Privacy policy

1. Controller

Jakob Ustarbowski, Invalidenstraße 56, 10557 Berlin, Deutschland. Further details in the legal notice.

2. Hosting and server logs

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (data centre Frankfurt). When you visit, Vercel processes technically necessary data such as IP address, date and time, requested page, browser and operating system in server logs. The legal basis is Art. 6(1)(f) GDPR (secure and stable operation). Vercel is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.

The database with listings, accounts and requests is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (data processing agreement under Art. 28 GDPR).

3. Fonts and icons

Fonts and icons are loaded from our own server. No data is transmitted to Google Fonts or other font providers.

4. Cookies and consent

We set strictly necessary cookies (login session, stored consent, chosen language) without consent on the basis of Section 25(2) of the German TDDDG and Art. 6(1)(f) GDPR. Analytics cookies are set only with your consent via the banner on your first visit. You can change your decision at any time: Cookie settings.

5. Google Analytics

With your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG) we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar techniques to analyse the use of the website (pages visited, time spent, origin, device). Google Analytics 4 does not store IP addresses; data may be transferred to Google LLC in the USA, Google is certified under the EU-US Data Privacy Framework. Without consent Google Analytics is not loaded. You can withdraw consent at any time: Cookie settings. Further information: policies.google.com/privacy.

6. Search and location

The town or postcode you enter in the search is used only to calculate distances and results. The input appears in the address bar (shareable search) and in the server logs; no user profile is created from it.

7. Request form and reviews

We store details from a request (name, email, optional phone, message) and forward them to the requested provider so they can reply (Art. 6(1)(b) GDPR). The provider is responsible for further processing. Reviews are published with the name given; we check them before publication.

8. Directory data from public sources

Some listings (name, address, phone, website and opening hours of veterinary practices and other businesses) are taken from OpenStreetMap (© OpenStreetMap contributors, Open Database License). The legal basis is Art. 6(1)(f) GDPR: pet owners have a legitimate interest in finding businesses near them, and we only use business details that are already public. Such listings are marked as not confirmed. Businesses can claim their listing for free or object at any time via the “Request removal” link on the listing page (Art. 21 GDPR); the listing is then removed and not added again. Anyone requesting a claim or removal sends us their name, email address and, if given, phone number and message. We use these details only to handle the request.

9. Accounts for providers and users

For an account we store name, email address and an encrypted password (Art. 6(1)(b) GDPR). Providers additionally store company and listing data that is published. Sign-in uses a signed session cookie (30 days). You can delete your account yourself at any time under “Account” or have it deleted by emailing us; invoice data is kept for the statutory retention periods. If you change your email address, the new one only applies after you click a confirmation link. We send emails about your account to the address you provided: confirmation of the address when signing up (double opt-in), requests to providers and their confirmation, review results for listings, and reminders from the pet records. Reminders can be switched off under “My animals”. Emails are sent via the mail server of ALL-INKL.COM – Neue Medien Münnich (data processing agreement under Art. 28 GDPR). Alternatively you can sign in with your Google account (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The site then redirects you to Google; we receive your name, your email address, whether Google has confirmed the address, and a fixed identifier of your Google account. In this case we do not store a password. The legal basis is Art. 6(1)(b) GDPR. Processing at Google is governed by its privacy policy.

10. Payments via Stripe

We bill paid plans via Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter payment details directly with Stripe; we receive status, amount and a reference of the payment (Art. 6(1)(b) GDPR). We keep invoice data for ten years under Section 147 of the German Fiscal Code (AO).

11. Recipients and third-country transfers

Recipients are the named service providers (Vercel, ALL-INKL, Stripe, Google) and the respective requested provider. Transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses.

12. Retention

Server logs are deleted after 30 days at the latest, requests after 24 months, accounts when the account is deleted, invoice data after the statutory retention periods expire.

13. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to withdraw consent at any time with effect for the future. Complaints can be addressed to the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, or another supervisory authority.