Privacy policy of the vetexpert.eu/sklep – online store, vetexpert.eu and rawpaleo.vetexpert.eu websites and the vetexpert.eu/blog

The processor of personal data collected via the Online Store vetexpert.eu/sklep (hereinafter referred to as: the “Online Store“), Online Store vetexpert.eu and rawpaleo.vetexpert.eu (hereinafter referred to as: “Internet Services“) and Blog VetExpert vetexpert.eu/blog (hereinafter: the “Blog”) is the company VET PLANET SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ entered into the register of entrepreneurs of the National Court Register, maintained by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, with its registered office and address for service: ul. Brukowa 36/2, 05-092 Łomianki, KRS 0000310213, NIP 5272581427, REGON 1415195950, share capital: PLN 50,000.00, e-mail address: help@vetexpert.pl , phone number: 228337446 hereinafter referred to as the “Processor“
Contact details of the Data Protection Processor: e-mail address: rodo@vetexpert.pl
Personal data in the Online Store, Internet Services and the Blog are processed by the Processor in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals in connection with processing of personal data and on the free transfer of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation) – hereinafter referred to as “GDPR” or “GDPR Regulation“. The official text of the GDPR Regulation: http://eur-lex.europa.eu/ legal-content / PL / TXT /? uri = CELEX% 3A32016R0679
Usage of the Website, the Blog and the Online Store, including purchasing , is voluntary. Similarly, the provision of personal data by the Service User or the Customer of the Online Store is voluntary, subject to two exceptions:

1) concluding agreements with the Processor – failure to provide personal data required for the conclusion and performance of a Sales Agreement or an agreement for the provision of Electronic Services with the Administrator in the cases and to the extent specified on the website of the Internet Shop and in the Terms and Conditions of the Internet Shop and this Privacy Policy shall result in the inability to conclude that agreement. Providing personal data in this case is a contractual requirement and if the data subject intends to conclude a respective agreement with the Administrator, it is obliged to provide the required data.

(2) statutory obligations of the Processor – providing personal data is a statutory requirement resulting from generally applicable legal provisions imposing on the Processor the obligation to process personal data (e.g. data processing for the purpose of maintaining tax or accounting records ) and failure to provide such data will prevent the Processor from performing those obligations.

Should any words, phrases and acronyms appearing in this Privacy Policy and beginning with a capital letter be understood in accordance with their definition contained in the Rules and Regulations of the Internet Shop available at https://vetexpert.eu/sklep/regulapii-sklepu.html, with the provision that the term Electronic Service shall be understood as:
- the following services provided electronically by VET PLANET SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ via the Online Store: Account and Order Form;
- the following services provided electronically by VET PLANET SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ both via the Online Store and via the Website and the Blog:
  1. Contact Forms – interactive forms available in the Online Store, Online Services and the Blog, providing a possibility to submit enquiries or opinions to the Service Provider (incl. regarding the Products), likewise contact the Service Provider on issues related to the operation of the Online Store, Online Services and the Blog and Electronic Services;
  2. Newsletter – an electronic distribution service provided by the Service Provider via e-mail and SMS, whereby all Customers automatically receive from the Service Provider the content of successive editions of the Newsletter, containing in particular information about Products, news and promotions in the Online Store and about content published on the Websites and in the Blog. The Newsletter subscription service is on a double opt-in model – the Service Recipient must confirm the intention to subscribe to the Newsletter by clicking the link in the received e-mail message. The Newsletter Electronic Service is a complimentary service for an indefinite period. The Service Recipient has the possibility to unsubscribe from the Newsletter at any time and with no justification (resign from the Newsletter) by clicking the Unsubscribe button in the Newsletter or sending an appropriate request to the Service Provider, in particular via e-mail to the following address: help@vetexpert.pl or in writing to the following address: VET PLANET SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ul. Brukowa 36/2, 05-092 Łomianki.

