Privacy

Privacy Policy fido-and-fluffy.com

Fido & Fluffy IconWe are legally obliged to inform you about the processing of your personal data on our website. The protection of your personal data is of great importance to us. This Privacy Policy provides detailed information about the processing of your data and your legal rights. The terms “personal data” and “processing” are used in accordance with the definitions provided in Article 4 of the DSGVO (GDPR).

Please note that we may update this Privacy Policy in the future, especially as we continue to develop our website, adopt new technologies, or if there are changes to the legal framework or relevant jurisprudence. We recommend that you regularly review the Privacy Policy and make a copy for your records.

Scope of application

The privacy policy applies to all users of the website www.fido-and-fluffy.com (Section I) as well as to all customers and suppliers of the company Pixelfant e.K. (Section II). In addition, the privacy policy provides information on the processing of personal data in connection with our presence on social media platforms (Section III). It does not apply to any linked websites or online presences of ours or other providers.

Responsible party/Data manager

The responsible party/data manager for the processing of personal data within the scope of application of this data protection declaration is:

Pixelfant e.K.
Weserberglandstraße 29
48527 Nordhorn
Deutschland

Tel.: +49 5921 850 803 9
E-Mail: [email protected]

Your rights

You hold the following rights with regard to the personal data concerning yourself, and you can claim these rights from ourselves as follows:

  • Right of information: You can require information under Article 15, GDPR, concerning your personal data as processed by ourselves.
  • Right of amendment: Should any of the information concerning yourself not (or no longer) be correct, then under Article 16, GDPR, you can require amendment. If your data is incomplete, then you can require that it be supplemented.
  • Right of erasure: You can require the erasure of your personal data under Article 17, GDPR. • Right of restriction of processing: Under Article 18, GDPR, you are entitled to require that your personal data be restricted.
  • Right of objection to processing: You have the right at any time to object – for reasons relating to your particular situation – to the processing of our personal data as conducted under Article 6, paragraph 1, clause 1, subclause (e) or subclause (f), GDPR, in pursuance of Article 21, paragraph 1, GDPR. In that event, we will discontinue processing your data unless we are able to prove that there are urgent, protectable reasons for the processing which outweigh your own interests, rights and freedoms if the purpose of the processing is in order to claim and to exercise – or to defend against – legal entitlements (refer Article 21, paragraph 1, GDPR). Furthermore, under Article 21, paragraph 2, GDPR, you are entitled at any time to raise an objection against the processing of personal data relating to yourself for purposes of direct advertising; and the same is applicable to any instance of profiling to the extent that it is associated with the above-mentioned direct advertising. In this Data protection declaration, we indicate your right of objection as associated with the corresponding processing.
  • Right of revocation of your consent: If you previously issued consent for processing, then, under Article 7, paragraph 3, GDPR, you hold a right of revocation.
  • Right for transferability of data: You are entitled to receive the personal data concerning yourself – which you have provided for ourselves – in a structured, currently processable and machine-scannable format (“transferability of data”) together with the right to have this data forwarded to a different responsible party/data manager, subject to fulfilment of the pre-requisites under Article 20, paragraph 1, clauses (a) and (b), GDPR, (refer Article 20, GDPR).

You can exercise your rights by contacting the contact details mentioned in the “Responsible party” section.

If you believe that the processing of your personal data violates data protection laws, you also have the right under Art. 77 of the GDPR to lodge a complaint with a supervisory authority of your choice.

I. Using our website

1. Access details

The rules state that you are able to visit our website – purely in order for you to gain information – without having to disclose your identity. When individual pages of the website are visited for that purpose, all that will be released will be the contact details for our website provider, thus enabling you to gain a display of the website. In this context, the following data is processed:

  • Browser type/browser version,
  • Employed operating system,
  • Language and version of browser software,
  • Date and time of access,
  • IP address,
  • Content of request (specific website),
  • Access status/HTTP status code,
  • URL referrer (previously visited website),
  • Indication as to whether the visit was successful and
  • Quantity of data transferred
  • Difference in time zone relative to GMT.

The temporary processing of this data is necessary to enable the functioning of a website visit and the delivery of the website to your device. The access data is not used to identify individual users and is not merged with other data sources. Further storage in log files is done to ensure the functionality of the website and the security of information technology systems. The legal basis for processing is Art. 6(1)(f) of the GDPR. Our legitimate interests lie in ensuring the functionality, integrity, and security of the website.

2. Cookies and other functions

On our website, cookies and other functions are used, and these carry out the processing of our users’ terminals information and personal data. Some of them are urgently needed (“essential cookies”), whilst others fulfil the function of incorporating external elements, statistical analysis, company attribution or reach measurement.

