Data Protection and Privacy at Petr Novotný dba Canipet.cz (hereinafter also "Canipet.cz", "we" "us") collects from you without your consent only the personal data necessary for the execution of the order in our online shop and the contract and payment processing.
The use of our online shop is basically possible without the provision of personal data, however, when using the website, personal data may already be processed, which, however, we generally cannot assign to a natural person.
We use services from various providers on our website, in order to optimise our website and to measure and optimise advertising campaigns for direct marketing.
If certain functions or services offered on this website are used, such as the subscription to our newsletter or the electronic transmission of application documents, personal data will also be processed by us or contracted services and / or service providers.
In order to protect your personal data when using our online shop, we use a TLS / SSL encryption throughout the whole online shop.
The processing of personal data takes place at Canipet.cz always takes place in accordance with the European General Data Protection Regulation (EU-GDPR), as well as any federal and state-specific data protection provisions.
Furthermore, in the future and according to Art 6 f EU-DSGVO, we will send you informational e-mail as well as catalogues and flyers by post for similar items and services, if you buy any of our items or use any of our services. This is in order to keep you up to date about our product range. You can object to this process by contacting our data protection commissioner, without bearing any further costs except for those of the transmission in accordance with the base rates.
Responsibility for Processing of Personal Data
Responsible for the processing of personal data (“Controller”) within the meaning of the GDPR and operator of the website www.canipet.cz is:
19000 Praha 9
Usage of Cookies
Cookies allow it possible to recognize and identify an Internet browser via a unique online identifier (“cookie ID”). A cookie ID is, according to the GDPR personal data. However, cookie IDs are pseudonymised and cannot be assigned to a specific person without additional information.
Some cookies are required for certain functions of this website, others are used for web analysis, extending the functionality of our website or are used for the purposes of direct marketing (use or interest-based advertising). If you generally want to prevent the setting of cookies by websites and services used, you have the option to restrict this in the settings of your browser or prevent. However, we would like to point out that the use of some web pages or functions of web pages (e.g. shopping cart) can be restricted thereby and the display of advertising in general is not prevented.
Info on how to deactivate cookies or change settings is described in the help menu of your browser. You can find more technical support on how to deactivate cookies at the end of our data protection statement.
The complete deactivation of cookies can lead to not being able to use all functions of our website.
The data processed through cookies are needed for the mentioned uses in order to protect our legitimate interests as well as those of third parties according to Art. 6 para 1 S. 1 lit. f DSGVO.
When visting a page of our website, browser information is automatically transmitted from the terminal used to the server and stored in log files. These log files contain the IP address of the terminal, the type of terminal, information on the browser used (browser type, browser version, name of the files and pages accessed), the referrer (the website you visited before) and view information (date, time, approximate location).
The data are collected for the statistical evaluation of user behavior on our website, to optimize our website, for data security and to ensure proper operation of our website. The operator of our website is the wpj s.ro., Czech republic.
To protect the transmission of personal data when using our website and for safety reasons, we use TLS/SSL encryption. The processing is carried out according to Art. & para 1 lit. f DSGVO due to our legitimate interest in the improvement and functionality of our website. There is no disclosure or other use of the data.
After a maximum of 30 days, the IP-addresses are deleted or anonymized. The data does not allow any conclusions about your person. A comparison with other databases does not take place.
Registration on this Website
When ordering goods from Canipet.cz, you have the option of creating a personal customer account. With a personal customer account you have the following advantages: administration of delivery addresses, checking the order status, order history, personal notepad, newsletter management. The personal data given in your customer account will be collected and stored solely for order processing and for your own purposes (e.g. e-mail advertising).
The deletion of your customer account is possible at all times and can be done through sending us a message.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. a,b DSGVO.
It is also possible to place an order without opening a customer account. Due to requirements by commercial and tax regulations, we are obliged to store your address, payment and order data for a period of 10 years.
