Updated 21 August 2024
English
This privacy policy applies to the relationship between the data subjects (hereinafter referred to as "user/s") accessing the website and/or mobile application (hereinafter referred to as the "platform") provided by S.C. TELEPAWS S.R.L. as the personal data controller within the meaning of Art. 4(7) of Regulation (EU) 2016/679.
1. Categories of Personal Data Processed
1.1 Processing of Application Users' Personal Data
The controller processes the following categories of data:
User's first name, last name, and username/nickname
Phone number and email address provided
Geographical location
Data regarding the user's pet, such as species and breed, age, sex, and health status
History of services and products purchased on the platform
Banking data necessary for in-app purchases
Device ID
1.2 Processing of Website Users' Personal Data
When using the contact form available on the website provided by Telepaws, we will process the name, surname, email address, phone number and message directly provided by the user contacting us this way.
The email address will also be processed if a person wishes to subscribe to the newsletter offered by Telepaws.
The Telepaws website uses cookies according to the policy which can be consulted here.
1.3 Processing of Minors' Data
The use of the platform by individuals under the age of 16 without guardian consent is prohibited. If you discover that a person under your care is using the platform, please contact us using the company's contact details provided in this document.
If the guardian permits a minor under their care to use the platform, the minor's access to the platform can only be through a profile created in the guardian's account.
A minor's profile has limited functionality on the platform, and the personal data processed is limited to the minor's username/nickname.
A minor who has reached the age of 16 consents in their own name to the processing of their personal data.
2. How We Use Personal Data
The personal data collected is used for the following purposes :
Analytical: Personal data is used for analytical purposes, to improve the relevance of the services or products offered to the user and to ensure the optimal functionality of the mobile application. Analysis may also be based on information obtained directly from communications with users.
Service Provision: Personal data is processed together with our partners as joint controllers to provide the user with veterinary services and products through the platform. Data processed for this purpose is limited to what is strictly necessary to offer the service or place, process, and deliver a product order.
Legal: Processing of personal data may be necessary to fulfill the legal obligations of the controller in the context of the services provided through the platform, including tax obligations and archiving.
Marketing: Processing is done for sending communications via remote communication means regarding offers, news and educational material available on the platform.
3. Legal Basis for Processing
The legal basis for processing for each of the purposes mentioned in section 2 is as follows:
Analytical: Processing is based on the controller's legitimate interest in ensuring the proper functioning of the platform and guiding its development.
Refusal to provide data for this purpose does not negatively affect the data subject.
Service Provision: Processing is based on the controller's legitimate interest in operating the platform and executing a contract in the case of purchasing services and goods through the platform. Without the processing of personal data, the controller cannot provide the service or deliver goods to the user and cannot ensure the fulfillment of contractual relationships with its partners.
The refusal of the data subject to provide the necessary data leads to the controller's inability to provide the service.
Legal: Processing is carried out to fulfill the legal obligations of the controller. If the data subject refuses to provide the necessary data for this purpose, the controller is unable to fulfill its legal obligations and, consequently, cannot provide the service to the concerned data subject.
Marketing: Processing occurs only based on the prior and informed consent of the data subject. Withdrawal of consent does not negatively affect the data subject.
4. Data Security
Through special clauses stipulated in each collaboration contract, the controller ensures the obligation to maintain the confidentiality of personal data accessed by our partners through the contractual relationship with Telepaws, as well as their alignment with national and international norms regarding personal data processing with each of them.
For data processed by the controller, appropriate technical measures are implemented to ensure data integrity and confidentiality.
5. Data Recipients
Recipients to whom the collected personal data may be transmitted include service providers directly/indirectly involved in the execution of the placed order or scheduled appointments: doctors, medical laboratories, employees, merchants, couriers/shipping companies, online payment processors, or, if applicable, state authorities (including tax authorities, consumer protection authorities, competent criminal authorities) as a result of a legal obligation.
Personal data communicated to them is limited to what is strictly necessary for providing the service or delivering the order, or the data required to fulfill the legal obligation, as applicable.
For online payment processing, TELEPAWS uses services provided by the payment processor STRIPE. The privacy policy of this provider can be consulted by accessing this link.
There may be situations wherein, to ensure optimal veterinary medical services, the controller might share information about the patient with additional third parties, such as other doctors, medical laboratories, etc. In such a situation, the data subject will be informed in advance unless the patient's condition does not permit such a delay.
6. Storage Periods
Analytical: The controller stores personal data for 5 years from the placement of the last order or request for a service through the platform. Processing may end earlier if a user exercises their rights regarding the processing of personal data. In both situations, data will be anonymised and used for statistical purposes.
Service Provision: The controller stores personal data for 5 years from the placement of the last order or request for a service through the platform.
Legal: The controller stores the data necessary for this purpose strictly for the duration required to fulfill the legal obligation in question.
Marketing: Until the withdrawal of the data subject's consent.
7. Data Subjects' Rights
Any user of the controller's platform is guaranteed the rights provided by Regulation (EU) 2016/679 Art. 13 - Art. 22 and national law, namely:
The right to be informed
The right of access to data
The right to rectification of data
The right to object
The right to restrict processing
The right to complete or partial erasure of personal data
The right to data portability
The right to file a complaint with a supervisory authority
The right to address the courts in case of violation of the rights guaranteed and regulated by national and European legislation
To exercise these rights concerning the controller, users are asked to make a request to the email address provided in section 9 - "Contact."
8. Exercising Rights
If a user wishes to exercise the rights specified in section 7, they can do so by making a request to the controller using the contact details in section 9.
To respond as quickly as possible to such a request, please provide us with the following information:
First name
Last name
(Optional) Home/Residence address
Email address (if the request is not made by email)
The right you wish to exercise
Information regarding the non-compliance of data and proof of the need for rectification (in case of the right to rectification)
Reason for requesting the restriction of data processing (in case of the right to restrict processing)
Data you wish to be deleted, reasons, and documents supporting the request if applicable (in case of the right to complete or partial erasure of personal data)
(Optional) Postal address for communication
(Optional) Email address for communication
To be considered, the request must be signed by the data subject or their legal guardian (if applicable).
9. Contact
Company Name : S.C. Telepaws S.R.L.
Address : Jud. Cluj, loc. Micești, sat Micești, str. Micești, nr. 1B
Email Address DPO : dpo@telepaws.ro
Company Email Address: office@telepaws.ro