Privacy Policy

Last updated: April 2025

This privacy policy describes how PetWorld (the “Website”, “we”, “us” or “our”) collects, uses and shares personal information when you visit pet-world.at (the “Website”), use our services, make a purchase there or otherwise communicate with us regarding the Website (collectively the “Services”).
For the purposes of this Privacy Policy, “you” and “your” refer to you as a user of the Services, regardless of whether you are a customer, website visitor or any other person whose information we have collected in accordance with this Privacy Policy.

Please read this privacy policy carefully.

Controller within the meaning of the GDPR

Controller within the meaning of Article 4 No. 7 GDPR and contact person

For data protection concerns pursuant to Art. 13 para. 1 lit. a GDPR:

Julian Kases
Absberggasse 7/26
1100 Vienna, Austria
Email: support@pet-world.at

Changes to this privacy policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the website, update the "Last Updated" date, and take any other legally required steps.

This is how we collect and use your personal data

To provide the Services, we collect personal information about you from various sources and have collected within the past 12 months, as detailed below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses listed below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What personal data do we collect?

The type of personal data we receive about you depends on how you interact with our website and use our services. When we use the term "personal information," we are referring to information that identifies you, relates to you, describes you, or can be associated with you. The following sections describe the categories and specific types of personal data we collect.

Information we collect directly from you

The information you provide to us directly through our services may include:

  • Contact details including your name, address, telephone number and email address.
  • Order information including your name, billing address, delivery address, payment confirmation, email address and telephone number.
  • Account information including your username, password, security questions and other information used for account security.
  • Shopping information , including items you view, add to your cart, save to your account (e.g., loyalty points, reviews, recommendations, or gift cards), or purchases. Saved loyalty points/product reviews/recommendations/gift cards
  • Customer support information , including information you include in your communications with us, for example, when you send a message via the services.

Some features of the services may require you to provide us with certain information about yourself directly. You can choose not to provide this information. However, this may prevent you from using or accessing these features.

Information we collect about your usage

We may also automatically collect certain information about your interaction with the services (“ Usage Data ”). For this purpose, we may use cookies, pixels, and similar technologies (“ Cookies ”). Usage Data may include information about how you access and use our website and your account, including device information, browser information, information about your network connection, your IP address, and other information about your interaction with the services.

Information obtained from third parties

Finally, we may receive information about you from third parties, including vendors and service providers who collect information on our behalf, for example:

  • Companies that support our website and services, such as Shopify.
  • Our payment processors collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment, fulfill your orders, and provide you with the products or services you have requested in order to fulfill our contract with you.
  • When you visit our website, open or click on emails we send you, or interact with our services or advertisements, we or third parties with whom we collaborate may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries and cookies.

All information we receive from third parties is handled in accordance with this privacy policy. See also the section below, Third-Party Websites and Links.

How we use your personal data

  • Provision of products and services. We use your personal data to provide you with the services and to fulfill our contract with you, including processing your payments, fulfilling your orders, sending you notifications regarding your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise administering your account, arranging shipping, facilitating returns and exchanges, and other features and functionalities related to your account. We may also enhance your shopping experience by allowing Shopify to connect your account with other Shopify services you may choose to use. In this case, Shopify will process your data in accordance with its Privacy Policy and Consumer Data Protection Policy.
  • Marketing and advertising. We may use your personal data for marketing and advertising purposes, such as sending marketing and promotional messages via email, SMS, or post, and showing you advertisements for products or services. This may include using your personal data to better tailor the services and advertising on our website and other websites. If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in selling our products, pursuant to Article 6(1)(f) GDPR.
  • Security and fraud prevention. We use your personal data to detect, investigate, or take appropriate action against potential fraudulent, illegal, or malicious activity. If you choose to use the services and register an account, you are responsible for the security of your account login information. We strongly recommend that you do not share your username, password, or other login details with anyone. If you believe your account has been compromised, please contact us immediately. If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in ensuring the security of our website for you and other customers, pursuant to Article 6(1)(f) GDPR.
  • Communication with you and service improvement. We use your personal data to provide you with customer support and to improve our services. This is in our legitimate interest to be able to respond to you, provide you with effective services, and maintain our business relationship with you, in accordance with Article 6, Paragraph 1 (f) GDPR.

