Zoometrics - Smart Metrics for Smart Cities

Privacy policy

1. Data controller

Animalia Consulting S.L.
Tax ID (CIF): B22619787
Registered office: Paseo de la Castellana, 194. Bajo B, 28046 Madrid (Spain)
Contact email for data protection matters: info@zoo-metrics.com

2. Personal data we collect

Depending on how the website is used, we may process the following categories of data:

2.1. Data provided directly by the user

  • First and last name
  • Email address
  • Data voluntarily included in contact forms or comments
  • Content sent by the user (comments, messages, attachments)

2.2. Data derived from use of the site

  • IP address
  • Browser, device and operating system information
  • Activity and browsing data within the site
  • Technical, preference and analytics cookies (depending on settings)

2.3. Images

If the user uploads images, they should avoid including EXIF metadata with GPS location, as other users could extract that information.

2.4. Internal record of form submissions

In addition, our server keeps a copy of every form received in an internal record of submissions: the form data, the language, the page of the form and the page through which the visitor entered the site, the source channel, the campaign parameters of the link (utm) and the boxes, ticked or not, with their exact text and the date. It does not keep the IP address. We use it to check that every request has been handled, to be able to prove the consents received and for internal form statistics. On the server it is kept until 90 days have passed from the end of the month of the submission; it is deleted with one of the submissions the server receives after that date and, at the latest, with the first one it receives in the following month. The record is also copied, automatically and periodically, to our internal storage, with restricted access, where it is kept for the same periods as the form data (section 9). Legal basis: the same as for the form, and our legitimate interest in being able to prove requests and consents (Art. 6(1)(f) and Art. 7(1) GDPR).

3. Purposes of processing

Animalia Consulting S.L. will process the data in order to:

  • Handle inquiries sent through the site’s forms
  • Handle comments or interactions made on the site
  • Send communications expressly requested by the user
  • Improve site security (spam detection, fraud prevention)
  • Analyze use of the website to improve how it works
  • Manage external forms (Google Forms, Microsoft Forms, HubSpot)

Processing is based on:

  • The user’s consent (forms, sending of communications, non-essential cookies)
  • Legitimate interest in ensuring the security of the website
  • Performance of pre-contractual or contractual measures (responding to requests)
  • Compliance with legal obligations

5. Cookies

The site uses cookies to:

  • Enable basic browsing functions
  • Save preferences
  • Carry out statistical measurement through Google Analytics
  • Improve site security

Users can manage or withdraw their consent through the cookie settings panel available on the website.

6. Embedded third-party content

The site may include embedded content (videos, maps, forms, images).
This content may behave as if the user were visiting the originating site directly.

The third parties involved may:

  • Collect information about the user
  • Use cookies
  • Carry out additional tracking
  • Record the user’s interaction with the content
  • Associate that interaction with active accounts on their platforms (if applicable)

Tools integrated into the site:

  • Google Forms
  • Microsoft Forms
  • HubSpot Forms
  • Google Analytics

Anti-bot verification on the forms (Cloudflare Turnstile)

To protect the forms against automated submissions (spam and abuse) we use Cloudflare Turnstile, a security service provided by Cloudflare, Inc. It is not loaded when the page opens: only when the user starts filling in a form, interacts with it or submits it, the browser downloads a Cloudflare script that collects technical data about the connection and the browser (IP address, TLS fingerprint, User-Agent header, and the site key and origin of the page) to check that the sender is not a bot, and generates a single-use verification code. Our server checks that code with Cloudflare before processing the form data; the code is not stored or sent to our CRM or by email.

  • Purpose: security of the website and prevention of spam and fraud in the forms.
  • Legal basis: legitimate interest in the security of the website and its forms (Art. 6(1)(f) GDPR). Reading or storing information on the device for this service is strictly necessary to provide the submission service requested by the user (Art. 22.2 of the Spanish LSSI), so it does not require consent.
  • Role of Cloudflare: it acts as a data processor when providing this service to us; according to its Turnstile privacy addendum, it also processes these signals as a controller to improve its bot detection. More information: Turnstile Privacy Addendum.

