Information on data processing (Art 13 f DSGVO)
Name and contact details of the responsible person:
Stress Free Pets Pty Ltd
PO Box 9258, Gold Coast MC, QLD 9726
AUSTRALIA
office@stress-free-pets.com
Purpose of the data processing:
- customer administration
- personnel administration
- Accounting (financial accounting)
- marketing
- online shop
Legal basis for data processing:
We collect and store personal data when you register to participate in web seminars (“webinars”) or wish to use the other services offered by Stress-Free-Pets.
Certain information – in particular within the framework of marketing – is reserved for pharmaceutical law experts in accordance with the Austrian Medicines Act (AMG). The personal data provided will therefore be checked.
All personally identifiable information is provided directly by the individuals concerned – see below for details; we do not collect personally identifiable information from third party sources. Failure to provide personal information may result in the Services not being used.
Legal basis for
Customer administration:
Art 6 DSGVO para 1 lit b (required for the performance of the contract)
Art 6 DSGVO para 1 lit c (legal obligations, in particular under the AMG)
Personnel administration:
Art 6 DSGVO para 1 lit b (required for the performance of the contract)
Art 6 DSGVO para 1 lit c (statutory obligations, in particular under labour and social law provisions)
Art 6 DSGVO para 1 lit f (legitimate interests of the person responsible, namely to ensure the safety of the company in the event of compliance violations)
Accounting:
Art 6 para 1 lit b (required for performance of contract)
Art 6 para 1 lit c (statutory obligations under the BAO and the UGB)
Marketing by electronic mail:
Art 6 para 1 lit a (consent of data subjects). The consent may be revoked at any time, in particular by contacting the above contact data, without affecting the legality of the processing carried out on the basis of the consent until revocation.
(Other) Marketing:
Art 6 para 1 lit a (consent of the data subjects). The consent may be revoked at any time, in particular by contacting the above contact data, without affecting the legality of the processing carried out on the basis of the consent until revocation.
Art 6 DSGVO para 1 lit f (legitimate interests of the controller to market his services (in particular to customers) as long as the interests of the data subjects do not predominate)
Website or online shop (going beyond the above purposes):
Art. 6 para. 1 lit a (consent of the parties concerned for cookies).
Art 6 para 1 lit b (necessary for the fulfilment of the contract)
Article 6(1)(f) (legitimate interests of the data controller) DSGVO for the processing of certain user data in order to prevent misuse.
Possible recipients or contract processors etc.
Customer administration:
Persons affected
registered customers with account
registered customers (related to the newsletter)
Processors
Coracle Online Ltd, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK,
for the purpose of sending the newsletter. Corresponding data protection agreements exist with them.
Personnel administration:
Persons concerned
Employees (freelancer, employee, worker)
Processors
MWM Advisory Pty Ltd, Level 4, Emerald Lakes Town Centre, 3027 the Boulevard, Carrara Qld 4211
for the purpose of payroll accounting and personnel organization. corresponding data protection agreements exist with them.
Receivers
Banks
Legal transactions in business transactions
Chartered accountant and tax consultant
courts
Administrative and financial authorities
collection companies
Contractual or business partners, provided that they are directly involved
insurance
external organisers for events and training courses
Pension and health insurance funds
AMS
Accounting:
Persons affected
Customers or suppliers of the person responsible (recipient and supplier of goods or services)
Clerk or contact person at the person in charge
Third parties involved in the business transaction
Contact persons at the customer’s, supplier’s or third parties involved in the business transaction
associate
Receivers
Banks for processing payment transactions
Legal representative in business case
Chartered accountant and tax consultant
courts
Competent administrative authorities, in particular tax authorities
Collection companies for debt collection (therefore only abroad if the debt has to be collected abroad)
Contractual or business partners who participate or are to participate in the delivery or service
Marketing:
Affected persons
registered customers with account
registered customers (related to the newsletter)
Receivers
Hoster for online platforms (website, shop system): Wallace Web Design
PO Box 1006, Uraidla, SA 5142
Online tracking provider: Google (Analytics) LLC, Adobe Systems Software Ireland Limited (Analytics)
Newsletter Shipping Agencies: MailChimp, Inc
Online shop
Persons concerned
registered customers
Receivers
Suppliers (payment processors such as PayPal)
Your payment data will be collected and stored by an external payment service provider – except in the case of payment by bank transfer. Depending on the payment method selected, you may also have to enter account or other payment data. If the selected payment method involves an external payment service provider (e.g. Paypal), you may have to provide further data to this provider or, if you already have an account there, you may have to provide it. Accordingly, the data protection information of the payment service provider also applies. These may include the transmission of certain data to us in the course of the payment process. The data collection and processing described is carried out exclusively for the purpose of identifying you as the contractual partner and being able to establish and execute the relevant contractual relationships.
Online tracking provider (e.g. Google Analytics)
Stress-Free-Pets uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, which allow an analysis of the use of the website by you. This data is collected in pseudonymised form, stored and used to create pseudonymised user profiles. The data will not be used to personally identify the user of this website and will not be merged with data about the bearer of the pseudonym. The information generated by this cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. Since Stress-Free-Pets has chosen to activate the so-called “IP anonymisation”, your IP address will be shortened by Google within member states of the EU or in other contracting states of the EEA Agreement. On behalf of Stress-Free-Pets, Google will use the transmitted information to evaluate your use of the website, to compile reports on website activity and to provide Stress-Free-Pets with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website and Google from processing this data by downloading and installing the browser plug-in available under the following link.
