Privacy Policy — Version 1.3 | Last updated: 09/08/2026
NUMAPET, S.L., with NIF B22551527, VAT ESB22551527 and registered address at C/ Sa Merla, 10, 07769 Ciutadella de Menorca, Illes Balears, Spain, owner of the website www.numapet.com, informs users, visitors, professional entities, shelters, veterinary clinics, trainers, event organisers, advertisers, collaborators and other data subjects about the processing of their personal data under Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), Law 34/2002 (LSSI-CE) and other applicable regulations. This policy should be read together with the Legal Notice, Cookie Policy and Professional Entity Conditions.
- 1
Data controller
The data controller for personal data processed through NumaPet is:
- Controller: NUMAPET, S.L.
- NIF: B22551527.
- VAT: ESB22551527.
- Registered and tax address: C/ Sa Merla, 10, 07769 Ciutadella de Menorca, Illes Balears, Spain.
- Preferred postal address for ordinary communications and written exercise of rights: P.O. Box 82, 07760 Ciutadella de Menorca, Illes Balears, Spain.
- Data protection contact email: info@numapet.com.
- Website: www.numapet.com.
NumaPet operates as a digital platform and has no premises open to the public at the registered address. For the exercise of data protection rights, it is recommended to use the email address indicated or the preferred postal address. This is without prejudice to any notifications that must or may legally be made at the registered address of the company.
As of this version, NUMAPET, S.L. has not appointed a Data Protection Officer as no legal obligation to do so has been initially identified. Should the platform's activities, the volume of processing, the nature of the data or applicable regulations make it necessary in the future, NumaPet will update this policy and inform of the relevant contact details.
- 2
Who this policy applies to
This policy applies, among others, to the following persons or entities when they interact with NumaPet:
Type of data subject Examples Visitors People who browse the website, view listings, articles, guides, directories or events. Registered users People who create an account, save favourites, submit requests, messages, forms, comments or preferences. Users interested in adoptions or services People who contact shelters, clinics, trainers, organisers or entities listed on NumaPet. Shelters and rescue organisations Representatives, employees or authorised persons claiming, validating or managing listings and published animals. Veterinary clinics and professionals Representatives, owners, marketing, administrative or professional contact persons. Trainers, universities and academies Contact persons for publishing training, events, courses, workshops or professional information. Event organisers Those responsible for fairs, congresses, exhibitions, activities, conferences, adoption or animal welfare events. Advertisers or collaborators Entities that contract or request featured, sponsored, advertising or higher-visibility services in the future. People reporting incidents People using the Good Practices Channel, correction forms, removal requests or illegal content notifications. - 3
Categories of data NumaPet may process
Depending on how the platform is used, NumaPet may process the following categories of data:
Category Examples Identification and contact data Name, surname, email, phone, country, locality, language and entity represented. Account data Username, hashed password, registration date, preferences, acceptance of conditions, language and accepted legal version. Professional data Role, entity, professional website, corporate email, published phone, professional address, tax identification or registration data when necessary. Data published in listings Professional or corporate information visible in directories, shelter, clinic, trainer, organiser, event, course or related content listings. Requests and forms Messages sent to NumaPet or entities, information, adoption, contact, correction, removal or listing claim requests. Content and files Texts, images, logos, posters, animal or centre photographs, documents, links, promotional or informational materials submitted by users or entities. Browsing data and cookies IP address, online identifiers, device, browser, pages visited, cookie preferences, analytics and technical events. Commercial communications Email, preferences, consent, registration and unsubscription dates, campaign or newsletter interactions. Future paid services Billing data, contracted plans, metrics, campaigns, payments, incidents, commercial or administrative communications. Good Practices Channel Reporter's data, affected URL or content, reason, supporting documentation, moderation decisions and follow-up. - 4
Purposes and legal bases
NumaPet will process data for the purposes and legal bases applicable in each case:
Purpose Typical data Legal basis Website operation Technical data, IP, security, logs and necessary cookies. Legitimate interest, service provision and platform security. User or professional account Name, email, hashed password, entity, role and acceptances. Contract performance or pre-contractual measures requested by the data subject. Professional listing management Entity data, professional contact, website, location, services and published content. Legitimate interest, consent, performance of accepted conditions or data provided by the entity. Unclaimed listings Public and factual professional data of entities, events or activities. Legitimate interest in creating a professional informational directory, with the possibility of objection, correction or removal. Contact, adoption or information requests Form data, message, animal or entity of interest. Consent, pre-contractual measures requested by the user or legitimate interest in processing the request. Communication with recipient entities Data needed to forward the request to a shelter, clinic, trainer or organiser. User consent or performance of the request made by the user. Newsletter and commercial communications Email, preferences, consent and unsubscription history. Consent, unless a legal exception applies for similar communications to existing clients or entities. Featured services, advertising and future paid plans Entity data, billing, campaign, metrics and contracted conditions. Contract performance, legal obligation and legitimate interest in service measurement and control. Good Practices Channel, correction, removal and notices Reporter's data, affected content, evidence and decisions. Legal obligation, legitimate interest and, where applicable, consent. Legal compliance and rights defence Communications, contracts, records, logs, invoices and claims. Legal obligation and legitimate interest in rights defence and abuse prevention. Analytics, improvement and security Browsing data, performance, errors and aggregate metrics. Consent where required or legitimate interest if data is minimised and consent is not needed. - 5
Unclaimed public listings and professional data
NumaPet may create basic informational listings of entities, professionals, shelters, clinics, trainers, universities, academies, event organisers or animal sector companies from public information, official sources, corporate websites, professional directories, registries, public publications or information disseminated by the entity itself.
