Privacy and Cookies Policy

This translation is provided for information purposes only. The Polish version of this document is binding.

1. Data controller

The controller of personal data is 4ZOO spółka z ograniczoną odpowiedzialnością, with its registered office at ul. Piłsudskiego 61, 24-100 Puławy, KRS 0000822115, NIP 7162828313, REGON 385210934. Contact: [email protected], +48 732 070 072.

The Controller has not appointed a Data Protection Officer. In all matters relating to the processing of personal data, please contact us at [email protected].

2. Scope and purposes of processing

• Order fulfilment - first name, surname, address, email, telephone. Legal basis: Article 6(1)(b) of the General Data Protection Regulation, GDPR (RODO) (performance of a contract).
• Issuing accounting documents - invoice details, tax identification number (NIP). Legal basis: Article 6(1)(c) GDPR (legal obligation).
• Customer account and business account - login details, order history, details of branches and users. Legal basis: Article 6(1)(b) GDPR.
• Subscription - payment instrument data processed by the payment operator to the extent necessary for recurring charges. Legal basis: Article 6(1)(b) GDPR.
• Marketing (newsletter, SMS, WhatsApp, push notifications) - solely on the basis of a separate, voluntary consent for each channel. Legal basis: Article 6(1)(a) GDPR. Consent may be withdrawn at any time.
• Product reviews - first name or signature, content of the review, attached photographs and recordings. Legal basis: Article 6(1)(f) GDPR (legitimate interest in presenting reviews).
• Animal profile and recommendations - data provided voluntarily by the user. Legal basis: Article 6(1)(b) or (a) GDPR.
• Analytics and statistics - data on use of the website. Legal basis: consent to analytical cookies.
• Handling complaints and returns - order data and correspondence. Legal basis: Article 6(1)(b) and (c) GDPR.
• Pursuing and defending against claims - data necessary in proceedings. Legal basis: Article 6(1)(f) GDPR.

3. Recipients of data

Data are transferred only to the extent necessary and on the basis of data processing agreements. The recipients are:

• Carriers and postal operators (address and contact details necessary for delivery): GLS Poland, InPost, DPD Polska, DHL Parcel Polska, Poczta Polska, ORLEN Paczka, Raben Logistics Polska, DB Schenker, Geodis.
• Payment service providers (transaction data): Krajowy Integrator Płatności S.A. (Tpay), PayPro S.A. (Przelewy24), Stripe Payments Europe Ltd., Elavon Financial Services DAC, Polski Standard Płatności sp. z o.o. (BLIK).
• Infrastructure and hosting provider: OVH.
• Email and message delivery provider: Mailgun.
• Cookie consent management provider: Cookiebot.
• Accounting firm and law firm - as regards accounting services and pursuing and defending against claims.

The list is updated whenever providers change. You will always find its current version on this page.

4. Retention period

• Order data - for the limitation period for claims and tax obligations (as a rule 5 years from the end of the tax year in which the tax obligation arose).
• Account data - until the account is deleted.
• Marketing data - until consent is withdrawn.
• Reviews - until they are deleted by the author or the Controller.
• Evidence of the granting and withdrawal of consents - for the limitation period for claims.

5. Rights of the data subject

You have the right to access your data, to rectification, erasure, restriction of processing, data portability, to object to processing and to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

6. Cookies

The shop uses cookies:

• Necessary - required for the basket, login and security to work. They do not require consent.
• Analytical - measurement of traffic and website performance. Installed only after consent has been given.
• Marketing - ad targeting and conversion measurement. Installed only after consent has been given.

We manage cookie consents using the Cookiebot tool. You can change or withdraw your consent at any time by clicking Privacy settings in the website footer, and in your browser settings. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

List of cookies used

The list below is updated automatically on the basis of scans of our website.

7. Automated decision-making

The Controller does not use mechanisms for individual price personalisation based on automated decision-making. Product recommendations prepared on the basis of the animal profile are for information purposes only and do not produce legal effects for the user.

8. Transfer of data outside the EEA

Most of our providers are established in the European Economic Area, and the data do not leave the EEA.

Data may be transferred outside the EEA in connection with the use of services of providers established or having infrastructure in the United States, in particular Stripe (payment processing) and Mailgun (sending emails). These transfers take place on the basis of an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission, supplemented by additional technical and organisational safeguards.

A copy of the safeguards applied can be obtained by writing to [email protected].