1. Data controller
1.1. The data controller is LoomadeTakso OÜ. The registration number is currently in progress. The company is not VAT registered.
1.2. For data protection questions, you can contact us using the e-mail address or phone number published on the website.
2. Data we process
2.1. We process data that the client provides through the website, phone, e-mail or another communication channel: name, phone number, e-mail, client address, pickup address, destination address, preferred date and time, pet type, breed or description, weight, crate requirement, comments for the driver and other information needed to arrange the ride.
2.2. When using a client account, we may process username, e-mail, technical password-related information, pet profiles, request history and technical account activity records.
2.3. For lost pet announcements and reviews, we may process the announcement or review text, photo, contact details and additional information provided for publication.
3. Purposes of processing
3.1. Data is used to receive and manage requests, contact the client, clarify ride time and conditions, calculate the price, provide the service, handle urgent requests and operate the client account.
3.2. Data is also used to confirm e-mail addresses, maintain security, reduce spam, provide client support, handle complaints, meet accounting and legal obligations and improve service quality.
4. Legal basis
4.1. Data related to requests and service provision is processed to perform a contract or to take steps before entering into a contract.
4.2. Processing related to client support, security, abuse prevention, service quality and protection of claims may be based on legitimate interest.
4.3. Where processing is not necessary for the service or a legal obligation, we request the client’s consent where required.
5. E-mail confirmation and notifications
5.1. When an account is created, we send an e-mail confirmation to verify the e-mail address and reduce the risk of using another person’s address.
5.2. Service notifications, such as request confirmation, account confirmation or important information about an order, are not marketing messages. They are necessary for the service to function.
6. Data recipients
6.1. Data may be shared with a driver or cooperation partner only to the extent necessary to arrange the ride and provide the service.
6.2. Data may be processed by technical service providers such as hosting, e-mail service, domain and SSL service, IT maintenance and other partners required for the website and service to operate.
6.3. Data may be provided to public authorities, courts or another competent person where required by law or necessary to protect rights.
7. Publication on the website
7.1. Lost pet announcements, photos and contact details provided by the client for publication may be publicly visible on the website.
7.2. Reviews may be publicly visible together with the client’s name or the name entered by the client. The client should not publish information that they do not want to be publicly visible.
8. Retention periods
8.1. Request and service data is stored for as long as necessary to provide the service, manage client relations, resolve disputes, protect claims and meet legal obligations.
8.2. Client account data is stored until account deletion or until the legal basis for retention ends. A lost pet announcement may be removed after the pet is found, at the client’s request or when the announcement is no longer relevant.
8.3. Information required for accounting or legal obligations is stored for the period required by law.
9. Security
9.1. We use reasonable technical and organisational measures to protect data from unauthorised access, alteration, disclosure or destruction.
9.2. Access to data is limited to persons who need it to provide the service, perform technical maintenance or meet legal obligations.
10. Client rights
10.1. The client has the right to request access to their personal data, correction of inaccurate data, deletion of data, restriction of processing and to object to processing based on legitimate interest.
10.2. Where processing is based on consent, the client may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
10.3. Requests may be sent to LoomadeTakso using the published contact details. We respond within a reasonable time and may request additional information to verify identity.
11. Supervisory authority
11.1. If the client believes that their personal data has been processed unlawfully, they have the right to contact the Estonian Data Protection Inspectorate or another competent data protection authority.
12. Changes to this policy
12.1. We may update this Privacy Policy if the service, data processing, technical solution or legal requirement changes. The current version is published on the website.