Privacy Policy

Last updated: April 2025

Design-Trennlinie oder Hintergrundmuster, das eine visuelle Trennung im Layout von PetWorld schafft.

This Privacy Policy describes how PetWorld (the "Site", "we", "us", or "our") collects, uses, and discloses personal information when you visit pet-world.at (the "Site"), use our services, make a purchase from us, or otherwise communicate with us regarding the Site (collectively, the "Services").
For the purposes of this Privacy Policy, "you" and "your" refer to you as a user of the Services, whether you are a customer, website visitor, or any other person whose information we have collected in accordance with this Privacy Policy.

Please read this privacy policy carefully.

Controller within the meaning of the GDPR

Responsible person within the meaning of Art. 4 No. 7 GDPR and contact person

for data protection concerns according to Art. 13 (1) (a) GDPR is:

Julian Kases
Absberggasse 7/26
1100 Vienna, Austria
Email: support@pet-world.at

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last Updated" date, and take any other steps required by law.

How we collect and use your personal data

To provide the Services, we collect personal information about you from various sources and have collected within the past 12 months, as detailed below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses listed below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What personal information do we collect?

The types of personal information we receive about you depend on how you interact with our website and use our services. When we use the term "personal information," we mean information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information we collect directly from you

The information you provide to us directly through our Services may include:

Contact information including your name, address, telephone number and email address.
Order information including your name, billing address, shipping address, payment confirmation, email address and phone number.
Account information including your username, password, security questions, and other information used for account security.
Shopping information including items you view, add to your cart, save to your account (such as loyalty points, reviews, recommendations, or gift cards), or purchases.
- Saved loyalty points/product reviews/recommendations/gift cards
Customer support information , including information you include in your communications with us, such as when you send a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may choose not to provide this information, but doing so may prevent you from using or accessing those features.

Information we collect about your use

We may also automatically collect certain information about your interaction with the Services (" Usage Data "). To do this, we may use cookies, pixels, and similar technologies (" Cookies "). Usage Data may include information about how you access and use our website and your account, including device information, browser information, your network connection information, your IP address, and other information about your interaction with the Services.

Information received from third parties

Finally, we may receive information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

Companies that support our website and services, such as Shopify.
Our payment processors who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment, fulfill your orders, and provide you with the products or services you have requested in order to fulfill our contract with you.
When you visit our website, open or click on emails we send you, or interact with our services or ads, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

Any information we receive from third parties will be treated in accordance with this Privacy Policy. See also the section below, Third-Party Websites and Links.

How we use your personal data

Providing products and services. We use your personal information to provide you with the Services and fulfill our contract with you, including processing your payments, fulfilling your orders, sending you notifications related to your account, purchases, returns, exchanges, or other transactions; creating, maintaining, and otherwise managing your account; arranging for shipping; facilitating returns and exchanges; and other features and functionality related to your account. We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services you may choose to use. In this case, Shopify will process your information in accordance with its Privacy Policy and Consumer Privacy Policy.
Marketing and advertising. We may use your personal data for marketing and advertising purposes, for example, to send marketing and promotional messages by email, SMS, or post, and to display advertisements for products or services to you. This may include using your personal data to better tailor the services and advertising on our website and other websites. If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in selling our products, as set out in Art. 6 (1) (f) GDPR.
Security and fraud prevention. We use your personal data to detect, investigate, or take action regarding potential fraudulent, illegal, or malicious activities. If you choose to use the Services and register an account, you are responsible for maintaining the security of your account credentials. We strongly recommend that you do not share your username, password, or other access credentials with anyone. If you believe your account has been compromised, please contact us immediately. If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in ensuring the security of our website for you and other customers, pursuant to Art. 6 (1) (f) GDPR.
Communicating with you and improving our services. We use your personal data to provide you with customer support and improve our services. This is in our legitimate interest to respond to you, provide you with effective services, and maintain our business relationship with you, in accordance with Art. 6 (1) (f) GDPR.