Cookies

Like many websites, we use cookies on our website. Specific information about the cookies we use in connection with providing our store through Shopify can be found at https://www.shopify.com/legal/cookies . We use cookies to operate and improve our website and services (including remembering your actions and preferences), to perform analytics, and to better understand user interaction with the services (in our legitimate interest to manage, improve, and optimize the services). We may also allow third parties and service providers to use cookies on our website to better personalize the services, products, and advertising on our website and other websites.

Most browsers accept cookies automatically by default. However, you can configure your browser to remove or reject cookies via the browser settings. Please note that removing or blocking cookies may affect your user experience and may cause some services, including certain features and general functionalities, to malfunction or become unavailable. Furthermore, blocking cookies does not completely prevent us from sharing information with third parties, such as our advertising partners.

Please note that while your browser, like many websites, allows the transmission of a "Do Not Track" signal, our website is not designed to respond to such signals. For more information about "Do Not Track" signals, please visit http://www.allaboutdnt.com/ .

How we share personal data

Under certain circumstances, we may share your personal data with third parties for the purpose of fulfilling the contract, for legitimate purposes, and for other reasons governed by this privacy policy. These circumstances may include:

  • with providers or other third parties who provide services on our behalf (e.g. IT management, payment processing, data analysis, customer support, cloud storage, order fulfillment and shipping).
  • with business and marketing partners to provide you with services and advertise on your behalf. Our business and marketing partners use your data in accordance with their own privacy policies.
  • If you instruct, request, or otherwise give us your consent to share certain information with third parties, for example, to send you products or through your use of social media widgets or login integrations, with your consent.
  • with our subsidiaries or otherwise within our group of companies, in our legitimate interest to conduct a successful business.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with all applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce all applicable terms of service, and to protect or defend the services, our rights and the rights of our users or others.

Over the past 12 months, we have disclosed the following categories of personal data and sensitive personal data about users for the purposes set out above under “How we collect and use your personal data” and “How we disclose personal data” :

category

  • Identifiers such as basic contact details and certain order and account information
  • Personal information categories listed in the California Customer Records Act, such as basic contact information and certain order and account information
  • Commercial information such as order information, purchasing information and customer support information
  • Internet or other similar network activities, such as usage data
  • Geolocation data, e.g. locations determined via an IP address or other technical means

Categories of recipients

  • Suppliers and third parties who provide services on our behalf (such as internet service providers, payment processors, fulfillment partners, customer support partners, and data analytics providers)
  • Business and marketing partners
  • Affiliates

We will not use or publish your personal data without your consent or for the purpose of inferring your identity.

With your consent, we will share personal data for the purpose of carrying out advertising and marketing activities as follows.

Third-party websites and links

Our website may contain links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.
We assume no guarantee or responsibility for the privacy or security of such websites, including the accuracy, completeness, or reliability of the information found on these websites. Information you provide in public or semi-public places, including information you share on third-party social networking platforms, may also be viewed by other users of the services and/or users of these third-party platforms, without any restrictions on its use by us or third parties.
Our inclusion of such links does not automatically constitute an endorsement of the content of such platforms or their owners or operators, except as disclosed in the services.

Collection and processing of data when images are sent via upload

We provide an image file upload function on our website. This allows you to send us images via encrypted data transmission. By submitting your images, we may collect your personal data (images of identifiable individuals) only to the extent that you provide it. This data processing serves the purpose of creating personalized products. The submitted image serves as a template for the product and is used for this purpose (e.g., T-shirt printing). This processing is based on Article 6 Paragraph 1 Letter b of the GDPR and is necessary for the performance of a contract with you.
Your data may be shared with service providers that we use for order processing. It will not be shared with any other third parties.
We will only use the image you sent us for the purpose of providing our services. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Website logo for Google customer reviews

Our website incorporates the Google Customer Reviews website logo of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The purpose of this integration is to display the number and results of our reviews received so far via Google and to promote participation in this program.
Google uses cookies to display the logo on our website and to show you personalized ads on Google. This may involve processing and transmitting your IP address to Google.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on terms of use and data protection when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de

Use of the email address for sending newsletters

We use your email address to send you information and offers via newsletter, provided you have expressly consented to this. The data processing serves solely the purpose of promotional communication. For this purpose, we process your email address and, if applicable, other data that you voluntarily provided when subscribing to our newsletter.
The processing is based on Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on the consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Even after removal from the mailing list, we may still store your email address on a so-called blacklist to prevent you from receiving future newsletter emails from us. This storage is based on Article 6 Paragraph 1 Letter f of the GDPR, due to our and your legitimate interest in preventing the reuse of your email address for sending our newsletter.