Contact persons at the supplier or third parties involved in the business transaction
Duration of processing:
The processing of personal data by the data controller or on his behalf by the processors named here shall take place either exclusively within the European Union or on the basis of adequacy decisions of the EU Commission or otherwise appropriate and reasonable guarantees, such as in particular Standard Contractual Clauses, and therefore in any case under guarantee of appropriate data security. The warranties can be requested at office@Stress-Free-Pets.com .
The data will be stored for the duration of the statutory retention periods.
The person responsible will not process the personal data for any purpose other than that for which the personal data was collected.
Information on data subjects’ rights
Right of access
Any person concerned by the processing has the right to obtain from the RESPONSIBLE a confirmation as to whether personal data concerning him or her are being processed; in this case, the person concerned has the right to obtain access to these personal data (copy of the personal data which are the subject of the processing) and to the following information: (a) the purposes of the processing; (b) the categories of personal data to be processed; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (d) if possible, the envisaged duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration; (e) the existence of a right of rectification or erasure of personal data relating to him or her or of a right of the controller to object to or to the processing; (f) the existence of a right of appeal to a supervisory authority; (g) where personal data are not obtained from the data subject, any available information as to the source of the data; (h) the (non-)existence of automated decision-making, including profiling. The RESPONSIBLE party shall provide a copy of the personal data subject to processing. For all further copies requested by the data subject, the RESPONSIBLE may charge a reasonable fee based on the administrative costs. If the data subject submits the request electronically, the information shall be provided in a common electronic format, unless the data subject indicates otherwise.
Right to rectification and erasure
The data subject has the right to request the RESPONSIBLE party to rectify without delay any inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement.
Furthermore, the data subject shall have the right to require the RESPONSIBLE to delete personal data relating to him/her immediately and the RESPONSIBLE shall be obliged to delete personal data immediately if one of the following reasons applies: (a) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed. (b) the data subject withdraws the consent on which the processing was based and there is no other legal basis for the processing. (c) The data subject objects (see below) to the processing. (d) The personal data have been unlawfully processed. (e) The deletion of the personal data is necessary to fulfil a legal obligation to which the RESPONSIBILITY is subject. (f) The personal data have been collected in relation to information society services offered (consent of a child). In particular, the right to cancellation does not exist if the processing is necessary to fulfil a legal obligation of the RESPONSIBILITY or to perform a task in the public interest or in the exercise of official authority assigned to the RESPONSIBILITY and/or to assert, exercise or defend legal claims. If the correction or deletion of personal data processed by automated means cannot be carried out immediately because it can only be carried out at certain times for economic or technical reasons, the processing of the personal data concerned shall be restricted up to this point in time (see below – Right to restriction of processing).
Right to limitation of processing
The data subject shall have the right to require the RESPONSIBILITY to limit the processing if any of the following conditions is met: (a) the accuracy of the personal data is contested by the data subject for a period of time which enables the RESPONSIBLE to verify the accuracy of the personal data, (b) the processing is unlawful and the data subject refuses to erase the personal data and instead requests the restriction of the use of the personal data; (c) the RESPONSIBILITY no longer needs the personal data for the purposes of the processing, but the data subject needs it for the assertion, exercise or defence of legal rights, or (d) the data subject has objected to the processing until it is established whether the legitimate reasons of the RESPONSIBILITY outweigh those of the data subject.
Where processing has been restricted, such personal data may not be processed without the consent of the data subject or for the exercise, maintenance or defence of rights or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State, except where the data are stored.
A data subject who has obtained a restriction on processing shall be informed by the RESPONSIBLE party before the restriction is lifted.
Right to data transferability
If the processing is based on a consent or on a contract and the processing is carried out in accordance with
the data subject shall have the right to obtain the personal data concerning him which he has provided to the RESPONSIBLE in a structured, common and machine-readable format and shall have the right to communicate such data to another data processor. In exercising his right to data transfer, the data subject shall have the right to obtain that the personal data be transferred directly from one controller to another controller, to the extent that this is technically feasible.
Right of objection
The data subject shall have the right to object at any time, for reasons relating to his particular situation, to the processing of personal data concerning him which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the RESPONSIBLE or which is necessary to safeguard the legitimate interests of the RESPONSIBLE or of a third party. The RESPONSIBLE will then no longer process the personal data unless it can prove compelling legitimate reasons for the processing outweighing the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
Where personal data are processed for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning him for the purpose of such advertising. If the data subject objects to the processing for the purposes of direct marketing, the personal data shall no longer be processed for those purposes.
Right of appeal to the supervisory authority
Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to complain to a supervisory authority, in particular in the Member State in which he or she resides, at his or her place of work or at the place where the alleged infringement is alleged to have occurred, if he or she considers that the processing of his or her personal data is contrary to those provisions of law – see www.data-protection-authority.gv.at