2.1 Data protection settings

We have integrated a consent management tool on our website to request your consent for the use of cookies or similar functions. Through the “Privacy Settings,” you can provide or decline your consent for specific functionalities of our website, such as the integration of external elements, statistical analysis, and audience measurement. You have the option to either accept all functionalities (“Accept All”) or only allow essential cookies (“Accept Essential Cookies”). You can also grant your consent for specific purposes or functions individually. Your chosen settings can be changed at any time. The consent management tool enables you to have control over the setting of cookies and similar functions and adjust your preferences while using our website. Personal data and information about the devices used are processed when using the consent management tool.

The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interests in the processing lie in storing user settings and preferences regarding the use of cookies and other functionalities. User settings are stored through a cookie with a duration of one year. After the expiration of the storage period, consent will be requested again. The user settings made will then be stored again for this period.

2.2 Essential cookies

Essential cookies are required for basic website functions. This assures that the website will operate correctly. On our website, urgently required cookies are stored for the following purposes:

  • Log-in details: This cookie is a magnolia standard session cookie. When a user logs in, it will store the session ID. Accordingly, the logged-in user can be recognised and will be granted access to protected areas.
     
  • Cookie opt-in: This comprises the selected data protection settings.

The legal basis for this processing is Article 6, paragraph 1, clause 1, subclause (f), GDPR. Our justified interests in processing relate to providing the above-mentioned particular functionalities so that the use of the website is configured to be more attractive and more effective. You can file an objection to this processing. Your right of objection will be applicable for reasons arising from your particular situation. You can prevent cookie-based data processing as follows: by deactivating or restricting or deleting cookies, in the settings for your browser software or by opening “Private mode” in the browser which you use.

Borlabs Cookie

For the cookie opt-in, we use the WordPress plugin by Borlabs (https://borlabs.io/borlabs-cookie/).
You can adjust your cookie settings here.

Wordfence

We have integrated Wordfence on this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter referred to as “Wordfence”).

Wordfence is used to protect our website against unwanted access or malicious cyber attacks. For this purpose, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can compare its databases with the access made on our website and block them if necessary.

The use of Wordfence is based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in effectively protecting their website against cyber attacks. If consent has been requested, processing will be carried out solely on the basis of Art. 6(1)(a) of the GDPR; consent can be revoked at any time.

The transfer of data to the USA is based on the European Commission’s Standard Contractual Clauses. For more details, please refer to: https://www.wordfence.com/help/general-data-protection-regulation/.

2.3 Statistical analysis

Google Analytics

To optimize our website according to user interests, we use “Google Analytics,” a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. “Google Analytics” uses “cookies” (refer to the “Cookies” section above) that are stored on your device. With the help of these cookies, “Google” processes the information generated about your use of our website through your device, such as accessing a specific webpage, and processes the data mentioned in the “Usage of our Website” section, including your IP address, browser information, the previously visited website, and the date and time of the server request, for the purpose of statistical analysis of website usage. It may also determine whether different devices belong to you or your household. This website uses “Google Analytics” with the extension “anonymizeIp()” to further process IP addresses in a shortened form to significantly hinder identification. According to “Google,” your IP address is truncated within the member states of the European Union beforehand. Only in exceptional cases will the full IP address be transmitted to a “Google” server in the United States and truncated there. On our behalf, “Google” will process this information to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website usage, as separately indicated. The IP address transmitted by your browser for these purposes is not combined with other data from “Google.” The legal basis for the processing is your consent pursuant to Art. 6(1)(a) of the GDPR. “Google” may process the data in the United States as well. There is no adequacy decision by the European Commission for data transfers to the United States; the legal basis for the transfer to the United States is your consent pursuant to Art. 49(1)(a) of the GDPR. Your data associated with “Google Analytics” will be deleted no later than fourteen months. Further information on data protection at “Google” can be found at: http://www.google.de/intl/de/policies/privacy.

You can revoke your consent for processing and the transfer to third countries at any time by sliding the toggle in the “Settings” of the privacy settings. The revocation does not affect the lawfulness of processing based on the consent before its withdrawal.

Google Tag Manager

We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, store cookies, or perform independent analysis. It is solely used for the management and deployment of the tools integrated through it. However, the Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in quickly and easily integrating and managing various tools on their website. If appropriate consent has been obtained, processing is based solely on Art. 6(1)(a) of the GDPR; consent can be revoked at any time.

