Privacy policy

We, Dogorama GmbH, operate this website and our app (Apple App Store and Google Play Store) and collect certain data from our visitors and customers as far as necessary.
In the following privacy policy, you will learn what we do with your data, so-called personal data, and why we do it. We also inform you how we protect your data, when the data is deleted, and what rights you have thanks to data protection.

Who can I contact?

Responsible for this website is:
Dogorama GmbH
Floßplatz 6
04107 Leipzig
Germany
Managing Directors: Jan Wittmann, Christoph Skorupa
Phone: +4934198991300
Email: privacy@dogorama.app

What are my rights?

You can contact us at any time if you have questions about your data protection rights or wish to exercise your rights below:

  • Right of withdrawal according to Art. 7 para. 3 GDPR (e.g., you can contact us if you want to revoke a previously given consent to a newsletter)
  • Right of access according to Art. 15 GDPR (e.g., you can contact us if you want to know what data we have stored about you)
  • Rectification according to Art. 16 GDPR (e.g., you can contact us if your email address has changed and we should replace the old email address)
  • Erasure according to Art. 17 GDPR (e.g., you can contact us if we should delete certain data we have stored about you)
  • Restriction of processing according to Art. 18 GDPR (e.g., you can contact us if you want us not to delete your email address but only use it for sending strictly necessary emails)
  • Data portability according to Art. 20 GDPR (e.g., you can contact us to receive your data stored with us in a compressed format, e.g., because you want to provide the data to another website)
  • Objection according to Art. 21 GDPR (e.g., you can contact us if you disagree with any of the advertising or analysis procedures mentioned here)
  • Right to lodge a complaint with the competent supervisory authority according to Art. 77 para. 1 GDPR (e.g., you can also contact the data protection supervisory authority in your federal state in case of complaints)

Competent supervisory authority:
The Saxon Data Protection Officer
Devrientstr. 1
01067 Dresden
Germany

Deletion of data and storage duration

Unless otherwise stated, we delete your data as soon as it is no longer needed, e.g., your email address after unsubscribing from our newsletter. Your data will also be blocked or deleted if a legally prescribed retention period expires, unless further storage of the data is necessary for a contract conclusion or fulfillment. Certain data may need to be retained longer for legal reasons. Of course, you can request information about the stored data at any time.

Visiting the website

If you are just browsing our website, we do not collect any personal data, except for the data your browser transmits to enable the visit to the website, especially:

  • IP address (e.g., 95.91.215.example or 2a02:8109:9440:1198:bdb1:551f:example)
  • Approximate location based on IP range (e.g., Berlin & surroundings)
  • Internet provider (e.g., Kabel Deutschland or Deutsche Telekom)
  • Internet speed (e.g., 120 Mbit)
  • Date and time (e.g., 11:45 on 25.05.2018)
  • Last visited website (e.g., google.de)
  • Browser (e.g., Chrome or Safari)
  • Operating system (e.g., Mac OS)
  • Hardware (e.g., Intel processor)

As a protective measure for your privacy, we delete or anonymize the IP address after your visit to our website. Thus, the other technical data can no longer be traced back to you and are only used for anonymous, statistical purposes to optimize our website.Purpose of the temporary storage of the data is, on the one hand, the technical necessity for establishing the connection and the correct, error-free display of our website. The IP address and the technical data mentioned are required to display the website, avoid display problems for visitors, and fix error messages.Legal basis is the so-called legitimate interest, which has been examined in accordance with the above-mentioned protective measures and in line with the European data protection requirements from Art. 6 para. 1 lit. f GDPR.

The data is processed by us as part of our offer on this website and for the purposes of providing software and hardware also by third-party providers.
We process contact information, usage data, or other information you provide to us.

Contact data (e.g., name, address), contract data

The purpose is communication or storage/processing of data to establish, execute, and/or process a contractual relationship with you. The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 sentence 1 lit. a GDPR.

Contact data or other data provided for the contractual relationship

The purpose is compliance with legal obligations (e.g., commercial or tax retention obligations). The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 sentence 1 lit. a GDPR.

Contact and contract data

The purpose is the assertion, exercise, and defense of legal claims, whereby our legitimate interest lies, for example, in asserting legal claims and defending in legal disputes. The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 sentence 1 lit. a GDPR.

