Privacy Policy — My Tails
Version 2.0 · In force since 22 July 2026 · Supersedes the May 2026 version · History: mytails.eu/legal/historial
In compliance with the General Data Protection Regulation (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you about the processing of your personal data on the mytails.eu platform.
1. Data controller
| Field | Data |
|---|---|
| Name and surname | Natalia Grishchenko |
| NIF | Z4429651V |
| Address | Av. Carlota Alessandri 234, 29620 Torremolinos, Málaga, Spain |
| hello@mytails.eu | |
| Website | https://mytails.eu |
2. Data Protection Officer (DPO)
In accordance with Article 37 of the GDPR and Article 34 of the LOPDGDD, My Tails is not required to appoint a Data Protection Officer, as it does not carry out large-scale processing of special categories of data or large-scale systematic monitoring activities. Nevertheless, for any query regarding data protection you may contact us at: hello@mytails.eu.
3. Data we collect and its purpose
3.1 Pet owners
| Data | Purpose | Legal basis |
|---|---|---|
| Name, surname, email, phone | Account management and communication | Performance of contract (Art. 6.1.b GDPR) |
| Address | In-home services (House Sitting) | Performance of contract |
| Information about the animal (name, species, breed, age, health) | Adequate provision of the service | Performance of contract |
| Booking history | Booking management and support | Performance of contract |
| Payment data | Payment processing via Stripe | Performance of contract |
| Animal photographs | Animal profile, service reports | Consent (Art. 6.1.a GDPR) |
3.2 Caregivers (sitters)
| Data | Purpose | Legal basis |
|---|---|---|
| Name, surname, email, phone | Account management and communication | Performance of contract |
| Identity document (DNI/NIE/Passport) | Identity verification (KYC) | Legal obligation (DSA Art. 30) |
| CIF/NIF | Invoicing and tax compliance (DAC7) | Legal obligation |
| Bank details (IBAN) | Payments via Stripe Connect | Performance of contract |
| Geolocation (city, neighbourhood) | Display of profile in searches | Performance of contract |
| Profile photographs | Public profile on the platform | Consent |
| Certificates and training | Verification of qualifications | Consent |
3.3 Platform usage data
| Data | Purpose | Legal basis |
|---|---|---|
| IP address, browser type, pages visited | Security and technical operation | Legitimate interest (Art. 6.1.f GDPR) |
| Content of chat messages between owner and caregiver | Provision of the service, support and security (see section 3.4) | Performance of contract and legitimate interest (Art. 6.1.b and 6.1.f GDPR) |
| Analytics cookies | Platform improvement | Consent |
| Marketing cookies | Personalised advertising | Consent |
3.4 Messages in the platform chat
My Tails provides owners and caregivers with an internal chat to coordinate the service. Regarding this chat:
- Messages are retained while the relationship with the platform is active and for the periods indicated in section 6, in order to provide support, resolve disputes (Cancellation Policy, section 6) and prevent fraud.
- Before a booking is confirmed, an automated system detects and hides direct contact details (phone numbers, emails, messaging handles, links and postal addresses) that may appear in messages. This measure has a dual purpose of security and fraud prevention: to protect the parties from contact outside a verified environment and to prevent payment outside the platform, which would deprive the owner of the refund, dispute and support guarantees. Once the booking is confirmed, the contact details needed to provide the service become available to both parties.
- My Tails does not systematically read the content of conversations. Human access to a specific message occurs only when necessary to handle a complaint, resolve a dispute or investigate fraudulent use or use contrary to these terms.
- Legal basis: performance of contract (Art. 6.1.b GDPR) and legitimate interest in security and fraud prevention (Art. 6.1.f GDPR). The details of this measure are set out in the General Terms of Use.
4. Disclosure of data to third parties
Your data may be shared with the following third parties:
| Third party | Purpose | Country |
|---|---|---|
| Stripe | Payment processing | USA (standard contractual clauses) |
| Google Analytics | Website usage analysis | USA (standard contractual clauses) |
| PostHog | Product usage analysis | USA (standard contractual clauses) |
| Tax Agency (AEAT) | DAC7 reporting of caregivers' income | Spain |
| Hetzner Cloud | Data hosting | Germany (EU) |
| Resend | Sending of transactional emails | USA — AWS us-east-1 (standard contractual clauses, Art. 46 GDPR) |
⚠️ DAC7: In compliance with Directive (EU) 2021/514, My Tails is required to report annually to the State Tax Administration Agency, via form 238, the caregiver's identifying data (name, address, tax identification number, date of birth and IBAN), the amount received and the number of services provided in each calendar quarter, as well as the fees withheld by the platform.
