Privacy Policy
Information obligations General Data Protection Regulation (GDPR )
preamble
The protection of your privacy and your data is very important to us and is always taken into account in all business transactions.
In principle, you can use our website without providing any personal data. However, different regulations may apply to individual services, which we will specifically inform you about below.
General
The purpose of processing your personal data (hereinafter referred to as “data”) is to provide information on pet supplies and the presentation and offering of products in this area. In this privacy policy, we inform you, among other things, about
• the name and contact details of the person responsible
• all purposes for which your data is processed
• the legal basis on which the processing activities are based, including our legitimate interest
• all recipients of your data
• any transfer of your data to a third country and the presentation of the legal basis for this
• the storage period of your data or the criteria for determining the duration
• the categories of your data that are processed
• the origin of your data
• the rights of those affected
Data protection officer
Responsible for data protection is DoPetMe GmbH, Beethovenstraße 2, A-4910 Ried im Innkreis, email: datenschutz@dopetme.com.
No data protection officer has been appointed as this is not required by law.
Your rights
You have the following rights with regard to your personal data:
• Right to information
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw your consent
You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
You can contact us at any time with any questions about this or other issues relating to personal data.
Right to information
You have the right to receive information about the personal data stored about you and a copy of this information from us at any time free of charge, including
• the purposes of processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
• where possible, the envisaged period for which the personal data will be stored, or, where not possible, the criteria used to determine that period
• the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
• the existence of a right of complaint to a supervisory authority
• if the personal data are not collected from the data subject: all available information about the origin of the data
• the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
Furthermore, you have the right to information about whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to receive information about the appropriate safeguards in connection with the transfer.
Right to rectification
You have the right to request the immediate rectification of inaccurate personal data.
Furthermore, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement, taking into account the purposes of the processing.
Right to erasure
You have the right to request that we delete your personal data immediately if one of the following reasons applies and if processing is not necessary:
• The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
• You withdraw your consent on which the processing was based according to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
• The personal data were processed unlawfully.
• The erasure of personal data is necessary to fulfil a legal obligation under Union or Member State law to which the controller is subject.
• The personal data were collected in relation to information society services offered in accordance with Art 8 (1) GDPR.
Right to be forgotten
If the personal data was made public by us and our company as the controller is obliged to delete the personal data pursuant to Art. 17 (1) GDPR, we will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform other controllers who process the published personal data that you have requested the deletion of all links to these personal data or of copies or replications of these personal data from these other controllers, unless processing is required.
Right to restriction of processing
You have the right to request that we restrict processing if one of the following conditions applies:
• You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data.
• The processing is unlawful, you oppose the erasure of the personal data and instead request the restriction of the use of the personal data.
• We no longer need the personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims.
• You have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether our legitimate reasons outweigh yours.
Right to data portability
You have the right to receive your personal data, which has been provided by us, in a structured, commonly used and machine-readable format.
You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
Right to object
You have the right to object at any time to the processing of your personal data based on Article 6 (1) (e) or (f) GDPR, for reasons related to your particular situation. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising purposes. This also applies to profiling insofar as it is related to such direct marketing.
If you object to us processing your data for direct marketing purposes, we will no longer process your personal data for these purposes.
In addition, you have the right to object to the processing of personal data carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless such processing is necessary to perform a task carried out in the public interest, for reasons arising from your particular situation.
Automated decisions in individual cases, including profiling
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision (1) is necessary for entering into or fulfilling a contract between you and us, or (2) is permitted by Union or Member State law to which we are subject and this law contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or (3) is made with your explicit consent.
Right to revoke consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time. However, your revocation does not affect the legality of the data processing carried out up to the time of revocation.
Minors
Our website and services are not intended for use by minors, and we do not collect any data from minors. If a parent or guardian of a minor believes that their child may have provided us with personal information, please contact us using the contact information listed below, and we will delete that personal information, subject to applicable law and this Policy.
Data security
We use appropriate technical and organizational measures and security precautions (TOMs) to prevent unauthorized access, unlawful processing, and unauthorized or accidental loss of your data.
This includes, for example, the encryption of your communication with us via this website based on the Secure Socket Layer (SSL) encryption protocol.
