1. Controller
The controller responsible for data processing on this website is Simplify Data GmbH, Königsweg 48, 24114 Kiel, Deutschland.
Email: info@pet-connect.eu
Website: https://pet-connect.eu
2. General information
Protecting your personal data is important to us. We only process personal data to the extent necessary to provide a functional website, our PetConnect app integration, and our content and services, or when you voluntarily provide data to us.
Personal data means any information relating to an identified or identifiable natural person. Below we explain the type, scope and purpose of processing and your rights.
3. Hosting, server log files and encryption
Our website is hosted on servers operated by Contabo GmbH, Aschauer Straße 32a, 81549 München, Deutschland.
When you visit our website, the hosting provider automatically stores information in server log files. This may include IP address, date and time of the request, requested URL, browser type, operating system and referrer URL.
Processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in secure and stable operation of the website). We have concluded a data processing agreement with Contabo pursuant to Art. 28 GDPR. Log files are deleted after the applicable retention periods.
Transmission between your browser and our website is encrypted using TLS (HTTPS) where your browser supports it.
4. Web analytics with Matomo
We use Matomo on this website, an open-source tool for statistical analysis of visitor behaviour. Matomo is operated on our own infrastructure; no data is transferred to third parties for advertising purposes.
The following data may be processed: pages visited, date and time of access, referrer URL, shortened IP address, browser type and version, operating system and device type.
IP addresses are shortened before storage (IP anonymisation). We use this data solely to improve our offering and do not create personal user profiles for advertising purposes.
The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in analysing and optimising our website). You may object to this processing at any time (Art. 21 GDPR) by contacting us at the email address above.
5. Cookies and local storage
Our website uses technically necessary cookies and storage mechanisms to provide language settings, login sessions and basic functionality.
When you log in to your web account, we set a session cookie to recognise you as a logged-in user. Without this cookie, the protected account area cannot be used. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual or contractual measures) and Art. 6 (1) lit. f GDPR (legitimate interest in secure authentication).
Matomo may use first-party cookies (e.g. to distinguish returning visitors). See section 4 for details. You can restrict or delete cookies in your browser settings; this may limit website functionality.
6. Contact form
If you contact us via the contact form, we process the data you enter (name, email address, optional subject, message and selected language) to handle your enquiry.
Transmission takes place via our servers and is used by us to process your enquiry (e.g. sending it to us by email).
The legal basis is Art. 6 (1) lit. b GDPR if your enquiry relates to contract performance, or Art. 6 (1) lit. f GDPR (legitimate interest in responding to enquiries). Data is deleted when no longer required, at the latest after statutory retention periods expire.
7. Registration, login and web account
You can log in to our website with your PetConnect credentials. This involves processing your email address, name and your password (stored in encrypted form).
After successful login, you can use the protected “My account” area to view your profile, manage pets and shares, view walk groups, and manage your password and active sessions.
When using the account area, we process the data required for each function. Technical access data (e.g. IP address) may be recorded in server log files (see section 3).
To display active sessions, we process session information (e.g. device, browser, operating system, creation and expiry time, country/IP where applicable). You can end individual sessions in your account.
The legal basis is Art. 6 (1) lit. b GDPR (use of your account and provision of requested functions) and Art. 6 (1) lit. f GDPR (account security and abuse prevention).
8. Data sharing portal
Pet owners can create data shares for third parties (e.g. veterinarians or service providers) in the PetConnect app. Recipients receive an individual link and optionally a PIN to view shared pet data via our web portal.
When accessing the portal, we process data required for the share, e.g. share token, PIN entry, shared pet profiles, health and document data, and uploaded files. Where enabled for a share, two-factor authentication (2FA) via a one-time code may be required.
Recipients can view and download shared content in the portal. Content can be reported via a reporting function (e.g. for privacy concerns). We process reported information to review the case.
The legal basis for providing the portal is Art. 6 (1) lit. b GDPR (performance of the share set up by the pet owner) and Art. 6 (1) lit. f GDPR (secure provision and abuse prevention). The pet owner is responsible for the content and scope of each share.
9. Blog and news
Blog posts and categories are provided via our content management system. When retrieving blog content, technical data (e.g. IP address, browser information) may be processed to deliver the content.
The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in providing up-to-date content).
10. Online shop
The shop area provides product information. When visiting shop pages, technical data (e.g. IP address, browser information) may be processed.
If product views are recorded statistically, this serves to maintain and improve the shop. The legal basis is Art. 6 (1) lit. f GDPR.
If you place orders or create shop accounts in the future, we will process the necessary data pursuant to Art. 6 (1) lit. b GDPR for contract performance. We will inform you separately about any extensions.
11. Technical service providers and processing on our behalf
To provide our website, app connectivity and services, we use technical service providers (e.g. for hosting, database, file storage, email delivery). They process personal data on our behalf where this is necessary for operation.
We conclude data processing agreements pursuant to Art. 28 GDPR with processors used. Processing generally takes place on servers within the European Union.
12. Retention periods
We store personal data only as long as necessary for the respective purposes or as required by law.
Server log files are deleted according to our hosting provider’s retention periods. We delete contact enquiries after processing is complete unless statutory retention obligations apply.
Account data and shares are stored for as long as your PetConnect account or the respective share exists. You can remove shares in the app; account deletion is currently carried out via the PetConnect app.
Session cookies end when the session expires or when you log out or delete the session in your account.
13. Disclosure of data
We only transfer your personal data to third parties if necessary for contract performance, we are legally obliged to do so, you have given consent, or a legitimate interest exists and your interests do not override.
Where service providers (e.g. Contabo GmbH for hosting or other technical providers for email delivery and operating our technical infrastructure) act as processors, we conclude appropriate agreements pursuant to Art. 28 GDPR.
Transfers to third countries outside the EU/EEA only take place where the requirements of Art. 44 et seq. GDPR are met (e.g. adequacy decision or standard contractual clauses).
14. Your rights
You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR).
Where processing is based on consent, you may withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority includes the Independent Centre for Privacy Protection Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, Germany, https://www.datenschutzzentrum.de.
To exercise your rights, please contact us at info@pet-connect.eu.
15. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or reflects changes to our services (e.g. new features in the app or web account).
The current version applies on each visit. We will highlight material changes separately where required.