Privacy Policy

Last updated: November 11, 2025

1. Introduction

At Patitas en Casa (hereinafter, "the Platform"), accessible via patitasencasa.es, we are committed to protecting the privacy and personal data of our users. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what your rights are regarding it.

The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPD-GDD).

2. Data Controller

The data controller responsible for your personal data is:

  • Identity: Patitas en Casa
  • Domain: patitasencasa.es
  • Contact email: privacidad@patitasencasa.es

3. Personal Data We Collect

3.1. Data Provided by the User

When you register and use the Platform, we collect:

  • Identification data: full name, date of birth, ID number (DNI/NIE) (optional), email address.
  • Contact details: phone number, postal address, city, postal code, province.
  • Account data: encrypted password, user type (adopter/owner), organization type (if applicable).
  • Animal data: information about pets posted for adoption (name, species, age, description, images, health status, microchip).
  • Adoption applications: data included in application forms (personal information, housing, previous experience, motivation).
  • Communications: messages sent through the Platform, notifications, comments.

3.2. Automatically Collected Data

  • Navigation data: IP address, browser type, operating system, pages visited, session duration.
  • Cookies and similar technologies: we use technical and analytical cookies to improve user experience. You can manage cookies from your browser settings.

4. Purposes of Processing

We use your personal data for the following purposes:

  • User account management: creation, authentication, and administration of your profile.
  • Animal posting: allowing owners to publish profiles of animals for adoption.
  • Facilitating adoptions: connecting adopters with owners, managing adoption applications and communications between users.
  • Security and fraud prevention: detecting and blocking fraudulent activities, hidden sales, or misuse of the Platform.
  • Legal compliance: responding to legal requirements, protecting rights, and complying with regulatory obligations.
  • Service improvement: anonymous statistical analysis to optimize functionality and user experience.
  • Communications: sending notifications about applications, service updates, and, if you consent, information about Platform news.

5. Legal Basis for Processing

The processing of your data is based on:

  • Execution of a contract: providing the Platform services you requested upon registration (Art. 6.1.b GDPR).
  • Consent: for specific purposes such as sending promotional communications (Art. 6.1.a GDPR). You can withdraw your consent at any time.
  • Legitimate interest: improving security, preventing fraud, and analyzing Platform usage (Art. 6.1.f GDPR).
  • Compliance with legal obligations: when required by law (Art. 6.1.c GDPR).

6. Sharing Data with Third Parties

We do not sell or lease your personal data to third parties for commercial purposes. However, we may share data with:

  • Other users: your contact information is shared with adopters or owners when you manage an adoption application (with your implicit consent by using the Platform).
  • Service providers: companies that help us operate the Platform (web hosting, payment processing if applicable, data analysis). These providers are contractually obliged to protect your data.
  • Competent authorities: when legally required (for example, in case of judicial investigations or to protect third-party rights).

International transfers: In case of using third-party services located outside the European Economic Area (EEA), we guarantee that such transfers apply appropriate safeguards established in the GDPR (standard contractual clauses, adequacy decisions).

7. Data Retention

We retain your personal data for the time necessary to fulfill the purposes for which they were collected:

  • Active account data: as long as you keep your account open.
  • Completed adoption data: up to 5 years after adoption, for monitoring and regulatory compliance purposes.
  • Security data (logs, IPs): up to 1 year for fraud prevention.
  • Data after account deletion: we delete or anonymize your data within 30 days of the cancellation request, unless there is a legal obligation to retain it.

8. Your Rights

In accordance with the GDPR and the LOPD-GDD, you have the right to:

  • Access: obtain confirmation of whether we are processing your data and request a copy of it.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): request the deletion of your data when it is no longer necessary, you withdraw consent, or you object to processing.
  • Restriction of processing: request that we suspend the processing of your data in certain circumstances.
  • Portability: receive your data in a structured and commonly used format, or request its direct transmission to another controller.
  • Objection: object to the processing of your data based on legitimate interest or for direct marketing purposes.
  • Withdrawal of consent: when processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of previous processing.
  • Complaint to the supervisory authority: you can file a complaint with the Spanish Data Protection Agency (AEPD) if you consider that your rights have not been respected: www.aepd.es.

To exercise any of these rights, you can contact us through the Platform's contact form or by sending an email to privacidad@patitasencasa.es. We will respond to your request within a maximum of 1 month.

9. Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

  • Password encryption using secure algorithms (bcrypt).
  • Secure communications via HTTPS.
  • Role-based access controls (RBAC) to limit access to sensitive data.
  • Periodic backups and security audits.

Despite our efforts, no data transmission over the Internet is 100% secure. We recommend using strong passwords and not sharing them with third parties.

10. Children's Privacy

The Platform is intended for people over 18 years of age. We do not knowingly collect data from minors. If we detect that a minor has provided personal data without parental authorization, we will proceed to delete it immediately.

11. Cookies and Tracking Technologies

We use technical cookies (essential for site operation) and analytical cookies (to improve user experience). You can consult more details about our use of cookies in our Cookie Policy (if available) or manage your preferences from your browser settings.

12. Privacy Policy Modifications

We reserve the right to update this Privacy Policy to reflect changes in our data processing practices or applicable legislation. We will notify you of any significant changes via a notice on the Platform or by email. The date of the last update is indicated at the top of this document.

13. Contact

For any questions related to this Privacy Policy or the processing of your personal data, you can contact us via:

  • Contact form: available on the Platform
  • Email: privacidad@patitasencasa.es