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you.

Use of the email address for sending direct marketing.

We use your email address, which we obtained in connection with the sale of goods or services, to send you electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it will result in the contract not being concluded. This processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in direct marketing.

You can object to this use of your email address at any time by notifying us.

The contact details for exercising your right of objection can be found in the cancellation policy.

You can also use the link provided in the promotional email. No costs other than standard transmission fees will apply.

Using Klaviyo

We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for sending newsletters as part of a data processing agreement.
We forward the information you provide during newsletter registration (email address, and optionally first and last name) to Klaviyo. This data processing serves the purpose of sending the newsletter and its statistical analysis.
To evaluate newsletter campaigns, the newsletters we send contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any embedded links. In this context, we collect your personal data, such as your IP address, browser type and device, and the time of access. Usage profiles can be created from this data under a pseudonym. The collected data is not used to personally identify you. It is used solely for statistical analysis to improve our newsletter campaigns.
Your data is generally transferred to and stored on Klaviyo's servers in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo is certified under the TADPF and has therefore committed to complying with European data protection principles.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a targeted, effective and user-friendly newsletter system.

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you.


Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.

Use of email address for availability notifications

We offer a product availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your email address for the respective item and being informed by email when it becomes available, provided you have consented to this. You will receive a one-time notification by email about the availability of the respective item. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.

Sharing of the email address with shipping companies to inform about the shipping status

We will pass on your email address to the shipping company as part of the contract processing, provided you have expressly consented to this during the ordering process. The purpose of this transfer is to inform you about the shipping status by email. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company, without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Using PayPal Express

We use the PayPal Express payment service from PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies may also be used for this purpose. These cookies enable the recognition of your browser.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented range of payment methods.


You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you.


By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Article 6 Paragraph 1 Letter b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Using PayPal Checkout

We use the PayPal Checkout payment service from PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you the option of paying via this service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) GDPR.

Cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Article 6 Paragraph 1 Letter f GDPR, due to our overriding legitimate interest in offering a customer-oriented range of payment methods.

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values ​​(score values) calculated using scientifically recognized mathematical-statistical methods, which may incorporate address data, among other factors. Your legitimate interests are protected in accordance with legal regulations. The data processing serves the purpose of credit assessment for initiating a contract. This processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment defaults when PayPal provides services in advance.

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR, by notifying PayPal.

Providing this data is necessary for concluding the contract with your chosen payment method. Failure to provide this data will result in the contract not being able to be concluded with your selected payment method.

Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) GDPR. To process this payment method, PayPal may then forward the data to the respective provider. This processing is also based on Article 6(1)(b) GDPR. Local third-party providers may include, for example:
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on account via PayPal
When paying via invoice, the data required for payment processing is initially transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstrasse 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6 Paragraph 1 Letter b GDPR. Ratepay may conduct a credit check using mathematical-statistical methods (probability or score values) with credit agencies, following the procedure described above. The data processing serves the purpose of credit assessment for initiating a contract. This processing is based on Article 6 Paragraph 1 Letter f GDPR, due to our overriding legitimate interest in protecting against payment defaults when Ratepay provides services in advance. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Google Analytics 4

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google, on behalf of the operator of this website, will use the information obtained to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.
The following information may be collected, among other things: IP address, date and time of the page visit, click path, information about the browser and device you are using, pages visited, referrer URL (website from which you accessed our website), location data, and purchase activity. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google holds about you.

Your IP address is shortened by us on our own servers beforehand. Google thus receives only pseudonymized data.

Google uses technologies such as cookies, web storage in the browser, and tracking pixels that enable analysis of your website usage. The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR.

Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

We use the advanced consent mode. In this mode, even if consent is not given, user data is transmitted to Google in the form of "pings." These pings can contain, among other things, the following information: IP address to deduce the IP country (the IP address itself is not logged), date and time of the page request, URL of the visited pages, user agent, referrer URL (the website from which our website was accessed), or information about triggering website events such as a conversion. Based on this information, Google models user data to perform comprehensive usage analysis despite the refusal of consent.

The information generated about your use of this website is generally transmitted to and stored on a Google server in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Using Shopify statistics

We use the statistics and analytics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is a company affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and made available in reports, analyses, and statistics. This includes the collection and processing of the following device information: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about the web pages or products visited, the referrer URL (the website from which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. The EU Commission has also issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.


You can find more information about data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information about the data processing agreement at https://www.shopify.com/de/legal/dpa and information about the cookies used at https://www.shopify.com/de/legal/cookies.

Using Microsoft Clarity

We use the analytics tool “Microsoft Clarity” from Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; “Microsoft”) on our website. Microsoft is a company affiliated with Microsoft Corporation (One Microsoft Way, Redmond, Washington 98052, USA).
The data processing serves the purpose of tailoring, optimizing, and analyzing our website to user needs. The tool randomly records the movements of website visitors. This creates a log of mouse movements, scrolling behavior, time spent on the site, and clicks (a so-called heatmap).
For this purpose, cookies or similar technologies are used. The following information, among other things, may be collected: IP address, time of access, click path, information about the device you are using (device type, screen size and resolution, unique device identifier, operating system), information about the browser you are using (browser type and browser version), location data, preferred language for displaying the website, visited subpages, time spent on the site, viewed content, requested website or file.
User profiles are created from this data under a pseudonym. The data is not used to personally identify website visitors and is not combined with the personal data of the pseudonym holder. Microsoft is contractually prohibited from selling the collected data to any other third parties.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Detailed information about the cookies used and their function can be found at https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list. Information about the storage period of the collected data can be found at https://learn.microsoft.com/en-us/clarity/setup-and-installation/data-retention.

For more information about data privacy when using Microsoft Clarity, please see https://learn.microsoft.com/en-us/clarity/faq#privacy, https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-data and https://clarity.microsoft.com/terms. General information about data privacy at Microsoft can be found at https://privacy.microsoft.com/de-de/privacystatement.

Use of the Meta Pixel

We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are jointly responsible for the collection of your data and its transfer to Meta when you use this service. This is based on an agreement between us and Meta regarding the joint processing of personal data, which defines the respective responsibilities. The agreement can be accessed at https://de-de.facebook.com/legal/terms/businesstools . Specifically, we are responsible for fulfilling the information obligations under Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 of the GDPR, insofar as a personal data breach affects our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights in accordance with Articles 15-20 GDPR, complying with the security requirements of Article 32 GDPR with regard to the security of the service, and fulfilling the obligations under Articles 33 and 34 GDPR, insofar as a personal data breach affects Meta's obligations under the joint processing agreement.

The purpose of this application is to target website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on the website. This tag establishes a direct connection to the Meta servers when you visit the website. This transmits information to the Meta server about which of our pages you have visited. Meta then associates this information with your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads.

The application also serves the purpose of generating conversion statistics. This allows us to see the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as what actions they took after being redirected to that website. However, we do not receive any personally identifiable information.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has therefore committed to complying with European data protection principles.

Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can deactivate the "Custom Audiences" remarketing feature here. Further information about the collection and use of data by Meta, your related rights, and options for protecting your privacy can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/ .

Using Google Ads conversion tracking

We use the online advertising program "Google Ads" on our website and, within this framework, conversion tracking (visit action evaluation). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad served by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited lifespan, do not contain any personally identifiable information, and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked across the websites of different Ads customers.
The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any personally identifiable information. We use the advanced consent mode. In this mode, even if consent is not given, user data is transmitted to Google in the form of "pings." These pings may contain information such as: IP address to determine the IP country (the IP address itself is not logged), date and time of the page view, URL of the visited pages, user agent, referrer URL (the website from which our website was accessed), or information about triggering website events such as a conversion. Based on this information, Google models user data to perform comprehensive usage analysis despite the user's refusal to consent.
Your data may be transferred to Google LLC servers in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

Use of the remarketing or "similar audiences" function of Google Inc.