Contact, contract, and usage data

The purpose is the analysis of data based on our legitimate interest in quality assurance and marketing. The legal basis is either your consent according to the European data protection regulations under Art. 6 para. 1 sentence 1 lit. a GDPR or our legitimate interests under 6 para. 1 sentence 1 lit. f GDPR.

Data you provide based on consent

We will only process certain data based on your previously given explicit and voluntary consent. You have the right to revoke your consent at any time with effect for the future. The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 sentence 1 lit. a GDPR.

Hosting

This website is hosted by external service providers (https://www.netcup.de) (hosts). The personal data collected on this website is stored on the servers of the hosts. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses, and other data generated via a website. The use of the hosts is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hosts will only process your data to the extent necessary to fulfill their service obligations and follow our instructions regarding this data.

We have carefully selected our servers with a location in Germany with regard to high security standards.

Conclusion of a contract for order processing: To ensure data protection-compliant processing, we have concluded contracts for order processing with our hosts.

Danger warnings

On our website and in our app, we have integrated our 'dangers and poison bait alert'. The danger radar records all poisoned bait chronologically and in the regions where the app is available. These reports are compiled from various sources by operators, users, and the editorial team. As soon as a bait is found nearby, this warning is published in the app. Location data or the query of the current location only takes place if this is confirmed in the app. Further details can be found in the special app privacy policy below. For the display of dangers and poison baits, we use Apple's map service. More information at:
https://www.apple.com/legal/privacy/en-ww/
https://www.apple.com/uk/privacy/

Cookies

Our website uses so-called cookies in part. Cookies are small text files that are usually stored in a folder of your browser. Cookies contain information about the current or last visit to the website:

  • Name of the website
  • Expiration date of the cookie
  • Any value

If cookies do not contain an exact expiration date, they are only temporarily stored and automatically deleted when you close your browser or restart the device. Cookies with an expiration date remain stored even if you close your browser or restart the device. Such cookies are only removed on the specified date or if you delete them manually.

We use the following three types of cookies on our website:

  • Required cookies (we need these, e.g., to display the website correctly for you and to temporarily store certain settings)
  • Functional and performance-related cookies (these help us, e.g., to evaluate technical data of your visit and thus avoid error messages)
  • Advertising and analytics cookies (these ensure that, for example, advertising for shoes is displayed if you previously searched for shoes)

You can configure, block, and delete cookies in your browser settings. If you delete all cookies from our website, some functions of the website may not be displayed correctly. Helpful information and instructions for common browsers are provided by the Federal Office for Information Security:
https://www.bsi.bund.de/EN/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Cyber-Sicherheitsempfehlungen/Updates-Browser-Open-Source-Software/Der-Browser/Browser-sicher-einstellen/browser-sicher-einstellen_node.html

Except for technically required cookies, other types of cookies are only activated after explicit consent has been given. This consent can be revoked at any time. The revocation option and further information can be found in the cookie settings.
Change your current cookie settings

Google Fonts

For visual improvement of the font image, Google Fonts (https://fonts.google.com) from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ('Google') are used, a font collection from Google. These fonts are transferred to the storage folder of your browser and activated when you access this website or other websites. If this is not supported, the text on the website will only be displayed in a standard font. To enable this, a request is sent to domains such as fonts.googleapis.com or fonts.gstatic.com, which for technical reasons contains your IP address. However, your data is not merged with other data or traced back to you.
As protective measures, we have ensured that retrieving the font collection from Google does not result in data being merged with other Google offerings, e.g., if you have a Google user account. English information on data protection at Google Fonts confirms this (https://developers.google.com/fonts/faq). In addition, the high security standards of the Google platform and the associated privacy policy of Google (http://www.google.com/intl/de-DE/privacy) apply. Since Google is based in the USA and thus in a so-called third country, further guarantees are required to ensure an adequate level of European data protection. Google provides standard contractual clauses, by which an adequate level of data protection for international data is contractually assured. The standard contractual clauses have been evaluated and agreed upon.
Purpose of the data transfer is the correct display of the fonts in the form we have set. The IP address is required to establish a connection with Google's servers to download the font collection if it is not already stored on the device. Legal basis is the so-called legitimate interest, which has been examined for the pursuit of the purpose and in accordance with the above-mentioned protective measures and in line with the European data protection requirements from Art. 6 para. 1 lit. f GDPR.