7. Data disclosures and data processors

Animalia Consulting S.L. will only share data when strictly necessary:

7.1. Contracted service providers

  • Hostinger International Ltd. (hosting service, form submission and internal record of submissions)
  • Google Ireland Ltd. (forms, analytics and related services)
  • Microsoft Ireland Operations Limited (forms, and internal storage of the copy of form submissions in Microsoft 365, with restricted access)
  • HubSpot Inc. (forms and CRM)
  • Cloudflare, Inc. (anti-bot verification of the forms: Cloudflare Turnstile)

These providers act as data processors, under contracts compliant with the GDPR.

In addition, every time it receives a form, our server sends a notification email to info@zoo-metrics.com, our Microsoft 365 mailbox, with the data the person has entered in the form, so that we can handle their request and reply to them. That email is kept until the request has been handled and, at the latest, 30 days after it was sent.

The internal copy of requests and the automated processing that maintains it are carried out in Microsoft 365 (SharePoint) and in Microsoft Azure (Container Apps, Spain Central region), and the notification email for each submission is sent through Azure Communication Services. Microsoft acts as data processor (Microsoft Ireland Operations Limited).

7.2. Authorities

Data may be disclosed to public authorities and bodies where there is a legal obligation.

8. International transfers

Use of Google Analytics, Google Forms, Microsoft Forms and HubSpot may involve international transfers of data to the United States or other countries.

These transfers comply with:

  • Standard Contractual Clauses approved by the European Commission
  • Additional security measures applied by the providers

The anti-bot verification service of Cloudflare (Turnstile) may also involve international transfers of data to the United States or other countries, which rely on the contractual safeguards offered by the provider in its data processing agreement.

The Microsoft 365 service, where the internal copy of form submissions and the info@zoo-metrics.com mailbox are kept, may also involve international transfers of data to the United States or other countries, which rely on the contractual safeguards offered by the provider in its data processing agreement.

9. Data retention period

  • Comments on the website: indefinitely (to allow ongoing management)
  • Contact forms: up to 1 year, unless a contractual relationship follows
  • Internal record of form submissions (without IP address): on the server, until 90 days have passed from the end of the month of the submission (it is deleted with one of the submissions the server receives after that date and, at the latest, with the first one it receives in the following month); the internal copy, the same periods as the form data above
  • Notification email for each form received (with the data entered in the form, in the info@zoo-metrics.com mailbox on Microsoft 365): until the request has been handled and, at the latest, 30 days after it was sent
  • Browsing data: according to the periods defined in the Cookie Policy
  • Data linked to user accounts (if any): while the account is active
  • Formal requests to exercise rights: 3 years

10. User rights

Users may request:

  • Access to their data
  • Rectification
  • Erasure
  • Restriction of processing
  • Objection
  • Portability
  • Withdrawal of consent at any time

To exercise these rights: info@zoo-metrics.com

The request must include adequate identification of the requester.

11. Security

The site and its associated systems apply security measures to protect data:

  • HTTPS protocols
  • Access control
  • Anti-spam systems
  • Backups at the hosting provider
  • Technical and organizational measures in line with the GDPR

12. Comment review and spam

Comments on the site may be reviewed by an automated spam detection system.

13. Changes to this Privacy Policy

Animalia Consulting S.L. reserves the right to modify this policy to adapt it to regulatory changes or improvements to the site.
Changes will be published on this same page.

Zoometrics - Smart Metrics for Smart Cities
Meowmetrics - Zoometrics

Comprehensive management of community cat colonies.

Zoometrics - Meow metrics

See more

Isotype of Census Metrics

Municipal census of companion animals, with registration and identification.

Isotype of Wild Metrics

Map of encounters with urban wildlife with automatic or assisted impact assessment, to prioritise areas and actions; it starts with the wild boar.

Isotype of Ark Metrics

Citizen participation tool with full traceability from the street to adoption (captures, fostering, adoptions, donations, volunteering) that shares data and identity with Meow.

Isotype of Silva Metrics

Inventory of parks and gardens for towns and cities, with everything inside them, living and non-living: plants, furniture, play areas and irrigation.

Know more