As part of the processing of orders, a transfer to one or more service providers and processors, for example, for payment and for shipping by a parcel service is possible. These will also use the personal data exclusively for the respective purpose (payment processing, parcel delivery). Further information on the service providers used can also be found on this page.
Within the scope of the legal permission according to Art. 6 Para. 1 S.1 lit. f of the DSGVO we may to use the e-mail address, which was specified in the context of an order, for the direct advertisement for own, similar products or services. If there is no interest in e-mail advertising related products or services, the corresponding use of the e-mail address can be objected to at any time. For more information about e-mail advertising and newsletters, see the following section.
Question regarding a product
On our website, we offer the possibility to ask questions on the specific product, which is answered by one of our employees. This gives us the possibility to advise you also in our online shop. To enable other users to profit from these questions and answers, these are shown to all users on our website as long as the product is part of our product portfolio. To make use of this function, first name (or an arbitrary nick name) and your e-mail address are needed. To protect the transmission of personal data when using our website and for safety reasons, we use TLS/SSL encryption. After processing the question asked, the given first name is published with the answer by one of our employees. The e-mail address is only used to answer your question and not used for any other purpose. The specified e-mail address is not published. The legal basis for processing is the voluntary disclosure of your e-mail address and the question regarding the product to be published in the context of above mentioned purpose in line with Art. 6 I S 1 lit a DSGVO.
Newsletter subscription and E-Mail Marketing
With your consent, you have the possibility to subscribe to our e-mail newsletter on our website. By subscribing to the newsletter you will be regularly informed about new products, valuable tips and news as well as exclusive offers. When ordering our newsletter you will find gender, name and e-mail address, as well as which outdoor activities you are particularly interested in. Subscribers to our newsletter will receive periodic e-mail alerts about Canipet.cz offers and promotions. A valid e-mail address is required to receive our newsletter. After registering for our newsletter, you will receive a confirmation e-mail once. To complete the registration for the newsletter, it is necessary to confirm this in a so-called double-opt-in procedure. Your personal data, which is processed in the context of the newsletter subscription, we use exclusively for our own promotional purposes.
The registrations to our newsletter are protocolized in order to prove the registration processes to meet legal requirements. This includes the saving of registration and confirmation time as well as the IP-address.
To create our newsletter based on your interests in various outdoor activities and personalised product recommendations, we use a newsletter marketing system for personalised marketing news. For personalized product recommendations, user profiles can be processed pseudonymized and anonymized. It is not connected to your user profile.
The provider of the newsletter marketing system used is Campaign Monitor, 201 Elizabeth St, Sydney, NSW, Australia 2000 from third country.
The subscription of our newsletter can be cancelled at any time and the consent for the further use of your personal data for the newsletter and newsletter advertising will be revoked. For this cancellation ("opt-out") and thus also the cancellation of our newsletter, you will find in each newsletter a corresponding hyperlink marked "unsubscribe from newsletter".
The consent in the forwarding of e-mail addresses occurs on the legal basis of Art. 6 Para. 1 lit. a. It is our interest to use a user-friendly and safe newsletter system, which serves our business interests as well as the expectations of users on information regarding our products.
Optimisation of our Online Shop WPJ s.r.o.
We use services provided by wpj s.ro. („WPJ“) for operation and optimisation of the user experience of our online shop.
In order to analyse and optimise your experience and features in our online shop, like personalised search results and product recommendations, your personal data may be processed and user profiles created. The provider may use following pseudonym personal data, such as online identifier, including cookie IDs, IP addresses, customer identifiers and transaction data.
Provider of the services and systems WPJ s.r.o., Czech Republic.
Further information on data protection at WPJ and the simple opt-out, will be provided by the services provider shortly.
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"), as well as Google Tag Manager and other Google services for online advertising.