Cookies

Like many websites, we use cookies on our website. For specific information about the cookies we use in connection with the provision of our store through Shopify, please visit https://www.shopify.com/legal/cookies . We use cookies to operate and improve our website and services (including remembering your actions and preferences), perform analytics, and better understand user interaction with the services (in our legitimate interests to administer, improve, and optimize the services). We may also allow third parties and service providers to use cookies on our website to better customize the services, products, and advertising on our website and other websites.

Most browsers automatically accept cookies by default. However, you can set your browser to remove or reject cookies using the browser controls. Please note that removing or blocking cookies may impact your user experience and may prevent some of the Services, including certain features and general functionality, from working properly or becoming unavailable. Furthermore, blocking cookies may not completely prevent us from sharing information with third parties, such as our advertising partners.

Please note that while your browser, like many websites, allows the transmission of a "Do Not Track" signal, our website is not designed to respond to such signals. For more information about "Do Not Track" signals, please visit http://www.allaboutdnt.com/ .

How we share personal information

Under certain circumstances, we may share your personal information with third parties for the purpose of fulfilling a contract, for legitimate purposes, and for other reasons subject to this Privacy Policy. These circumstances may include:

with vendors or other third parties who provide services on our behalf (e.g., IT management, payment processing, data analysis, customer support, cloud storage, order fulfillment, and shipping).
with business and marketing partners to provide you with services and advertise to you. Our business and marketing partners use your information in accordance with their own privacy policies.
If you instruct, request or otherwise consent to us sharing certain information with third parties, for example to send you products or through your use of social media widgets or login integrations, with your consent.
with our subsidiaries or elsewhere within our group of companies, in our legitimate interest of running a successful business.
In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

In the last 12 months, we have disclosed the following categories of personal data and sensitive personal data about users for the purposes set out above under "How we collect and use your personal data" and "How we disclose personal data" :

Categories of recipients

Suppliers and third parties who provide services on our behalf (such as internet service providers, payment processors, fulfillment partners, customer support partners, and data analytics providers)
Business and marketing partners
Affiliates

We will not use or publish your personal data without your consent or for the purpose of inferring your personal data.

With your consent, we will share personal information for the purpose of conducting promotional and marketing activities as follows.

Third-party websites and links

Our website may contain links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.
We make no guarantees or responsibility for the privacy or security of such websites, including the accuracy, completeness, or reliability of any information found on such websites. Information you provide in public or semi-public places, including information you share on third-party social networking platforms, may also be viewed by other users of the Services and/or users of such third-party platforms, without limitation as to their use by us or any third party.
Our inclusion of such links does not automatically constitute an endorsement of the content of such platforms or their owners or operators, except as disclosed in the Services.

Collection and processing when sending images via upload

We provide an upload function for image files on our website. This allows you to send images to us via encrypted data transmission. When you submit your images, we may collect your personal data (image of an identifiable person) only to the extent provided by you. The data is processed for the purpose of creating personalized products. The submitted image serves as a template for the product and is used for this purpose (e.g., T-shirt printing). The processing is based on Art. 6 (1) (b) GDPR and is necessary for the fulfillment of a contract with you.
Your data may be shared with service providers we use to process your order. It will not be shared with other third parties.
We will use the image you send us only for the purpose of providing our services. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Website logo for Google Customer Reviews

The website logo for Google Customer Reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) is integrated into our website.
The purpose of the integration is to display the number and results of the reviews we have received so far via Google and to promote participation in this program.
To display the logo on our website and to show you personalized ads on Google, Google uses cookies. This may include, among other things, your IP address being processed and transmitted to Google.
Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Further information on terms of use and data protection when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de

Use of the email address for sending newsletters

We use your email address to send you information and offers via newsletter, provided you have expressly consented to this. Data processing serves exclusively for the purpose of advertising. For this purpose, we process your email address and, if applicable, other data that you have voluntarily provided when registering for our newsletter.
The processing is based on Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite being removed from the mailing list, we may continue to store your email address on a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6 (1) (f) GDPR, which is our and your legitimate interest in preventing the further use of your email address to send you our newsletter.

