Privacy Policy
Last updated: February 10, 2026
Dogomania ("we", "us", "our") operates the dogomania.com and dogomania.pl websites and the Dogomania mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our platform, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Data Controller
The data controller responsible for your personal data is:
2. Data We Collect
Account Data
- Email address
- Username
- First and last name
- Country of residence
- Password (stored as a secure hash, never in plain text)
Breeder Profile Data
- Kennel name
- Address (street, city, postal code, country)
- Contact phone number
- Contact email address
- Website URL
Reservation Data
- Customer full name
- Customer email address
- Customer phone number
- Customer address
- Payment information (deposit amount, total paid)
Technical Data
- IP address
- Browser type and version (User-Agent)
- Cookie data
- Preferred language
3. Purposes of Processing
- Account creation and management
- Providing platform services (breed database, dog profiles, articles)
- Operating the breeder directory and kennel profiles
- Processing puppy reservations and deposits
- Communicating with you about your account and our services
- Ensuring security and preventing fraud (rate limiting, audit logs)
- Complying with legal obligations
4. Legal Basis for Processing
Consent (Art. 6(1)(a) GDPR)
For optional cookies (analytics, marketing), newsletter subscriptions, and marketing communications. You may withdraw consent at any time.
Performance of a Contract (Art. 6(1)(b) GDPR)
For account creation, service provision, breeder profiles, and processing reservations.
Legitimate Interest (Art. 6(1)(f) GDPR)
For security measures, fraud prevention, service improvement, and basic analytics to ensure platform stability.
Legal Obligation (Art. 6(1)(c) GDPR)
For compliance with tax regulations, law enforcement requests, and other legal requirements.
5. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of Access (Art. 15) – You can request a copy of all personal data we hold about you.
- Right to Rectification (Art. 16) – You can request correction of inaccurate or incomplete personal data.
- Right to Erasure (Art. 17) – You can request deletion of your personal data ("right to be forgotten").
- Right to Restriction (Art. 18) – You can request that we limit how we process your data.
- Right to Data Portability (Art. 20) – You can request your data in a structured, machine-readable format.
- Right to Object (Art. 21) – You can object to the processing of your data based on legitimate interest.
- Right to Withdraw Consent (Art. 7) – You can withdraw consent at any time without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with a supervisory authority. For users in Poland, this is the President of the Personal Data Protection Office (UODO).
6. Cookies
We use cookies to ensure the proper functioning of our platform. Cookies are small text files stored on your device.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| dogomania-token | User authentication (JWT token) | 7 days | Essential |
| i18n_redirected | Language preference storage | Session | Essential |
| csrf_token | Cross-site request forgery protection | Session | Essential |
| cookie_consent | Cookie consent preferences | 1 year | Essential |
For more information about cookies and to manage your preferences, visit our Cookie Settings page.
7. Data Retention
- Account data: Retained for the duration of your account. Deleted within 30 days of account deletion request.
- Breeder profile data: Retained for the duration of the breeder profile. Deleted upon profile removal.
- Reservation data: Retained for 5 years after the transaction for legal and tax compliance.
- Audit logs and technical data: Retained for 12 months, then anonymized or deleted.
- Data required by law: Retained for the period required by applicable legislation.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- TLS 1.2/1.3 encryption for all data in transit
- Bcrypt password hashing (cost factor 12)
- Role-based access control and ownership verification
- Rate limiting and security monitoring
9. Third-Party Services
We may use third-party services for analytics, payment processing, and content delivery. Each third-party processor is bound by a Data Processing Agreement (DPA) and is required to comply with GDPR. We will not sell your personal data to any third party.
10. International Data Transfers
Your data is primarily stored within the European Union. If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or an adequacy decision.
11. Children's Privacy
Our platform is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform and, where appropriate, by email. The date of the last update is shown at the top of this page.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: [email protected]