Privacy Policy

Last updated: 28 MAY 2026

Who we are

The Tamaskan Dog Association (TDA) values your privacy and is committed to ensuring that your personal data is processed in accordance with the General Data Protection Regulation (GDPR). This privacy policy explains how the Tamaskan Dog Association (“we”, “our”, “us”) collects and processes personal data.

The Tamaskan Dog Association operates as a trade name of Wolfsbane Creations (KvK: 62669354), which is the legal entity and data controller responsible for processing your personal data. Founded in 2024, TDA provides a unified platform for Tamaskan Dog owners, breeders, and enthusiasts. We are based in the Netherlands.

For privacy-related inquiries, please contact us using the details below.

Tamaskan Dog Association
Adelaarstraat 20
3145 AA Maassluis
Netherlands
info@tamaskandogassociation.com

What personal data we process

Personal data means any information relating to an identified or identifiable natural person. In order to provide our services we may collect the following personal information related to you:

Contact & User Account Information: Name, username, email address, and country of residence.
Communication Data: The text of your inquiries and any instructions you provide.
Attachments: Photos (e.g., of dogs), copies of health test results, screenshots, or other files you upload.
Technical Data: Your IP address, browser type, and device information.
Transaction Data: We process limited payment-related information (such as transaction IDs and payer names) received from our payment processors, Stripe and PayPal, to verify membership status.

The GDPR defines personal data as information relating to a living human being; therefore, data identifying only a dog is not strictly personal data. However, dog data becomes personal data if it can be linked to an identified owner (e.g., a microchip number linked to an owner’s address in a national registry). To ensure compliance and privacy, the Tamaskan Dog Association maintains a strict separation of data: dog-specific information (such as name, sex, date of birth, lineage, embark dna data, and health test results) is stored in our pedigree database without identifiers that link it to a specific owner.

Purpose and legal basis for processing

We process your personal data for the purposes outlined in this Privacy Policy based on the following legal grounds:

Contract
We process data when it is necessary to fulfill a contract with you or to take steps at your request prior to entering into a contract. This includes:

Responding to your inquiries and providing requested services.
Creating and managing your user account to access member-only features.
Verifying payment and recording transaction details to confirm membership status.

Legitimate Interest
We process data based on our legitimate interests, provided these do not override your fundamental rights and freedoms. These interests include:

Storing email correspondence for a reasonable period to maintain accurate business records, handle follow-ups, and resolve potential disputes.
Collecting technical data (IP address, browser type, device information) to ensure server security, monitor for threats, and troubleshoot technical issues.
Maintaining and updating the Pedigree Breed Database. This serves a vital legitimate interest for the Tamaskan community: preserving accurate genetic and health records to help members identify inheritance patterns, reduce inbreeding risks, and improve the overall health and temperament of the breed. We conduct this processing with appropriate safeguards to protect your privacy.

Legal Obligation
We process data when required to comply with applicable laws. This includes:

Retaining financial records (invoices, receipts, transaction logs) for the period mandated by Dutch tax legislation.
Providing information to tax authorities or other competent bodies upon lawful request.

Third-Party processors

We engage the following external services that receive personal data in order to provide our services. For each processor we state the purpose, the categories of data transferred, the legal basis we rely on, any cross‑border transfer safeguards, and a link to the processor’s own privacy notice.

Proton Mail – email communication
All client e‑mail is routed through Proton Mail. Proton receives the sender’s name, e‑mail address, the IP address that appears in the mail header, and the message metadata (subject line, timestamps). The content of the email (including any text, attachments, or personal data you include) is end‑to‑end encrypted on your device, so only you and the intended recipient can read it. This processing is carried out on the basis of contract as it is necessary to communicate with you, respond to your enquiries, and provide the services you have requested. Proton’s data centres are located in Switzerland, which the European Commission has recognised as providing an adequate level of data‑protection.
More information: https://proton.me/privacy

Proton Drive – file storage
We use Proton Drive to store Embark raw DNA data (zip files) for the analysis of genetic diversity and population-wide kinship within the Tamaskan breed. These files are fully end‑to‑end encrypted, meaning the contents are inaccessible to Proton and only we can access them for breed analysis. This processing is carried out on the basis of legitimate interest to preserve the genetic history of the breed, track inheritance patterns, and improve overall breed health and diversity. Proton’s data centres are in Switzerland, which the European Commission has recognised as providing an adequate level of data‑protection.
More information: https://proton.me/privacy

Hostinger – website hosting
We use Hostinger to host our website. Hostinger stores the IP address, timestamp, requested URL and browser/device information of every visitor. This data is used solely for server operation, log analysis, security monitoring, troubleshooting and compliance with legal obligations. This processing is carried out on the basis of legitimate interest to ensure the availability, security and integrity of the service. All hosting facilities are situated in the EU, so no cross‑border transfer occurs.
More information: https://www.hostinger.com/legal/privacy-policy