NumaPet will limit publication to professional, corporate and factual data necessary to identify the entity or event, such as name, city, country, official website, published corporate email, professional phone, category, general activity, event date and location or a summary written by NumaPet.
Publication of an unclaimed basic listing does not imply a commercial relationship, recommendation, sponsorship, collaboration or validation by the entity. The affected entity may request correction, update, claiming, objection or removal through the available channels.
Source of the data
Where professional data has not been provided directly by the data subject, it may originate from publicly accessible sources, corporate websites, professional or official profiles, public registries, professional directories, publications made by the entity itself or other legitimately accessible sources. NumaPet will endeavour to limit processing to the professional, corporate and factual data necessary for the informational purpose of the directory and will provide the corresponding mechanisms for information, objection, rectification or removal where applicable.
- 6
Content, photographs, animals, centres and identifiable persons
Photographs of animals or facilities do not necessarily constitute personal data, unless they allow direct or indirect identification of a person, include personal metadata or show identifiable persons.
When an entity or user submits images, logos, posters, texts, documents, photographs of animals, centres, facilities, employees, volunteers, students, attendees, adopters, clients or third parties, they are responsible for holding the necessary rights, licences, permissions and authorisations for publication on NumaPet.
NumaPet may remove, block or request clarification on any content when there are reasonable doubts about privacy, image rights, intellectual property, authorisation of use, minor protection, animal welfare, accuracy or legality.
- 7
Registered users and account cancellation
If NumaPet allows account creation, it will process the data necessary to manage registration, authentication, preferences, requests, favourites, communications, acceptance of conditions, security and account-related functionalities.
Users may request account cancellation. Cancellation will not prevent NumaPet from retaining certain data during the periods necessary to meet legal responsibilities, resolve incidents, evidence acceptances, fulfil contractual obligations or defend rights.
- 8
Requests to shelters, clinics, trainers or organisers
When a user requests to contact an entity listed on NumaPet, the necessary form data may be communicated to the recipient entity to process the request. The recipient entity will act, unless specifically agreed otherwise, as an independent controller with respect to the data it receives and must comply with its own data protection regulations.
NumaPet will endeavour to collect only the data necessary for each request and avoid excessive data, especially health data, minor data, sensitive financial information or information not needed for initial contact.
- 9
Operational and commercial communications
NumaPet may send operational communications necessary to manage accounts, requests, incidents, condition changes, security, claims, listings, contracted services or existing entity relationships.
Commercial communications, newsletters, promotions, information about featured services, campaigns, advertising or commercial news will only be sent when a valid legal basis exists, prior consent where required or applicable legal authorisation. A simple, free mechanism to unsubscribe or object will always be provided.
The fact that an entity appears in a basic listing or directory of NumaPet does not in itself imply acceptance of periodic commercial communications.
- 10
Cookies, analytics, advertising and similar technologies
NumaPet may use technically necessary cookies for website operation and, with the appropriate consent where required, analytical, personalisation, advertising or tracking cookies. Detailed information is governed by NumaPet's Cookie Policy and cookie configuration panel.
If NumaPet uses remarketing tools, advertising measurement, pixels, maps, embedded videos, chatbots, advanced analytics or third-party tools in the future, it will inform users and obtain the necessary consents when regulations require it.
- 11
Future paid services, metrics and advertising
If NumaPet activates paid profiles, featured or sponsored services, advertising, campaigns, greater visibility, metrics, premium plans or service contracting, it may process data necessary to manage contracting, billing, payment, support, metrics, campaign performance, fraud control, customer service and legal compliance.
Featured, sponsored or advertising content will be clearly identified where applicable. Applicable commercial conditions will govern the contracted service, duration, price, metrics, cancellations, billing and taxes.
