1. Who we are

Go Doggity runs the platform at app.godoggity.com, with Go Book (bookings and registrations), online courses and Go Scout (agility course scouting). This statement explains which data we process, why, and what your rights are.

Data controller

• Go Doggity, SUSTAiL BV
• Sportalaan 57, 3550 Heusden-Zolder, Belgium
• Company number: BE 1005.780.627
• Email: woof@godoggity.com

Two roles

• Your platform account and Go Scout: Go Doggity is responsible for these.
• Your registrations and courses with a trainer: the trainer or dog school you book with is responsible for their own customer records. Go Doggity only processes this data on the trainer's behalf, under a data processing agreement. You can also ask the trainer directly about your registration.

2. What data we process

We only process what the platform needs to work.

• Account: name, email address, password (stored encrypted), language. Controller: Go Doggity.
• Dogs: name, breed, date of birth, level or class, notes you add yourself. Controller: Go Doggity for your account, the trainer for your registration.
• Registrations: chosen activity, trainer, group, your answers to the registration questions, status, messages with the trainer. Controller: the trainer.
• Payments and invoices: amount, date, payment status, invoice details. No card or account numbers: those stay with Mollie. Controller: the trainer (Go Doggity for trainer subscriptions).
• Courses: courses you have bought or have access to. Controller: the trainer offering the course.
• Go Scout: scouting sessions, course maps, notes, start lists (including names of other handlers, see section 4). Controller: Go Doggity.
• Technical: IP address, login times, error messages in server logs. Controller: Go Doggity.

For trainers, we also process organisation details, billing details and their chosen plan.

3. Why and on what legal basis

We never use your data for third-party advertising, and we never sell it.

• Performance of a contract (Art. 6(1)(b) GDPR): creating and managing your account; registrations, putting groups together, sending payment requests and giving access to courses; service emails (confirmations, changes, reminders); your own Go Scout sessions and notes.
• Performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR): processing and keeping payments and invoices.
• Legitimate interest (Art. 6(1)(f) GDPR): names of other handlers and dogs on start lists in Go Scout (see section 4); security, preventing misuse and fixing errors.
• Consent (Art. 6(1)(a) GDPR): newsletter or offers, only if you tick the box. You can withdraw your consent at any time.

We make no automated decisions that directly affect you. The trainer decides on group allocation and admission.

4. Go Scout and data of other handlers

Start lists you upload to Go Scout contain the names of other handlers and their dogs. These people have no account and did not give this data to us.

We process it based on our legitimate interest: helping you prepare for your competition and follow up on your scouting. Start lists are usually already published by the organiser. To keep the impact small:

• an uploaded start list is only visible to you, within your own scouting session;
• we don't share start lists with other users or trainers;
• you can't search for handlers across sessions;
• we automatically delete third-party names after 12 months.

Are you on a start list and don't want to appear in Go Scout? Email woof@godoggity.com and we will remove your name from the sessions concerned.

As a user, you only upload start lists you obtained lawfully, and you only use them for your own preparation.

5. Who we share data with

We only share data with parties needed to run the platform. We have a data processing agreement with each processor.

• Hetzner Online GmbH (Germany): server and database hosting. Processes all platform data.
• Laravel Forge, Laravel Holdings Inc. (USA): server management and updates. Has technical access to the server, but does not use your data for its own purposes.
• Mollie B.V. (Netherlands): payments. Processes name, email address, amount and payment details.
• Postmark (USA): sending service emails. Processes name, email address and the content of the email.
• Anthropic (USA): translating course texts. Only receives course texts, no customer data.

Mollie processes payment data as an independent controller, under its own privacy statement (mollie.com/privacy). Payments go directly to the trainer you book with.

Trainers only see the data of customers who register with them: name, contact details, registered dogs, registrations and payment status. They see nothing of your registrations with other trainers or of your Go Scout sessions.

If the law requires us to, we pass data on to public authorities.

6. Transfers outside the EU

Your data is stored on Hetzner servers in Germany. Postmark sends our emails from the USA: for this, your name, email address and the content of the email go to the USA. This is based on the European Commission's standard contractual clauses.

Laravel Forge is also an American company. It only has technical access to the server, with the same safeguards. Anthropic only receives course texts for translation, no customer data.

7. How long we keep data

We don't keep data longer than necessary.

• Account and dogs: as long as your account exists. After 24 months of inactivity, we delete your account, after warning you by email.
• Registrations and courses: as long as your account exists, or shorter if the trainer asks for it.
• Invoices and payment data: as long as the law requires, also after your account is deleted: up to 10 years in Belgium, 8 years in Germany.
• Go Scout sessions: as long as your account exists, or until you delete them yourself.
• Third-party names on start lists: 12 months after upload.
• Server logs: 30 days.
• Backups: 30 days, then overwritten.

If you delete your account, we erase your data within 30 days, except what we are legally required to keep.

8. Cookies

The platform only uses strictly necessary cookies. These don't require consent, so you won't see a cookie banner.

• Session cookie: keeps you logged in until you log out or have been inactive for 2 hours.
• XSRF-TOKEN: protects forms against misuse. Same lifetime as the session.
• Language choice: remembers your chosen language, for 1 year.

We don't use analytics, tracking or advertising cookies. When you pay, you go to Mollie's payment page, which may set its own cookies.

9. Security

We protect your data with technical and organisational measures:

• encrypted connection (HTTPS) across the whole platform;
• passwords stored encrypted, never readable;
• trainers only see the data of their own customers;
• administrator access restricted and protected with two-factor authentication;
• daily backups in a separate location.

If a data breach puts you at risk, we notify the Belgian Data Protection Authority within 72 hours, and you as soon as possible.

10. Your rights

You can always access, correct, download or have your data deleted. You can download your data and delete your account yourself, in your profile.

• Access and portability: yourself, in your profile. You can download a file with all your data there.
• Correction: update your data in your profile.
• Erasure: yourself, in your profile. You can delete your account there.
• Objection (for example to processing in Go Scout): email woof@godoggity.com.
• Restriction of processing: email woof@godoggity.com.
• Withdrawing consent: via the unsubscribe link at the bottom of every newsletter, or in your profile.

We reply within one month. If your request concerns your registrations with a trainer, we forward it to that trainer and help them carry it out.

11. Complaints, changes and contact

Complaint? Please let us know first at woof@godoggity.com. You can also always lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be), or with the supervisory authority in your own country.

Minimum age: you can create an account from the age of 16. Younger handlers register through a parent's account.

Changes: we update this statement when the platform changes. For important changes, you will receive an email in advance.