This policy explains what personal data we collect on the dobermanszczeniaki.pl website, why we do so and what rights you have.
1. Who is the controller of your data
The controller of personal data is JAGBAR Bartosz Jagła, a sole trader registered in the Central Registration and Information on Business (CEIDG), Byszewy 26D, 92-701 Byszewy, NIP 7282881095, REGON 527535523.
For matters concerning personal data you can contact us:
- by e-mail: dobermanszczeniaki@gmail.com,
- by phone or WhatsApp: +48 533 886 972,
- by post: Byszewy 26D, 92-701 Byszewy.
2. What data we collect and why
| Purpose | What data | Legal basis | How long |
|---|---|---|---|
| Waiting list for the next litter | first name, e-mail address or phone number, preferred sex and colouring, information on whether you want to receive a message first | Your consent (Article 6(1)(a) GDPR) | until you withdraw your consent, and no longer than 12 months from sending the information about the next litter |
| Sending the free Ebook and e-mails with advice about Dobermans | e-mail address | Your consent (Article 6(1)(a) GDPR) | until you unsubscribe from the e-mails |
| Sale of Ebooks and performance of the agreement | e-mail address, payment information (amount, date, status, transaction identifier) | Conclusion and performance of the agreement (Article 6(1)(b) GDPR) | for the duration of the agreement, and then until the limitation periods for claims expire |
| E-mail notifications about selected Puppies: about new diary entries ("Follow") and about a change in a Puppy's availability ("Notify me") | e-mail address, selected Puppies | Your consent (Article 6(1)(a) GDPR) | until you unsubscribe from notifications; the availability notification is sent once only, after which the subscription expires |
| Puppy reservation and performance of the reservation agreement | first name and surname, address, e-mail address, phone number, selected Puppy, payment information (amount, date, status, transaction identifier), accepted versions of documents and consents | Conclusion and performance of the agreement (Article 6(1)(b) GDPR) | for the duration of the agreement, and then until the limitation periods for claims expire |
| Obligations under tax and accounting regulations | data from the agreement and the payment | Legal obligation (Article 6(1)(c) GDPR) | for the period required by regulations, usually 5 years from the end of the calendar year |
| Replies to e-mails, phone calls and WhatsApp messages | data you provide in the message | Our legitimate interest, namely replying to your question (Article 6(1)(f) GDPR), and, for reservations, conclusion of the agreement (Article 6(1)(b) GDPR) | for the time needed to handle the matter; if it concerns a reservation, for the same period as the reservation data |
| Record of consents given | content and version of the consent, date, information on what it concerned | Obligation to demonstrate consent (Article 6(1)(c) in conjunction with Article 7(1) GDPR) | for the period during which the data to which the consent relates is stored |
| Website security and protection of forms against abuse | IP address, technical information about the device and browser recorded in server logs | Our legitimate interest, namely website security (Article 6(1)(f) GDPR) | up to 7 days |
| Visit statistics | aggregated information about page visits, without cookies and without identifying you | Our legitimate interest, namely developing the website (Article 6(1)(f) GDPR) | in the form of aggregated statistics |
| Establishing, pursuing and defending claims | data needed in the given matter | Our legitimate interest (Article 6(1)(f) GDPR) | until the limitation periods for claims expire |
You may also give consent to notifications about new diary entries when you make a reservation. This is a separate consent, not ticked by default, and it is not a condition of the reservation.
We do not receive payment card data. You enter it directly in the form of the payment operator.
3. Whether you have to provide data
Providing data is voluntary. However, without it we cannot add you to the waiting list, send notifications, accept a reservation or send you an Ebook. For reservations and Ebook purchases we need data in order to conclude the agreement.
4. Who we share data with
Data may be received by entities that help us run the Website and handle reservations, solely to the extent necessary for them to perform their tasks:
- Railway (Railway Corporation, USA): hosting of the Website and the database; data is stored on servers in the European Union (Amsterdam, Netherlands),
- Stripe (Stripe Payments Europe, Limited, Ireland): handling of online payments; for some purposes, for example preventing fraud, Stripe acts as a separate data controller (its privacy policy is described at stripe.com/privacy),
- Resend (Plus Five Five, Inc., USA): sending of e-mail messages from the Website (confirmations, notifications) from servers in the European Union,
- Umami (Umami Software, Inc., USA): visit statistics without cookies, in the Umami Cloud service,
- Google (Google Ireland Limited, Ireland): e-mail, when you write to us at dobermanszczeniaki@gmail.com,
- WhatsApp (WhatsApp Ireland Limited, Ireland), when you contact us or reserve a Puppy via WhatsApp; WhatsApp also processes data as a separate controller, under its own privacy policy,
- banks and payment operators, when you pay by bank transfer or BLIK,
- public authorities, where required by law.
5. Transfers of data outside the European Economic Area
Railway, Resend and Umami are based in the United States, and Stripe, Google and WhatsApp belong to groups based in that country. Even when data is stored in the European Union, it may be accessible from the United States, for example when the service is maintained. In such a case data is transferred on the basis of a decision of the European Commission finding an adequate level of data protection (the EU-US Data Privacy Framework), in which Railway, Resend and Stripe, among others, participate, or on the basis of standard contractual clauses approved by the European Commission. You may ask us for information about the safeguards applied by a specific provider.
6. Your rights
You have the right to:
- access your data and receive a copy of it,
- have incorrect data rectified,
- have your data erased,
- restrict processing,
- have data that we process on the basis of your consent or an agreement transferred to you (data portability),
- object to processing based on our legitimate interest,
- withdraw your consent at any time; withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.
To exercise your rights, write to dobermanszczeniaki@gmail.com. You can also unsubscribe from notifications by clicking the "Unsubscribe" link in a message.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
7. Automated decisions
We do not make decisions concerning you based solely on automated processing, including profiling. The payment operator may automatically assess the risk of fraud during a payment, on the terms described in its privacy policy.
8. Cookies
The Website uses only cookies necessary for its operation, for example during payment. Details are described in the Cookie Policy.
9. Data security
We apply technical and organisational measures that protect data against unauthorised access, loss or alteration, including an encrypted connection (HTTPS) and restricted access to the server and database, available only to authorised persons.
10. Changes to the privacy policy
We may change this privacy policy, for example when the law or the way the Website works changes. The current version is always available on the Website, and the date of its last update is given at the top of the page.