2. PURPOSE, PRINCIPLE, PERIOD AND SCOPE OF DATA PROCESSING IN THE ONLINE STORE, INTERNET SERVICES AND BLOG

Each time the purpose, principle, period and scope as well as the recipients of personal data processed by the Processor result from actions taken by a given Service User or Customer in the Online Store, Internet Services or the Blog.
The Processor may process personal data in the Online Store, Internet Services and the Blog for the following purposes, on the following grounds, during the periods and in the following scope:

Purpose of data processing	Legal basis for the processing and data storage period	SCOPE OF PROCESSED DATA
Execution of the Sales Agreement or contract for the provision of Electronic Services or undertaking action at the request of the data subject, prior to entering into the aforementioned agreements	Article 6 (1)(b) Regulations of the GDPR (execution of the contract) The data shall be retained for the duration required to perform, terminate or otherwise expire the concluded contract.	Maximum range: name and surname; e-mail address; contact telephone number; delivery address (street, house number, apartment number, zip code, city, country), address of residence / business / seat (if different from the delivery address). In the case of Customers or Customers who are not consumers, the Processor may process additionally, the company name and tax identification number (NIP) of the Service Recipient or Customer. The given scope is maximum – in the case of e.g. personal collection, it is not necessary to provide the delivery address.
Direct marketing	Article 6 (1)(f) GDPR Regulations (legitimate interest of the Processor). The data shall be stored for the duration of the legitimate interest pursued by the Processor, but not beyond the period of limitation of claims against the data subject due to the business activity conducted by the Processor. The limitation period shall be determined by the provisions of law , in particular the Civil Code (the basic limitation period for claims related to running a business is three years, and for a sales contract – two years). The Processor shall not process data for the purposes of direct marketing in the case of effective objection in this respect by the data subject.	E-mail address
Marketing (including Newsletter)	Article 6 (1) (a) Regulations of the GDPR (consent) The data shall be stored until the data subject withdraws the consent for further processing of his data for this purpose.	Name and surname, e-mail address
The Customer’s/ Service Recipient’s feedback or enquiry via the Contact Form	Article 6 (1) (a) GDPR Regulations The data shall be retained until the data subject withdraws the consent for further processing of their data for this purpose.	Name and surname, e-mail address
Expressing an opinion by the Customer / Service Recipient as part of a questionnaire or answering a quiz	Article 6 (1) (a) GDPR Regulations The data is stored until the data subject withdraws the consent for further processing of their data for this purpose.	E-mail address
Maintaining tax or accounting records	Article 6 (1) (c) Regulations of the GDPR in connection with article 86 § 1 of the Tax Ordinance, i.e. of January 17, 2017 (Journal of Laws of 2017, item 201) or art. 74 (2) of the Accounting Act, i.e. of January 30, 2018 (Journal of Laws of 2018, item 395). The data shall be retained for the period required by law obliging Processor to maintain tax records (until the expiry of the period of tax liability limitation period, unless otherwise provided by tax law) or accounting ledgers (5 years, counting from the beginning of the year following the financial year to which the data refers ).	First name and last name; address of residence / business / registered address (if different from the delivery address), company name and tax identification number of the Service User or Customer
Determining, investigating or defending claims that can be raised by the Processor	Article 6 (1) (f) of the GDPR Regulation. The data shall be retained for the duration of the legitimate interest pursued by the Processor, but not beyond the period of validity of claims against the data subject resulting from the Processor’s business activities. The limitation period shall be determined by law, in particular the Civil Code (the basic limitation period for claims related to business activities is three years, and for a sales contract – two years).	house number, premises number, postal code, city, country, address of residence/business/headquarters (if different from the delivery address). In the case of Service Recipients or Customers other than consumers, the Processor may additionally process the company name and number tax identification number of the Service Recipient or Customer.