Google Analytics 4

If you have given your consent, Google Analytics 4 is used on this website, a web analysis service of Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ('Google').

Type and purpose of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

With Google Analytics 4, IP address anonymization is enabled by default. Due to IP anonymization, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is, according to Google, not merged with other Google data.
During your website visit, your user behavior is recorded in the form of 'events'. Events can be:

Page views
First visit to the website
Session start
Visited web pages
Your 'click path', interaction with the website
Scrolls (whenever a user scrolls to the end of the page (90%))
Clicks on external links
Internal searches
Interaction with videos
File downloads
Viewed/clicked ads
Language setting

In addition, the following is recorded:

Your approximate location (region)
Date and time of the visit
Your IP address (in shortened form)
Technical information about your browser and the devices you use (e.g., language setting, screen resolution)
Your internet provider
The referrer URL (which website/advertising medium you came to this website from)
Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics serve to analyze the performance of our website.

Recipients
Recipients of the data are/can be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Third country transfer
For the USA, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (e.g., Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

Storage duration
The data we send and link to cookies is automatically deleted after 2 months. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached takes place automatically once a month.

Legal basis
The legal basis for this data processing is your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TTDSG.

Revocation
You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. If you configure your browser so that all cookies are rejected, this may restrict the functionality of this and other websites. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by

a. not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

Further information on the terms of use of Google Analytics and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/terms?hl=en-GB?hl=en.

Privacy policy on the use and application of Google AdSense

The controller has integrated Google AdSense on this website. Google AdSense is an online service that enables the placement of advertising on third-party sites. Google AdSense is based on an algorithm that selects the ads displayed on third-party sites to match the content of the respective third-party site. Google AdSense enables interest-based targeting of the Internet user, which is implemented by generating individual user profiles.

The operating company of the Google AdSense component is Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of the Google AdSense component is the integration of advertisements on our website. Google AdSense sets a cookie on the data subject's IT system. What cookies are has already been explained above. By setting the cookie, Alphabet Inc. is enabled to analyze the use of our website. Each time one of the individual pages of this website operated by the controller and on which a Google AdSense component has been integrated is called up, the Internet browser on the data subject's IT system is automatically prompted by the respective Google AdSense component to transmit data to Alphabet Inc. for the purpose of online advertising and commission billing. As part of this technical process, Alphabet Inc. gains knowledge of personal data, such as the IP address of the data subject, which Alphabet Inc. uses, among other things, to trace the origin of visitors and clicks and subsequently enable commission billing.

The data subject can prevent the setting of cookies by our website at any time, as already described above, by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Alphabet Inc. from setting a cookie on the data subject's IT system. In addition, a cookie already set by Alphabet Inc. can be deleted at any time via the Internet browser or other software programs.

Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in web pages to enable log file recording and log file analysis, which allows statistical evaluation. Based on the embedded tracking pixel, Alphabet Inc. can recognize whether and when a website was opened by a data subject and which links were clicked by the data subject. Tracking pixels are used, among other things, to evaluate the flow of visitors to a website.

Through Google AdSense, personal data and information, which also includes the IP address and is necessary for the collection and billing of the displayed advertisements, are transmitted to Alphabet Inc. in the United States of America. This personal data is stored and processed in the United States of America. Alphabet Inc. may pass on this personal data collected via the technical process to third parties.

Google AdSense is explained in more detail under this link https://www.google.de/intl/de/adsense/start/.

Facebook Pixel

This website uses the Facebook visitor action pixel for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries.
This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The collected data is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes,
in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of ads on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.
The use of Facebook Pixel is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If appropriate consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381.
Further information on protecting your privacy can be found in Facebook's privacy policy: https://www.facebook.com/privacy/policy/.
You can also deactivate the remarketing function 'Custom Audiences' in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Inquiry by email or phone

If you contact us by email or phone, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of inquiries addressed to us.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Mollie

On our website, we offer payment via Mollie, among others. The provider of this payment service is Mollie B.V, Keizersgracht 313, 1016 EE Amsterdam, Netherlands (hereinafter 'Mollie'). If you choose payment via Mollie, the payment data you enter will be transmitted to Mollie and the selected payment provider.

