Legal

Data Processing
Agreement.

Last updated: July 2025

This Data Processing Agreement (“Agreement”) applies to organizations using StrayDash services.

1. Roles

Under this agreement:

  • The organization using StrayDash acts as the Data Controller.
  • StrayDash acts as the Data Processor.

2. Purpose of Processing

StrayDash processes personal data solely for the purpose of:

  • Receiving and managing animal-related reports
  • Providing dashboard functionality
  • Supporting communication related to submitted reports

3. Categories of Data

The following categories of personal data may be processed:

  • Names
  • Email addresses
  • Phone numbers
  • Uploaded images
  • Location data
  • Report descriptions

4. Duration of Processing

  • Organization account data is stored while the account remains active.
  • Reports submitted by the public are stored until deleted by the organization through their dashboard.

5. Responsibility of Organizations

Organizations using StrayDash remain fully responsible for:

  • The data submitted through their forms
  • Managing stored reports
  • Handling GDPR requests from individuals
  • Determining retention periods inside their organization

Individuals submitting reports must contact the organization that received the report for any data-related requests.

6. Confidentiality

StrayDash ensures that all persons authorized to process personal data are bound by confidentiality obligations.

7. Security Measures

StrayDash implements reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

8. Map Tiles and Third-Party Services

Public report forms (such as the wound-report form) include an interactive map powered by the Leaflet JavaScript library. The visual map tiles displayed inside this map are served by third-party tile providers, specifically Esri (ArcGIS World Imagery) and CARTO.

These tile providers only receive the technical information required to render the visible portion of the map — namely, the tile coordinates (zoom level and tile X/Y indices) and standard HTTP request metadata such as the visitor’s IP address and browser user-agent. This is the same information any website using a public map service receives, and is used by the provider solely to deliver the requested map image.

Esri and CARTO do not receive, and have no access to, any information that is entered or uploaded through the report form. This includes (but is not limited to) names, email addresses, phone numbers, uploaded photos, descriptions, and the precise reported location selected on the map. None of this data is ever transmitted to the tile providers.

All data submitted through StrayDash forms is stored exclusively in StrayDash’s own databases. It is accessible only to:

  • The shelter or organization that owns the form through which the report was submitted, via their authenticated dashboard.
  • Authorized StrayDash team members, strictly for the purpose of operating, maintaining, and supporting the platform.

No other third party — including map tile providers, analytics services, or advertising networks — has access to submitted form data.

9. Data Usage

StrayDash does not sell, share, or use submitted data for advertising or unrelated purposes.

10. Contact

For privacy or data processing questions regarding the platform itself: info@worldanimalfederation.com