You can test the quality of our encryption here: https://www.ssllabs.com/ssltest
It is important to us to point out that data transmission over the Internet may have security gaps, as complete protection against access by unauthorized third parties is not possible.
Web host
Our website is hosted by Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, represented by Shopify International Limited, c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.
For more details, please see https://www.shopify.de/legal/datenschutz.
Server log files
Each time you visit our website, an automated system collects a series of general data and information.
This general data and information is stored in the log files of our server by Shopify Inc.
Can be recorded
• the browser types and versions used
• the operating system used by the accessing system
• the website from which an accessing system reaches our website (so-called referrer)
• the sub-websites that are accessed via an accessing system on our website
• the date and time of access to the website
• an Internet Protocol address (IP address)
• the Internet service provider of the accessing system
• other similar data and information used to avert danger in the event of attacks on our information technology systems.
When using this general data and information, we do not draw any conclusions about you.
This information is needed to
• to deliver the contents of our website correctly
• to optimise the content of our website and the advertising for it
• to ensure the continued functionality of our information technology systems and the technology of our website
• To provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.
We evaluate this anonymously collected data and information both statistically and with the aim of increasing data protection and data security within our company, ultimately ensuring an optimal level of protection for you. In any case, we may process this data based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
The logs are stored separately from any personal data you provide and are deleted after a maximum of 90 days.
Cookies
Information on the use of cookies and your choices and rights can be found in our cookie banner.
How do we collect your data?
Currently, you can order from our online shop, use the contact form, send us an email, contact us by phone, or contact us in person. Please note that unencrypted emails sent over the internet are not adequately protected against unauthorized access by third parties.
Customer account and orders
If you wish to place an order in our online shop, you must provide the personal information listed below to process your order. To prevent unauthorized third-party access to your personal data, especially financial data, the ordering process is encrypted using SSL technology.
Contact form website
If you would like to send us a message, you will be required to provide the personal information listed below, which we need to process your request. To prevent unauthorized third-party access to your personal data, the ordering process is encrypted using SSL technology.
Newsletter
With your consent, you can subscribe to our newsletter, which we use to inform you about our current, interesting offers. This means that we will contact you directly via personalized email and inform you if, based on the data you provide, we believe that information about our products, services, and events, as well as those of our partner companies, will be of particular relevance and interest to you.
You can only receive our company newsletter if (1) you have a valid email address and (2) you have registered to receive the newsletter.
A confirmation email will be sent to the email address you first entered for newsletter delivery using the double opt-in procedure, in which we ask you to confirm that you wish to receive the newsletter.
This confirmation email is used to verify whether you, as the owner of the email address, have authorized receipt of the newsletter.
The purpose of the procedure is to verify your registration and, if necessary, to clarify any possible misuse of your personal data.
DoPetMe Challenge
If you would like to participate in the DoPetMe Challenge, you must provide the personal information listed below, which we need to administer the competition. To prevent unauthorized third-party access to your personal data, the process is encrypted using SSL technology.
You can currently enter data on our website or send us an email. Please note that unencrypted emails sent over the Internet are not adequately protected against unauthorized access by third parties.
Why do we process your data?
If you contact us, for example, simply to obtain information from us, we will process your data for this purpose. If you contact us, for example, to conclude a contract, we will process your data for this purpose.
Contract processing, including customer support
If you provide your order details on our website, by telephone, in person or via email, the data you provide, including your personal data, will be processed by us and the recipients named below as part of our business relationship with you for the purpose of (pre-)contract processing, to process and manage your order and to support you as a customer.
If you wish to place an order in our online shop, you must provide your personal data, which we need to process the contract. We will process the data you provide solely for the purpose of processing the contract.
This data is required to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you.
If you voluntarily provide additional data that is not required to conclude the contract, we will process this data to personalize your request.
Customer account
You can voluntarily create a customer account in our online shop, which allows us to save your data for future purchases. When you create an account under "Login," the data you provide will be stored revocably.
Contact form website
We process the data you provide in order to respond to your inquiry in the best possible and personalized manner and to determine which country/location an inquiry originates from.
Newsletter
We regularly inform our customers about company offers via a newsletter.
The data collected when you register for the newsletter will be used exclusively to send our newsletter.
