Privacy Policy and Personal Data Protection

Last updated: August 7, 2026

1. General provisions

This Privacy and Personal Data Protection Policy describes how information about users of Herpesu.net, available at https://herpesu.net/, is collected, used, stored, and protected.

In this Policy:

  • “Site” means the Herpesu.net information portal;
  • “Site Administration” means the persons responsible for managing, maintaining, and publishing content on the Site;
  • “User” means any person who visits the Site or uses its materials, contact forms, or other available functions;
  • “Personal data” means any information that directly or indirectly identifies a natural person.

The Site Administration respects users’ privacy and takes reasonable organizational and technical measures to protect personal data.

By using the Site, the user confirms that they have read this Policy and agree to its provisions to the extent necessary to use the relevant Site functions.

2. Informational nature of the Site

Herpesu.net is an informational and analytical resource about herpesvirus infections, immunology, neurology, infectious and autoimmune diseases, and related conditions.

Site materials are not individual medical advice, a diagnosis, or a treatment prescription and do not replace consultation with a physician.

If a user voluntarily submits health information, test or examination results, or other medical information, it is used solely to fulfil the user’s request, prepare an informational and analytical review, or provide another requested information service.

3. Data that may be collected

The following categories of information may be processed when the Site is used:

  • IP address;
  • browser type and version;
  • device and operating system type;
  • browser language;
  • date and time of visit;
  • pages viewed;
  • referral source;
  • technical Site logs;
  • cookies and similar technologies;
  • name or pseudonym entered in a form;
  • email address, phone number, or other contact details voluntarily provided by the user;
  • the text of messages, enquiries, and requests;
  • documents, images, test results, and other files voluntarily provided by the user;
  • information required to order and pay for information services, if such services are provided through the Site.

The Site Administration does not require data that is unnecessary to answer an enquiry, fulfil a request, or provide a service selected by the user.

4. Health data

When requesting an informational and analytical review, a user may voluntarily provide information about:

  • symptoms and complaints;
  • previous illnesses;
  • laboratory test results;
  • MRI, CT, ultrasound, and other examination results;
  • prescribed or completed treatment;
  • medicines and biologically active substances used;
  • other health-related circumstances.

This is particularly sensitive information. It is processed only within the scope of the user’s request and must not be used for advertising profiling or disclosed to third parties without a lawful basis.

Users are advised not to submit unnecessary identifying data. Before sending medical documents, they should conceal or remove passport or other document numbers, tax or identification numbers, full home addresses, insurance policy numbers, and other data unnecessary for the informational analysis.

5. Purposes of processing

Personal data may be used to:

  • ensure the Site operates properly and displays its pages and materials;
  • respond to users and process requests submitted through Site forms;
  • prepare informational and analytical materials and provide requested information services;
  • send service messages;
  • prevent fraud, spam, and abuse and maintain information security;
  • analyse visits and improve the Site’s structure;
  • meet applicable legal, accounting, or tax obligations;
  • protect the legitimate rights and interests of the Site Administration and users.

6. Legal bases for processing

Depending on the circumstances, personal data may be processed on the basis of the user’s consent; the need to fulfil a user request or provide a requested information service; compliance with a legal obligation; a legitimate interest, including Site security and stability; or protection of the rights and lawful interests of the Site Administration or third parties.

Where processing is based on consent, the user may withdraw it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Use of cookies

The Site may use cookies—small text files stored on the user’s device—to provide essential functions, retain language and other preferences, remember choices, protect forms from automated spam, analyse Site stability and performance, obtain aggregated visitor statistics, and improve structure, content, and navigation.

Cookie categories

Necessary cookies. Required for technical operation, security, page loading, and essential Site functions.

Functional cookies. Help retain user preferences, such as the selected language.

Analytics cookies. Provide aggregated information about Site use and help improve its operation.

Marketing cookies. May be used only if advertising or marketing tools are actually used on the Site and, where required, after user consent has been obtained.

8. Managing cookies

Users can allow, restrict, or block cookies through their browser settings or an available consent-management tool on the Site. Disabling necessary cookies may cause some pages or functions to work incorrectly. Instructions are usually available under the browser’s Settings, Privacy, or Security section.

