Loading…
Datenschutzerklärung — Last updated: October 2026
This English version is provided for convenience. The German version (Datenschutzerklärung) is the legally binding one.
Harry's Pet Sitting Giulianna Mandolesi Glemsweg 8, 71065 Sindelfingen, Germany Email: giulianna.mandolesi@petsitting.fun Phone: +49 176 21840418
We are a small business and have not appointed a data protection officer, as the law does not require one. If you have any questions about your data, please contact us directly.
Depending on how you use our services, we process:
Health information about your pets is not a special category of personal data under Art. 9 GDPR. We still treat it as confidential.
We need your contact details and your pets' details for a booking — without them we cannot look after your pets safely. We only need details about your home if we care for your pets there.
Where we rely on legitimate interests, you can object (section 15).
Your data is only seen by us and — where needed for their visits — our pet sitters. We also use the providers below. Providers that process data on our behalf are bound by contract to our instructions (Art. 28 GDPR); for Vercel, Resend and Hostinger the data processing agreement is part of their terms. This does not apply to Google Calendar (see below).
Vercel Inc.
Neon Inc.
Google Ireland Limited – Google Maps Platform
Google – Google Calendar
Google – Gemini API
Google – Analytics and Ads
Resend, Inc.
Hostinger
Open-Meteo
The following act as independent controllers:
Some providers are based in the USA or may transfer data there (Vercel, Neon, Resend, Google). For companies certified under the EU-US Data Privacy Framework, the European Commission has found that the level of data protection is adequate (Art. 45 GDPR). In addition, or where a provider is not certified, we rely on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can ask us for a copy of these safeguards.
While we look after your pets, we send you short updates. To make this quicker, our system can create a text draft with Google Gemini. If the service is not available, or you have opted out of AI drafts, the draft is put together from text templates without AI, and nothing is sent to Google.
Before anything goes to Gemini, we remove every name of a person — including yours — and replace it with a placeholder. Our own system only puts the real names back after the reply. We send only:
We do not send names of people, phone numbers, email addresses, addresses or coordinates, medication or allergy details, payment details, or any photos or videos. We use Gemini as a paid service; Google processes the content as our processor under its Data Processing Addendum and, under its terms, does not use it to improve its own products.
We read every draft, correct it where needed, and only then send it to you ourselves. The AI only words the text; it makes no decisions about you (no automated decision-making under Art. 22 GDPR). The legal basis is our legitimate interest in quick and reliable communication while we care for your pets (Art. 6(1)(f) GDPR).
You can object at any time (section 15). A short message is enough: we switch AI drafts off for you, and your updates are then written from text templates only.
For the weather, we ask the weather service Open-Meteo for the weather where the care takes place. If we care for your pets at your home, that is the area around your address — the coordinates are first rounded to about one kilometre — otherwise our own location. No names or other details are sent with the coordinates.
None of these services loads before you consent: neither the Google tag nor Vercel's measurement is requested, and Google receives no data through our website.
Google Analytics 4: with your consent, we use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to see how our website is used — for example which pages are visited and where visitors come from. According to Google, Google Analytics 4 does not store IP addresses. Google Analytics keeps event data for 2 months and user-level data for 14 months. We have enabled Google signals: if you are signed in to Google and allow personalised ads, Google can link your visits across devices — again only after your consent. Data may be transferred to Google LLC in the USA.
Google Ads conversion tracking: when you send a request and you have consented, we tell Google that a request came in and whether it was a booking request or a meet & greet request — with a random reference number, without your name or contact details. This shows us whether our ads work.
Confirmed bookings: to see which ads lead to actual bookings, with your consent we store, together with your request, the identifier of the Google Analytics cookie (_ga) and — if you came via a Google ad — the ad's click identifier (gclid, gbraid or wbraid). When we confirm your booking, our server sends Google Analytics, once: that cookie identifier, the booking number, the booking value in euros and the type of service. Your name, email address, phone number and address are not sent. Without consent none of this is stored or sent. We delete the stored identifiers together with your request or booking (see the section on storage periods). Withdrawing consent applies to the future; on request we will also delete the stored identifiers earlier.
Vercel Web Analytics and Speed Insights: with your consent, our host counts, without cookies, which pages are viewed and how quickly they load. Visitors are not recognised across days or websites.
The legal basis in each case is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). If you withdraw it, we reload the page so that none of these services keeps running, and delete the Google cookies.
Whenever you open a page, our host Vercel processes technically necessary data: IP address, date and time, address requested, amount of data transferred, referring page, browser and operating system. This is needed to deliver the website and protect it from misuse (Art. 6(1)(f) GDPR). The server functions run in Frankfurt am Main. Logs are kept only for a limited time and are not combined with other data. All connections are encrypted (HTTPS).
In the customer portal you can see your bookings, pets, invoices and updates and keep your details up to date. To sign in, you enter your phone number and answer a security question about one of your pets. To stop too many sign-in attempts, we briefly use your IP address in the server's memory; it is not stored for this. After you sign in, a session cookie keeps you signed in.
Documents, vaccination passport pages and photos of your home are kept in non-public storage and are only shown to signed-in people who are allowed to see them.
The parking map in the customer portal only loads when you click “Load map (Google Maps)”; until then nothing is requested from Google. After the click, Google receives your IP address, browser details and what you do on the map; the map also loads fonts from Google's servers. By clicking, you consent to this (Art. 6(1)(a) GDPR, § 25(1) TDDDG); it applies until the page is reloaded. You can also describe your parking spot without the map or show it with a photo.
Our team signs in to the admin area with their Google account. Google then sends us the team member's name, email address and profile picture.
We receive and send email through our mailbox at Hostinger. So that we can handle requests and invoices reliably, emails from this mailbox are copied into our admin system and matched to customers. We send invoices by email or as a file on WhatsApp.
We use WhatsApp through the app on our phone (section 5). If you call us, we use your number and what you tell us to answer you.
On the home page we show reviews customers have left for us on Google. Our server fetches them through the Google Places API and stores them. We show the first name and the initial of the surname, the stars, the text and the Google profile picture. The profile pictures are delivered by our own server; your browser does not connect to Google for them. If the name matches one of our customers, we link the review to that customer internally (Art. 6(1)(f) GDPR).
You have the right to:
Right to object: where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. We will then stop, unless we have compelling legitimate grounds or need the data to establish, exercise or defend legal claims.
Our supervisory authority: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de. You can also contact any other supervisory authority.
A short message to giulianna.mandolesi@petsitting.fun is all it takes.
We update this policy when our services, the providers we use or the law change. The version published here applies. Last updated: October 2026.