2.4 Marketing

Google Ads Conversion

We use the “Google Ads” service provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001), in order – with the aid of advertising media (formerly referred to as “Google AdWords”) on external websites — to draw attention to our attractive offers. By consulting the details gathered from advertising campaigns, we can draw conclusions as to how successful individual advertising measures have been. These advertising measures are supplied by “Google” by way of “ad servers”. For that purpose, we use “ad server” cookies which make it possible to measure certain parameters relating to reach measurement, such as the fading in of advertisements or clicks applied by the user. To the extent that you visit our website by way of having selected a “Google” advertisement, a “cookie” will be stored by “Google Ads” on your terminal. By means of “cookies”, “Google” processes the information generated from your terminal, referring to interactions with our own advertising media (calling up a given Internet page or clicking on a promotion/advertisement) and the data are mentioned in the section entitled “Utilisation of our website”, with particular reference to your IP address, browser details, the previously visited website and the date and time of the server request – in order to analyse and to display our advertisements’ reach measurement. For this purpose, it is also possible to determine whether various terminals belong to yourself or to your household. Corresponding to the marketing tool employed, your browser will automatically set up a direct connection with Google’s server. If you are registered with a “Google” service, “Google” is able to attribute the visit to your user account. Even if you are not registered with “Google” and are not logged in, it is possible for the provider to learn of your IP address and to process it. We receive statistical analyses from Google purely in order to gauge the effectiveness of our advertising media. The legal basis for this processing is your consent under Art. 6 paragraph 1 clause 1, subclause (a), GDPR. To some extent, “Google” also processes the data in the USA. When it comes to the transfer of data to the USA, there is no adequacy decision from the EU Commission; the legal basis for forwarding (of data) to the USA is your consent under Article 49, paragraph 1, clause 1, subclause (a), GDPR. The storage period with “Google” is a maximum of 24 months. You can find out more information about data protection and the storage period with “Google” by visiting: policies.google.com/privacy. It is possible to revoke your consents for processing and third-party country transfer at any time by resetting the controller under “Settings” for the consent tool. This does not, as the result of the revocation, affect the legitimacy of processing conducted on the basis of consent before the revocation was applied.

Google AdSense

Our website uses Google AdSense. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense is used to integrate advertisements and uses cookies. Cookies are small text files, as described above. Google AdSense also uses web beacons, which are invisible graphics that enable the analysis of visitor traffic on our website.

Information generated by cookies and web beacons is transferred to and stored on Google servers. The servers are located in the United States. However, Google will not merge your IP address with any other data you have stored.

The storage of AdSense cookies is based on Art. 6(1)(f) of the GDPR. As website operators, we have a legitimate interest in analyzing user behavior in order to optimize our website and advertising.

With a modern web browser, you can monitor, restrict, or block the setting of cookies. Disabling cookies may result in limited functionality of our website. By using our website, you consent to Google processing the data collected about you in the manner and for the purposes described above.

Amazon Affiliate program

As a participant in the Amazon EU Partner Program, links to Amazon.de are integrated on our website, through which we can earn advertising fees.

Amazon EU uses cookies to recognize that the partner link on our website has been clicked and to track the origin of orders. The storage of these cookies described above is based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in this, as the amount of affiliate compensation can only be determined through the use of these cookies.

For more information about data usage by Amazon, please refer to Amazon’s privacy policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010

Awin Affiliate program

During your visit to this website, personal data is processed. The processed data categories include data about the usage of the website and logging of clicks on individual elements. The purpose of the processing is to analyze user behavior, evaluate the effectiveness of online marketing measures, and select online advertisements on other platforms automatically based on user behavior through real-time bidding. The legal basis for the processing is your consent under Art. 6(1)(a) of the GDPR. Data is transmitted to the independent controller AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany (https://www.awin.com/). The legal basis for the data transfer to AWIN AG is your consent under Art. 6(1)(a) of the GDPR. The duration of the processing varies and ends with the cessation of the purpose of processing.

Advanced Ads

Advanced Ads is a WordPress plugin from Germany used for managing advertisements.

Advanced Ads does not transfer any visitor data to the provider itself or any third party.

The use of Advanced Ads is based on our legitimate interest in integrating advertising on our website to finance it. The legal basis for the processing is therefore Article 6(1)(f) of the GDPR.

Information about the third-party provider: Advanced Ads GmbH, Schuhhagen 1, 17489 Greifswald, [email protected]

You can find the provider’s privacy policy at: https://wpadvancedads.com/privacy-policy/

Zoho

We use Zoho CRM on this website. The provider is Zoho Corporation Pvt. Ltd., Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India (hereinafter referred to as “Zoho CRM”).