You have the right to object to the processing of personal data concerning you at any time for reasons related to your particular situation.

Use of the email address for sending direct mail

We use your email address, which we received as part of the sale of a product or service, to electronically send advertising for our own products or services similar to those you have already purchased from us, unless you have objected to this use. Providing your email address is necessary to conclude a contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in direct advertising.

You can object to this use of your email address at any time by notifying us.

The contact details for exercising your right of withdrawal can be found in the right of withdrawal.

You can also use the link provided in the promotional email. There will be no additional costs for this other than the transmission costs according to the basic rates.

Using Klaviyo

We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) to send the newsletter as part of order processing.
We will forward the information you provide during newsletter registration (email address, first and last name if applicable) to Klaviyo. This data processing serves the purpose of sending the newsletter and its statistical analysis.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as your IP address, browser type and device, and the time of access. This data can be used to create user profiles under a pseudonym. The collected data is not used to identify you personally. The collected data is used solely for statistical analysis to improve newsletter campaigns.
Your data is generally transferred to and stored on Klaviyo servers in the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself according to the TADPF and is thus committed to adhering to European data protection principles.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR based on our overriding legitimate interest in a targeted, effective and user-friendly newsletter system.

You have the right to object to the processing of personal data concerning you at any time for reasons related to your particular situation.

Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.

Use of email address for availability notifications

We offer a product availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your email address for the respective item and being informed by email when it becomes available, provided you have consented to this. You will receive a one-time notification by email about the availability of the respective item. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.

Passing on the email address to shipping companies to inform them about the shipping status

We will pass on your email address to the shipping company as part of the contract processing, provided you have expressly consented to this during the ordering process. The purpose of this transfer is to inform you about the shipping status by email. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company, without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Using PayPal Express

We use the PayPal Express payment service provided by PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of this data processing is to offer you payment via the PayPal Express payment service. To integrate this payment service, PayPal must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, and device location) when you visit the website. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR based on our overriding legitimate interest in offering a customer-oriented range of different payment methods.

You have the right to object to the processing of personal data concerning you at any time for reasons related to your particular situation.

By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Using PayPal Check-Out

Wir verwenden auf unserer Website den Zahlungsdienst PayPal Check-Out der PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxemburg; "PayPal"). Die Datenverarbeitung dient dem Zweck, Ihnen die Zahlung über den Zahlungsdienst anbieten zu können. Mit Auswahl und Nutzung von Zahlung via PayPal, Kreditkarte via PayPal, Lastschrift via PayPal oder „Später Bezahlen“ via PayPal werden die zur Zahlungsabwicklung erforderlichen Daten an PayPal übermittelt, um den Vertrag mit Ihnen mit der gewählten Zahlart erfüllen zu können. Diese Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO.

Hierbei können Cookies gespeichert werden, die die Wiedererkennung Ihres Browsers ermöglichen. Die dadurch stattfindende Datenverarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. f DSGVO aus unserem überwiegenden berechtigten Interesse an einem kundenorientierten Angebot von verschiedenen Zahlarten.

Sie haben das Recht aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit dieser Verarbeitung Sie betreffender personenbezogener Daten zu widersprechen.