- 12
Recipients and providers
NumaPet may communicate personal data to:
- Recipient entities when users request to contact them through the platform.
- Technology providers offering hosting, maintenance, email, forms, analytics, CRM, security, automation, storage, backup or support services, acting as data processors where applicable.
- Email marketing or communications providers, always in accordance with applicable regulations and the data subject's preferences.
- Payment gateways, banks, advisors, accountants or billing providers when paid services exist.
- Public authorities, competent bodies, courts, registries, administrations or authorised third parties when there is a legal obligation, valid request or need to defend rights.
- Legal, technical or administrative advisors when necessary for rights defence, regulatory compliance or incident management.
NumaPet does not sell personal data to third parties.
- 13
International transfers
NumaPet will prioritise providers located in the European Economic Area or in countries with adequate safeguards. If providers implying international data transfers outside the EEA are used, NumaPet will apply the mechanisms and safeguards required by the GDPR, such as adequacy decisions, standard contractual clauses or other valid instruments.
- 14
Retention periods
Type of data Indicative period Account data While the account is active and subsequently for the periods necessary to meet legal or contractual responsibilities. Requests and forms For the time needed to process the request and thereafter for applicable liability periods. Professional data in listings While the listing is relevant, public or necessary, unless objection, correction or removal is requested where applicable. Newsletter and marketing Until unsubscription, withdrawal of consent or objection, retaining minimum proof of unsubscription to prevent future sends. Billing and paid services For the applicable tax, accounting and legal periods. Good Practices Channel and claims For the time needed to process the incident and evidence the action taken. Security logs For periods proportionate to the security, abuse prevention and legal compliance purposes. Cookies and analytics According to the periods indicated in the Cookie Policy and each tool's configuration. - 15
Data subject rights
Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent where applicable.
To exercise these rights, they may write to info@numapet.com with the subject line "Data Protection" or by post to: P.O. Box 82, 07760 Ciutadella de Menorca, Illes Balears, Spain. NumaPet may request additional information to verify the identity of the applicant when necessary.
Where processing is based on consent, the data subject may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Where processing is based on legitimate interest, the data subject may object in the terms provided by applicable law.
Data subjects may also lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority.
- 16
Right to object and removal regarding unclaimed professional listings
Entities, professionals or contact persons appearing in unclaimed professional listings may request the correction, update, restriction, objection or removal of professional data where applicable. NumaPet will assess the request proportionately and may require reasonable proof of representation or ownership to prevent unauthorised actions.
- 17
Children's data
NumaPet does not intentionally collect children's data unless a specific service requires it and an adequate legal basis exists. When consent is the legal basis in Spain, consent from children under 14 requires the intervention of their legal representatives.
In content submitted by entities or users, images or data of minors must not be uploaded without the necessary authorisations and in compliance with applicable law.
- 18
Security
NumaPet will apply appropriate technical and organisational measures to ensure the confidentiality, integrity, availability and resilience of personal data, taking into account the state of the art, implementation costs, the nature of the data, the scope of processing and the risks to individuals' rights and freedoms.
Measures may include access controls, password encryption or hashing, backups, condition acceptance records, data minimisation, provider review, permission controls, incident logs and response procedures for requests or notices.
- 19
Technical tools, automation and artificial intelligence
NumaPet may use technical tools for classification, organisation, search, initial moderation, quality analysis, error detection, translation, draft generation or internal support. When these tools involve personal data processing, appropriate safeguards will be applied and unnecessary personal data will not be introduced.
If automated decisions with legal or similarly significant effects on users or entities are adopted in the future, NumaPet will specifically inform and enable the safeguards provided by applicable regulations.
The use of these tools does not exempt NumaPet from applying the human oversight, transparency measures and information obligations required under the applicable artificial intelligence regulations.
- 20
Languages and legal versions
NumaPet may offer this policy and other legal texts in multiple languages. In the initial phase, the Spanish version is the primary version. If NumaPet actively targets users or entities in other countries, it may offer versions in English or other languages to facilitate clear and comprehensible information.
In relationships between professionals, unless otherwise agreed, the Spanish version may prevail in case of discrepancy between translations. In relationships with consumers, this does not limit the mandatory rights to which they are entitled under applicable law.
When a user or entity accepts conditions on the platform, NumaPet may record the version, language, date, time, IP, browser, acceptance text and technical fingerprint of the accepted document to evidence traceability.
- 21
Changes to this policy
NumaPet may modify this Privacy Policy to adapt to regulatory, technical, operational or commercial changes. The current version is the one published at any given time on the platform. When changes are relevant to registered users or entities, NumaPet may communicate them by reasonable means.
See also: Legal Notice · Cookie Policy