Zoho CRM enables us to manage existing and potential customers, as well as customer contacts, and organize sales and communication processes. The use of the CRM system also allows us to analyze and optimize our customer-related processes. Customer data is stored on Zoho CRM servers. Details about the features of Zoho CRM can be found here: https://www.zoho.com/crm/help/getting-started/key-features.html.

The use of Zoho CRM is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in efficient customer management and communication. If the appropriate consent has been obtained, the processing is based exclusively on Article 6(1)(a) of the GDPR; consent can be revoked at any time.

The transfer of data to third countries outside the European Union is based on the European Commission’s standard contractual clauses. Details can be found here: https://www.zoho.com/privacy/dpa/DPA_zoho_com.pdf.

Please refer to Zoho CRM’s privacy policy for further details: https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html.

Data Processing Agreement: We have entered into a data processing agreement with Zoho CRM. This is a legally required contract that ensures Zoho CRM processes the personal data of our website visitors only on our instructions and in compliance with the GDPR.

2.5 External content

Google Maps

This website uses the “Google Maps” service provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) for purposes of displaying cards and/or sections of cards and thus provides you with user-friendly utilisation of the card function on the website. As the result of the visit to the website, “Google” is informed that you have selected the corresponding subsidiary page on our website. To some extent, furthermore, the data which is referred to in the Section entitled “Utilisation of our website” and “cookies” will be forwarded to “Google”. This takes place irrespective of whether “Google” has provided a user account by means of which you are logged on, and irrespective of whether there is no user account, at all. Once you are logged into “Google”, your data is directly attributed to your account. If you do not wish your profile to be attributed with “Google”, then you will have to log out before you activate the corresponding button. “Google” stores your data as utilisation profiles and processes it – irrespective of whether there is a user account with “Google” – for purposes of advertising, market research and/or the targeted configuration of its website. The legal basis for this processing is Article 6, paragraph 1, clause 1, subclause (a), GDPR. To some extent, Google also processes the data in the USA. When it comes to the transfer of data to the USA, there is no adequacy decision from the EU Commission; the legal basis for forwarding (of data) to the USA is your consent under Article 49, paragraph 1, clause 1, subclause (a), GDPR. You can find out more information about the purpose and scope of processing on the part of the plug-in provider, and the storage period with “Google Maps“ by visiting www.google.de/intl/de/policies/privacy.
It is possible to revoke your consent for processing and third-party country transfer at any time by resetting the controller under “Settings” for the consent tool. This does not, as the result of the revocation, affect the legitimacy of processing conducted on the basis of consent before the revocation was applied.

YouTube

On the website, we use plug-ins from the video platform of “YouTube.de” and/or “YouTube.com”, a service provided by YouTube LLC (head office address: 901 Cherry Avenue, San Bruno, CA 94066, USA; hereinafter referred to as “YouTube”), for which “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) is the responsible party/data manager as defined under data protection regulations. Our purpose in practising this incorporation is also to include, on our website, visual content (“videos”) which we have published on “YouTube.de” and/or “YouTube.com”. In the course of utilisation of the streaming function, there is also processing of information which has been stored on your terminal (e.g. the IP address). The videos are incorporated in “extended data protection mode”, i.e. no data concerning yourself as a user is transmitted to “YouTube” if you do not play the videos. During the playing of videos of our website, “YouTube” will be informed that you selected the corresponding subsidiary page of our website. To some extent, furthermore, the data which is referred to in the Section entitled “Utilisation of our website” will be forwarded to “Google”. This takes place irrespective of whether “YouTube” has provided a user account by means of which you are logged in, and irrespective of whether there is no user account at all. Once you are logged into “Google”, your data is directly attributed to your account. If you do not wish your profile to be attributed with “YouTube”, then you will have to log out before you activate the corresponding button. “YouTube” stores your data as utilisation profiles and processes it – irrespective of whether there is a user account with “Google” – for purposes of advertising, market research and/or the targeted configuration of its website. The legal basis for this processing is Article 6, paragraph 1, clause 1, subclause (a), GDPR. To some extent, Google also processes the data in the USA. When it comes to the transfer of data to the USA, there is no adequacy decision from the EU Commission; the legal basis for forwarding (of data) to the USA is your consent under Article 49, paragraph 1, clause 1, subclause (a), GDPR. You can find out more information about the purpose and scope of processing on the part of “YouTube” and the storage period with “YouTube” by visiting policies.google.com/privacy.
It is possible to revoke your consent for processing at any time either by notifying ourselves (refer contact details in the Section entitled “Responsible party/data protection officer or by resetting the controller under “Settings” in the consent tool. This does not, as the result of the revocation, affect the legitimacy of processing conducted on the basis of consent before the revocation was applied.