Kreditkarte via PayPal, Lastschrift via PayPal & „Später bezahlen“ via PayPal
Bei einzelnen Zahlungsarten wie Kreditkarte via PayPal, Lastschrift via PayPal oder „Später bezahlen“ via PayPal behält sich PayPal das Recht vor, ggf. eine Bonitätsauskunft auf der Basis mathematisch-statistischer Verfahren unter Nutzung von Auskunfteien einzuholen. Hierzu übermittelt PayPal die zu einer Bonitätsprüfung benötigten personenbezogenen Daten an eine Auskunftei und verwendet die erhaltenen Informationen über die statistische Wahrscheinlichkeit eines Zahlungsausfalls für eine abgewogene Entscheidung über die Begründung, Durchführung oder Beendigung des Vertragsverhältnisses. Die Bonitätsauskunft kann Wahrscheinlichkeitswerte (Score-Werte) beinhalten, die auf Basis wissenschaftlich anerkannter mathematisch-statistischer Verfahren berechnet werden und in deren Berechnung unter anderem Anschriftendaten einfließen. Ihre schutzwürdigen Belange werden gemäß den gesetzlichen Bestimmungen berücksichtigt. Die Datenverarbeitung dient dem Zweck der Bonitätsprüfung für eine Vertragsanbahnung. Die Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. f DSGVO aus unserem überwiegenden berechtigten Interesse am Schutz vor Zahlungsausfall, wenn PayPal in Vorleistung geht.

Sie haben das Recht aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit gegen diese auf Art. 6 Abs. 1 lit. f DSGVO beruhende Verarbeitung Sie betreffender personenbezogener Daten durch Mitteilung an PayPal zu widersprechen.

Die Bereitstellung der Daten ist für den Vertragsschluss mit der von Ihnen gewünschten Zahlart erforderlich. Eine Nichtbereitstellung hat zur Folge, dass der Vertrag nicht mit der von Ihnen gewählten Zahlart geschlossen werden kann.

Drittanbieter
Bei Bezahlung über die Zahlungsart eines Drittanbieters werden die zur Zahlungsabwicklung erforderlichen Daten an PayPal übermittelt. Diese Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO. Zur Durchführung dieser Zahlungsart werden die Daten ggf. sodann seitens PayPal an den jeweiligen Anbieter weitergegeben. Diese Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO. Lokale Drittanbieter können beispielsweise sein:
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Irland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland)

Rechnungskauf via PayPal
Bei Bezahlung über die Zahlungsart Rechnungskauf werden die zur Zahlungsabwicklung erforderlichen Daten zunächst an PayPal übermittelt. Zur Durchführung dieser Zahlungsart werden die Daten sodann seitens PayPal an die Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") übermittelt um den Vertrag mit Ihnen mit der gewählten Zahlart erfüllen zu können. Diese Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO. Ratepay führt ggf. eine Bonitätsauskunft auf der Basis mathematisch-statistischer Verfahren (Wahrscheinlichkeits- bzw. Score - Werte) unter Nutzung von Auskunfteien durch nach bereits oben beschriebenen Ablauf. Die Datenverarbeitung dient dem Zweck der Bonitätsprüfung für eine Vertragsanbahnung. Die Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. f DSGVO aus unserem überwiegenden berechtigten Interesse am Schutz vor Zahlungsausfall, wenn Ratepay in Vorleistung geht. Weitere Informationen zum Datenschutz und welche Auskunfteien Ratpay verwenden finden Sie unter https://www.ratepay.com/legal-payment-dataprivacy/ und https://www.ratepay.com/legal-payment-creditagencies/.

Nähere Informationen zur Datenverarbeitung bei Verwendung von PayPal finden Sie in der dazugehörigen Datenschutzerklärung unter https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Google Analytics 4

We use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. Google will use the information obtained on behalf of the website operator to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website activity and internet usage.
The following information may be collected, among others: IP address, date and time of the page visit, click path, information about the browser and device you use, pages visited, referrer URL (website from which you accessed our website), location data, purchasing activities. Google may link your data with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.

Your IP address will be shortened by us on our own servers beforehand. Google thus receives only pseudonymized data.

Google uses technologies such as cookies, web storage in the browser, and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) of the Telemedia Act (TDDDG) in conjunction with Article 6 (1) (a) of the GDPR.

