PawTrust · Spain
Privacy Policy
1. Controller
The controller for the processing described in this policy is:
Burc Unalan
Spanish tax identification number (NIF/NIE): Z1874000B
C/ Joaquim Molins, 5, 4º 2ª, 08028 Barcelona, España
2. Scope and service status
This policy distinguishes processing that may arise from the pre-launch website from data included in the app's design. Describing that design does not mean the public service is open or that those data are currently being collected.
We will review this policy before opening the app to the public so it reflects the providers, functions and operational decisions that are actually active at that time.
3. Data processed now
When you email us
If you contact us by email, we process your address, the message and any information you choose to include. This website has no registration form or waiting list.
Technical access data
Hosting, security and web-delivery infrastructure may generate ordinary technical logs such as IP address, date and time, requested resource, browser, device and security events. These logs are used to deliver the page, protect it and diagnose errors.
4. Data designed for the app before public launch
The current design includes the following categories. They are listed to provide transparency about the product being prepared, not to declare active public collection:
- Account and profile: name, email, protected password, language and, if provided, phone and avatar.
- Dog profile: name, breed, weight, tags, photo and health or behaviour notes the owner chooses to provide.
- Scheduling: dates, times, duration, notes and pickup or drop-off locations.
- Walker profile: description, experience, service area, availability and service preferences.
- Active walk: coordinates sent while the walk is in progress and the app is in use, together with accuracy or speed when available.
- Reports and reviews: notes, photo addresses, ratings and comments.
- Security: protected session identifiers, technical device information and audit records where applicable.
5. Data and functions that are not active
During public pre-launch, we do not process card data, IBAN, payments, Stripe, escrow or walker payouts. We also do not collect identity documents, selfies, criminal-record information, push tokens, background geofence events, or advertising and analytics identifiers.
The presence of experimental fields or development code does not make these operations an active service.
6. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Responding to messages and voluntary requests. | Consent and, where a request concerns a possible future relationship, pre-contractual steps requested by the person. |
| Delivering and protecting the site, preventing abuse and resolving errors. | Legitimate interest in maintaining a secure and available informational service. |
| Meeting obligations, valid requests or legal claims. | Legal obligation and legitimate interest in establishing, exercising or defending claims. |
If the app opens to the public, functions needed to manage an account or request will normally rely on performance of a contract. Location access will require device permission and will be limited to the active walk described above.
7. Recipients and processors
Current data may be handled by hosting, security, web-delivery and email providers only where needed to provide those services. We do not sell personal data or disclose it for advertising.
We may also disclose information when required by law or by a valid request from a competent authority.
8. International transfers
Some technical providers may operate from countries outside the European Economic Area. When a transfer is necessary, it must rely on an adequacy decision or appropriate safeguards, such as standard contractual clauses, together with any additional measures that apply.
9. Retention
Messages are kept for as long as needed to reply and manage the legal consequences of the communication. Technical logs are kept according to necessity, security and applicable provider obligations.
Operational criteria for each app category will be set and documented before launch. The current account-deletion design revokes sessions, cancels future bookings and anonymises direct identifying data; certain service records may remain where needed for security, legal duties or claims.
10. Automated decisions
The pre-launch website does not make automated decisions or create profiles that have legal or similarly significant effects on visitors.
11. Your rights
You may request access, rectification, erasure, restriction, objection or portability where applicable. You may also withdraw consent without affecting processing that was lawful before withdrawal.
To exercise your rights, email [email protected]. We may ask for reasonable information to verify your identity and prevent disclosure to another person.
12. Complaint to the Spanish Data Protection Agency
If you believe the processing does not comply with the law, you may complain to the Spanish Data Protection Agency (AEPD).
13. Security, children and changes
We apply technical and organisational measures proportionate to the current service. No system can guarantee absolute security, so measures are reviewed as the product changes.
PawTrust is intended for adults. We do not knowingly request children's data through this website.
We will publish material changes on this page and update the date shown at the top.
14. Official information and contact
This notice follows the AEPD guidance on the duty to inform and the General Data Protection Regulation.
For privacy questions: [email protected].