3. Making contact with our Company

When contacting our company, for example, by email or through the contact form on the website, the personal data you provide will be processed by us to respond to your inquiry. The provision of a valid email address and your message is mandatory for processing inquiries through the contact form on the website. At the time of sending the message to us, your IP address, date, and time of the transmission are also processed. The legal basis for the processing is Article 6(1)(f) of the GDPR or Article 6(1)(b) of the GDPR if the contact aims at concluding a contract. The processing of personal data from the input mask serves solely to process the contact, which also constitutes our legitimate interest in processing the data. The other data processed during the transmission are used to prevent misuse of the contact form and to ensure the security of our information technology systems. In this context, the data will not be disclosed to third parties. We delete the data collected in this context once the processing is no longer necessary or restrict the processing to comply with existing legally mandatory retention obligations if applicable.

You have the right to object to the processing. Your right to object applies if there are reasons that arise from your particular situation. You can send us your objection using the contact information provided in the “Responsible party” section.

4. Newsletter

You have the opportunity to subscribe – on the website – to our email newsletter by means of which we will regularly send you information on the following content:

  • Product information
  • Invitations to events, fairs or webinars
  • General Information about the offerings of Fido & Fluffy (fido-and-fluffy.com)

For the subscription to our newsletter, a valid email address is required. If you can subscribe to additional newsletters on any of our websites (e.g., for job offers), you will receive further information about the newsletter content at the appropriate place. The registration for our email newsletter takes place in a double opt-in process. After entering the data marked as mandatory, we will send you an email to the email address you provided, asking for your explicit confirmation of the newsletter subscription (by clicking on a confirmation link). This ensures that you actually wish to receive our email newsletter. If the confirmation is not received within 24 hours, we will block the information transmitted to us and automatically delete it after a maximum of one month. Upon your confirmation, we process the email address and any other voluntarily provided data of the respective recipient for the purpose of sending our email newsletter. The legal basis for processing is Art. 6(1)(a) GDPR. We delete this data when you unsubscribe from the newsletter.

You can revoke your consent to the processing of your email address for receiving the newsletter at any time, either by sending us a message (see the contact details in the “Responsible” section) or by using the unsubscribe link provided in the newsletter. The revocation does not affect the lawfulness of the processing based on the consent before its withdrawal.

At the time of subscription, we also process your IP address, the time of newsletter registration, and the time of your confirmation to document your newsletter subscription and prevent abuse of your personal data. The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest in this processing is fraud prevention. We delete this data at the latest when the newsletter subscription ends.

Furthermore, when sending the newsletter, we analyze the open and click rates of our newsletters. For this analysis, the emails sent contain web beacons or tracking pixels, which are one-pixel image files that are also embedded on our website. The processing is carried out for the purpose of analyzing the reading behavior of our newsletters. We determine when you read our newsletters, which links you click on, and infer the interests of our customers from this information. The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interests in this processing are measuring reach, conducting statistical analyses of our newsletters, and optimizing our email advertising. The information is processed for as long as you have subscribed to the newsletter. After unsubscribing, we process the data purely on a statistical and anonymous basis.

We would like to inform you that you can object to receiving direct advertising and the processing for the purpose of direct advertising at any time, without incurring any costs other than the transmission costs at the basic rates. You have a general right to object without giving reasons (Art. 21(2) GDPR). To exercise this right, click on the unsubscribe link in the respective email or send your objection to the contact details provided in the “Responsible party” section.

5. Webhosting

We host the content of our website with the following provider:

Mittwald CM Service GmbH & Co. KG

Königsberger Straße 4-6, 32339 Espelkamp (nachfolgend Mittwald).

For details, please refer to Mittwald’s privacy policy: https://www.mittwald.de/datenschutz.

The use of Mittwald is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring a reliable presentation of our website. If consent has been obtained, the processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) German Telemedia Act (TTDSG), insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the aforementioned service. This is a legally required contract that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

6. Social Media

We do not use any “social media plug-ins”. At various points on our website, however, we do offer you the option of visiting our presences on social networks such as Facebook, Twitter, LinkedIn, XING and YouTube. If you click on the respective logo or name of a social network, you will be forwarded – via a link – to our corresponding presence.
Before you click on the logos or links – meaning that you will be forwarded to the corresponding social network website – none of your personal data will be forwarded to the social networks. It’s only possible for your personal data to reach the respective social network and be processed by it once you have clicked on the corresponding logo on our website and have been forwarded to the social network’s website. Personal data will be processed in particular once you are logged in to your respective social media account and once the content – associated with your account – has been posted on social networks. Furthermore, though, data – such as your IP address, for example – can also be processed even if you do not have any social media account. Neither can we exert any influence on the logged data and the data processing procedures, nor are we aware of the full extent of data logging, the purposes for which the processing is conducted and the periods for which the data may come to be stored. Nor do we hold any information concerning the erasure of the logged data on the part of the respective social network. You should be able to find out more about the purpose and the extent of data logging and of its processing, by consulting the respective network’s data-protection declaration. There, you will also gain further information concerning your entitlements in this connection, and your setting options when it comes to protecting your privacy:

Twitter: twitter.com/de/privacy

Facebook: de-de.facebook.com/policy.php

Instagram: www.facebook.com/help/instagram/155833707900388/

YouTube: policies.google.com/privacy

Pinterest: policy.pinterest.com/de/privacy-policy

Behance: adobe.com/privacy.html

II. Customers and suppliers

1. Processing for contractual purposes

We process our customers’ and suppliers’ personal data – and their employees’ corresponding data (for example, the name and contact details of the contact person) — if and to the extent that this is necessary in order to set up, to establish, to apply and/or to terminate a transaction with our company. The corresponding legal basis for this is to be found under Article 6, paragraph 1, clause 1, subclause (b), GDPR. You will need to provide your data for purposes of negotiating the contract, and you will be under contractual obligation to provide your data. You will not be able to negotiate and/or apply any contract without having provided your data. Once the due purpose has been achieved (e.g. processing of the contract), personal data is blocked from further processing and/or erased, unless we are entitled to conduct further processing under a consent issued by yourself (e.g. consent for processing of your email address so that we can send you our newsletter), a contractual agreement, a legal authorisation (e.g. authorisation to send you “existing customer” advertising) or on the basis of justified interests (e.g. storage for purposes of enforcing claims). Your personal data is forwarded to third parties to the extent that

  • this is necessary in order to establish, to operate or to terminate legal transactions with our company (e.g. where data is forwarded to a payment services provider/dispatch firm for purposes of processing a contract with yourself), (refer Article 6, paragraph 1, clause 1, subclause (b), GDPR, or
  • where this data is needed by a subcontractor or by agents whom we have specifically appointed in order to provide the offers or services you have requested (such providers are entitled to process your data – unless you are specifically informed otherwise– only to the extent required in order to provide the offer or the service) or
  • an enforceable official order (refer Article 6, paragraph 1, clause 1, subclause (c), GDPR, has been issued, or
  • an enforceable Court order has been issued (refer Article 6, paragraph 1, clause 1, subclause (c), GDPR, or
  • if we are legally required to do so by law (refer Article 6, paragraph 1, clause 1, subclause (c), GDPR), or if
  • the corresponding processing is necessary in order to protect the vital interests of the data subject or of any other individual (refer Article 6, paragraph 1, clause 1, subclause (d), GDPR, or
  • if this is necessary in order to carry out an action in the Public interest or in the event of one which is imposed by the Authorities on a compulsory basis (refer Article 6, paragraph 1, clause 1, subclause (e), GDPR, or
  • if we can validly invoke our own overriding, well-founded interests – or those of a third party – with regard to disclosure (refer Article 6, paragraph 1, clause 1, subclause (f), GDPR.

Your personal data will not be forwarded to any further extent to other persons, companies or offices unless you have given valid consent for such forwarding of data. The legal basis for this processing is Article 6, paragraph 1, clause 1, subclause (a), GDPR. In the context of this data-protection briefing concerning the respective processing procedures, we will inform you of the identity of the corresponding recipients of the data.

2. Online-Shop

2.1 Online-shop & Payment

We use your personal data for processing your online purchases (your orders and returns are handled through our online services) and for sending notifications about the delivery status or notifications regarding any issues with the delivery of your items. We use your personal data for processing your payments. We also use your data for handling complaints and product warranty claims. Your personal data is used to verify your identity, ensure that you have reached the legal minimum age for online purchases, and match your address with external partners. We aim to offer you multiple payment options and conduct analyses to determine which payment methods are available to you, including your payment history and credit checks.