Provider of these services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Google services may transfer the data to the United States. Google is certified for the EU-US Privacy Shield and the EU-US Department of Commerce Privacy Shield Framework Agreement. Further information: https://www.google.de/intl/en/policies/privacy/frameworks/
Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
The tracking and marketing activities we use are based on Art. 6 Para. 1 S. 1 lit. f DSGVO. With our used tracking activities, we want to ensure a needs-based design and continuous optimization of our website. We use tracking methods in order to record the use of our website statistically and to process these for optimization of offers to you. These interests are to be considered as within the meaning of the regulation mentioned before.
Google Analytics and Google Tag Manager
The purpose of Google Analytics on our website is the analysis of web traffic on our website and the usage of our online shopy by our visitors.
Google Analytics and the Google Tag Manager can also process the following additional personal data: online identifiers and cookie IDs, as well as device and customer identifiers for Google Analytics.
We also use Google Analytics to analyse data from AdWords and the DoubleClick cookie for statistical purposes. If you do not want this, you can disable it through the ads preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de)
Google AdWords Conversion Tracking & AdWords Remarketing
We are using the service by Google AdWords of using advertising media (so-called Google Remarketing) on external websites to call attention to our attractive offers. Relative to the data of the advertising campaign, we can measure the success of each advertising activity. It is in our interest to show you advertising that you are interested in, to design our website in a way that is attractive to you, and to reach a fair allocation of advertising costs.
These advertising activities are delivered by Google via so-called “AdServers”. For this, we are using AdServerCookies, whose success can be measured based on specific parameters, such as display of the advert or clicks by users. If you reach our website via a Google advert, Google AdWords stores a cookie on your computer. These cookies generally become invalid after 30 days and shall not be used to identify you personally. Along with this cookie, generally analysis data such as the Unique-Cookie-ID, the amount of ad impressions per placement (frequency), last impression (relevant for Post-View-Conversions) and opt-out information (marking that this user does not want to be addressed anymore) is stored.
These cookies enable Google to recognize your internet browser. If a user visits specific sites on the website of an AdWords customer and the cookie stored to his computer is still valid, Google and the customer can recognize, that this user was brought to the website through clicking the ad. Each AdWords customer is assigned an individual cookie. Cookies can therefore not be tracked over the websites of AdWords customers. We do not collect or process any personal data throughout the entire advertising process. We only receive statistical analyses by Google. With these analyses, we know which of the used advertising activities were especially successful. We do not receive any further data through the use of advertising and can not identify users based on this information.
Due to the used marketing tools, your browser builds a direct connection with the Google server. We do not have any influence on the amount and the further use of the data, which is collected through this tool by Google and thereby inform you according to our state of knowledge: Google receives information through the embedding of, that you opened the specific part of our website or clicked on an advert by us. If you are registered to a Google service, Google can link this to your user account. Even if you are not registered with Google or not signed in, the possibility of the provider receiving and storing your IP-address does exist.
You can prevent taking part in this tracking in different ways:
a) By the specific setting of your browser-software, especially by suppressing third-party cookies, adverts by third-party providers will not be displayed;
b) by deactivating Remarketing cookies by setting your browser to block cookies by the domain www.googleadservices.com via http://www.google.de/settings/ads, though this setting is deleted when you delete your cookies;
c) by deactivating advertising by providers based on interest, which are part of the self regulatory campaign ”About Ads”, which is done via the link http://www.aboutads.info/choices, though this setting is deleted when you delete your cookies;
d) by permanently deactivating in your browsers Firefox, Internetexplorer or Google Chrome using the link http://www.google.com/settings/ads/plugin. We do point out that this might lead to not being able to use all functions of the offer fully.
Further information on data protection at Google can be found here:
Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
On our website, we have integrated components of the social network "Facebook". Operator of the service is the Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The processing of personal data for users in the European Union is the responsibility of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
We may also use Facebook Website Custom Audience feature, thus information collected through Facebook can be used for personalised advertising on Facebook. If you're a Facebook user, you can go to https://www.facebook.com/ads/preferences/edit/ and here https://www.facebook.com/ads/settings to review, adjust and object the personalised ads from Facebook.
