Privacy policy

Last updated: 24.09.2026

This privacy policy explains how VETBUSS OÜ processes personal data on vetbuss.ee, when providing veterinary services and when using video surveillance. Processing follows the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

1. Controller

VETBUSS OÜ Registry code: 16290253 VAT: EE102430484 Email: info@vetbuss.ee Website: https://vetbuss.ee

Regional phone numbers and email addresses are listed on the contact page. We have not appointed a data protection officer (DPO); it is not required for the scale and nature of our activity.

2. What data we process

• Contact form: name, email, message, selected language and region.
• Cookies: language, region and cookie consent (see the cookie policy).
• Phone booking and appointments: contact details, pet information and data needed to provide the service.
• Billing: invoice or payment data to the extent required by law.
• Site security: failed admin login attempts (IP address, email, time). Public visitors do not have accounts.

• Video surveillance: images and activities of people in marked surveillance areas. Audio is not recorded (see section 8).

We do not collect payment-card details on the website and we do not create public user accounts.

3. Purposes and legal bases

• Answering contact-form messages — GDPR Art. 6(1)(a) (consent) and (b) (steps prior to a contract).
• Booking and providing veterinary services — Art. 6(1)(b).
• Accounting and legal duties — Art. 6(1)(c).
• Remembering language and region on the site — Art. 6(1)(f) (legitimate interest in a working website) and strictly necessary cookies.
• Anonymous web analytics (only if you consent) — Art. 6(1)(a).
• Security of the website and admin area — Art. 6(1)(f).
• Video surveillance to protect people and property and prevent and detect offences — Art. 6(1)(f) (VETBUSS OÜ’s legitimate interest; see section 8).

4. Who receives data

Only authorised staff see the data. We may use EU hosting and backup providers as processors under contract. We do not sell data. We disclose data to authorities only where there is a lawful basis. Access to and disclosure of video recordings are described in section 8.

5. Retention

• Contact-form messages: until the request is handled, then up to 24 months unless a longer period is required by law.
• Accounting records: at least 7 years (Estonian Accounting Act).
• Veterinary service records: as required by veterinary and medicines rules.
• Cookies: up to 12 months, or until you delete them in your browser.
• Video recordings: normally up to 72 hours; exceptions for recordings of a specific incident are described in section 8.

6. Transfers outside the EEA

By default we do not transfer data outside the EEA. If analytics requires it, we do so only with your consent and with GDPR Chapter V safeguards.

7. Your rights

You have the right to:

• access your data;
• rectify inaccurate data;
• erasure where the law allows it;
• restrict processing;
• object to processing based on legitimate interest;
• data portability where processing is based on consent or contract and is automated;
• withdraw consent at any time, without affecting processing already carried out.

Send requests to info@vetbuss.ee. We respond without undue delay, normally within one month. If the complexity or number of requests requires it, this period may be extended by up to two further months under the GDPR; we will explain the extension and its reasons within the first month.

You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee, https://www.aki.ee).

8. Video surveillance

Purpose and legal basis. We use video surveillance to protect people and property and to prevent and detect offences. The legal basis is VETBUSS OÜ’s legitimate interest (GDPR Art. 6(1)(f)). Before surveillance starts and whenever it changes significantly, its necessity, proportionality and impact on people’s rights are assessed. The assessment is documented in a separate legitimate interest assessment.

Monitored areas and data. Video surveillance is used in areas marked with information signs. The signs must be visible before entering the monitored area. Camera views are limited to the area needed for the stated purpose. Recordings may contain images and activities of people in that area. Audio is not recorded. Cameras are not used for unjustified monitoring of staff or clients. Recordings are used only to investigate specific incidents consistent with the original surveillance purpose and, where necessary, to protect legal rights.

Retention. Recordings are normally kept for up to 72 hours and are then automatically deleted or overwritten. If a recording is needed to deal with a specific offence, damage, dispute or proceeding, or to protect legal rights, only the relevant excerpt is retained and only for as long as necessary. The reason, scope and duration of longer retention are documented.

Access and disclosure. Only authorised persons may access recordings to the extent needed for their duties or a specific incident. Recordings are disclosed to a competent public authority or another entitled recipient only where there is a lawful basis. Appropriate technical and organisational measures protect the recordings.

Your rights and requests. You may access recordings relating to you and, subject to the GDPR’s conditions, request erasure or restriction of processing. You may also object to processing based on legitimate interest on grounds relating to your particular situation. Send your request to info@vetbuss.ee and specify the location, date and time of the recording as precisely as possible. We may need to verify your identity. To protect other people’s rights, we may limit the excerpt provided or blur their images. Response deadlines and the right to complain to Andmekaitse Inspektsioon are described in section 7.

9. Cookies

Cookie use is described in the separate cookie policy.

10. Changes

We publish updates on this page.