If you choose to pay with one of the online payment service providers offered by us during the ordering process, your contact details will be transmitted to them as part of the resulting order. The personal data transmitted to the online payment service provider usually includes first name, last name, address, IP address, email address, or other data necessary for order processing, as well as data related to the service, such as type of service, recipient’s identity, invoice amount, and taxes in percentage, invoice information, etc. This transmission is necessary to perform the service with the payment method you have selected, particularly to confirm your identity, administer your payment, and manage the customer relationship. However, please note that personal data may also be disclosed by the online payment service provider to service providers, subcontractors, or other affiliated companies as required to fulfill the contractual obligations of your order or for the processing of personal data on behalf of the provider. Depending on the selected payment method, such as invoice or direct debit, the personal data transmitted to the provider may be transmitted by the provider to credit agencies. This transmission is for the purpose of identity and credit checks related to your order. For information on the credit agencies involved and the data generally collected, processed, stored, and disclosed by the respective provider, please refer to the privacy policies of the providers.

Legal Basis

The legality of the data transfer is based on Article 6(1)(b) of the GDPR, for the performance of the payment method you have chosen, as well as our legitimate interests pursuant to Article 6(1)(f) of the GDPR, to enable a user-friendly and uncomplicated payment process. Furthermore, our legal basis is to fulfill the purchase contract concluded with you, in accordance with Article 6(1)(b) of the GDPR.

Recipient

The recipient is the respective payment service provider, such as:

  • American Express Services Europe Ltd., Mastercard SA,
  • Visa Europe Services Inc.,
  • PayPal (Europe) S.à.r.l. & Cie. S.C.A.,
  • Amazon Payments Europe s.c.a. (sekundär von Amazon EU SARL, Amazon Services Europe SARL und Amazon Media EU SARL),
  • Stripe Inc. oder micropayment GmbH.

Further information regarding the recipients:

Transfer to Third Countries

A transfer of data to a third country may take place, if applicable.

Duration of Processing

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Furthermore, the data will be deleted if you revoke your consent or request the deletion of personal data.

2.2 Trusted Shops Trustbadge®

Description & Purpose

On our website, we use the Trustbadge® plug-in or widget provided by Trusted Shops. Trusted Shops is operated by Trusted Shops GmbH, Colonius Carré, Subbelrather Straße 15c, 50823 Köln, Germany, Phone: 0221 – 77 53 66, Fax: 0221 – 77 53 6 89, Email: [email protected].

Through the Trusted Shops Trustbadge® plug-in or widget, we present you with a summary of our current profile on Trusted Shops directly on our website. This allows you to see how other users have rated us and what position we hold on Trusted Shops. By integrating the Trustbadge, you can easily find our profile, gather further information about us, and also leave a review.

The purpose of processing the data is to integrate a summary of our Trusted Shops profile on our website, particularly to display our Trusted Shops trustmark and any collected reviews.

The Trusted Shops plug-in or widget is integrated on our website via an interface (“API”) to Trusted Shops using JavaScript. The Trustbadge also utilizes cookies.

When accessing the Trustbadge, the web server automatically stores a server log file, which may contain your IP address, the amount of data transmitted, the date and time of the access, and the requesting provider (access data), as well as documenting the access. These access data are not evaluated.

Further personal data is only transferred to Trusted Shops if you have given your consent, have decided to use Trusted Shops products after completing an order, or have already registered for use. In such cases, the contractual agreement between you and Trusted Shops applies.

We do not collect any data when you view the Trustbadge.

Legal Basis

The legal basis for the processing of personal data described here is Art. 6(1)(f) of the GDPR. Our legitimate interest is to present visitors of our website with our profile and rating on Trusted Shops, in order to provide them with an initial impression of our business. Additionally, we have a legitimate interest in ensuring that visitors to our website are directed to our correct profile, preventing them from accessing false Trusted Shops profiles with similar or identical names through web searches. Trusted Shops also has a legitimate interest in improving its services and offerings.

Recipient

For information about other service providers potentially used by Trusted Shops, please refer to:

https://shop.trustedshops.com/de/datenschutz

Transfer to Third Countries

For information regarding the potential transfer of data to third countries by Trusted Shops, please refer to:

https://shop.trustedshops.com/de/datenschutz

Duration of Data Processing

According to Trusted Shops, the data is automatically overwritten no later than seven days after the end of your website visit.

Contractual or Legal Obligation to Provide Personal Data

The provision of personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are also not obliged to provide personal data. However, not providing such data may result in you being unable to use this function of our website, or not being able to use it to its full extent.

Additional Data Protection Information

For further information on data protection at Trusted Shops, please visit: https://shop.trustedshops.com/de/datenschutz

2.3 WooCommerce

Description and Purpose

Through our website, we offer products and downloadable products for purchase using the WooCommerce service. When you click on one of our product buttons, you will leave our website and be redirected to our individual sales page. The service is provided by Automattic Inc., 60, 29th Street #343, San Francisco, CA 94110-4929, USA.

Legal Basis

The legal basis for the processing of personal data is the fulfillment of a contract under Art. 6(1)(b) of the GDPR.