3. DATA RECIPIENTS

For the proper operation of the Sites, the Blog and the Online Store, including the execution of concluded Sales Agreements, it is necessary for the Processor to engage the services of external entities (such as, e.g.: a software provider, courier or payment processor). The Processor shall only use the services of such processors who provide sufficient guarantees to implement appropriate technical and organizational measures for the processing to meet the requirements of the GDPR Regulation and protects the rights of the data subjects.
The Processor provides data only when it is necessary for the fulfilment of a specific purpose of processing personal data and only to the extent necessary for its fulfilment.
The personal data of the Service Users and Customers of the Online Store may be transferred to the following recipients or categories of recipients:
1. Transporters / forwarders / courier agents – should a customer choose in the online store the method of delivery by post or courier, , the Processor provides the collected personal data of the customer to the selected transporter, forwarder or agent executing the shipment commissioned by the administrator to the extent necessary to complete the product delivery to the customer.
2. entities processing electronic payments or via payment card – should a Customer choose to pay electronically or via a payment card in the Online Store, the Processor shall provide the Customer’s collected personal data to the selected entity processing the aforementioned payments in the Online Store at the request of the Processor to the extent necessary to process the payments executed by the Customer.\
3. suppliers of opinion poll / quiz systems – should a Customer / Service Recipient consent to provide feedback as part of a survey or to complete a quiz, the Processor shall provide access to the collected personal to the selected entity hosting the survey system reviewing concluded Agreements Sales in the Online Store at the request of the Processor to the extent necessary for the Customer to express an opinion using the opinion poll system.
4. service providers supplying the Processor with technical, IT and organizational solutions, enabling the Processor to operate a business, including the Online Store, Internet Services and the Blog, and the provision of Electronic Services via these solutions (in particular computer software providers, e-mail providers electronic and hosting and software providers for company management and providing technical assistance to the Processor) – the Processor provides the collected personal data of the Customer / Service User to a selected supplier acting on its behalf solely in the event and to the extent necessary for the accomplishment of a specific purpose of data processing in accordance with this Privacy Policy.
5. accounting, legal and advisory service providers rendering accounting, legal or advisory support to the Processor (in particular an accounting office, law firm or debt collection company) – the Processor provides the collected personal data of the Client / Service User to a selected supplier acting on its behalf solely in the event and to the extent necessary for the accomplishment of a specific purpose of data processing in accordance with this Privacy Policy.

4. PROFILING

The Processor may apply profiling for direct marketing purposes in the Online Store, Internet Services and the Blog, whereas the decisions made by the Processor on its basis do not concern concluding or refusal to conclude a Sales Agreement or the possibility of availing of Electronic Services. The effect of using profiling may result, for instance in granting a discount to a certain individual , reminding him/her about an unfinished purchase, sending him a rebate code or proposal of a Product which may correspond to the interests or preferences of a certain individual, or offering better conditions in comparison with the standard offer of the Internet Shop.
Profiling involves the automatic analysis or prediction of a individual’s conduct on the website of the Online Store, Blog or the Online Store, e.g. by adding a specific Product to the basket, browsing the particular Product page in the Online Store, viewing specific content published on the Online Store or the Blog, or by analysing the previous history of purchases completed in the Online Store.
The data subject shall have the right not to be affected by a decision which is based solely on automated processing, including profiling, and results in legal consequences or similarly significantly affects an individual.

5. DATA SUBJECT’S RIGHTS

The right of access, rectification, restriction of processing, erasure or data portability – the data subject has the right to request the Processor to access his/her personal data, rectify it, delete (“the right to be forgotten”) or limit processing and has the right to object to processing, as well as the right to data portability. The detailed conditions for exercising the aforementioned rights are outlined in art. 15-21 of the GDPR Regulation.

The right to withdraw consent at any time – an individual whose data is processed by the Processor on the basis of the consent (pursuant to Article 6 (1) (a) or art. 9 (2) (a) Regulation of the GDPR), has the right to withdraw consent at any time without affecting the lawfulness of the processing conducted on the basis of consent before its withdrawal.

The right to file a claim to the supervisory authority – an individual whose data is processed by the Processor has the right to file a claim with the supervisory authority according to the rules and procedures established in the GDPR Regulation and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office.
Right to objection – the data subject has the right to object at any time – on grounds relating to his/her particular situation – to the processing of the personal data on the basis of Article 6 (1) (e) (public interest or tasks) or (f) (legitimate interest of the administrator), including profiling based on these provisions. Where this is the case , the administrator shall no longer be permitted to process these personal data , unless he demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of claims.
The right to objection to direct marketing – if personal data is processed for the purposes of direct marketing, the data subject shall have the right to object to the processing of his/her personal data for the purposes of such marketing, including profiling, to the extent that Processing is associated with such direct marketing.
In order to exercise the rights referred to in this point of the Privacy Policy, you can contact the Administrator by sending an appropriate message in writing or by e-mail to the Administrator’s address indicated at the beginning of the Privacy Policy or using the Contact Form.