Furthermore, subscribers to the newsletter may be informed by email if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes to the technical conditions.
DoPetMe Challenge
The personal data provided by participants in the DoPetMe Challenge will be processed for the purpose of administering the DoPetMe Challenge (drawing/selection and notification of the winners, shipping of the prize) as well as for documentation, evidence and marketing purposes.
As a winner of our competition, your videos will be published by the recipients listed below.
By submitting your videos, you consent to videos of the DoPetMe products you have purchased and videos featuring you being posted online for this purpose. To the extent that these videos contain references to ethnic origin, religion, or health, your consent also applies to this information.
Marketing (general)
To initiate and intensify business relationships with existing and potential customers.
Why are we allowed to process your data?
If you contact us, for example, simply to obtain information from us, we may process your data based on your consent in accordance with Art. 6 (1) (a) GDPR or Art. 6 (1) (f) GDPR. If you contact us, for example, to conclude a contract, we may process your data based on Art. 6 (1) (b) GDPR and, if necessary, store it based on Art. 6 (1) (c) GDPR.
Customer account, order
Your data, including the personal data you provide, is processed by us and the recipients listed below on the legal basis of Art. 6 (1) (b) GDPR in order to identify you as a customer, to process this contract appropriately, and to correspond with you. Data is processed at your request and is necessary for the stated purposes for the appropriate processing of the contract. Data that is not required for contract execution and is provided voluntarily by you will be processed by us on the legal basis of your consent in accordance with Art. 6 (1) (a) GDPR. You have the right to withdraw your consent at any time. You can find more information about this in the section Your Rights above.
Contact form website
If we receive a message from you, the legal basis is Art 6 (1) (a), Art 6 (1) (b) or Art 6 (1) (f) GDPR, depending on the content of the message.
Newsletter
The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR. You have the right to withdraw your consent at any time. For more information, see your rights above.
DoPetMe Challenge
The legal basis for the purpose of administering the DoPetMe Challenge is your consent in accordance with Art. 6 (1) (a) GDPR for publishing the winners' data; Art. 6 (1) (b) GDPR for the drawing/selection and notification of the winners, marketing purposes, and shipping the prize; and for documentation and evidentiary purposes of data security, our legitimate interest in accordance with Art. 6 (1) (f) GDPR is based on the public interest in ensuring that many other participants are also informed about who has won and whether someone has won. You have the right to withdraw your consent or object at any time. For more information, see your rights above.
Marketing (general)
The legal basis is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. This legitimate interest is our interest in initiating and intensifying business relationships with existing and potential customers.
What data do we process?
In general, we expressly request that you do not disclose any data that is likely to have little or no relevance to the intended purpose; this applies in particular to special categories of personal ("sensitive") data. The provision of information is entirely voluntary.
Information
If you contact us simply to obtain information from us, we will process the data you provide.
Customer account, orders
Mandatory information required for the processing of contracts is marked separately; further information is voluntary.
Contact form website
When we receive a message from you, our web host logs and stores the date/time of registration and the IP address from which the registration was received. This is solely for evidentiary purposes in the event that an email address is used by an unauthorized person. The required information is marked separately. Providing additional information is voluntary.
Newsletter
Which personal data is transmitted to us when you order the newsletter is determined from the input mask used for this purpose.
The only mandatory information required to receive the newsletter is your email address.
When you register for the newsletter, we also store the IP address assigned by your Internet service provider (ISP), the computer system you used at the time of registration, and the date and time of registration.
The collection of this data is necessary in order to be able to trace the (possible) misuse of your e-mail address at a later date and therefore serves as legal protection for us.
DoPetMe Challenge
When participating in the DoPetMe Challenge, the category, name, street, postal code, city, telephone, email, social media profile name, bank details and videos as well as the date/time of registration and the IP address from which the registration was received will be processed.
We need this information to know that you have entered our competition, to verify your eligibility, to determine the winner, and to inform you if you have won. If you do not provide this information, we unfortunately cannot allow you to participate in the competition.
Marketing (general)
Depending on what you have voluntarily provided to us, the data we process may include:
• Your contact details (name, address, telephone number, email address, etc.)
• Content of the previous contractual relationship
Who will your data be shared with?