Your personal data will be processed with your consent on the basis of Art. 6 (1) (a) GDPR. You may revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

We use the advanced implementation of consent mode (Advanced Consent Mode). This means that user data is transmitted to Google in the form of "pings," even if consent is not granted. These pings may contain, among other things, the following information: IP address to determine the IP country (the IP address is not logged), date and time of the page visit, URL of the pages visited, user agent, referrer URL (website from which our website was accessed), or information about the triggering of website events such as a conversion. Based on this information, Google models user data in order to be able to conduct a comprehensive usage analysis despite the refusal of consent.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, the EU Commission has adopted an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to adhering to European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Using Shopify Statistics

We use the statistical and analytics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of a contract processing agreement. Shopify is an affiliate of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and made available in reports, analyses, and statistics. The following device information is collected and processed, among other things: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about the websites or products visited, the referrer URL (website from which you accessed our website), and information about how you interact with the website is also collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision of the EU Commission exists for Canada. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

You can find more information about data protection at Shopify at https://www.shopify.com/de/legal/datenschutz, information about the order processing agreement at https://www.shopify.com/de/legal/dpa and information about the cookies used at https://www.shopify.com/de/legal/cookies.

Using Microsoft Clarity

We use the analysis tool "Microsoft Clarity" from Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; "Microsoft") on our website. Microsoft is an affiliate of Microsoft Corporation (One Microsoft Way, Redmond, Washington 98052, USA).
The data processing serves the purpose of needs-based design, optimization, and analysis of our website. The tool randomly records the movements of visitors on the website. This creates a log of mouse movements, scrolling behavior, time spent, and clicks on the website (a so-called heatmap).
Cookies or similar technologies are used for this purpose. The following information may be collected, among others: IP address, time of access, click path, information about the device you use (device type, screen size and resolution, unique device identifier, operating system), information about the browser you use (browser type and version), location data, preferred language for displaying the website, subpages visited, length of stay, content viewed, requested website or file.
This data is used to create user profiles under a pseudonym. The data is not used to personally identify the website visitor and is not merged with the personal data of the person using the pseudonym. Microsoft is contractually prohibited from selling the collected data to other third parties.
Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Detailed information about the cookies used and their function can be found at https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list. Information about the storage period of the collected information can be found at https://learn.microsoft.com/en-us/clarity/setup-and-installation/data-retention.

For more information about privacy when using Microsoft Clarity, please visit https://learn.microsoft.com/en-us/clarity/faq#privacy, https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-data, and https://clarity.microsoft.com/terms. General information about data protection at Microsoft can be found at https://privacy.microsoft.com/de-de/privacystatement.

Using the Meta Pixel

We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are jointly responsible for the collection of your data when integrating the service and the transmission of this data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools . According to this agreement, we are particularly responsible for fulfilling the information obligations pursuant to Art. 13 and 14 GDPR, for adhering to the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR, insofar as a breach of the protection of personal data affects our obligations under the agreement on joint processing. Meta is responsible for enabling the rights of data subjects in accordance with Articles 15 - 20 GDPR, for complying with the security requirements of Article 32 GDPR with regard to the security of the service and for complying with the obligations under Articles 33 and 34 GDPR, insofar as a breach of the protection of personal data affects Meta's obligations under the joint processing agreement.

The application serves the purpose of targeting website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on the website. This tag establishes a direct connection to the Meta servers when you visit the website. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads.

The application also serves the purpose of compiling conversion statistics. This allows us to learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as the actions taken after being redirected to this website. However, we do not receive any information that could personally identify users.

Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is thus committed to complying with European data protection principles.

Your personal data will be processed with your consent on the basis of Art. 6 (1) (a) GDPR. You may revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.
You can deactivate the "Custom Audiences" remarketing feature here. Further information on how Meta collects and uses data, your rights in this regard, and options for protecting your privacy can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/ .