9. Analytics and third-party services

The Site may use third-party providers for hosting, content management, backups, anti-spam and cyberattack protection, analytics, email, payments, file storage and transfer, and technical support.

Providers may receive limited access to data only to the extent necessary to perform their functions. The Site Administration seeks to use providers that maintain an appropriate level of privacy and security.

10. Embedded content and external links

Site pages may include videos, interactive elements, social-network buttons, links to scientific publications, and links to medical institutions, journals, and other resources.

When a user interacts with embedded content, a third-party service may receive technical information about the user’s device, IP address, and visit to the page.

Visiting an external site is voluntary. This Policy does not apply to third-party resources; users should review their privacy rules before submitting personal data to them.

11. Disclosure of personal data to third parties

The Site Administration does not sell users’ personal data.

Data may be disclosed only when the user has consented; it is necessary to fulfil a request, provide a requested service, or process a payment; a technical provider requires access within its role; disclosure is required by law or a lawful request from an authorized authority; or it is necessary to protect the rights, safety, and lawful interests of users or the Site Administration.

12. International data transfers

Some technical, hosting, analytics, or communication providers may be located in other countries. Personal data may therefore be processed outside the user’s country. The Site Administration takes reasonable steps to use providers that ensure an appropriate level of information protection.

13. Data retention

Personal data is retained no longer than necessary for its processing purpose. The retention period may depend on the nature of the enquiry, performance of an information service, contractual or financial relationships, accounting, tax, or other legal requirements, protection of lawful rights and interests, and backup cycles.

After the retention period, data is deleted, destroyed, or anonymized unless continued storage is required by law.

14. Personal data security

Protective measures may include HTTPS encryption, restricted administrative access, account and password controls, backups, malware protection, software updates, suspicious-activity monitoring, anti-spam and automated-attack protection, and organizational confidentiality rules.

No method of transmitting or storing data online can guarantee absolute security. Users are also responsible for the security of their devices, email, accounts, and communication channels.

15. User rights

Subject to applicable law, users may have the right to:

  • receive information about and access their personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion where there is no lawful basis for continued processing;
  • request restriction of processing;
  • object to certain processing;
  • withdraw previously given consent;
  • receive data they provided in a structured format where the law provides this right;
  • complain to a competent data-protection authority;
  • seek judicial protection of their rights.

To prevent unauthorized access to another person’s data, the Site Administration may request information needed to verify the applicant’s identity.

16. Data deletion and correction

A user may ask the Site Administration to provide information about stored data, correct inaccurate data, delete submitted data, withdraw consent, stop informational messages, or restrict use of submitted documents or materials.

The request should preferably include the name or pseudonym used, email address, approximate submission date, the requested action, and any additional details needed to locate the data.

17. Minors’ data

The Site is not intended for young children to order services independently. Information about a child should be submitted by a parent, legal guardian, or other person lawfully authorized to represent the child.

Do not publicly post or unnecessarily submit a child’s full name, address, school, documents, or other identifying information. If the Site Administration learns that a minor’s personal data was received without proper consent from a legal representative, it may be deleted.

18. Electronic communications

An email address voluntarily provided by a user may be used to answer an enquiry, provide requested information, clarify a request, deliver a requested service, and send important service messages.

Advertising or informational mailings may be sent only where an appropriate legal basis exists. Users may opt out at any time.

19. User responsibility

By submitting information through the Site, the user confirms, to the best of their knowledge, that it is accurate; that they are entitled to disclose the relevant data and documents; that disclosure does not infringe another person’s rights; that they have a lawful basis if the information concerns another person; and that they understand the risks of transmitting sensitive data online.

20. Changes to this Policy

The Site Administration may update this Policy when Site functions, connected services, processing practices, legal requirements, or information-security measures change.

The current version is published on this page with its last-updated date. Continued use of the Site after changes are published means that the user has reviewed the updated Policy.

21. Contact information

For questions about privacy or the processing, correction, or deletion of personal data, contact the Site Administration:

Website: https://herpesu.net/

Email: help@herpesu.net

Please use “Personal data” as the subject line.