Privacy policy

SniffCare – Data Protection Declaration
Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
"Personal data" is any information relating to an identified or identifiable natural person.

Server Log Files
You can use our website without submitting personal data.
Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1)(f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.
Your data will be transferred to Canada, among other countries. Data transfers to Canada are subject to an adequacy decision by the EU Commission.

Contact
Responsible Person
Contact us at any time. The contact details of the person responsible for data processing can be found in our legal notice.

Data Protection Officer (DPO)
SniffCare has appointed a Data Protection Officer to oversee compliance with applicable data protection legislation. You may contact our DPO at any time regarding questions or concerns relating to the processing of your personal data by writing to us via the contact details provided in our legal notice, marking your correspondence for the attention of the Data Protection Officer.

Proactive Contact by E-mail
If you make contact with us proactively via email, we shall collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request.
If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR.
If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.
We will only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and Processing When Using the Contact Form
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact.
If the initial contact serves to implement pre-contractual measures or concerns an existing agreement, the processing takes place on the basis of Article 6(1)(b) GDPR. Otherwise, it is based on Article 6(1)(f) GDPR. You have the right to object at any time on grounds relating to your particular situation.
We will only use your email address to process your request. Your data will then be deleted unless you have agreed to further processing and use.

Orders
Collection, Processing, and Transfer of Personal Data in Orders
When you submit an order, we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1)(b) GDPR and is required for the fulfilment of a contract with you.
Your data is transferred for example to shipping companies, dropshipping providers, payment service providers, service providers for handling the order, and IT service providers that you have selected. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
Your data will be transferred to Canada, among other countries. Data transfers to Canada are subject to an adequacy decision by the EU Commission.

Product Reviews
Data Collection When You Post a Review
When you submit a product review on our website, we collect your personal data (name, email address, review text) only in the scope provided by you. The processing serves to allow you to submit reviews and to display them on our site. By submitting a review you agree to the processing of the transmitted data. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent.
You can withdraw your consent at any time by contacting us, without affecting the legality of the processing carried out prior to withdrawal. Your personal data will then be deleted.
On publication of your review, the name you have entered will be displayed publicly.
On submission of your review, your IP address will also be saved in order to prevent misuse of the review function and to ensure the security of our IT systems. You can withdraw your consent to this processing at any time by contacting us. Your IP address will then be deleted.

Marketing
Use of Your Email Address for Direct Marketing via Klaviyo
We use your email address, obtained in the course of selling a product or service, for the electronic transmission of marketing communications for our own goods or services which are similar to those you have already purchased from us, unless you have objected to this use. You must provide your email address in order to conclude a contract.
For this purpose, we use Klaviyo, Inc. (125 Summer Street, Boston, MA 02111, USA), an email marketing platform. Klaviyo processes your email address and purchase data on our behalf to enable personalised marketing communications. Data may be transferred to the USA; such transfers are made on the basis of appropriate safeguards.
The processing is carried out on the basis of Article 6(1)(f) GDPR due to our legitimate interest in direct marketing. You can object to this use at any time by contacting us or by using the unsubscribe link provided in each marketing email. This will involve no costs other than transmission costs at basic tariffs.

Use of Your Address for Postal Advertising
We may use your personal data (name, address) obtained in the process of selling goods or services to send you postal advertising, unless you have objected to this use. The processing is based on Article 6(1)(f) GDPR for the purposes of our legitimate interest in direct advertising. You can object at any time by contacting us via the details in our legal notice.

Payment Service Providers
Use of Shopify Payments
Our website uses Shopify Payments, provided by Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify").
Shopify Payments enables us to process payments securely through your chosen payment method. When you complete a purchase, the data required for payment processing (e.g. name, billing address, payment details) is submitted to Shopify to fulfil the transaction. The data is processed on the basis of Article 6(1)(b) GDPR.
Additionally, Shopify may collect technical data (e.g. IP address, device type, browser type) for fraud prevention and security purposes. This processing is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in secure payment processing. On grounds relating to your particular situation, you have the right to object to this processing at any time.
For further information, please refer to the Shopify Privacy Policy at:
https://www.shopify.com/legal/privacy

Analytics and Tracking Tools
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). Google Analytics uses cookies to help analyse how users interact with our website.
The information generated by the cookie about your use of our website (including your IP address) is transmitted to and stored by Google on servers which may be located in the United States or other countries. Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website usage.
The processing is based on Article 6(1)(f) GDPR due to our legitimate interest in the analysis and optimisation of our website. You have the right to object to this processing at any time.
You can prevent the use of cookies by selecting the appropriate settings in your browser. You can also opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on, available at:
https://tools.google.com/dlpage/gaoptout

Meta Pixel (Facebook Pixel)
Our website uses the Meta Pixel, a tool provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta"). The Meta Pixel enables us to measure the effectiveness of our advertising and to show relevant advertisements to users of Meta platforms (Facebook, Instagram).
When you visit our website, the Meta Pixel collects data (e.g. IP address, browser information, page interactions) and transmits it to Meta. This data may be used to create custom audiences for advertising purposes. Data may be transferred to the USA; such transfers are subject to appropriate safeguards.
The processing is based on Article 6(1)(f) GDPR due to our legitimate interest in targeted advertising and campaign measurement. You have the right to object to this processing at any time.
You can manage your advertising preferences via Meta's ad settings:
https://www.facebook.com/settings?tab=ads

Cookies
Our website uses cookies. Cookies are small text files which are saved in a user's internet browser or by the user's internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user's operating system. This cookie contains a characteristic string which allows the browser to be clearly identified when the website is called up again.
You have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can be notified before the setting of cookies and decide whether to accept them individually, as well as prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. Please note that disabling cookies may prevent you from making full use of all functions of this website.
For information on managing cookies in major browsers, please refer to:
Chrome: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-gb/help/17442
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

Technically Necessary Cookies
Insofar as no other information is given in this data protection declaration, we use only technically necessary cookies to make our offering more user-friendly, effective, and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies.
Processing is carried out on the basis of Article 6(1)(f) GDPR due to our legitimate interest in ensuring the optimal functionality of the website and a user-friendly design of our services. You have the right to object to this processing of your personal data at any time, for reasons relating to your personal situation.

Rights of Persons Affected and Storage Duration
Duration of Storage
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law. It is then deleted after the period has elapsed, unless you have agreed to further processing and use.

Your Rights
If the legal requirements are fulfilled, you have the following rights according to Articles 15 to 20 GDPR: right to information, correction, deletion, restriction of processing, and data portability. You also have a right of objection against processing based on Article 6(1) GDPR and against processing for the purposes of direct marketing, according to Article 21(1) GDPR.

Right to Complain to the Regulatory Authority
You have the right to complain to the relevant supervisory authority pursuant to Article 77 GDPR if you believe that your data is not being processed in accordance with applicable data protection law.

Right to Object
If the data processing outlined here is based on our legitimate interests in accordance with Article 6(1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your data with future effect.
If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.
If personal data is being processed for the purposes of direct advertising, you can object to this at any time by notifying us. If the objection is successful, we will no longer process the personal data for direct advertising purposes.