The transmission of your data to Mollie is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.

The full privacy policy of Mollie can be viewed at https://www.mollie.com/gb/legal/privacy.

Privacy Policy for the Dogorama App

Data collection in our app

When you use our app, we collect and store certain data (technically necessary) about you to provide services and improve them overall:

  • Device ID and user-related device metrics
  • Language settings (e.g., system language German)
  • Mobile data for location determination
  • Date and time of use (e.g., 11:45 on 25.05.2018)
  • Operating system (iOS, Android)
  • Hardware
  • IP address

To protect your privacy, we delete or anonymize IDs in our database and most technical data after your use.
The purpose of the temporary storage of this data is to establish a connection to our servers and to provide the app.
The purpose of temporarily storing the IP address is to prevent misuse and harassment or violation of the terms of use.
The legal basis is the contract with you according to Art. 6 para. 1 lit. b GDPR as well as the legitimate interest according to the European data protection requirements under Art. 6 para. 1 lit. f GDPR. In addition, we apply the above-mentioned security measures to protect your data.

Registration and use of the app

In addition, certain data is required for registration and use of our app. These are the following data:

  • Name (mandatory)
  • Email (mandatory)
  • Password (mandatory)
  • Gender (mandatory)
  • Place of residence (optional)
  • Date of birth (optional)

Information about your dog (not personal data):

  • Name
  • Gender
  • Breed
  • Weight/size
  • Date of birth
  • Neutering status

To protect your privacy, we delete or anonymize IDs in our database and most technical data after your use. The evaluation of usage data is carried out exclusively on a statistical basis and not personally.
The purpose of processing this data is to enable the use of the app and its services and functions.
The legal basis is the user contract with you according to Art. 6 para. 1 lit. b GDPR as well as the legitimate interest according to Art. 6 para. 1 lit. f GDPR. You can object to the data processing based on legitimate interests at any time and explain why your interest outweighs ours. However, the use of our app is then unfortunately no longer possible. In addition, we apply the above-mentioned security measures to protect your data.

Use of the forum

The use of the forum is voluntary and at the user's own responsibility. The user decides whether to appear in the forum under their real name or under a self-chosen username (recommended!). It is also the user's own responsibility to present facts in such a way that their identity and that of other persons are not recognizable, i.e., do not contain personal data whose publication is not permitted.

User data

The forum contains in the user account the data you enter during registration. The following are visible to other users:

  • Date and time of a post
  • Name and profile picture
  • Text of the post and attachments (images)

Video vet

For registered users in our app, we offer the possibility to book a veterinary consultation via video. The appointment booking, payment, and use of the service are carried out via our partner Pfotendoctor on their website or app. Further information on data protection and payment options from Pfotendoctor can be found here:
https://pfotendoctor.de/datenschutzerklaerung

Contact form

You have the option to contact us via our contact form. The following data is processed:

  • User ID
  • Email
  • Name
  • Message
  • Time of the request. 

As a protective measure, contact is made via an encrypted connection. We also apply the principle of data minimization and only collect the data actually required in the contact form. After successful contact with you and completion of the reason for contact, your data will be deleted. The purpose of the requested data is solely to contact you, which is why the data is only used for this purpose.

Facebook Login

In addition to manual registration, we offer you the option of registering directly with your existing profile on 'Facebook'. If you want to use this function, you will be redirected to the Facebook page and guided through the login process. With the data transmitted by Facebook, we create your user account, of course without saving your friends lists and contacts. This connection can be removed at any time in the settings on Facebook. Further details can be found in Facebook's privacy policies: [Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. As a protective measure, the data you enter is transmitted via an encrypted connection. We do not use the login to access personal data such as friends lists or contacts or to store them for our own purposes. We only store the data required for login and the use of our app enabled by it. We do not know what data Facebook collects during registration or how data is linked. The purpose of the requested data is to log in via an existing user account to use extended functions in the app. Registration via Facebook is voluntary and can be revoked at any time or the user account can be deregistered. The legal basis is your consent in accordance with the European data protection requirements from Art. 6 para. 1 lit. a GDPR.