6. COOKIES, OPERATING DATA AND ANALYTICS

Cookies are small text information in the form of text files, sent by the server and stored on the side of the individual visiting the website of the Online Store, Websites and the Blog (e.g. on the hard drive of a computer, laptop or on the smartphone’s memory card – depending on which device is accessed by the user).

The Processor may process the data contained in cookies upon the visitors’ access to the Online Store website, Websites and a Blog for the following purposes:

identification of Recipients as logged in to the online store for the purposes of demonstrating that they are logged in
memorizing Products placed in the shopping cart for the purpose of placing an Order; ;
memorizing data from completed Order Forms, surveys or login details to the Online Store;
adjusting the content of the website of the Online Store, Website or the Blog to the individual preferences of the Service Recipient (e.g. regarding colours, font size, page layout) and optimising the usage of the Online Store, Website or Blog pages;
anonymous statistics of the use of the Online Store, Website or the Blog;
re-marketing, i.e. analysis of the visitors’ conduct in the Online Store, Website or the Blog through anonymous assessment of their activities (e.g. multiple visits to specific pages, keywords, etc.) in order to create their profile and provide them with advertisements tailored to their expected preferences , including in the event that they visit other websites on the Google Inc. advertising network. and Facebook Ireland Ltd.;

Most web browsers available on the market accept cookies by default. . This means it is possible for instance, to partially limit (e.g. temporarily) or completely disable the option of saving cookies – in the latter case, it may however affect some of the functionalities of the Online Store, Websites or the Blog (for instance, it may not be possible to follow the Order path), through the Order Form due to the failure to remember the Products in the basket during the subsequent steps of submitting the Order.
The web browser settings concerning cookies are important for granting consent to the use of cookies by the Online Store, Websites and the Blog – in accordance with the law, such consent may also be granted through the settings of the web browser. In the absence of such consent, the browser settings for cookies should be changed accordingly.
Detailed information with respect to modification of cookie settings and their independent deletion in the most popular web browsers is available in the help section of the web browser and on the following pages (just click on the link):
1. in the Chrome browser
2. in the Firefox browser
3. in the Internet Explorer browser
4. in the Opera browser
5. in the Safari browser
6. in the Microsoft Edge browser
The Processor may employ Google Analytics, Universal Analytics provided by Google Inc. in the Online Store, Internet Services and the Guide. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA. These services support the Processor in analysing traffic in the Online Store, Internet Services and the Blog. The collected data is processed as part of the aforementioned services in an anonymised manner (these are the so-called operational data that prevent identification individuals ) in order to generate statistics facilitating administration of the Online Store, Websites and the Blog. These data are aggregate and anonymous, i.e. it does not contain identifying characteristics (personal data) of individuals visiting the Online Store website, websites or the Blog. In the Online Store, Online Services or the Blog, it collects such data as the sources and medium of attracting visitors to the Online Store ̧ Online Services or the Blog and the pattern of their conduct on the website of the Online Store, Online Services or the Blog, information about devices and browser from which they visit the website, IP and domain, geographic data and demographic data (age, gender) along with interests.
It is possible to prevent Google Analytics from revealing information about activities on the website of the Online Store, Website or the Blog – for this purpose; A browser add-on provided by Google Inc. can be installed, available here: https://tools.google.com/dlpage/gaoptout?hl=pl.
The Processor is permitted to access the Facebook Pixel service provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) in the Online Store, Internet Services or the Blog. This service assists the Processor in measuring the effectiveness of advertisements and discovering the actions taken by visitors to the Online Store, Websites or the Blog, as well as display relevant advertisements to such visitors. Detailed information on the operation of Facebook Pixel is available at the following web address: https://www.facebook.com/business/help/742478679120153?helpref=page_content.
Managing the operation of Facebook Pixel is possible via the advertising settings in the user’s Facebook.com account: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.
The Processor is permitted to use the Klaviyo tool provided by Klaviyo Inc. in the Online Store, Internet Services or the Blog. (225 Franklin St., Boston, Massachusetts 02110, USA).. This tool enables the Processor ascertain what actions are undertaken by visitors to the Online Store, the Website or the Blog, thereby automating marketing processes and optimising the purchase path. Detailed information on the operation of Klaviyo is available at the following internet address: https://www.klaviyo.com/features/overview.

7. FINAL PROVISIONS