The "excluded seller" exception in Annex V, Section I.B.4 of the Directive applies exclusively to the sale of goods. Animal care services are a personal-services activity, for which there is no minimum threshold: reporting is made for every caregiver who receives any amount through the platform during the calendar year.
Legal basis: compliance with a legal obligation (Art. 6.1.c GDPR).
My Tails does not sell personal data to third parties.
5. International data transfers
Some providers (Stripe, Google) are located outside the European Economic Area. These transfers are carried out with adequate safeguards through Standard Contractual Clauses (SCC) approved by the European Commission.
6. Data retention periods
| Category | Period | Basis |
|---|---|---|
| Active account | While the account is active | Contract |
| Deleted account | 3 years | Civil limitation period |
| Booking data | 5 years | Commercial Code |
| Payment data | 5 years | Anti-Money Laundering Act |
| Analytics cookies | 13 months | AEPD recommendation |
| Marketing communications | Until withdrawal of consent | GDPR |
| Logs and activity records | 12 months | LSSI-CE Art. 12 |
| Complaint data | 5 years | TRLGDCU |
| Caregiver data (DAC7) | 5 years | DAC7 Directive |
7. Users' rights
Under the GDPR, you have the right to:
- Access — know what data we process about you
- Rectification — correct inaccurate or incomplete data
- Erasure ("right to be forgotten") — request the deletion of your data
- Restriction — restrict processing in certain circumstances
- Portability — receive your data in a structured, readable format
- Objection — object to processing based on legitimate interest or direct marketing
- Withdrawal of consent — at any time, without retroactive effect
How to exercise your rights:
Send your request to: hello@mytails.eu
We will respond within a maximum of 30 days.
8. Right to lodge a complaint
If you consider that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
AEPD — Spanish Data Protection Agency
🔗 www.aepd.es
📧 internacional@aepd.es
9. Automated decisions and use of artificial intelligence
My Tails uses automated systems for:
- Recommendation and ranking of caregivers — the order in which profiles appear in search results is determined by automated criteria (proximity, availability, ratings, response rate, cancellation rate)
The order in which profiles appear is determined by automated criteria. This processing may significantly affect the volume of bookings a Sitter receives. The Sitter has the right to obtain human intervention, to express their point of view and to contest the outcome by writing to hello@mytails.eu; My Tails will respond with a statement of reasons within a maximum of 15 working days.
My Tails does not make decisions based solely on automated processing that produce legal effects: the suspension or removal of a profile always requires prior human review.
In compliance with the EU AI Act (Regulation EU 2024/1689), when you interact with AI-based features you will be informed of this in the interface itself.
10. Identity verification (KYC)
Identity verification and compliance with Know-Your-Customer (KYC) obligations are carried out by Stripe Payments Europe, Ltd. within its connected-account onboarding process (Stripe Connect Express). The Sitter provides their documentation directly to Stripe.
My Tails does not receive, process or store copies of identity documents, facial images or biometric data of any kind, and only receives from Stripe the result of the verification and the account status.
If the verification carried out by Stripe returns a negative result, the Sitter may exercise their rights under Article 22 of the GDPR directly with Stripe in accordance with its privacy policy (https://stripe.com/en/privacy) and, in any case, request assistance from My Tails at: hello@mytails.eu.
11. Data security
My Tails applies technical and organisational measures to protect your data:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of data at rest
- Restricted access to personal data by the team
- Servers located in the European Union (Hetzner Cloud, Germany)
- Regular security reviews
12. Minors
My Tails' services are aimed at persons over 18 years of age. We do not knowingly collect data from minors. If we detect that data from a minor has been collected without parental consent, we will proceed to its immediate deletion.
13. Changes to this policy
My Tails may update this Privacy Policy. We will notify you of significant changes by email or through a prominent notice on the platform at least 15 days in advance.
14. Contact
For any query about this Privacy Policy:
📧 hello@mytails.eu
Privacy Policy — My Tails. Version 2.0 · In force since 22 July 2026 · Supersedes the May 2026 version · History: mytails.eu/legal/historial.