Sign in with Apple

In addition to manual registration, we offer you the option of registering and logging in directly with your existing profile on 'Apple (Apple ID)'. If you want to use this function, you will be redirected to an Apple popup and guided through the login process. With the data transmitted by Apple, we create your user account. This connection can be removed at any time in the settings of your iCloud account. Further details can be found in Apple's privacy policies:
[Apple Inc. One Apple Park Way, Cupertino, California, USA, 95014;
https://www.apple.com/legal/privacy/en-ww/;
further information on data collection:
https://www.apple.com/uk/privacy/,
https://www.apple.com/uk/privacy/features/
and https://www.apple.com/privacy/docs/Sign_in_with_Apple_White_Paper_Nov_2019.pdf
As a protective measure, the data you enter is transmitted via an encrypted connection. We only store the data required for login and the use of our app enabled by it. We do not know what data Apple collects during registration or how data is linked. The purpose of the requested data is to log in via an existing user account to use extended functions in the app. Registration via Apple is voluntary and can be revoked at any time or the user account can be deregistered. The legal basis is your consent in accordance with the European data protection requirements from Art. 6 para. 1 lit. a GDPR.

Google Sign-In

In addition to manual registration, we offer you the option of registering and logging in directly with your existing profile on Google. If you want to use this function, you will be redirected to the Google page and guided through the login process. 
Google Sign-In is a service of Google Ireland Limited ('Google'), Gordon House, Barrow Street, Dublin 4, Ireland. 
For registration or login, you will be redirected to the Google page, where you can log in with your user data. 
This links your Google profile or Google email address and our service. 
Through the link, we automatically receive the following data from Google Ireland Limited:
First and last name
Email address
Profile picture
Further information on Google Sign-In and privacy settings can be found in the privacy notices (https://policies.google.com/privacy?hl=en-GB) and terms of use (https://policies.google.com/terms?hl=en-GB) of Google Ireland Limited.
As a protective measure, the data you enter is transmitted via an encrypted connection. We only store the data required for login and the use of our app enabled by it. We do not know what data Google collects during registration or how data is linked. The purpose of the requested data is to log in via an existing user account to use extended functions in the app. Registration via Google is voluntary and can be revoked at any time or the user account can be deregistered. The legal basis is your consent in accordance with the European data protection requirements from Art. 6 para. 1 lit. a GDPR.

Mobile apps and app permissions

When you download our app via an app platform (Apple App Store or Google Play Store), you transmit certain information to this platform, especially your account data, e.g., name, device ID, and email address. We have no influence on this data collection and are not responsible for it.
Some functions of our app require access to certain functions and services on your device. Depending on the mobile operating system you use, you may need to accept certain app permissions. We will now explain what these permissions are:

Location data

Access to location data: If you select OK in the popup window 'access location', you allow the app to access your location.
To protect your privacy, all app permissions are optional, except for the technical permissions required to run the app. You can refuse at any time (by clicking 'no' or 'do not accept'). You can also revoke permissions later by changing the corresponding settings on your device.
The purpose of requesting these permissions is to enable our service and app-specific functions. One of the functions and services of our app is to connect with other dog owners in the area, for which this data collection is necessary.
The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 lit. a GDPR.

Notifications

Push notifications: If you select OK in the popup window 'allow push notifications', you allow the app to send you notifications.
To protect your privacy, all app permissions are optional, except for the technical permissions required to run the app. You can refuse at any time (by clicking 'no' or 'do not accept'). You can also revoke permissions later by changing the corresponding settings on your device.
The purpose of requesting these permissions is to enable our service and app-specific functions. One of the functions and services of our app is to send you notifications about certain events. These include, among others, new chat messages and events in the area.
The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 lit. a GDPR.

Access to camera

Access to the camera: If you select OK in the popup window 'access camera', you allow the app to access your camera.
To protect your privacy, all app permissions are optional, except for the technical permissions required to run the app. You can refuse at any time (by clicking 'no' or 'do not accept'). You can also revoke permissions later by changing the corresponding settings on your device.
The purpose of requesting these permissions is to enable our service and app-specific functions. One of the functions and services of our app is to share and upload images and videos with other users in the app.
The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 lit. a GDPR.

