Privacy Policy PetCom Tierernährung GmbH & Co. KG

We have designed our website with the aim of collecting as little personal data from you as possible. In doing so, we always ensure that your personal data is processed only in accordance with a legal basis or your explicit consent. We comply with the provisions of the General Data Protection Regulation (GDPR), which has been in effect since May 25, 2018, as well as all applicable national data protection laws, such as the Federal Data Protection Act (BDSG), the Telecommunications-Telemedia Data Protection Act (TTDSG), and any other relevant legislation.

Purpose and Legal Basis of Processing Personal Data. We process your personal data solely for specific purposes.
In summary, we process your data for the following purposes:

a) To handle your inquiries and contact requests (e.g., email address, first name, last name);

b) For registration to access our services;

c) To technically operate our website and provide you with information on it (e.g., IP address, cookies, browser information);

We always process your personal data for a specific purpose.

In summary, we process your personal data for the following purposes:

• To handle your inquiries and contact requests (e.g., email address, first name, last name);
• For registration to access our services;
• For the technical operation of our website and to provide you with information available on the site (e.g., IP address, cookies, browser information).

Legal Basis for the Processing of Personal Data:

The processing of personal data required for the establishment, performance, or termination of our service offerings (contract execution) is based on Article 6(1)(b) GDPR. Where we obtain your consent for the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis. Processing is also permitted if it is necessary for the purposes of our legitimate interests, provided that your interests or fundamental rights and freedoms with respect to the processing of personal data do not prevail (Article 6(1)(f) GDPR). Where we engage external service providers for data processing on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Article 28 GDPR.

When you use our website purely for informational purposes – that is, if you do not register or otherwise transmit information to us – we collect only the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display the website and to ensure its stability and security (legal basis: Art. 6(1)(f) GDPR):

• IP address

• Date and time of the request

• Time zone difference from Greenwich Mean Time (GMT)

• Specific content requested (concrete page)

• Access status/HTTP status code

• Amount of data transferred

• Referring website (the site from which the request originates)

• Browser type

• Operating system and its interface

• Language and version of the browser software

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers.

We use the following hosting provider:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

We have entered into a data processing agreement (DPA) with the aforementioned provider. This is a data protection–compliant agreement required by law, which ensures that this provider processes personal data of our website visitors only according to our instructions and in full compliance with the GDPR.

In addition to the data mentioned above, cookies are stored on your device when you use our website. For more information, please refer to the section "Cookies" in this privacy policy as well as to the consent management tool in use: https://www.consentmanager.net

Cookies are small text files that are stored on your device and save certain settings and data for exchange with our system via your browser. A cookie typically contains the name of the domain from which the cookie data was sent, as well as information about the cookie’s age and an alphanumeric identifier.

Cookies enable our systems to recognize your device and immediately apply any previously saved preferences. As soon as a user accesses the platform, a cookie is transferred to the user’s computer hard drive. Cookies help us improve our website and provide you with a better and more personalized service. They allow us to:

• Store information about your preferred activities on the website to tailor the site to your individual interests

• Speed up the processing of your requests

We also work with third-party services to make our website and offerings more attractive to users. As a result, cookies from these partner companies (third-party providers) are also stored on your hard drive when you visit the website. These cookies are automatically deleted after a specified period of time.

More detailed information about individual third-party providers can be found in our Cookie Consent Tool and the associated privacy policies stored there.

If you do not wish cookies to be used, you can set your browser to not accept cookies. Please note, however, that in this case, you may not be able to use our website in full or at all. If you want to allow only our own cookies and not those of our service providers and partners, you can configure your browser to block third-party cookies.

We assume no responsibility for the use of third-party cookies.

You can contact us by email or via our contact form. In this case, we will store the personal data you provide in order to process your request and to communicate with you regarding its resolution. If we request information via our contact form, we clearly mark the fields that are required for communication (with an asterisk). Any additional information you provide is voluntary and helps us to better understand your request and handle it more efficiently. All data is submitted voluntarily.

Depending on the nature of your inquiry, the legal basis for this data processing is either: Article 6(1)(b) GDPR, if your request relates to a pre-contractual measure you are initiating, or Article 6(1)(f) GDPR, if your inquiry does not fall under the scope of a contractual relationship. In this case, our legitimate interest arises from the purposes described in section 4. If we request personal data that is not required for contract performance or the protection of legitimate interests, we process such data based on your consent under Article 6(1)(a) GDPR.

You have the right to:

• Access (Art. 15 GDPR): Request information about the personal data we process about you. This includes details about the processing purposes, the categories of personal data, the recipients or categories of recipients to whom your data has been disclosed or will be disclosed, the intended storage duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data (if not collected from you), and the existence of automated decision-making including profiling and, where applicable, meaningful information about the details involved.

• Rectification (Art. 16 GDPR): Request the immediate correction of inaccurate personal data or the completion of incomplete data we have stored about you.

• Erasure (Art. 17 GDPR): Request the deletion of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

• Restriction of Processing (Art. 18 GDPR): Request the restriction of processing of your personal data if (i) you contest the accuracy of the data, (ii) the processing is unlawful and you oppose deletion, (iii) we no longer need the data but you require it to establish, exercise, or defend legal claims, or (iv) you have objected to processing pursuant to Art. 21 GDPR.

• Data Portability (Art. 20 GDPR): Receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request that it be transmitted to another controller.

• Withdrawal of Consent (Art. 7(3) GDPR): Withdraw your previously granted consent at any time. As a result, we may no longer continue any data processing based on that consent in the future.

• Lodge a Complaint (Art. 77 GDPR): Contact a supervisory authority to lodge a complaint. You may generally contact the supervisory authority of your place of residence or workplace, or the supervisory authority responsible for our company headquarters.

Right to Object
If your personal data is processed based on legitimate interests in accordance with Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time under Art. 21 GDPR, provided there are reasons arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without requiring a specific situation. If you wish to exercise your right of withdrawal or right to object, simply send an email to: datenschutz@gvo-ds.de

We protect our website through technical and organizational measures against the loss, destruction, access, alteration, or unauthorized disclosure of your personal data. In particular, your personal data is transmitted in encrypted form. We use SSL/TLS encryption (Secure Sockets Layer / Transport Layer Security) for this purpose. Our security measures are continuously improved in line with technological developments.

As a general rule, we delete personal data as soon as it is no longer required for the purpose for which it was originally collected and there are no legal retention obligations. The statutory retention periods determine the final duration for which personal data may be stored. Once these periods expire, the relevant data is routinely deleted. If retention periods apply, the processing of the data is restricted by blocking access to it.

When accessing external websites that are linked from within our website, you may again be asked to provide information such as your name, address, email address, browser details, etc. This privacy policy does not govern the collection, processing, or use of personal data by third parties. External service providers may have their own, differing policies regarding the handling of personal data. We therefore recommend that you carefully review the privacy policies of third-party websites before submitting any personal data.
Last updated: 11/2023