We use the remarketing or "similar audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application serves the purpose of analyzing visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based advertisements. These cookies record website visits and anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to reflect previously viewed product and information areas.
Your data may be transferred to servers of Google LLC in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information about Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/

Use of Microsoft Advertising

We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”) on our website.
The data processing serves marketing and advertising purposes and the purpose of measuring the success of advertising campaigns (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, this does not allow for the personal identification of these users. Microsoft Advertising uses technologies such as cookies and tracking pixels, which enable analysis of your website usage. When you click on an ad placed by Microsoft Advertising, a conversion tracking cookie is stored on your computer. This cookie has a limited lifespan and is not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to this page. The following information may be collected, among other things: IP address, identifiers assigned by Microsoft, information about the browser and device you are using, referrer URL (website from which you accessed our website), and the URL of our website.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data protection and the cookies used by Microsoft can be found here .

Using the Pinterest tag

We use the Pinterest tag of Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.
This application is designed to target website visitors with interest-based advertising on the social network Pinterest. To achieve this, the Pinterest conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest's servers when you visit the website. This transmits information to Pinterest's servers about which of our pages you have visited. Pinterest associates this information with your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will then be shown personalized, interest-based Pinterest ads.
When you access our website via a pin on the social network Pinterest, a conversion tracking cookie is placed on your computer. These cookies have a limited lifespan, do not contain any personal data, and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page. The information collected using the conversion cookie is used to generate conversion statistics and thus optimize our website. This may include, among other things, the following information: the total number of users who clicked on one of our pins and were redirected to our website, the subpages visited on our website (e.g., category or product pages), search queries on our website, your shopping cart contents, and completed transactions.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not TADPF certified. Data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

For more information about how Pinterest collects and uses data, your related rights and options for protecting your privacy, please see Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.

Use of TikTok Pixel

We use your email address, which we obtained in connection with the sale of goods or services, to send you electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing your email address is necessary for the conclusion of the contract. We use the TikTok Pixel on our website, operated by TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”). Both companies are joint controllers for data processing (hereinafter “TikTok”).
The data processing serves the purpose of identifying and analyzing our customers' website visits, improving customer targeting through the placement of targeted advertisements, and evaluating the effectiveness of advertisements on TikTok. TikTok uses technologies such as cookies and pixels to recognize your browser. The following information, among other things, may be collected and transmitted to TikTok: date and time of visit, information about your browser and device type, screen resolution, and IP address. TikTok can associate this information with your personal TikTok user account. Usage profiles can be created from the data collected in this way using pseudonyms. However, personal identification of users is not possible through this process.
Your data may be transferred to third countries, such as the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. Data transfers to the USA and to third countries without an adequacy decision are based, among other things, on standard contractual clauses as suitable safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.rlich. Failure to provide this information will prevent the conclusion of a contract. Processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in direct marketing.

You can object to this use of your email address at any time by notifying us.

The contact details for exercising your right of objection can be found in the cancellation policy.

You can also use the link provided in the promotional email. No costs other than standard transmission fees will be incurred.

Using Google reCAPTCHA

We use the reCAPTCHA service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This query serves to distinguish between input by a human and input by automated, machine processing. For this purpose, your input is transmitted to Google and further processed there. Additionally, your IP address and, if applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information about Google reCAPTCHA and its privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy .

Using Google invisible reCAPTCHA

We use the invisible reCAPTCHA service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This serves the purpose of distinguishing between input from a human and input from automated, machine processing. In the background, Google collects and analyzes usage data, which Invisible reCAPTCHA uses to differentiate regular users from bots. For this purpose, your input is transmitted to Google and further processed there. Additionally, your IP address and, if applicable, other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information about Google reCAPTCHA and its privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy

Use of Google Fonts

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of ensuring consistent font display on our website. To load the fonts, a connection to Google's servers is established when the page is accessed. Cookies may be used in this process. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

Using Google Translate

We use the translation service of [Company Name] on our website via an API integration.