Access to media library/photos

Access to the media library/photos: If you select OK in the popup window 'access media library/photos', you allow the app to access your images and videos stored on your device.
To protect your privacy, all app permissions are optional, except for the technical permissions required to run the app. You can refuse at any time (by clicking 'no' or 'do not accept'). You can also revoke permissions later by changing the corresponding settings on your device.
The purpose of requesting these permissions is to enable our service and app-specific functions. One of the functions and services of our app is to share and upload images and videos with other users in the app.
The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 lit. a GDPR.

Access to microphone

Access to the microphone: If you select OK in the popup window 'access microphone', you allow the app to access your microphone.
To protect your privacy, all app permissions are optional, except for the technical permissions required to run the app. You can refuse at any time (by clicking 'no' or 'do not accept'). You can also revoke permissions later by changing the corresponding settings on your device.
The purpose of requesting these permissions is to enable our service and app-specific functions. One of the functions and services of our app is to create and share videos with sound. Access to the microphone is required for this.
The legal basis is your consent according to the European data protection regulations under Art. 6 para. 1 lit. a GDPR.

Google Analytics

We use Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ('Google'). Your IP address is processed, but shortened before the usage statistics are evaluated, so that no conclusions can be drawn about your person. For this purpose, Google Analytics has been extended by the code 'anonymizeIp' to ensure anonymized collection of IP addresses. Google will use the information obtained through cookies to evaluate your use of the website, to compile reports on activities, and to provide other services related to internet usage. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google.
The legal basis for data processing is the legitimate interest according to Art. 6 para. 1 f GDPR. You can object to data processing at any time here.
As protective measures, we use the anonymization procedure offered by Google, so that subsequent evaluation of the data is not based on your person, but only on a statistical basis. In addition, the high security standards of the Google platform and the associated privacy policy of Google (http://www.google.com/intl/de-DE/privacy) apply. We have also concluded a special data protection contract with Google, which prescribes the protection of your data through technical and organizational protective measures. Since Google is based in the USA and thus in a so-called third country, further guarantees are required to ensure an adequate level of European data protection. Google provides standard contractual clauses, by which an adequate level of data protection for international data is contractually assured. The standard contractual clauses have been evaluated and agreed upon.

Google Maps

To use some functions of our app, we have integrated the map function of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ('Google') via an interface (API).
These functions include, for example, displaying other users, veterinarians, and dog schools. For technical reasons, your IP address is transmitted to Google's servers so that the map with our location can be displayed in your browser.
As protective measures, the high security standards of the Google platform and the associated privacy policy of Google (http://www.google.com/intl/de-DE/privacy) apply. Since Google is based in the USA and thus in a so-called third country, further guarantees are required to ensure an adequate level of European data protection. Google provides standard contractual clauses, by which an adequate level of data protection for international data is contractually assured. The standard contractual clauses have been evaluated and agreed upon.
The purpose of the data transfer is the integration of the popular Google map function among our users, which allows various locations to be displayed graphically without having to leave our app. The legal basis is the so-called legitimate interest, which has been examined for the pursuit of the purpose and in accordance with the above-mentioned protective measures and in line with the European data protection requirements from Art. 6 para. 1 lit. f GDPR.

