1. Who the controller is
The controller of personal data is Vladyslav Otroshchenko, a natural person (the “operator” or “we”).
For anything related to personal data, contact us at info@findpaw.cz. We have not appointed a data protection officer because we are not required to.
2. What data we process
Account data: email, user name, account type (private person or shelter), and a password stored only in hashed form. If you fill them in (at sign-up or in settings), also phone, city, and profile photo.
Listing data: information about the animal, photos, city, address and a map point, price or reward, and the listing status.
Shelter data: name, description, phone, email, website, city, address, and photos.
Technical data: IP address, browser details, sign-in times, and error logs. They are created automatically when you use the website.
We read your location from the browser only when you choose “use my location” on a map yourself. It is used only to center the map, and we store only the point you confirm.
3. Why we process data and on what legal basis
- Creating and managing your account, signing in, confirming your email, and resetting your password – performance of a contract (Art. 6(1)(b) GDPR).
- Publishing your listings and shelter profile – performance of a contract (Art. 6(1)(b) GDPR).
- Keeping the website secure, preventing abuse, and fixing errors – our legitimate interest in running the service safely (Art. 6(1)(f) GDPR).
- Handling reports of illegal content and requests from public authorities – compliance with a legal obligation (Art. 6(1)(c) GDPR) and legitimate interest.
- Establishing and defending legal claims – legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for advertising or marketing, we do not sell it, and we do not carry out profiling or automated decision-making.
4. What is publicly visible
Active listings and shelter profiles are visible to anyone, even without signing in. Everything you enter in them is published, including photos, city, address, and shelter contacts. Do not enter anything you do not want to make public.
We round the map point to about 100 m, and the public page shows only a circle with a 300 m radius, not the exact place.
So that people can contact you about your active private listings, a visitor who clicks "Show contact" sees your name and your profile phone, or your sign-in email if you have not filled in a phone. This contact is not part of the page itself, so search engines do not index it. Your password and other profile data are never shown publicly.
5. Who we share data with
Your data is processed by these service providers that help us run the website:
- Supabase, Inc. (USA) – database and sign-in; data is stored in Ireland (EU).
- Sendinblue SAS (Brevo, France) – sending account emails (sign-up confirmation, password reset).
- Cloudflare, Inc. (USA) – domain DNS, forwarding of messages sent to our contact address, and bot protection of the sign-in, sign-up, and password forms (Turnstile). The protection receives your IP address and browser details when such a form is shown.
- Cloudinary Ltd. (Israel, USA) – storing and displaying photos.
- Vercel Inc. (USA) – website hosting.
- Seznam.cz, a.s. (Czech Republic) – map tiles and finding the address of a map point (Mapy.com). When a map is shown it receives your IP address, and when an address is looked up, the coordinates of the chosen point.
We share data with anyone else only when the law requires it, for example at the request of a court or the police.
6. Transfers outside the EU
Some providers are based outside the European Union. We transfer data to them on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework, Israel) or standard contractual clauses approved by the European Commission.
7. How long we keep data
- Account data, listings, and shelter profiles for as long as the account exists. A listing or shelter you delete is removed together with its photos.
- After an account is closed, we delete its data within 30 days. Backups may keep it for up to 90 more days until they are overwritten.
- Technical logs for as long as the infrastructure provider keeps them, usually no more than 90 days.
- Data needed to defend legal claims or to meet a legal obligation for as long as that requires.
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest.
You can edit or delete most data yourself in the dashboard. Send account closure and other requests to info@findpaw.cz. We reply without undue delay and within one month at the latest. To avoid giving data to the wrong person, we may check that the request comes from your account email.
You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.
10. Children
People over 15 years of age may create an account. Younger children may use the website only with the consent and under the supervision of a parent or guardian.
11. Changes to this policy
We may update this policy, for example when we add a feature or change a provider. The current version is always on this page with its effective date. We inform registered users about significant changes in advance by email or on the website.