Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR“), we hereby inform you that the controller of your data processed in connection with the operation of the website www.zviropolis.pl (the “Website“) is Zviropolis sp. z o.o. with its registered office in Kraków (“Zviropolis“).
1. Zviropolis as the controller of personal data
| Who is the controller? | Zviropolis sp. z o.o. ul. Bonarka 19/5, 30-415 Kraków |
| How can I contact the controller? | by e-mail at info@zviropolis.com or in writing to the address of Zviropolis indicated above. |
2. Use of the Website
The controller of your personal data relating to the operation of the Website is Zviropolis, as the owner of the Website.
Zviropolis may process information about visitors to the Website even if you do not provide us with your data, for example through the contact form available on the Website.
While you use the Website, Zviropolis collects certain information by means of cookies. In certain cases this information may constitute personal data and may interfere more deeply with your privacy, which is why, in this privacy policy and above all in the cookie policy available at https://zviropolis.pl/en/policy-on-cookies-on-the-website, we aim to provide as much detail as possible on this subject.
| Purpose and legal basis of processing | In connection with your use of the Website, your data will be processed by Zviropolis: a) for the purpose of operating the Website and making available the content and functionalities provided on it (such as the contact form), and thereby providing services by electronic means, on the basis of Article 6(1)(b) GDPR, b) for the purpose of asserting or defending claims (should any arise), on the basis of Article 6(1)(f) GDPR, i.e. the legitimate interest of Zviropolis in the possible establishment, assertion or defence of claims in court and out of court, c) for the purpose of analysing traffic on the Website and monitoring how particular content on the Website is “clicked”, in connection with the use of cookies in accordance with the Cookie Policy, i.e. the legitimate interest of Zviropolis, on the basis of Article 6(1)(f) GDPR. In this respect, your consent to cookies, given in accordance with the Cookie Policy, will also constitute the basis for any transfer of personal data outside the EEA on the basis of Article 49(1)(a) GDPR, about which you can read more in the section “Recipients of data, transfer of data to third countries” and in the Cookie Policy. |
| Processing period | The data will be stored for the period of validity of the individual cookies referred to in the Cookie Policy or until an objection is raised, whichever occurs first. However, Zviropolis may process the data for longer if a claim arises that justifies longer processing. In that case, the data will be processed until the limitation period for that claim expires. |
| Obligation to provide data | The provision of personal data may be necessary in order to use all the functionalities offered by the Website. The provision of data for the purposes arising from the legitimate interest of Zviropolis referred to in point c) above is voluntary; however, failure to provide it may result in the content of the Website not being tailored to the user. |
3. Contact form
You may contact Zviropolis using the contact form on the Website. Further information about this service can be found in the Terms and Conditions available on the Website at https://zviropolis.pl/en/terms-and-conditions-for-the-provision-of-veterinary-services-by-the-veterinary-clinic-zviropolis-veterinary-center.
| Purpose and legal basis of processing | In connection with your use of the contact form on the Website, your personal data will be processed by Zviropolis for the purpose of answering the question submitted via the contact form and conducting any further correspondence in this regard, on the basis of Article 6(1)(f) GDPR, i.e. the legitimate interest of Zviropolis in handling correspondence addressed to Zviropolis in connection with its business, and also on the basis of Article 6(1)(a) GDPR with regard to any additional data not required by Zviropolis and provided voluntarily. |
| Processing period | As a rule, your personal data will be stored for the period during which your enquiry is being handled and for a maximum of 12 months after it has been dealt with. To the extent that the processing is based on consent, the data will be processed until the expiry of the periods referred to above or, if earlier, until consent is withdrawn. Consent may be withdrawn at any time. |
| Obligation to provide data | The provision of the data marked as mandatory in the contact form is necessary in order to contact the user and respond to the enquiry. The user may also provide other data to facilitate contact or the handling of the enquiry; however, the provision of such data is voluntary. |
4. Recipients of data, transfer of data to third countries
The recipients of your personal data processed for the above purposes may include:
a. entities responsible for the maintenance and security of the Website,
b. IT service providers,
c. entities specified in the Cookie Policy,
d. law firms and legal advisers,
e. auditors.
As a rule, Zviropolis does not intend to transfer personal data to international organisations or to third countries, i.e. countries outside the European Economic Area.
However, in connection with the analytics carried out on the Website, Zviropolis uses tools such as Google Analytics, Facebook Pixel and Hotjar. For this reason, in this respect some of your personal data may be sent to and stored in the USA, which is a third country within the meaning of the GDPR, i.e. one that does not ensure an adequate level of personal data protection in line with EU standards. If you consent to cookies (other than strictly necessary cookies), this will at the same time constitute consent to the possible transfer of your personal data to the USA on the basis of Article 49(1)(a) GDPR.
Further information (i.e. about cookies, the partners whose services we use and the purposes for which they are used) can be found in the Cookie Policy.
5. Social media
You can also find us on social media. However, we have prepared separate policies governing the rules and purposes of our processing of data in connection with the profiles/accounts we operate on social media:
a. Privacy Policy – Zviropolis on Facebook,
b. Privacy Policy – Zviropolis on Instagram.
6. Retention period of personal data
Zviropolis will not retain your personal data for longer than is necessary to achieve the purposes for which the data were collected, or for longer than is required by law. Detailed information on retention periods can be found in the descriptions of the individual processing activities set out above and in the Cookie Policy.
7. Rights relating to the processing of personal data
You have the following rights in relation to the processing of your personal data:
a. the right to withdraw consent, to the extent that the processing was based on consent (Article 7(3) GDPR). You have the right to withdraw your consent at any time. The withdrawal of consent takes effect from the moment it is withdrawn. The withdrawal of consent does not affect processing carried out before its withdrawal. The withdrawal of consent does not entail any negative consequences,
b. the right of access to personal data (Article 15 GDPR),
c. the right to request rectification of your personal data (Article 16 GDPR),
d. the right to request erasure of your personal data (the “right to be forgotten”) (Article 17 GDPR),
e. the right to request restriction of processing of your personal data (Article 18 GDPR),
f. the right to data portability of your personal data (where the processing is based on Article 6(1)(b) GDPR or Article 6(1)(a) GDPR and is carried out by automated means) (Article 20 GDPR),
g. the right to object to the processing of data (to the extent that the processing of your personal data is based on legitimate interest) (Article 21 GDPR).
If you consider that we are processing your data unlawfully, you have the right to lodge a complaint with the national supervisory authority responsible for personal data protection, which is currently the President of the Personal Data Protection Office (UODO).
8. Profiling
Your personal data will not be used by Zviropolis for the purpose of automated decision-making (including profiling) in such a way that any decisions producing legal effects could be taken as a result of such automated processing.
9. Changes
We reserve the right to amend this privacy policy at any time. Any changes to the privacy policy will be published on the Website.