Privacy policy

1 Data Controller

1.1 The personal data controller Buddyvet s.r.o., ID No.: 17327792, VAT No.: CZ17327792, with its registered office at nám. sv. Václava 60/12, Stará Boleslav, 250 01 Brandýs nad Labem-Stará Boleslav, file No.: C 369991 kept by the Municipal Court in Prague (hereinafter referred to as the “controller”), declares that all personal data processed by the controller are strictly confidential. The controller handles them in accordance with national legal regulations and European Union regulations applicable in the field of personal data protection. The controller has not appointed a data protection officer.

1.2 The controller collects, stores, and uses your personal data in accordance with Act No. 110/2019 Coll. on the processing of personal data (hereinafter referred to as the Personal Data Processing Act), respectively Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”). The individual purposes for which the controller processes personal data are further specified below.

1.3 The controller collects these personal data also through its websites at www.tlappka.cz and mobile applications on the App Store and Google Play (hereinafter "online services").

1.4 These principles are issued by the controller so that you are sufficiently informed about what personal data the controller processes, for what purpose, for how long, who will have access to your personal data, and what rights you have. These principles apply to all personal data collected by the controller, whether collected for the purpose of fulfilling a contractual relationship, legal obligation, legitimate interest, or granted consent.

2 Processed Data

2.1 We may collect your personal data if you use our online services or are in contact with us in other ways (collectively "services"). The data we collect falls into three categories: (a) information you provide to us; (b) information collected through automated means; and (c) information obtained from other sources. Generally, you provide us with your personal data voluntarily. However, there may be situations where providing your personal data is necessary to provide a specific service or is required by law. Please note that in certain cases, we may not be able to provide our services if you do not provide us with such data. We will inform you if providing your personal data is necessary. The information you provide to us may be combined with information collected through automated means or obtained from other sources. Depending on how you interact with us, you may provide us with the following data:

2.1.1 Personal information – such as your name, postal or email address, telephone number, date of birth, and other contact information – if you register within our online services, participate in one of our contests, or contact us by phone or through our online services;

2.1.2 Transactional information – such as information about notifications sent;

2.1.3 Account information – such as your username and password (or other identifier used to access our online services or to purchase or use our products and services);

2.1.4 Profile information, including products and services you like, or information about the time you use our services;

2.1.5 Other personal information voluntarily provided to us during contact with us. We collect information through automated means.

2.1.6 We may use automated technologies to collect information from your computer system or mobile device while using our online services. Automated technologies may include cookies, local shared objects, and internet tags.

We may collect the following information:

- Internet Protocol (IP) address;
- Date and time of access to our online services;
- The name and URL of the file accessed when using our online services;
- Operating system of the computer or mobile device and type of browser;
- Type of mobile device and its settings;
- Unique device identifier (UDID) or mobile device identifier (MEID);
- Device serial number and individual components;
- Advertising identifiers (e.g., IDFA or IFA) or similar identifiers;
- Referring website (the page that brought you to our website) or applications;
- Information on how you use our online services – such as which pages within our websites or mobile applications you visit. Our online services may collect data on the exact location of your mobile device or computer using geolocation and technologies such as GPS, Wi-Fi, Bluetooth, or proximity to base stations. For most mobile devices and computer systems, you will be prompted to consent to the collection of this information by the Tlappka service or application. You can revoke your consent to the collection of such data through the settings of your device or web browser. If you have any questions about how to prevent us from collecting precise information about your location, we recommend that you contact your mobile service provider, mobile device manufacturer, or web browser provider. Some online services may not function properly without location information. If you wish us to delete information obtained from you that could identify your exact location, please contact us using the contact details provided below. By law, we may be required to retain certain information.
- We collect information from other sources. We may also obtain information about you from other companies and organizations, including public databases, social media platforms, or external partners – such as entities providing analytical or marketing services. We may also collect publicly available information. For example, we may collect information from your public profile if you contact us through social media. We may also collect communication within social media that is addressed to us or concerns us. The information you provide to us may be combined with information collected through automated means or obtained from other sources.

2.2 The controller is authorized to process the following personal data according to the purpose. The individual purposes of processing are as follows:

2.2.1 Fulfillment of a contractual relationship means: the relationship between you and the controller based on an order, registration, contract, competition entry, and similar;

2.2.2 Sending commercial communications and offering products and services means: sending commercial offers via email, SMS, mobile notifications, or phone calls;

2.2.3 Accounting and tax purposes means: accounting records in accordance with accounting and tax legislation;

2.2.4 Statistical purposes means: anonymized detection of website visits, monitoring the number of page views, time spent on the website, type of device used to access the website. We collect data to improve our services and offer relevant content to clients;

2.2.5 Displaying advertisements means: displaying ads on the website based on statistically identified customer preferences;

2.2.6 Legitimate interest means: effective defense in case of a dispute; the processing time of personal data in such a case is 4 years from the expiration of the warranty period of the goods and is extended by the duration of the dispute. We aim to constantly improve our services and possibly provide new and better services; we want to defend against any hindrance to such activities; therefore, activities contributing to achieving this goal are our legitimate interest. Legitimate interest also includes processing for fraud prevention (e.g., risk assessment of contract conclusion), direct marketing (e.g., offering relevant services to existing customers), internal administrative purposes within a group of companies, reporting crimes and providing personal data to the competent authority, ensuring network and information security. This list is illustrative;

2.2.7 Fulfilling other legal obligations means: providing information to law enforcement authorities, providing information to other public authorities, and similar.

