Privacy Policy

Data controller

The data controller is [RAGIONE SOCIALE], registered office at [SEDE LEGALE — via, CAP, città, Paese], [P.IVA / VAT].

For any request about your personal data write to privacy@pan.pet.

What data we collect

Account data: name, email, password (encrypted), language and administrative residence area (municipality/province/region), not precise GPS location.

Content you create: your pets' profiles, posts, photos and videos, messages, service requests, reviews, health and care record information.

Technical data: access logs, device type and data needed to run and secure the service.

Why we process data and on what legal basis

To provide the service and its features (performance of a contract, Art. 6.1.b GDPR).

For security, abuse prevention and service improvement (legitimate interest, Art. 6.1.f).

For optional communications and non-essential notifications, where applicable, based on your consent (Art. 6.1.a), which you can withdraw at any time.

To comply with legal obligations (Art. 6.1.c).

Who we share data with

With the professionals and shelters you choose to interact with, limited to what the service relationship requires (e.g. the pet details useful to a caregiver).

With providers processing data on our behalf as processors (hosting, file storage, notification delivery), bound by contract.

We do not sell personal data to third parties.

Transfers outside the European Union

Where data is processed outside the European Economic Area, it happens with adequate safeguards under the GDPR (e.g. standard contractual clauses).

How long we keep data

We keep data as long as needed to provide the service and while your account exists. When the account is closed, data is deleted or anonymised, except where retention is required by law or to defend legal claims.

Your rights

You have the right to access, rectify, erase, restrict or object to processing, and to data portability. You can withdraw consent at any time.

To exercise your rights write to privacy@pan.pet. You may also lodge a complaint with the competent supervisory authority.

Minors

The service is not intended for children under 16. If you believe a minor provided us with data without parental consent, contact us to have it removed.

Changes to this policy

We may update this policy; the version in force is always published on this page, with the last-updated date.