Use of Google Ads Conversion Tracking

We use the online advertising program "Google Ads" on our website, including conversion tracking (visit action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad served by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited lifespan, contain no personal data, and are therefore not used to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked across Ads customers' websites.
The information collected using the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. We use the advanced consent mode. Even if consent is not given, user data is transmitted to Google in the form of "pings." These pings can contain, among other things, the following information: IP address to derive the IP country (the IP address is not logged), date and time of the page visit, URL of the pages visited, user agent, referrer URL (website from which our website was accessed), or information about the triggering of website events such as a conversion. Google uses this information to model user data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent.
Your data may be transferred to Google LLC's servers in the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

Use of the remarketing or “similar audiences” function of Google Inc.

We use the remarketing or "similar audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application is used to analyze visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based ads. These cookies record visits to the website and anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will see ads that are highly likely to reflect previously viewed product and information areas.
Your data may be transferred to Google LLC servers in the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/

Use of Microsoft Advertising

We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”) on our website.
The data processing serves marketing and advertising purposes and the purpose of measuring the success of the advertising measures (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, a personal identification of these users is not possible. Microsoft Advertising uses technologies such as cookies and web beacons that enable an analysis of your use of the website. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity and is not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to this page. The following information may be collected, among other things: IP address, identifiers assigned by Microsoft, information about the browser you are using and the device you are using, referrer URL (website from which you accessed our website), URL of our website.
Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

You can find more information about data protection and the cookies used by Microsoft here .

Using the Pinterest Tag

We use the Pinterest Tag of Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland "Pinterest") on our website.
The application serves the purpose of targeting website visitors with interest-based advertising on the Pinterest social network. For this purpose, the Pinterest conversion tag has been implemented on the website. This tag establishes a direct connection to the Pinterest servers when you visit the website. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will then see personalized, interest-based Pinterest ads.
If you access our website via a pin on the Pinterest social network, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the pin and were redirected to this page. The information collected with the help of the conversion cookie is used to create conversion statistics and thus to optimize our website. The following information can be processed, among other things: total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, your shopping cart contents, completed transactions.
Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. Data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

For more information about how Pinterest collects and uses data, your rights in this regard, and options for protecting your privacy, please see Pinterest’s privacy policy at https://policy.pinterest.com/de/privacy-policy.

Using TikTok Pixel

We use the TikTok pixel on our website from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK"). Both companies are joint controllers for data processing (hereinafter "TikTok").
The data processing serves the purpose of identifying and analyzing our customers' website access, as well as improving customer engagement through targeted advertising and evaluating the effectiveness of advertisements on TikTok. To do this, TikTok uses technologies such as cookies and pixels that enable recognition of your browser. The following information, among others, may be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you use, screen resolution, IP address. TikTok can assign this information to your personal TikTok user account. User profiles can be created from the data collected in this way using pseudonyms. However, this does not allow personal identification of users.
Your data may be transferred to third countries, such as the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. Data transfers to the USA and to third countries without an adequacy decision are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Use of Google reCAPTCHA

We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This query is used to distinguish between human input and automated machine processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. For the USA, the EU Commission has adopted an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore committed to adhering to European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Further information about Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy .

Use of Google invisible reCAPTCHA

We use the invisible reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This serves the purpose of distinguishing between input by a human and automated, machine-based processing. In the background, Google collects and analyzes usage data, which Invisible reCAPTCHA uses to distinguish regular users from bots. For this purpose, your input is transmitted to Google, where it is further processed. In addition, the IP address and any other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and may also be transferred to Google LLC servers in the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Further information about Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy

Use of Google Fonts

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of ensuring a consistent display of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used for this purpose. This includes, among other things, your IP address and information about the browser you use, which are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

Using Google Translate

We use the translation service of the

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

The data processing serves the purpose of displaying the information provided on the website in another language. To ensure that the translation is automatically displayed based on your choice of language, the browser you use connects to Google's servers. Cookies may be used for this purpose. Among other things, the following information may be collected and processed: IP address, URL of the page visited, date and time.
Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is thus committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent in accordance with Section 25 (1) (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.

