PRIVACY POLICY
General conditions for the processing of personal data
We are aware that the protection of personal data is a fundamental right of every individual to whom personal data relates. When providing personal data, the user of the website (hereinafter: the user) confirms that he/she is familiar with the general terms and conditions of the website and the processing of personal data, that the personal data is true and accurate, and allows Pet Network SI d.o.o., Celovška cesta 258, 1000 Ljubljana, registration number: 2032279000, tax number: SI 54536626 (hereinafter: the controller) as the controller to process personal data for the purposes for which they were collected.
The user can regularly monitor any changes to the general terms and conditions and processing of personal data at this address: dpo@mrpet.si www.mrpet.si/pogoji _poslovanja.
As the controller of personal data, we undertake to process the personal data in accordance with the Personal Data Protection Act and the General Data Protection Regulation (GDPR, hereinafter: the Regulation).
In accordance with the Regulation, the controller has also appointed data protection officer, who you can contact by writing to: dpo@mrpet.si or Pet Network SI d.o.o., Celovška 258, 1000 Ljubljana.
Processing of personal data
The controller processes the following personal data and for the following purposes:
The controler collects the following data: name and surname, e-mail address, contact telephone number, primary address and delivery addresses, time and date of registration and archive of communication related to online purchase and other data entered by the user when registering on the website (see section Registration).
The controller processes the collected personal data on the basis of a contract, namely for the purpose of fulfilling the purchase or order (including sending offers, invoices and other information related to the order) and other necessary communication with the user.
In the event that the provision of personal data is necessary for the conclusion and performance of the contract, you must provide personal data; in case you do not provide personal data, the controller will not be able to fulfil the order, as it does not have the necessary data.
The controller also uses the collected personal data on the basis of consent for the analyses of the user's purchasing habits and for the purpose of direct and targeted marketing (see section Registration). The user may at any time request in writing that the controller permanently or temporarily ceases to use personal data for this purpose.
- Subscription to e-newsletters
The user can subscribe to the e-newsletters, with which the controller, based on his/her consent until the cancellation, informs him about the news in the offer in the online store and at other points of sale, about marketing activities and other promotions.
By subscribing to the e-news, the controller collects the following personal data: name, surname, e-mail address, IP, data on animals of interest to the user, and in case the user registers as a registered user, also the address and telephone number.
After sending the form with the e-mail address, the user receives a confirmation message to the specified address. After confirming the message, the user is subscribed to the e-news until cancelled. The user can unsubscribe at any time by clicking on the "LOGOUT" button in the sent e-mail or by sending a request to dpo@mrpet.si and requesting that the personal data controller permanently ceases to use his personal data for this purpose.
As part of the registration, the controller processes the following personal data, which the user enters in the application form: name, surname, e-mail address, telephone number, postal address, information on animals of interest to the user, popular notification method, password for registration and purchase data.
The controller uses the entered user data to process the user's order. Registration makes it easier for the user to monitor past purchases and shortens the purchase process.
Based on the user's consent, the controller processes his/her personal data within the registration also for the purpose of:
- nalysis of user’s experience for improvement of service (to analyse purchases and purchasing habits in order to provide a better service and offer, to help business and to profile users and automated decision making to provide a better online user experience and send customized offers) and
- - marketing analyses that will enable the preparation of appropriate offers and improvements in the sales process (for the purposes of direct marketing: advertising, segmentation and profiling for the purpose of personalized advertising, surveying and remarketing (targeted advertising) via web browsers and social networks).
In the event that the user wishes to delete the user account, the e-mail sent toinfo@mrpet.si or dpo@mrpet.simust contain the following information: name and surname of the user, address and e-mail address with which the user is registered; the message must be sent from the e-mail address with which the user is registered as a registered member and contain a request for deletion.
In case of joining the Mr.Pet Club, the controller processes the user's personal data. Details on the processing of personal data within the Mr.Pet Club can be found in the General terms of operation for Club Mr.Pet cardholders, which are available at: https://www.mrpet.si/en-us/splosni-pogoji-kluba-s-130.aspx. Unless otherwise specified in the General Terms and General terms of operation for Club Mr.Pet cardholders, this Privacy Policy applies.