Stripe – payment processing
We use Stripe to accept international payments. Stripe receives your name, e‑mail address, payment card or bank account details (or other payment method information), and the transaction reference. This processing is carried out on the basis of contract to complete the purchase, with additional processing for fraud detection and AML compliance based on legal obligation. Data may be stored outside the EEA; we rely on Standard Contractual Clauses approved by the European Commission.
More information: https://stripe.com/privacy

PayPal – payment processing
We use PayPal to accept international payments. PayPal receives your name, e‑mail address, payment card or bank account details (or other payment method information), and the transaction reference. This processing is carried out on the basis of contract to complete the purchase, with additional processing for fraud detection and AML compliance based on legal obligation. Data may be stored outside the EEA; we rely on Standard Contractual Clauses approved by the European Commission. More information: https://www.paypal.com/legalhub/paypal/privacy-full

How long we keep the data

User account data

What we keep: name, username and email address.
Retention period: As long as you maintain an active membership with us. Upon cancellation or expiration, we will delete this data within 30 days, unless we have a legitimate reason to retain it (e.g., unresolved disputes or legal obligations).
Why: This data is necessary to fulfill our contract with you, providing you access to member-only features, managing your account, and communicating with you regarding your membership status.

Email correspondence

What we keep: name, email address, and the content of the messages you send.
Retention period: 12 months after the last interaction with you.
Why: To maintain reasonable business records, resolve potential disputes, and honor support requests.

Pedigree and Breed Data

What we keep: Dog name, sex, date of birth, lineage (parents/grandparents), health test results and embark raw DNA data.
Retention period: Indefinitely (or as long as the breed history is maintained).
Why: Preserving the genetic history of the Tamaskan breed is a vital legitimate interest for the community. Accurate, long-term records are essential for tracking inheritance patterns, preventing inbreeding, and improving breed health.

Payment record information

What we keep: client’s name, transaction date and amount.
Retention period: 7 years.
Why: Legally obliged to retain these records for tax and accounting purposes under Dutch law.

Invoices and receipts

What we keep: Copy of the invoice/receipt (client name, address, invoice number, date, description, amount, business info).
Retention period: 7 years.
Why: Legally obliged to retain these records for tax and accounting purposes under Dutch law.

Data Sharing with Third Parties

We may share certain data with official Tamaskan Dog Registries for the purpose of maintaining accurate breed records and promoting breed health. This includes health test results, pedigree information, and DNA data where applicable.

These registries act as independent data controllers and have their own privacy policies. We only share data that is necessary for breed registration and health tracking purposes. By submitting data to our database, you acknowledge that this information may be shared with official breed registries for these purposes.

If you have concerns about data sharing with registries, please contact us at info@tamaskandogassociation.com.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These measures include the use of encrypted communication services, secure file storage, and limiting access to personal data to only those systems necessary to provide our services.

Email communications are handled through Proton Mail and DNA data files are stored in Proton Drive, both of which provide end-to-end encryption. Our website infrastructure is hosted by Hostinger within the European Union and is protected by standard server-level security controls, firewalls, and regular security updates.

While we take reasonable steps to protect personal data, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee absolute security, but we continually review our practices to maintain an appropriate level of protection.

Third party links

Our website may contain links to external websites or services that are not operated or controlled by us. These links are provided for your convenience and may direct you to websites that have their own privacy policies and terms of use.

Please note that we are not responsible for the content, privacy practices, or security of these external sites. We encourage you to review the privacy policies of any third-party websites you visit, as they may collect and use your personal data differently from how we do. By clicking on third-party links, you acknowledge that we are not liable for any data or information collected by these external websites.

Cookies

We use functional cookies on our website to enhance your user experience and ensure the website functions properly. These cookies enable you to navigate the site and use its features, such as remembering your login status or preferences during your session.

These cookies are strictly necessary for the operation of the website and do not collect personal information for marketing or tracking purposes. If you wish to disable cookies, you can adjust your browser settings to block or delete them. However, please note that some features of this website (such as logging in) may not function properly without these cookies.

Your rights under the GDPR

As a data subject you have the following rights, which you can exercise at any time:

Right to Access: You may obtain a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): You may request that we delete your user account information, email address, and associated correspondence, unless we are legally required to retain certain data (e.g., payment records for tax purposes).
Right to Restriction of Processing: You can ask us to temporarily halt processing of your data.
Right to Data Portability: You may receive your data in a structured, commonly used electronic format.
Right to Object: You can object to any processing of your personal data, including processing based on legitimate interests.
Right to Withdraw Consent: We do not currently rely on consent as a legal basis for processing your data. However, if this changes in the future, you will have the right to withdraw consent at any time.
Right to Lodge a Complaint: If you believe we have violated the GDPR, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

If you wish to exercise any of the rights described above, please contact us at info@tamaskandogassociation.com. We will respond to your request without undue delay and at the latest within one month of receiving it, as required under Article 12(3) of the GDPR.

Changes to this privacy policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated via our website or by email to the contact information you have provided. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Contact us

If you have any questions, concerns, or wish to exercise any of your rights, please contact us.

Tamaskan Dog Association
Adelaarstraat 20
3145 AA Maassluis
Netherlands
info@tamaskandogassociation.com