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

The data processing serves the purpose of displaying the information provided on the website in other languages. To ensure that the translation is automatically displayed according to your chosen language, your browser connects to Google's servers. Cookies may be used in this process. Among other things, the following information may be collected and processed: IP address, URL of the visited page, date and time.
Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has therefore committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent pursuant to Section 25 Paragraph 1 Sentence 1 of the German Telemedia Act (TDDG) in conjunction with Article 6 Paragraph 1 Letter a of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on the collection and use of your data by Google can be found at: https://www.google.com/policies/privacy/ .

Data from children

These services are not intended for use by children, and we do not knowingly collect personal information from children. If you are a parent or guardian of a child who has provided us with their personal information, you can contact us using the contact details below and request that this information be deleted.

At the time this privacy policy comes into effect, we have no actual knowledge that we “share” or “sell” personal data of individuals under the age of 16 (as these terms are defined under applicable law).

Security and storage of your data

Please note that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Furthermore, the information you send us may not be secure during transmission. We recommend that you do not use insecure channels to share sensitive or confidential information with us.

How long we retain your personal data depends on various factors, such as whether we need the data to manage your account, provide the services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your rights

Depending on where you live, you may have some or all of the rights listed below regarding your personal data. However, these rights are not absolute and only apply under certain circumstances. In certain cases, we may refuse your request to the extent permitted by law.

  • Right of access/information : You may have the right to request access to the personal data we hold about you, including details of how we use and share your data.
  • Right to erasure : You may have the right to request the erasure of personal data we hold about you.
  • Right to rectification : You may have the right to request the correction of inaccurate personal data we hold about you.
  • Right to data portability : You may have the right to receive a copy of the personal data we hold about you and, under certain circumstances and with certain exceptions, to request that this data be transferred to a third party.
  • Right to object to the sale, sharing, or targeted advertising : You may have the right to instruct us not to "sell" or "share" your personal data, or to object to the processing of your personal data for purposes that qualify as "targeted advertising" under applicable data protection laws. Please note: If you visit our website with the "Global Privacy Control" opt-out preference signal enabled, we will automatically treat this, depending on your location, as a request to object to the "sale" or "sharing" of information for the device and browser you are using to access the website.
  • Restriction of processing : You may have the right to request that we stop or restrict the processing of your personal data.
  • Withdrawal of consent : If we rely on your consent to process your personal data, you may have the right to withdraw that consent.
  • Right to appeal : If we reject your application, you may have the right to appeal our decision. You can do this by responding directly to our rejection.
  • Manage communication preferences : We may send you promotional emails, and you can opt out of receiving these emails at any time by using the unsubscribe option displayed in our emails to you. If you unsubscribe, we may still send you non-promotional emails, such as those related to your account or orders.

You can exercise these rights as indicated on our website or by contacting us using the contact details provided below.

We will not discriminate against you if you exercise any of these rights.
We may need to collect information from you, such as your email address or account information, to verify your identity before we can provide a substantive response to your request. Under applicable law, you may designate an authorized representative to make requests on your behalf to exercise your rights. Before we accept such a request from a representative, we must obtain proof that you have authorized them to act on your behalf.
Furthermore, we may need to verify your identity directly with us. We will respond to your request promptly, as required by applicable law.

complaints

If you have any complaints about how we process your personal data, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, you may have the right, depending on where you live, to appeal our decision by contacting us using the contact details below or by submitting your complaint to your local data protection authority. For the European Economic Area (EEA) , you can find a list of the relevant data protection supervisory authorities here .

International users

Please note that we may transfer, store, and process your personal data outside the country you live in. Your personal data will also be processed by employees and third-party service providers and partners in those countries.

When we transfer your personal data to countries outside Europe, we rely on accepted transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts from the relevant UK authority, unless the data transfer is to a country determined to provide an adequate level of protection.

Right to object

If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.
After an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

If your personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. Upon receipt of your objection, we will cease processing the data in question for direct marketing purposes.

contact

Should you have any questions about our data protection practices or this privacy policy, or wish to exercise any of your rights, please send us an email to support@pet-world.at.

In accordance with applicable data protection laws and unless expressly stated otherwise, we are the controller of your personal data.