This English translation is provided for reference purposes only. The German version is legally binding. Privacy Policy Last updated: 7 September 2026 1. Controller The controller responsible for the processing of personal data is: Brand: Hund Bunt Business name: Aidar Sadykov Paw Solutions Proprietor: Aidar Sadykov Käthchen-Paulus-Straße 2 60486 Frankfurt am Main Germany Email: info@hundbunt.de Data protection enquiries may also be sent to this address. 2. Processing of Personal Data We process personal data only to the extent necessary to operate Hund Bunt, provide the requested functions, ensure the security of the service or comply with legal obligations. Website and technical data When the website is accessed, the IP address, time of access, content accessed, browser and device information and technical log data may in particular be processed. The processing serves to provide the website technically, analyse errors and ensure security and the prevention of misuse. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the service. User account and login When an account is registered and used, we process in particular the email address, internal user identifier, authentication data and the account and profile data provided by the user. The processing takes place to set up and manage the user account and to provide the requested functions. Legal basis: Art. 6(1)(b) GDPR. Where certain information is marked as required, the relevant functions cannot be provided without that information. Sign in with Google When “Sign in with Google” is used, we receive from Google in particular a unique user identifier and, depending on the permissions granted, a name, email address and profile picture. We do not receive the user's Google password. The source of this data is Google. For users in the European Economic Area, the relevant Google services are generally provided by Google Ireland Limited. Legal basis for our processing: Art. 6(1)(b) GDPR. Google also processes data in connection with its services under its own responsibility. Google's privacy information applies in this respect. Profiles, pets and search We process the profile information provided by the user, in particular names or display names, images, location information, information about pets, pet care services, preferences and search criteria, to the extent necessary for the respective functions. Legal basis: Art. 6(1)(b) GDPR. Pet sitter profiles are publicly accessible. The information published there may therefore also be viewed by people who are not logged in and may be indexed or cached by search engines. We have no complete control over the further processing of content already collected by independent third parties. Chat When the chat is used, we process in particular the users involved, messages, attachments, times and technically necessary metadata. Legal basis: Art. 6(1)(b) GDPR. If content is reported or there are specific indications of fraud, misuse, legal violations or security issues, the necessary content may be processed to investigate the matter, enforce our rules and defend legal claims. Legal basis: Art. 6(1)(f) GDPR and, where applicable, Art. 6(1)(c) GDPR. Our legitimate interest lies in particular in protecting the service and its users and in establishing and defending legal claims. Contact, support and emails When you contact us, we process the contact and communication data provided in order to handle the relevant enquiry. We also process contact details to the extent necessary for operational messages such as registration, security, account or feature notifications. Legal basis: depending on the reason, Art. 6(1)(b), (c) or (f) GDPR. 3. Cookies and Similar Technologies We may use technically necessary cookies or comparable technologies, in particular for login, session management, security and settings requested by the user. Where these are strictly necessary to provide a digital service expressly requested by the user, no consent is required pursuant to Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act). Marketing cookies are not used. Should other technologies requiring consent be used in the future, they will be used only after prior consent has been obtained. 4. Recipients and Service Providers We transfer personal data only where there is a legal basis for doing so. Recipients may include in particular: - hosting, database and storage service providers, - email and communication service providers, - authentication service providers, - technical support and security service providers, - legal and tax advisers, and - public authorities and courts where there is a legal obligation or other legal basis. Service providers that process data exclusively on our behalf are engaged in accordance with Art. 28 GDPR. We do not sell personal data. 5. Transfers Outside the EEA For certain service providers, processing of personal data outside the European Economic Area cannot be ruled out. Such a transfer takes place only subject to the requirements of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards such as standard contractual clauses. Information about the safeguards used in a particular case may be requested at info@hundbunt.de. 6. Retention Period and Deletion We store personal data only for as long as necessary for the respective purpose. Account and profile data is generally stored for the duration of the user account. Once the account has been deleted, data that is no longer required is deleted or anonymised. Messages are stored to the extent necessary to provide and retain the relevant message history. When an account is deleted, messages may remain available to other participants where this is necessary for their message history; the association with the deleted account will be removed or restricted where possible. Technical log data is stored only for a limited period unless it is required to investigate a specific security incident or case of misuse. Support, complaint, security and misuse data may be stored until the matter has been fully resolved and, where necessary, beyond that point for the establishment, exercise or defence of legal claims. Data subject to statutory retention obligations is stored for the duration of the respective statutory period. Deleted data may temporarily remain in technical backups and will be overwritten or deleted there as part of the regular backup cycles. 7. Rights of Data Subjects Subject to the statutory requirements, data subjects have in particular the rights to: - access, Art. 15 GDPR, - rectification, Art. 16 GDPR, - erasure, Art. 17 GDPR, - restriction of processing, Art. 18 GDPR, - data portability, Art. 20 GDPR, and - object, Art. 21 GDPR. Where processing is based on consent, that consent may be withdrawn at any time with effect for the future. Requests may be sent to info@hundbunt.de. Where necessary, we may request suitable proof of identity. Data subjects also have the right under Art. 77 GDPR to lodge a complaint with a competent data protection supervisory authority. 8. Data Security and Amendments We take appropriate technical and organisational measures to protect personal data. This Privacy Policy will be amended if the processing of personal data or the legal requirements change materially. The current version will be published on Hund Bunt.