At Dog Lovers Peluquería Canina we take the privacy of our clients and website visitors very seriously. This Privacy Policy explains how we collect, use and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data Controller
- Controller: Silvia Gracia Picado
- Spanish ID (DNI): 39728625N
- Trading name: Dog Lovers Peluquería Canina
- Tax address: Avda. Pablo Neruda 116, Portal E, 4°A, 28018 Madrid, Spain
- Business premises: Calle Menéndez Pelayo 43, 28009 Madrid, Spain
- Phone: +34 640 824 354
- Email: reservas@dog-lovers.es
We are not required to appoint a Data Protection Officer (DPO), as we do not process special categories of data on a large scale and do not engage in systematic monitoring.
2. Data we collect and purposes
We process the following categories of personal data, depending on the channel through which you contact us:
| Purpose | Data processed | Legal basis | Retention |
|---|---|---|---|
| Booking management | Name, phone, email, dog details (name, breed, age, health or behavioural particularities) | Performance of a contract (art. 6.1.b GDPR) | Duration of the commercial relationship and 4 years thereafter for tax compliance |
| Handling enquiries | Contact details you provide (email, phone, message) | Consent (art. 6.1.a GDPR) | Until your enquiry is resolved, then up to 1 year |
| Invoicing and legal obligations | Name, tax ID (if applicable), address, service details | Legal obligation (art. 6.1.c GDPR): Spanish Commercial Code and General Tax Law | 6 years |
| Website cookies and analytics | Technical browsing data (see Cookie Policy) | Consent (art. 6.1.a GDPR) | As detailed in the Cookie Policy |
| Marketing communications (with consent only) | Email, name | Consent (art. 6.1.a GDPR) | Until you withdraw consent |
3. Categories of data
We do not request or process special categories of personal data (health data, ideology, religion, etc.) related to the data subject. Data relating to the dog's health or particularities (allergies, fears, injuries, age) are not personal data under GDPR, as they refer to an animal, not an identifiable natural person.
4. Recipients of the data
Your personal data will not be shared with third parties except in the following cases, all of them covered by a legal basis:
- Snify (online booking system provider, snify.app): when you book through the online form, your data is processed on their platform. Snify acts as a data processor.
- Cloudflare, Inc. (hosting and CDN provider): the technical browsing data passes through their servers. Cloudflare relies on the European Commission's Standard Contractual Clauses (SCCs) for international transfers.
- Google LLC (Google Places API): we use this API solely to fetch the public reviews of our Google Maps listing and display them on the website. We do not send your personal data to Google.
- Meta Platforms Ireland Ltd. (WhatsApp and Instagram): if you decide to contact us through these channels, your information is governed by Meta's privacy policies.
- Public authorities, judges and courts: where we are legally required to do so.
- Banks and payment providers: where necessary to process payments.
- External accounting and tax advisors: for the fulfilment of accounting and tax obligations, only where strictly necessary.
5. International transfers
Some of our providers (Cloudflare, Google, Meta) are based outside the European Economic Area. In every case, these transfers are covered by:
- European Commission adequacy decisions (where applicable).
- European Commission Standard Contractual Clauses (SCCs).
- Recognised privacy frameworks, such as the EU-US Data Privacy Framework.
6. Your rights
As the data subject, you have the right to exercise the following rights at any time:
- Access: to know what data we hold about you.
- Rectification: to correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): to have your data deleted when no longer necessary.
- Restriction: to ask us to restrict processing while a circumstance is being verified.
- Objection: to object to the processing of your data for personal reasons.
- Portability: to receive your data in a structured format to send it to another controller.
- Not to be subject to automated decision-making: we do not take decisions affecting you based solely on automated processing.
- Withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, you can write to reservas@dog-lovers.es or by post to the address in section 1, identifying yourself and clearly stating which right you wish to exercise.
7. Complaints to the supervisory authority
If you consider that the processing of your personal data does not comply with current regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):
- Website: www.aepd.es
- Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
- Phone: +34 901 100 099 / +34 912 663 517
8. Security measures
We apply appropriate technical and organisational measures to ensure the security and integrity of your personal data and to prevent its loss, alteration or unauthorised access. Among others:
- HTTPS (TLS) encrypted connection across the entire website.
- Access to data restricted to the necessary staff only.
- Backups protected by the same security measures.
- Data processing agreements with providers that access personal data.
9. Minors
Our services are directed at users over 14 years of age. We do not knowingly collect personal data from minors. If we detect that a minor has provided us with data without their guardian's consent, we will delete it immediately.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in regulations, our services or our processing practices. The date of the latest update appears at the top of this document. We recommend reviewing it periodically.