Users of Facebook, including people who are not users of Facebook, may object to the processing of personal data by Facebook for interest-based advertising here: http://www.youronlinechoices.eu/
For Facebook services, data transmission to the US is possible. Facebook is certified for the EU-US Privacy Shield and the EU-US Department of Commerce Privacy Shield Framework Agreement. Further information you can find here: https://www.facebook.com/about/privacyshield
Data Protection for Online Payment Services
When placing an order in our online shop, you have the option of to choose from different payment methods.
In order to process the payment process ("checkout") personal data, such as, name, address, e-mail addresses, payment information, invoice amount that you specify in the ordering process may be transferred to the provider of our chosen payment method. Providers may further process and disclose your information to third parties for the following purposes: Verifying your identity before a payment can be approved; depending on the chosen payment method, a credit check may also be performed by the payment provider. In addition, the address data and online identifiers you provide, such as the IP address used for the checkout, can be processed to prevent unlawful acts such as fraud and money laundering.
For our online shop, we work together with the following payment providers:
ThePay.cz, s.r.o.,Masarykovo Nám. 102/65, 586 01 Jihlava, Czech Republic.
Data Processing in Parcel Shipping
To ship your orders, we work with PPL CZ s.r.o.For this, among other things, the personal data required for parcel shipping, such as name, address, and, if applicable, communication data, are processed.
Legal basis for processing of personal data
For the processing of personal data in our online shop, we rely in particular on the following legal bases:
For the usage of web analytics, online advertising, conversion tracking, and the creation of pseudomised user profiles for personalised advertising in our online shop, respectively on our website, we have a legitimate interest (Article 6 Point 1 Paragraph f GDPR) in execution of direct marketing to increase the sale of goods in our online shop and to measure the success of our advertising campaigns
To send you our newsletters, you have given us consent to the processing of your personal data (Article 6 Point 1 Paragraph a GDPR) by means of confirming you newsletter subscription with „Double-Opt-In. For newsletters send to registered clients we are allowed to send e-mail advertising for our related offers based on Art. 6 Para. 1 lit. f DSGVO.
The processing of personal data of clients, who order goods in our online store, serves the fulfilment of the resulting purchase contract (Article 6 Point 1 Paragraph b GDPR) and resulting legal obligations (Article 6 Point 1 Paragraph c GDPR).
When creating a customer account, personal data is used in the context of pre-contractual measures and is provided by you willingly (Article 6 Point 1 Paragraph a and b GDPR).
The processing of personal data for online payment methods and parcel shipping is based primarily on the performance of the purchase contract (Article 6 Point 1 b GDPR). In the case of address verification, we have a legitimate interest ( Article 6 Point 1 Paragraph f GDPR) to reduce costs by incompletely specified delivery addresses and to prevent fraud and abuse.
Your Rights as Data Subject
As "data subject" within the meaning of the GDPR you have various rights. As part of the use of our services, offers and website you have the following rights.
For the exercise of these rights, please contact us by e-mail or by post. Please note that you may need to provide us with additional information and personal information in order to process your request or ensure your identity.
Right of rectifications
Right of access
Right of erasure (“Right to be forgotten”)
Right to restriction of processing
Right of complaint: According to Art. 77 of the DSGVO you also have the right to complain to a regulatory authority, whenever you are of the opinion that the processing of your personal data violates the DSGVO or possible federal or country-specific privacy policies.
In order to exercise your Right to Object as a data subject, e.g. revoke consent for newsletter subscription, please note the following:
For our newsletter and e-mail advertising, please use the opt-out mechanism via the ” “unsubscribe newsletter hyperlink in the newsletter.
In other cases, please contact us by e-mail at firstname.lastname@example.org.
Amendment of this data protection declaration
Through the further development of our website and offers or due to changing legal or official requirements, it can become necessary to amend our data protection declaration on the basis of the prevailing data protection requirements. The current data protection declaration can be found and printed on our website under data protection at all times.
Status as of May 2018