if you turn them on yourself in the browser or app. A notification contains only a nickname and the type of event, never the content of a message.
We do not send newsletters or advertising and we do not sell data.
2.8 Visitor statistics
We measure visits with our own statistics running on our web hosting. It stores no cookies or other data on your device and does not track you across websites.
A one-way fingerprint is made from your IP address (shortened by its last part) and browser details. It changes every day, so you cannot be recognised the next day. The IP address itself is not stored.
We store the address of the visited page, the referring website, country, language, type of device and browser, screen width, time on the page, page loading speed and clicks on contact links. We delete detailed records after 90 days and keep only aggregate numbers. We do not pass the data to third parties.
If your browser sends a Do Not Track or Global Privacy Control signal, we do not measure at all.
The legal basis is our legitimate interest in finding out how the website is used and improving it.
3. Cookies and storage on your device
We use only technically necessary means, so the website does not show a consent banner:
- the
itolclencookie for signing in (valid for 60 days from your last visit, for this website only), - in the mobile app, a sign-in token in the device storage instead of the cookie,
- in browser storage, the interface language and search filter settings.
We do not use advertising or analytics cookies of third parties.
4. Who we share data with
- Other members, according to your visibility settings.
- Processors who run services for us and are bound by a contract:
- WEDOS Internet, a.s., Czech Republic: web and database hosting, sending e-mails;
- IT OnLine Servis-PC (Václav Novotný), company ID 48557668: development and technical administration.
- Providers of services your browser uses:
- OpenStreetMap map tiles: when the map is shown, your browser downloads tiles from servers of the OpenStreetMap Foundation, which see your IP address;
- phone notifications are delivered by the service of your browser or phone maker (Google, Apple, Mozilla and similar); it receives only the encrypted notification and the technical address of the device. Google and Apple may also process this data in the USA under the EU-US Data Privacy Framework.
- Town search: when you type a town we do not know yet, our server asks the Photon service (komoot GmbH, Germany) for its coordinates. We send only the typed town name, no data about you.
- Public authorities, only when the law requires it.
5. How long we keep data
| Data | Period |
|---|---|
| account, profile, photos, messages, posts | for as long as the account exists; we delete them immediately after the account is closed |
| inactive account | after 3 years without signing in we notify you by e-mail and delete the account after another 30 days |
| verification selfie | until the administrator decides, at most 30 days |
| reports and moderation | 2 years after they are resolved |
| requests from the Support form | 1 year |
| e-mail hash after closing an account for breaking the rules | until the administrator lifts the ban, at most 5 years |
| records of sign-ins and attempts | 180 days |
| database backups | 14 days (a deleted account disappears from backups within 14 days at the latest) |
| consents (when and to what you agreed) | for as long as the account exists and 3 years after, to prove the consent |
After an account is closed, only an anonymous record that the account existed remains, without the e-mail, nickname and profile.
6. Your rights
You have the right:
- of access to your data. In your Profile there is a “Download my data” button that immediately gives you all your data in a machine-readable format (this is also the right to data portability);
- to rectification: you can correct most details yourself in your Profile;
- to erasure: you can close your account yourself in your Profile, or write to us;
- to restriction of processing and to object to processing based on legitimate interest;
- to withdraw consent (sensitive data, publishing a recipe, phone notifications) at any time, without affecting processing before the withdrawal;
- to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
We reply to requests within one month.
7. Security
The website runs only over an encrypted connection (HTTPS). We store passwords only as hashes, remove metadata from photos (including the location from the camera) and serve them only to signed-in members through time-limited signed links. Access to the administration is protected and logged.
8. Age
VegStyle is only for people over 18. We close any profile we find belongs to a minor.
9. Changes to this policy
We may change this policy, for example when adding a new feature. We inform you about significant changes in advance by e-mail or in the app.