Legal
Privacy
Which data I process when you visit this website or write to me, what for, who receives it and what rights you have.
This is a translation for your convenience. The German version is the binding one.
Personal data is any information relating to an identified or identifiable person. This policy follows the Swiss Federal Act on Data Protection and takes the EU General Data Protection Regulation into account where it applies. It describes what actually happens on this website, not what might be planned one day.
1. Who is responsible
Responsible for the processing described here is:
Jessica Pedraita, HakunaMatata DogsMeinradstrasse 5
8006 Zürich, Switzerland
Email: hakunamatata-dogs@gmx.ch
Phone: +41 79 958 50 22
No data protection advisor has been appointed, as there is no obligation to do so. Please send any questions about data protection to the address above.
2. Which data I process
When you visit the website
Every time a page is requested, technical information is generated: your IP address, the time, the requested address, the page you came from, and details about your browser and device. What of this is recorded is set out in section 3.
When you send the contact form
I process the details you enter in the form:
- your name and email address
- your phone number, if you give it
- your dog's name, breed and age, as far as given
- what your request is about and on which days, and your message
- the time at which you confirmed that you have read this policy
The request is stored in a database and reported to me by email. If you join the waiting list, that is a request like any other, only marked as such. If you email or call me directly, I process the details you give me in doing so.
When care is arranged
I then process what I need for the care: your contact details, information about your dog such as the vaccination record, feeding, medication and special needs, the veterinary practice of your choice together with the authorisation for emergencies, and an emergency number.
3. Cookies, tracking and logs
No advertising, no embedded services
I use no advertising tools and no third-party analytics services. No third-party services are embedded in the pages: fonts, the map on the contact page and the visitor statistics come exclusively from my own server. When you visit, your IP address therefore reaches neither Google nor any other provider. That is also why there is no cookie banner.
Instagram, Google Maps and the Google reviews are only linked. Only when you click such a link do you leave this website, and the privacy policy of that provider applies.
Visitor statistics without cookies
To see how many people visit the website and what interests them, I count visits with Umami. The statistics run on my own server, set no cookies and pass nothing on to third parties. Recorded are the page you open, the page you came from, country, region and city, browser, operating system, device type, screen size and language, as well as clicks on the phone number, email address, Instagram and Google Maps.
Your IP address is only used briefly to determine your approximate location and is not stored. Together with the browser information it produces an identifier that is formed anew every day. This lets the page views of one day be counted as one visit, without you being recognised over several days or the statistics linking you to a person. If you have switched on “Do Not Track” in your browser, you are not counted.
One cookie, only after sending
When you send the contact form, the site sets a single cookie. It contains your first name, so the confirmation can address you by name, and deletes itself after ten minutes. Without sending, no cookie is created.
While you fill in the form, your browser keeps your entries in its session storage. That way they are still there if you open another page in between or the page reloads. This storage belongs to this one tab only: it is emptied as soon as you send the request or close the tab. Your entries stay in your browser, only the request you send reaches me.
Protection against misuse
So that nobody can misuse the form in large numbers, the server keeps your IP address in memory for ten minutes when you send it and allows at most five requests during that time. The address is not stored and is discarded after ten minutes.
Web server log
The web server records requests in order to detect faults and misuse: the time, the requested address, the status, the referring page, the browser information and a shortened IP address. The last digits of the address are removed before writing, so that no entry can be traced to a person. The log is overwritten after 30 days at the latest and is not combined with other data.
4. What I process the data for
- to answer your request and arrange a first meeting
- to plan and provide day care, training or Reiki
- to act quickly and correctly in an emergency
- to run the website securely and prevent misuse
- to see how the website is used and to improve it
- to meet legal obligations
I process personal data in good faith, proportionately and only for the purpose for which you gave it to me. Where the General Data Protection Regulation applies, I rely on taking steps towards and performing a contract with you (Art. 6(1)(b)), on my legitimate interest in running the website securely and in statistics without personal reference (point f) and on legal obligations (point c).
5. Who receives the data
I do not sell personal data and do not pass it on for advertising. To run the business I work with service providers who may process the data only on my behalf:
- Contabo GmbH, Germany: the server on which the website, the database with the requests and the visitor statistics run.
- 1&1 Mail & Media GmbH (GMX), Germany: my email mailbox and the sending of the notification when a request comes in.
- Technical maintenance of the website: the person who builds and maintains the website for me has access to the server and database for this work. They are bound to confidentiality and use the data for no other purpose.
In an emergency during care, I pass the necessary details on to the agreed veterinary practice. Otherwise I only disclose personal data where I am legally obliged to.
Disclosure abroad
The website, the requests and my email mailbox are with providers in Germany. The Swiss Federal Council recognises Germany as providing an adequate level of data protection.
6. How long I keep the data
- Requests from the contact form: twelve months, after which they are deleted automatically.
- Details relating to care: for its duration, then for as long as legal retention obligations require, for example for invoices.
- Web server log: 30 days at most.
- Visitor statistics: 24 months, after which they are deleted automatically.
- The cookie after sending: ten minutes.
7. Security
The connection to the website is encrypted throughout. The database with the requests cannot be reached from outside. The website has a small admin area with a login where I set whether day care is fully booked or closed for holidays. The requests and other personal data cannot be reached through it. I receive every request as a message in my email mailbox. Apart from me, only the technical maintenance has access to the server and database, see section 5. Nobody can promise complete protection.
8. Do you have to give me data?
No. You can visit the website without giving any details. Without a name and email address, however, I cannot reply to a request, and without the details about your dog I cannot look after it.
9. Profiling and automated decisions
I do not create profiles and do not make decisions based solely on automated processing.
10. Your rights
You can ask at any time for information about your data, for its correction or deletion, for it to be handed over or transferred. You can object to processing and withdraw consent with effect for the future. To do so, write to me at hakunamatata-dogs@gmx.ch. To make sure the request comes from you, I may ask for proof.
You also have the right to complain to a supervisory authority: in Switzerland to the Federal Data Protection and Information Commissioner (FDPIC), in the EEA to the authority responsible for you.
11. Changes
I update this policy when something about the website changes that affects your data. The version published here applies. Details about the provider are in the legal notice.
Last updated: 7 October 2026