For more information about how Google collects and uses your data, please visit: https://www.google.com/policies/privacy/ .

Children's data

The Services are not intended for use by children, and we do not knowingly collect personal information from children. If you are a parent or guardian of a child who has provided us with personal information, you may contact us using the contact information provided below and request that we delete that information.

As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell” (as those terms are defined under applicable law) personal information of anyone under the age of 16.

Security and storage of your data

Please note that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Furthermore, the information you send us may not be secure during transmission. We recommend that you do not use insecure channels to communicate sensitive or confidential information with us.

How long we retain your personal information depends on a variety of factors, including whether we need the information to administer your account, provide the Services, comply with our legal obligations, resolve disputes, or enforce other applicable agreements and policies.

Your rights

Depending on where you live, you may have some or all of the rights listed below regarding your personal data. However, these rights are not absolute and only apply in limited circumstances. In certain cases, we may refuse your request to the extent permitted by law.

Right to access/information : You may have the right to request access to the personal information we hold about you, including details of how we use and share your information.
Right to erasure : You may have the right to request that we erase the personal data we hold about you.
Right to rectification : You may have the right to request the rectification of inaccurate personal data we hold about you.
Right to portability : You may have the right to receive a copy of the personal information we hold about you and, in certain circumstances and subject to certain exceptions, to request that we transfer that information to a third party.
Right to Opt Out of Sale, Share, or Targeted Advertising : You may have the right to tell us not to "sell" or "share" your personal information, or to object to the processing of your personal information for purposes that constitute "targeted advertising" under applicable data protection laws. Please note that when you visit our website with the Global Privacy Control opt-out preference signal enabled, we automatically treat this as a request to opt out of the "sale" or "share" of information for the device and browser you use to visit the website, depending on your location.
Restriction of processing : You may have the right to ask us to stop or restrict the processing of your personal data.
Withdrawal of consent : Where we rely on your consent to process your personal data, you may have the right to withdraw that consent.
Right to appeal : If we refuse to process your request, you may have the right to appeal our decision. You can do so by directly responding to our refusal.
Manage communication preferences : We may send you promotional emails, and you can opt out of receiving these emails at any time by using the unsubscribe option provided in our emails. If you opt out, we may still send you non-promotional emails, such as those related to your account or orders.

You can exercise these rights as indicated on our website or by contacting us using the contact details provided below.

We will not discriminate against you if you exercise any of these rights.
We may need to collect information from you, such as your email address or account information, to verify your identity before we can provide a substantive response to the request. Subject to applicable law, you may designate an authorized agent to submit requests to exercise your rights on your behalf. Before we accept such a request from an agent, we must obtain proof from that agent that you have authorized them to act on your behalf.
We may also need to verify your identity directly with us. We will respond to your request promptly, as required by applicable law.

complaints

If you have any complaints about the way we process your personal data, please contact us using the contact details below. If you are not satisfied with our response to your complaint, depending on where you live, you may have the right to appeal our decision by contacting us using the contact details below or by submitting your complaint to your local data protection authority. For the European Economic Area (EEA), you can find a list of relevant data protection supervisory authorities here .

International users

Please note that we may transfer, store, and process your personal data outside the country you live in. Your personal data will also be processed by employees and third-party service providers and partners in those countries.

When we transfer your personal data to countries outside Europe, we rely on accepted transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts from the relevant UK authority, unless the data transfer is to a country determined to provide an adequate level of protection.

Right of objection

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation.
Once you have objected, the processing of the data in question will be stopped unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After your objection, we will stop processing the data concerned for direct marketing purposes.

contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please email us at support@pet-world.at.

For the purposes of applicable data protection laws and unless expressly stated otherwise, we are the controller of your personal data.