2.3 We process your personal data for the time necessary to ensure all rights and obligations arising from mutual legal actions, at least for the duration of the order processing, transaction execution, service provision, etc., further for the period that the controller is obliged to retain personal data according to generally binding legal regulations or for the period for which you have given the controller consent. Otherwise, the processing time follows the purpose for which the personal data are processed or is determined by legal regulations.

2.4 Personal data are processed manually and automatically by the controller. The controller is authorized to process some information automatically, for example, to create statistical information about website visits.

3 Rights of the Data Subject

3.1 As a data subject, you have the rights listed below, which you can exercise at any time. These include:

3.1.1 The right of access to personal data, under which you have the right to obtain information from the controller about whether the controller processes your personal data. The controller is obliged to provide you with this information without undue delay. The content of the information is determined by Article 15 of the GDPR. The controller has the right to charge a reasonable fee for providing the information, not exceeding the costs necessary to provide the information;

3.1.2 The right to rectification or erasure of personal data, or restriction of processing, under which you have the right to have incorrect or inaccurate personal data corrected. If your personal data is no longer needed for the purposes for which it was collected, or if it is processed unlawfully, you have the right to request its erasure. If you do not want to request the erasure of personal data but only temporarily restrict its processing, you can request a restriction of processing;

3.1.3 The right to request an explanation if you suspect that the processing of personal data by the controller is contrary to legal regulations;

3.1.4 The right to contact the Office for Personal Data Protection in case of doubts about compliance with obligations related to personal data processing;

3.1.5 The right to data portability, i.e., the right to obtain personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format, see Article 20 GDPR for more details;

3.1.6 The right to object to the processing of personal data processed for the purposes of legitimate interest of the controller or third parties. The controller will cease processing personal data unless compelling legitimate grounds for the processing are demonstrated which override your interests or rights and freedoms, or for the establishment, exercise, or defense of legal claims.

Of course, here is the translation of the provided text into English:

3.1.7 the right to withdraw consent for the processing of personal data at any time if you have given the controller consent to process personal data.

4 Cookies

4.1 Cookies are short text files that a website sends to your browser. They allow the website to record information about your visit, such as your chosen language, making your next visit easier and more pleasant. Cookies are important because, without them, browsing the Internet would be much more complicated. Cookies enable better use of our website and customization of its content to your needs; almost every website in the world uses cookies. Cookies are useful because they increase the user-friendliness of repeatedly visited websites.

4.2 The controller may use the following types of cookies on its website:

4.2.1 Session (i.e., temporary) cookies allow us to link your individual activities during the browsing session of these websites. These cookies are activated when you open your browser window and deactivated when you close your browser window. Session cookies are temporary and are deleted after you close the browser.

4.2.2 Persistent cookies help us identify your computer if you visit our website again. Another advantage of persistent cookies is that they allow us to customize our website to your needs.

4.3 In accordance with Section 89(3) of Act No. 127/2005 Coll., on electronic communications, as amended, we hereby inform you that our website uses cookies for its operation, i.e., we process your cookies, including persistent ones.

4.4 Internet browsers usually include cookie management. Within your browser settings, you can probably manually delete, block, or completely disable individual cookies. For more information, use your browser's help guide. If you do not allow the use of cookies, some features and pages may not function as they should.

4.5 To personalize content and ads, provide social media features, and analyze our traffic, we use cookies. We share information about how you use our website with our partners in social media, advertising, and analytics. By using the website, you consent to the integration of the following services:

4.5.1 Google Ireland Limited (Registration Number: 368047), located at Gordon House, Barrow Street, Dublin 4, Ireland; terms: https://policies.google.com/technologies/ads (advertising cookies)

4.5.2 Facebook Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 X525, Ireland; terms: https://cs-cz.facebook.com/about/privacy (advertising cookies)

4.5.3 Smartsupp.com, located at Šumavská 31, 602 00 Brno, CZ03668681; terms: https://www.smartsupp.com/cs/help/ochrana-osobnich-udaju-gdpr/

4.5.4 Seznam.cz a.s., located at Radlická 3294/10, Smíchov, 150 00, Prague 5, Company ID: 26168685; terms: https://www.seznam.cz/reklama/cz/obsahovy-web/pravidla-reklamy/gdpr/ (advertising cookies)

4.5.5 Smartlook.com, s.r.o., located at Šumavská 524/31, 602 00 Brno, Czech Republic; terms: https://help.smartlook.com/en/articles/3244452-privacy-policy

4.6 To display targeted ads within advertising and social networks on other websites, we provide these advertising and social networks with data about your behavior on the website; however, we do not provide them with your identification data.

5 Transfer to third countries

5.1 Your personal data will not be transferred to third countries.

6 Information and questions

6.1 For more information on rights and obligations regarding personal data protection, the data subject may obtain information via email at podpora@buddyvet.cz