Privacy

Who manages the platform and how to contact us

Lunamar Legacy is jointly managed by David Lorenzo Levasseur and Cristina Serrano Ortiz, whose address is Ocea Atlantic 10, 43881 Cunit, Tarragona. They jointly make decisions about accounts, security and the platform's own operation. The shared privacy contact is info@lunamarlegacy.com. You may exercise your rights with either of them. David handles technical administration; both handle privacy requests. Each breeder makes decisions about their clients' and dog guardians' data, and Lunamar provides the technical service in accordance with that breeder's instructions.

What information is used

We process your account and contact details, assigned roles and permissions, and the records needed for access. The platform allows the management of dogs, pedigrees, litters, documents and relationships with breeders and dog guardians. This information may include personal data about people linked to the records or contained in the documents provided.

Data may come from you, from a breeder or dog guardian who enters it with authorisation, or from a connected website. The source and authorisation must be retained where appropriate. Information about a dog may be associated with a person; publishing it does not authorise the indiscriminate publication of that person's data.

Why information is used and on what basis

We use the data needed to maintain your account and provide the functions you request, on the basis of performing the terms of service. We respond to enquiries about Lunamar and protect accounts and records against unauthorised access on the basis of our legitimate interest in responding to those communications and maintaining a secure service, with limited access and proportionate measures. Where a legal obligation requires it, we will process the information needed to comply with that obligation.

Optional analytics are based on your consent, which you can withdraw through Cookie preferences. The publication and sharing of personal information must have the authorisation and legal basis appropriate to each case. Data managed on behalf of a breeder is processed in accordance with that breeder's instructions; the breeder must inform the people concerned and establish that the processing is lawful. You must not provide unnecessary personal data or documents about people's health.

Signing in with Google

If you choose to sign in with Google, we receive the basic identity data you authorise, such as your name, picture, verified email address and account identifier. We use the verified email address and that identifier to link an existing, active Lunamar account. You can use Lunamar's usual sign-in method if you do not wish to use Google.

We store the Google link and the date of the last sign-in. We do not request access to your Gmail email, your Drive files or your contacts. Signing in with Google does not create an unknown account or, by itself, grant permissions over a breeder's data.

You can manage the connection from your Google account. Revoking it does not delete your Lunamar account or documents that other people must retain. To request account closure or a review of your data, write to info@lunamarlegacy.com; we will review the authorisations, your own data and any obligations affecting shared documents.

Who can access the information

Access is limited according to the profile, breeder and current authorisations. Permission concerning another breeder's dog is limited to that dog and the expressly authorised actions. Documents and private data do not become public when partial access is granted.

When a dog guardian withdraws permission, the dependent access to heat records and progesterone reports is withdrawn. If a publication authorisation is withdrawn, connected websites may need up to one hour to stop displaying the information they temporarily held. This publication period does not permit continued access to documents or private data without a current authorisation.

Villaverde de la Marina retains its own website and management. Its connection with Lunamar does not grant general access to other breeders' data. Only the information necessary and authorised for the requested function is exchanged. Each breeder's reservations and other services are governed by that breeder's own information and terms.

Service providers and disclosures

We use Hostinger hosting and recovery services, OVH Hispano S.L. email and domain services, and Google services for optional Google sign-in and consented public analytics. Providers access the information needed to deliver each service, within the scope of their applicable terms. This does not grant general access to all breeders' data. Authorities or other recipients may also receive information where there is a legal obligation.

The observed hosting location is the United Kingdom, and the provider's backups are in Germany. The United Kingdom currently benefits from a European Commission adequacy decision. Google may provide parts of its services from other countries in accordance with the safeguards applicable to each service. You can request information about recipients and safeguards for transfers at info@lunamarlegacy.com.

How long information is retained

Local analytics events are cleaned up once they are 90 days old through maintenance of the public website. Google Analytics retention is governed by the settings described below and must not be confused with local analytics.

An account is retained while it is active and needed to provide the service. Once account closure is confirmed, access is blocked and a 30-day period begins to organise export and review what should happen to the data. Enquiries and their associated email are retained for 12 months after closure, unless an outstanding obligation or claim justifies a different retention period. Data processed on behalf of each breeder is returned or erased in accordance with that breeder's instructions and applicable obligations.

In the current Google Analytics property, retention is set to 2 months for event data and 14 months for user data, with the reset on new user activity enabled. These settings do not limit standard aggregated reports. Local analytics and Google Analytics are separate systems.

The adopted policy for ordinary backups is a 30-day cycle; backups specifically made for the migration are retained for 90 days after acceptance of the migration. Backups are reserved for recovery, with restricted access. Exceptions based on obligations or claims must be documented and reviewed. When restoring a backup, account closures and current access restrictions must be reapplied.

Security logs are reviewed according to the incident to be investigated and the verification of the measures taken. If information needs to be retained to address liabilities or claims, its access and use are limited to that purpose. Closing an account does not delete shared records, documents or pedigrees in bulk, or remove third parties' rights; what happens to that information is reviewed separately.

Your rights

You can request access, rectification, erasure, restriction of processing and portability, and object where applicable, by writing to info@lunamarlegacy.com. Where a purpose is based on consent, you can withdraw it for the future. You can also lodge a complaint with the Spanish Data Protection Agency at www.aepd.es. Your identity will be checked in a proportionate manner when handling the request.

Cookies and automated decisions

The site uses cookies needed for access and to remember your preferences. The lunamar_consent cookie stores your choice for 180 days. Google Analytics cookies, such as _ga and those associated with the property, are activated only if you accept analytics; their expiry is set to 180 days and may be renewed with use. You can reject analytics or withdraw permission through Cookie preferences. The reviewed measurement is limited to authorised public pages and does not load that tracking on private management screens. No marketing providers are configured at this stage.

These tools are not used on their own to make decisions with legal effects on people. Pedigree, genetic and breeding results must be checked against their documents and sources. Date of this information: 15 October 2026. Material changes to purposes, recipients or terms will be communicated through appropriate means before they take effect where required.