Your data may be passed on in whole or in part, but only to the extent and to the extent necessary, to the following responsible parties:
• Banks and payment service providers (payment transactions)
• Tax advisor (accounting – Austria)
• Debt collection agencies (debt collection – Austria)
• Legal representative (law enforcement – Austria)
• Courts (Law Enforcement – Austria)
• Administrative authorities (Austria)
• Facebook page of DoPetMe GmbH: https://www.facebook.com/people/Dopetme/100076222501339/?_rdr, Meta Platforms Inc. (USA)
• Instagram page of DoPetMe GmbH: https://www.instagram.com/dopetme/ Meta Platforms Inc. (USA)
• DoPetMe GmbH TikTok channel: https://www.tiktok.com/@dopetme1 Tiktok Inc (USA)
• YouTube channel of DoPetMe GmbH: https://www.youtube.com/@dopetme, Alphabet Inc. (USA)
In addition, your data may be transferred to the following recipients as data processors; with all of them, we have concluded a data processing agreement and verified the appropriate technical and organizational measures (TOMs):
• Shopify Inc (web hosting, webmail - Canada)
• Klaviyo Inc (newsletter distribution - USA - Privacy Framework)
How long do we process your data?
Your data will be stored in a form that allows your identification only for as long as necessary for the purposes for which it is processed.
Information
By providing us with your data via contact form or email, or by contacting us by telephone or in person, you expressly consent to your data, including the personal data you have provided and any special categories of personal data you have provided unsolicited and voluntarily, being processed by us and the recipients listed above for the duration of the processing of the information in question.
If you contact us simply to obtain information from us, your data will therefore be deleted either immediately, depending on the content of the communication, or after a reasonable period of time corresponding to the content.
If you revoke your consent, we will (have) delete all of your data - including accumulated data - from all databases.
Customer account, orders
Once you cancel your purchase, the data we have stored will be deleted.
You can always delete all other data, including your user account, in the customer area.
If you register on our website, we will store your data for as long as your account exists.
Due to corporate and tax law requirements, we are required to store your address, payment, and order data for a period of seven years. If you contact us to conclude a contract, the data will be deleted at the end of the seventh year after the last receipt has been posted (Section 132 of the Federal Fiscal Code). Therefore, if a contract is concluded, all data from the contractual relationship will be stored until the end of this period.
However, after 2 years we restrict processing, meaning your data will only be used to comply with legal obligations.
Statutory retention obligations or contractual obligations, e.g., to customers under warranty or compensation claims or to contractual partners, are further grounds for continuing to store your data. (Article 6 (1) (c) GDPR; Article 17 (3) (e) GDPR).
The data categories name, address, purchased goods and date of purchase are also stored until the product liability expires (10 years).
Newsletter
The data you provide for the newsletter will only be stored by us for as long as you wish to receive the newsletter and beyond that only as long as we need the data to enforce or defend legal claims.
You can revoke your consent to the newsletter at any time with future effect by clicking on the link provided in every newsletter email, in writing via email, or by sending a letter to our contact address. Revoking your consent does not affect the legality of the processing of your data based on your consent up until the time of revocation. After revocation of your consent, the participant's collected and stored personal data will be deleted immediately.
DoPetMe Challenge
We will delete the data you provided during registration after the last draw at the latest.
In addition, we only store them as long as there is a legal obligation to do so or we need data to enforce or defend legal claims.
You can revoke your consent to the processing of your personal data, which you gave us for participation in the competition, at any time with future effect. Revoking your consent does not affect the legality of the processing of your data based on your consent up until the time of revocation. After revocation of your consent, the participant's collected and stored personal data will be deleted immediately.
Marketing (general)
Marketing data will be retained for 3 years after the last contact.
CONSENT
As the winner, your name and videos will be published. You consent to your name and the videos in which you appear being featured being posted online and included in printed advertising materials from DoPetMe GmbH. This consent is voluntary. You may refuse it without giving reasons and without incurring any disadvantages. You can revoke this consent at any time by contacting DoPetMe GmbH, Beethovenstraße 2, 4910 Ried im Innkreis, email: office@dopetme.com. Your revocation does not affect the legality of the data processing carried out up to the time of revocation.
I have read the privacy policy.
