Privacy Policy

Last updated: 2026-04-01

1. Controller

The controller for data processing on this website within the meaning of the GDPR is:
Pawaro
, Deutschland
Email: info@pawaro.de

2. Data we process

We process the following categories of personal data:

• Account data (name, email, encrypted password) for registration as a provider
• Session & technical data (IP address, user agent) for security and abuse prevention
• Billing data (processed via Stripe — we do not store full payment card data)
• Content you enter as provider (service descriptions, opening hours, customers, dogs) is stored in your tenant space

3. Legal bases

Art. 6 (1) (b) GDPR — performance of the contract (SaaS account); Art. 6 (1) (c) GDPR — legal obligations (tax, accounting); Art. 6 (1) (f) GDPR — legitimate interest (security, abuse prevention).

4. Processors & third parties

• Stripe Payments Europe, Ltd. — Payment processing (see Stripe privacy policy).
• Our hosting provider — Hosting in the EU.

5. Cookies

We only use technically necessary cookies (session, CSRF token, language preference). No tracking, no advertising cookies.

6. Retention periods

Account data is retained for the duration of the contract plus legal retention periods (typically 6–10 years for invoices). Logs are deleted after at most 90 days.

7. Your rights

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). You may lodge a complaint with a supervisory authority.

Contact for data protection matters: info@pawaro.de

8. Relationship between platform and providers

For data of end customers of providers (sitters / trainers), the respective provider is controller. Pawaro acts as processor pursuant to Art. 28 GDPR. A data processing agreement is part of the platform terms.