Google Firebase

Our app uses technology from Google Firebase (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, 'Google'). Firebase is part of the Google Cloud Platform and offers numerous services for developers. A list can be found here: https://firebase.google.com/terms/. Some Firebase services process personal data. In most cases, personal data is limited to so-called 'Instance IDs', which are provided with a timestamp. These 'Instance IDs' assigned by Firebase are unique and thus allow the linking of different events or processes. For us, this data does not represent personally identifiable information, nor do we make efforts to personalize it afterwards.
For Firebase Analytics, Google uses, in addition to the 'Instance ID' described above, the advertising ID of the device (Android only). In the settings of your Android mobile device, you can restrict the use of the advertising ID: Settings > Google > Advertising > Reset advertising ID
Firebase Cloud Messaging is used to deliver push notifications or so-called in-app messages (messages that are only displayed within the respective app). The device is assigned a pseudonymized push reference, which serves as the target for push notifications or in-app messages. Push notifications can be deactivated and reactivated at any time in the device settings
Firebase Authentication is a login and authentication service and is a service from Google. Depending on the location from which this application is accessed, the processing location is Ireland or the United States. To simplify the login and authentication process, Firebase Authentication can use third-party identity services and store the information on their platform.
Personal data collected: Email; username; password;
Further information on data protection and security at Firebase can be found here: https://firebase.google.com/support/privacy/ We use servers located within the EU wherever possible. However, it cannot be ruled out that data may also be transferred to the USA. Google provides standard contractual clauses, by which an adequate level of data protection for international data is contractually assured. The standard contractual clauses have been evaluated and agreed upon. More information on Google Firebase and data protection can be found at https://www.google.com/policies/privacy/ and at https://firebase.google.com/.
We have also concluded contracts for order data processing with Google. In these, Google undertakes to protect our users' data, to process it in accordance with our data protection regulations on our behalf, and in particular not to pass it on to third parties.

Google Cloud Vision

Our app uses Google Cloud Vision for the automated checking of uploaded images for web duplicates. It checks whether the uploaded images have already been used elsewhere on the web and therefore may not originate from the uploading user. The service is used as part of user profile verification and when posting danger alerts to detect forgeries at an early stage. All images transmitted to Google Cloud Vision for this purpose are deleted from Google's servers immediately after processing. Further information on Google Cloud Vision's data protection can be found at https://cloud.google.com/vision/docs/data-usage.

Microsoft Azure Cognitive Services

Our app uses Microsoft Azure Cognitive Services for the automated checking of uploaded photos as part of user profile verification. The photos are processed using automatic facial recognition and checked to see whether the same person is shown in several uploaded photos and whether the composition of the photos complies with the rules explained in the verification process. We also use Microsoft Azure Cognitive Services as part of the AI dog portrait creation to check the uploaded photos for content harmful to minors or immoral content. All photos transmitted to Microsoft Azure Cognitive Services for this purpose and the biometric data derived from them are deleted from Microsoft's servers immediately after processing. Further information on Microsoft Azure Cognitive Services' data protection can be found at https://azure.microsoft.com/de-de/support/legal/cognitive-services-compliance-and-privacy/.

Midjourney

Our app uses Midjourney to create aesthetic AI dog portraits based on dog photos uploaded by our app users. The uploaded photos are not used for any purpose other than generating AI artworks based on them. No personal data of our users is passed on to Midjourney. Further information on Midjourney's data protection can be found at https://docs.midjourney.com/docs/privacy-policy.

Backblaze Cloud Storage and other services

A server for other app-specific services, including connection to the cloud storage provider mentioned below, is hosted by an external service provider (https://www.netcup.de) (host). The personal data collected during communication between the app and the server is stored on this server. This may include, in particular, IP addresses, meta and communication data, and other technical data generated by the app.
The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our app offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our host will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

We have carefully selected our server with a location in Germany with regard to high security standards.

We also use the cloud storage provider Backblaze to store images and media provided by users. Further information on data protection at Backblaze can be found at https://www.backblaze.com/security.html.

The use of Backblaze is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our app offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Conclusion of a contract for order processing: To ensure data protection-compliant processing, we have concluded a contract for order processing with our host and Backblaze.

Assertion, exercise, and defense of legal claims

Sometimes it may be necessary for us to process personal data and, if applicable – in accordance with local laws and regulations – sensitive personal data in connection with the exercise or defense of legal claims. Article 9 para. 2 f of the GDPR allows this if the processing is 'necessary for the assertion, exercise, or defense of legal claims or whenever courts are acting in their judicial capacity'.
This may occur, for example, if we need legal advice in relation to legal proceedings or are legally obliged to retain or disclose certain information in the course of legal proceedings.

Personal data of children

We are aware of the importance of the safety and privacy of children on the Internet. Our offer is expressly aimed at persons over the age of 16. Should children and adolescents nevertheless register for our app, they must ensure that this is done with the consent of their parents.

Changes to the privacy policy

We reserve the right to change this privacy policy at any time, but we will always comply with the applicable data protection laws. We recommend that you inform yourself about the current privacy policy each time you visit the websites and the app.

Status of the privacy policy: August 2025