The controller processes certain personal data with the help of cookies. More information about cookies can be found at: https://www.mrpet.si/en-us/t-piskotki.aspx.
User’s rights
In relation to his/her personal data the user has the rights presented below. The user exercises his/her rights by sending an e-mail to the controller at dpo@mrpet.si.
The controller ensures the exercise of the user's rights immediately or within one month of receiving the request. In the event of complexity and a large number of requests, the controller may extend the deadline for exercising the user's rights by a maximum of two additional months and inform the user thereof, together with the reasons for the delay, within one month of receiving the request.
If there is any doubt as to the identity of the user submitting the request in respect of any of the rights, the controller may request the provision of additional information necessary to confirm the identity of the user.
Where the user's requests are manifestly unfounded or excessive, in particular because they are repetitive, the controller may charge a reasonable fee, taking into account the cost of providing information or communication or implementing the requested action, or refuse to act on the request.
The user has the right to obtain confirmation from the controller whether his/her personal data are being processed in relation to him/her and, where applicable, access to personal data and information provided for in the Regulation. The user can send the request by filling in the form Request for acquaintance with personal data, available on this page here, and forward it to the controller at dpo@mrpet.si.
The user has the right to request the rectification or completion of inaccurate or incomplete personal data at any time in accordance with Article 16 of the Regulation.
The user may at any time submit a request for the erasure of his/her personal data. Taking into account the individual request and Article 17 of the Regulation, the controller erases personal data.
- The right to restriction of processing
The user may at any time submit a request for the controller to restrict the processing. The controller is obliged to comply with the provisions of Article 18 of the Regulation.
- Right to data portability
The user has the right to receive personal data concerning him/her held by the controller in a structured, commonly used and machine-readable format, and the right to transmit those data on to another controller without the controller hindering this. The controller shall comply with the provisions of Article 20 of the Regulation.
The user has the right to object at any time to the processing of his/her personal data on the grounds of legitimate interests or for the purposes of direct marketing, including profiling, for reasons related to his/her particular situation, all in accordance with the provisions of Article 21 of the Regulation.
- The right to withdraw consent
The user also has the right to withdraw consent to the processing of personal data, in the manner set out above. The withdrawal will not affect the lawfulness of the data processing carried out on the basis of the consent before its withdrawal.
Data security
The data provided by the user via forms on the website or in any other way (via e-mail, telephone, etc.) is confidential and is treated in accordance with applicable law. The controller carefully protects personal data and prevents their misuse. The method of personal data protection has been defined by the controller through internal acts.
If the user believes that there has been a violation of personal data protection, he/she can report this or lodge a complaint with the supervisory body (Information Commissioner of the Republic of Slovenia, gp.ip@ip.rs.si).
Users of personal data
The controller does not transmit on personal data to unauthorized third parties. Access to personal data is granted only to persons authorized by the controller (e.g. employees) or contractual partners with whom the controller has concluded appropriate contracts for the processing of personal data.
Data can be provided:
- providers of data processing and information services that ensure the smooth operation of the online store and its improvements (server hosting, improving the user experience, navigation, e-mail marketing, …);
- marketing agencies for the purpose of remarketing;
- contractors who ensure a smooth purchase process (delivery services, etc.), but only to the extent necessary for the successful execution of the order;
- authorized institutions, if required by law (court, inspectorate, etc.).
Personal data are stored and processed in the territory of the Republic of Slovenia and are not exported to countries outside the EU or the EEA.
Storage period
The controller shall store the data until:
- withdrawal, deregistration or request for erasure in accordance with the applicable Personal Data Protection Act and the Regulation,
- fulfilment of the contractual obligation and expiry of the limitation period, or
- the achievement of the purpose for which the data were collected or processed.
Any questions about privacy and processing of personal data can be addressed to: dpo@mrpet.si or na Pet Network SI d.o.o., Celovška 258, 1000 Ljubljana.