Privacy Policy
This page explains how PawPort processes personal data in relation to user accounts, digital pet profiles, access security, and sharing functionality.
This Policy is written to support offering the App to users across the European Union and the European Economic Area.
The policy below has been refined to better match GDPR principles and to avoid categorical claims that could become inaccurate if a feature is not enabled in every version of the App. If the actual behavior of PawPort differs, this Policy should be updated before publication in the App Store or Google Play.
1. Introduction
PawPort (the “App”) is a digital tool for managing pet-related information, developed by DIMIT PET LTD. (“We”, “Us”, the “Controller”).
This Privacy Policy explains what personal data we process, for what purposes, on what legal basis, and how we protect that data in connection with the use of the App.
This Policy is intended to reflect Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian data protection law.
Where the App is offered to or used by individuals in the European Union or the European Economic Area, this Policy is intended to be interpreted consistently with the applicable European data protection framework.
2. What data we may process
We process only data that is necessary to provide the service, secure the account, and manage pet information within the App.
2.1 User data
- •first and last name
- •email address
- •phone number, where provided by the user
2.2 Pet data
- •name
- •breed
- •date of birth
- •sex
- •microchip number
- •vaccination information
- •deworming records
- •veterinary procedures and notes
2.3 Veterinary professional data
- •name of veterinarian or clinic
- •address
- •phone number
2.4 Security and access data
- •email and password, with the password stored in a protected form rather than readable plain text
- •technical authentication and session security data
We do not intentionally request more data than is necessary for the App to operate. Where certain fields are optional, users may choose whether to fill them in.
3. Biometric sign-in
The App may use device-level features such as Face ID, Touch ID, or Android Biometrics to help users sign in more conveniently and securely.
Biometric templates are not collected or stored by us, are not transmitted to our servers, and are not accessible to DIMIT PET LTD. They are managed entirely by the operating system and secure hardware/software environment of the user’s device.
4. Why we use the data
We use the data only for purposes related to providing and securing the service.
- •creating and managing user accounts
- •storing and organizing a digital pet passport and pet history
- •sending or displaying reminders for vaccinations, deworming, and related events
- •ensuring secure access and protecting against unauthorized use
We do not use personal data for marketing, profiling, or selling personal data.
5. Legal basis for processing
Depending on the relevant feature, processing may be based on:
- •Article 6(1)(b) GDPR – performance of a contract or provision of the service
- •Article 6(1)(a) GDPR – consent, where a specific feature requires it
- •Article 6(1)(f) GDPR – legitimate interests related to security, abuse prevention, and protection of our systems
6. Where and how data is stored
Data may be stored in a protected backend system and database with controlled access, and transferred over encrypted connections such as HTTPS/TLS.
We apply appropriate technical and organizational measures, including access controls, authentication safeguards, logical restriction of permissions, and measures against unauthorized access, loss, disclosure, or unlawful alteration of data.
Where we use technical service providers, we aim to have data processed within the EU/EEA. If, in specific cases, processing outside the EU/EEA becomes necessary, it should take place only where a valid legal basis and appropriate safeguards under the GDPR are in place.
7. Sharing data with third parties
We do not sell personal data and do not disclose personal data to third parties for their own marketing purposes.
Data may be made available only where necessary to provide the service, for example to technical providers such as hosting, cloud infrastructure, notifications, or support contractors acting under our instructions and subject to appropriate contractual and GDPR safeguards.
We may also disclose data where required by law, by a competent authority, or where necessary to protect our legal rights.
8. Sharing between users
The App may allow a user to share pet-related data with another user, including in the context of transferring ownership or handing over the animal’s history.
What this means
- •sharing is initiated only by the user through App functionality
- •it may include pet data and pet history
- •the user is responsible for choosing the recipient and should share only with trusted persons
- •where available, functionality may allow revocation, access removal, or deletion
The legal basis for such functionality will usually be consent and/or necessity for providing the service under Article 6(1)(a) and Article 6(1)(b) GDPR.
9. Retention period
We retain data while the account remains active or for as long as necessary to provide the service.
Data may be deleted at the user’s request or after account closure, unless limited retention is required by law, for dispute resolution, or for the establishment, exercise, or defense of legal claims.
10. Your rights
Under the GDPR, you have the right to:
- •be informed about how your data is processed
- •access your personal data
- •correct inaccurate or incomplete data
- •request erasure where the legal conditions are met
- •request restriction of processing
- •receive data portability where applicable
- •object to processing where that right applies
- •withdraw consent at any time where processing is based on consent
- •lodge a complaint with a competent supervisory authority
According to European Commission guidance, requests to exercise rights should be handled without undue delay and in principle within 1 month.
11. Account deletion
Users may delete their account through App functionality, where available, or request deletion by contacting us.
Upon a valid request, we will delete data within a reasonable period unless part of it must be retained for legal reasons or for the establishment, exercise, or defense of legal claims.
12. Children
The App is not intended for persons under 16 years of age without the consent of a parent or legal guardian.
If we become aware that personal data has been collected from a child in breach of applicable rules, we will take appropriate steps to delete it.
13. Data aligned with the European pet passport
Some of the data that may be entered and stored in PawPort is structured to resemble information commonly found in a European pet passport, such as identification, vaccinations, deworming, and veterinary records.
According to official European Commission information, the European pet passport is an official document for dogs, cats, and ferrets issued by an authorized veterinarian.
Important: PawPort is a digital support tool. It is not an official veterinary document and does not replace a passport or any other document issued by a veterinarian.
14. Changes to this Policy
We may update this Policy if the App, the processing activities, or the applicable legal framework changes.
Where changes are material, we will publish an updated version in the App and/or on a related webpage.
15. Contact and supervisory authority
If you have questions about this Policy or want to exercise your rights, you may contact us at:
DIMIT PET LTD.
Website: https://www.dimitpetood.eu
Email: services@dimitpetood.eu
You have the right to lodge a complaint with the competent supervisory authority in the EU/EEA state of your habitual residence, place of work, or place of the alleged infringement. If the Controller is established in Bulgaria, the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, https://www.cpdp.bg, e-mail: kzld@cpdp.bg, is also a competent authority.