Recipient

The recipient is Automattic Inc., 60, 29th Street #343, San Francisco, CA 94110-4929, USA.

Transfer to Third Countries

Data is transferred to the USA.

Duration of Data Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you revoke your consent or request the deletion of personal data.

Right to Object

You have the possibility to revoke your consent to data processing at any time. Revoking consent does not affect the legality of data processing that occurred prior to the revocation.

Contractual or Legal Obligation

There is no contractual or legal obligation to provide the data.

Additional Data Protection Information via Linkhttps://automattic.com/privacy/

3. Existing customer advertising

We reserve the right to use our customers’ emails as disclosed in the course of our business relationship within the legally permitted framework, in order to email to you (either during or following your order) some items of content as listed below unless you have already objected to this type of processing of your email address:

  • Product information
  • Invitations to events, fairs or webinars
  • News concerning Fido & Fluffy (fido-and-fluffy.com) in general

If the transmission of electronic information is necessary for the fulfillment of the contract (e.g., informational emails), the processing is based on the legal basis of Art. 6(1)(b) of the GDPR. You are contractually obligated to provide your data. If you do not provide your data, it is not possible to send electronic information as part of the contract execution through email. If the transmission of electronic information is not necessary for the fulfillment of the contract (e.g., informational emails), the processing is based on the legal basis of Art. 6(1)(f) of the GDPR. Our legitimate interests in the mentioned processing are to enhance and optimize our services, send direct advertising, and ensure customer satisfaction. We will delete your data when you terminate your use, but no later than three years after the termination of the contract. We would like to inform you that you can object to receiving direct advertising and the processing for the purpose of direct advertising at any time, without incurring other costs than the transmission costs at the basic rates. You have a general right to object without stating reasons (Art. 21(2) of the GDPR). To exercise this right, you can click on the unsubscribe link in the respective email or send your objection to the contact details provided in the “Responsible party” section. 

III. Presence on social media networks

1. General information

We maintain publicly accessible profiles (hereinafter collectively referred to as “our profiles”) on various social networks. Your visit to our profiles initiates a variety of data processing operations. Below, we provide an overview of the personal data collected, used, and stored by us when you visit our profiles. You are not obliged to provide us with your personal data. However, this may be necessary for certain functionalities of our profiles on social networks. These functionalities may not be available to you or may be limited if you do not provide us with your personal data.

When you visit our profiles, your personal data is not only collected, used, and stored by us but also by the operators of the respective social network. This also applies if you do not have a profile on the respective social network yourself. The individual data processing operations and their scope vary depending on the operator of the respective social network, and they are not necessarily traceable by us. Please refer to the privacy policies of the respective operator for details on the collection and storage of your personal data, as well as the nature, scope, and purpose of its use by the operator of the respective social network:

Facebook: You can view the privacy policy for the social network Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, at https://www.facebook.com/about/privacy/update?ref=old_policy.

Instagram: You can view the privacy policy for the social network Instagram, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA, at https://help.instagram.com/155833707900388.

YouTube: You can view the privacy policy for the social network YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, at https://policies.google.com/privacy.

Pinterest: You can view the privacy policy for the social network Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street Dublin 2, Ireland, at policy.pinterest.com/de/privacy-policy.

Behance: You can view the privacy policy for the social network Behance, operated by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland, at https://www.adobe.com/de/privacy/policy.html.

Twitter: You can view the privacy policy for the social network Twitter, operated by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland, at https://twitter.com/de/privacy.

2. Product Advertising and Communication with Users

The use of our profiles serves the purpose of advertising our products and communicating and engaging with customers. In the course of using our profiles, we process personal data such as your name, profile picture, and information you have provided through interactive features (e.g., commenting, sharing, and rating). The legal basis for operating our profiles and processing personal data is Art. 6(1)(f) of the GDPR. Our legitimate interest lies in promoting our products through our profiles and engaging in communication with customers.

When visiting our profiles, data may be processed outside the European Union, particularly in the United States. There is no adequacy decision by the European Commission for data transfers to the USA. For further information regarding potential data transfers to a third country and the relevant legal basis, please refer to the privacy policies of the social networks.

We do not have control over the storage duration of your personal data that you have published on our profiles. We store your data until the purpose of processing is achieved, or we restrict processing if there are legal retention obligations. For more information on data protection and storage duration, please consult the privacy policies of the social networks linked above.

You have the right to object to the processing of your personal data. Your right to object applies when there are reasons arising from your particular situation. You can submit your objection to us using the contact details provided in the “Responsible party” section.

You can adjust your cookie consent at any time using the following button: