This document is an informative translation of the Hungarian original. In case of any discrepancy, the Hungarian version prevails.

Pet Owner Privacy Notice

Effective date: 13 July 2026

Important: This Privacy Notice concerns the processing of the personal data of owners of pets (Pet Owners) who use the PetMetic pet owner portal. The processing of data relating to grooming businesses (subscribers) is described in the B2B Privacy Notice.

1. General information

1.1 Details of the data controller (Operator)

  • Company name: Happy Dev Solutions Kft. (hereinafter: the Operator)
  • Registered office: 1202 Budapest, Brassó utca 4.
  • Company registration number: 01-09-387525
  • Tax number: 27183854-2-43
  • Email: info@petmetic.hu
  • Data protection contact: info@petmetic.hu

1.2 Legal background

This Privacy Notice has been prepared on the basis of the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian data protection legislation (in particular the Hungarian Act on the Right to Informational Self-Determination and on Freedom of Information (Infotv.)).

1.3 Scope

This Privacy Notice applies to the personal data processed in the course of the Pet Owner's use of the PetMetic pet owner portal (petmetic.hu).

2. Identity and role of the data controller (Operator and Salon)

The pet owner portal is an intermediary platform; therefore, with regard to personal data, two separate roles must be distinguished:

2.1 The Operator as an independent data controller (with regard to the platform account)

With regard to the data relating to your pet owner portal account (registration, login, social login, the account profile spanning multiple salons, and the operation, security and marketing of the portal), the Operator is the independent data controller (controller). This Privacy Notice applies in full to this processing.

2.2 The Salon as data controller, the Operator as data processor (with regard to the data generated at the salon)

When you book an appointment with a particular Salon and your client, pet and booking data are generated there, the Salon is the data controller (controller) with regard to this data, and the Operator acts as a data processor (processor), on the basis of the data processing agreement concluded with the Salon and in accordance with the Salon's instructions.

This means that in data protection matters concerning your client data generated at a given salon, you may turn primarily to the Salon concerned; in such cases, the Operator acts on behalf of and on the instructions of the Salon.

3. Scope of the personal data processed

3.1 Data processed during account registration

  • Name (last name and first name)
  • Email address (for login and communication)
  • Phone number (for booking and contact purposes)
  • Password (exclusively in encrypted, irreversible form)
  • Language and display settings

3.2 Data processed when logging in with an external account (social login)

When you log in with a Google or Facebook account, we receive from the provider, with your consent, and store the following data: the provider's account identifier, your name, email address and (if available) the link to your profile picture. We use this data to create and identify your account.

3.3 Data relating to the pet(s)

  • Breed, age, sex, size
  • Health-related notes, any aggressive tendencies
  • Microchip number, vaccination data (where required for the booking)

3.4 Booking and usage data

  • Bookings placed, services selected, appointments
  • Log data relating to the use of the portal (logins, actions)

3.5 Automatically collected data

  • Technical data: IP address, browser and device type
  • Cookies and similar technologies (described in detail in point 11)

4. Legal bases and purposes of processing

4.1 Performance of a contract (Article 6(1)(b) GDPR)

  • Purpose: creating and operating the account, forwarding the booking request to the Salon
  • Data: registration data, booking data
  • Retention: for as long as the account exists

4.2 Legitimate interest (Article 6(1)(f) GDPR)

  • Purpose: security of the Platform, prevention of abuse and fraud, development of the service, customer support. This also includes the Salon's legitimate interest in handling no-shows and access restrictions (bans).
  • Data: usage and technical data, booking history
  • Retention: up to 3 years

4.3 Consent (Article 6(1)(a) GDPR)

  • Purpose: marketing communications, and the use of marketing/analytics cookies and tracking technologies
  • Data: email address, name, device and tracking identifiers
  • Retention: until consent is withdrawn

4.4 Legal obligation (Article 6(1)(c) GDPR)

  • Purpose: fulfillment of legal (e.g. accounting, regulatory) obligations
  • Retention: in accordance with the applicable legislation

5. Logging in with an external account (Google, Facebook)

Using social login is optional. If you choose it:

  • With your consent, the provider (Google or Meta, as applicable) transfers to us the basic data set out in point 3.2 in order to create the account.
  • With regard to the processing carried out in their own systems, Google and Meta each qualify as an independent data controller, subject to their own privacy policies.
  • Social login can be dispensed with at any time: the account can also be used with email-based login.

6. Data processors and data transfers

6.1 Data processors engaged

  • Hosting provider (Laravel Cloud): storage of the system and the data (EU, Frankfurt)
  • Email delivery provider: delivery of transactional and system messages
  • Analytics and advertising partners (Meta, Google, TikTok): exclusively where consent has been given to marketing/analytics cookies

We conclude a written contract with every data processor and require GDPR-compliant processing.

6.2 Transfers to third countries

In the case of certain partners (e.g. Google, Meta, TikTok), data may also be transferred outside the EU, subject to appropriate safeguards (e.g. an adequacy decision of the European Commission, standard contractual clauses).

6.3 "Transfer" to the Salon

When you book with a Salon, your data required for the booking becomes accessible to that Salon. In this relationship, the Salon is an independent data controller (see point 2.2).

7. Data security

  • SSL/TLS encryption: all data transmission is encrypted
  • Encrypted storage: sensitive data (e.g. passwords, access tokens) is stored in encrypted form
  • Access control: role-based permission management, principle of least privilege
  • Backup: regular, automatic backups
  • Incident management protocol (see point 12)

8. Your rights (as a data subject)

Under the GDPR, you have the following rights:

  • Right to information and access (regarding the processing of your data and to a copy of it)
  • Right to rectification (correction of inaccurate data)
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability (machine-readable format)
  • Right to object (to processing based on legitimate interest)
  • Right to withdraw consent (in the case of processing based on consent; withdrawal does not affect the lawfulness of processing carried out before the withdrawal)

How to exercise them: you can exercise your rights relating to your platform account at info@petmetic.hu, and your rights relating to your client data generated at a given salon primarily with the Salon concerned (see point 2.2). We respond to your request within 30 days.

9. About pet data

Data concerning a pet's health or tendencies does not constitute special categories of personal data under the GDPR, as an animal is not a natural person. Nevertheless, we process this data with care, with access restricted to the necessary personnel, in order to provide the service safely. Where such data can be linked to you (the Pet Owner), we protect it as ordinary personal data.

10. Data retention

  • Active account: for as long as the account exists
  • Account deletion / prolonged inactivity: upon deletion of the account or after prolonged inactivity, we delete or anonymize the data, taking into account statutory retention obligations
  • Data based on legitimate interest: up to 3 years
  • Marketing data: until consent is withdrawn

11. Cookies and tracking technologies

We always use the cookies necessary for the operation of the Platform. Marketing and analytics cookies, as well as the tracking technologies of advertising partners (Meta, Google, TikTok), operate only with your consent, which you can give in the cookie banner and withdraw at any time.

12. Personal data breach

In the event of a personal data breach, the Operator notifies the supervisory authority within 72 hours of becoming aware of it and, in the case of a high risk, also informs the data subjects directly.

13. Supervisory authority

You may lodge a complaint concerning data processing with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

If your rights are infringed, you may also turn to the courts.

14. Amendment of this Privacy Notice

The Operator reserves the right to amend this Privacy Notice. We will inform you of material changes on the Platform or by email. The version currently in force is available at https://petmetic.hu/gazdi/adatkezeles.

This Privacy Notice has been prepared for owners of pets (Pet Owners) on the basis of the GDPR and Hungarian data protection legislation. The processing of data relating to grooming businesses is described in the B2B Privacy Notice.