PRIVACY POLICY MAXI ZOO

Calling up the website

Ensure smooth connection establishment,

Ensuring a comfortable use of our website/application and

Evaluation of system security and stability

• IP address of the requesting Internet-enabled device,
• Date and time of access,
• Name and URL of the retrieved file,
• Website/application from which the access was made (referrer URL), the browser you use and, if applicable, the operating system of your Internet-enabled computer,
• Name of your access provider

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Art. 6 para. 1 lit. f) GDPR (our legitimate interest in the security, stability and usability of our website)

IT service provider for our website

Telecommunications service providers

Registration Maxi Zoo account

• E-mail address and its verification
• Password
• Date of registration,
• Time of registration,
• IP address

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Cookie Consent Mangement

• Date and time of your session,
• device information,
• browser information
• your anonymised IP address,
• Information about your selection in the privacy settings

Art. 6 para. 1 lit. c) GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject)

Usercentrics GmbH
Sendlinger Straße 7
80331 München

Use of the Maxi Zoo account for purchases and receipt of various Maxi Zoo products and services

• Name,
• Age,
• Addresses,
• Delivery and payment information,
• Vouchers

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Use of the Maxi Zoo account to combine your interests and preferences

• Wish lists,
• Purchase history,
• Communication history,
• Search and navigation behaviour,
• Consents to individual services (such as newsletters),
• Information about your affinity for discounts,
• information explicitly or implicitly provided by you about points of interest (names, species and other information of pets and farm animals he/she has indicated, activities with them, etc.),
• Information regarding the allocation of your person to different Fressnapf segments,
• Where applicable, we use your current location to provide you with relevant offers in nearby Maxi Zoo stores at any time.

Art. 6 para. 1 lit. a) GDPR (your consent)

Collection of data for partner offers

• Mostly the same types of data as for data processing by Maxi Zoo itself when you use a partner.

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

An overview of the participating partners can be accessed via your Maxi Zoo account and at any time.

Order processing

• Name,
• Billing and delivery address,
• Desired product type or service,
• Subscription data,
• Order and delivery data,
• Email address,
• Billing and payment details,
• Date of birth,
• Telephone number

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Payment processing for purchase on account or by direct debit

• Name,
• Address,
• Email address,
• Account data,
• your date of birth, if applicable,
• the name of your bank,
• Data about your order,
• Data on the payment you have made

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Art. 6 para. 1 lit. f) GDPR (our legitimate interest in carrying out a credit check and address check if the selected payment method involves a credit risk and thereby assessing the risk of non-payment and avoiding incorrect deliveries).

Banks,

Financial companies,

Payment service providers, namely

Riverty GmbH, which transfers the name, address and, if applicable, the date of birth to infoscore Consumer Data GmbH for the credit check. Based on the probability of default provided by infoscore, a decision is made as to whether you can use the selected payment method. In addition, infoscore carries out an address check; see for further information https://finance.arvato.com/497b4f/globalassets/02-documents/01-corp/04-consumer-services/afs-art14-euGDPR-sep-18.pdf

Processing of the agreed payment by credit card

• Name,
• Address,
• Email address,
• Credit card number,
• Name of the credit card holder,
• the period of validity of the credit card

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Banks and payment service providers

Detection of misuse of the credit card or the payment option with credit card

• Name,
• Address,
• Email address,
• Credit card number,
• Name of the credit card holder,
• the period of validity of the credit card

Art. 6 para. 1 lit. f) GDPR (our legitimate interest in offering you an effective and secure payment option and, in this context, preventing credit card misuse and fraud).

Processing of the payment via PayPal

Accruing billing or transaction data, i.e.:

• Name,
• Address,
• Email address,
• PayPal account number,
• Invoice amount,
• Telephone number, if applicable,
• Account or credit card details

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

The invoice amount and PayPal account number are transmitted to the payment service provider PayPal.

The data transmitted to PayPal may be transmitted by PayPal to credit agencies. This transmission serves to check identity and creditworthiness. You can find more information on the PayPal website at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Collecting PAYBACK points

Advertising purposes by displaying the possible PAYBACK points that can be earned with a particular product.

• PAYBACK customer number

Art. 6 para. 1 lit. a) GDPR (your consent)

PAYBACK GmbH

If you wish to withdraw the consent you gave when participating in the PAYBACK programme for advertising and market research, please contact the PAYBACK Service Center, P.O. Box 23 21 02, 85330 Munich, Germany or PAYBACK GmbH, P.O. Box 23 21 03, 85330 Munich, Germany.

Use of the Friends discount

• Data related to the use of the Friends discount, i.e.:
  • Products purchased by you
  • the discount granted to you

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Thank you offer after purchase

• Name
• Address
• E-mail address
• IP address

Art. 6 para. 1 lit. a) GDPR (your consent)

Sovendus GmbH

Hermann-Veit-Straße 6, 76135 Karlsruhe, Germany

Delivery

• Name,
• Address,
• Telephone number,
• Email address

In the case of larger forwarding deliveries, also the delivery information (type of building, delivery obstacles, lift, floor)

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Logistics companies

Sending our newsletter and its marketing purposes

• Email address
• Product preferences

Art. 6 para. 1 lit. a) GDPR (your consent)

Art. 6 para. 1 lit. f) GDPR (our legitimate interest in direct marketing measures and the sending of advertising content that is similar to the goods or services you have already ordered) in conjunction with Regulation 13(11) of the Irish ePrivacy Regulations (S.I 336/2011) respectively, as appropriate.

Provider of newsletter tools

Electronic advertising material within the meaning of Regulation 13(11) of the ePrivacy Regulations (S.I. 336/2011), as appropriate.

• Email address,
• The personal data you provide

Art. 6 para. 1 lit. a) GDPR (your consent)

Art. 6 para. 1 lit. f) GDPR (our legitimate interest in direct marketing measures and the sending of advertising content that is similar to the goods or services you have already ordered) in conjunction with Regulation 13(11) of the Irish ePrivacy Regulations (S.I 336/2011) respectively, as appropriate.

Marketing service provider

Checking and processing an order with vouchers

Sending and redeeming a voucher

• Order data provided in the context of an order with vouchers, e.g., name, billing and delivery address, desired product type or service, order and delivery data, email address, billing and payment data, date of birth and telephone number,
• Date of issue of the voucher,
• Voucher value,
• Voucher code,
• Personalisation data (if provided by you),
• Name of the person entitled to the voucher (for personal vouchers),
• Time of voucher redemption

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you)

Marketing service provider

Printing and shipping service provider

Conducting a raffle

• Data provided in the context of participation in the raffle

Art. 6 para. 1 lit. a) GDPR (your consent)

Marketing service provider

Chatbot and assignment of your request for the purpose of communication

The device you use, e.g. language or regional settings, personal data entered during use

Art. 6 para. 1 lit. a) GDPR (your consent)

Submission of customer reviews

• Name,
• Email address,
• IP address,
• Date of the review,
• Your review,
• other personal data provided by you, e.g. in the contact form

Art. 6 para. 1 lit. a) GDPR (your consent)

Your email address will be transmitted to Bazaarvoice GmbH, who will send you a product review email, see https://www.provenexpert.com/de-de/datenschutzbestimmungen/ for further information on data protection information.

• Contract and invoice data, i.e.:
  • Name,
  • Address,
  • E-mail address,
  • Order data,
  • Credit and account data
  • Documentation of services provided,
  • and invoice data

Art. 6 para. 1 lit. c) GDPR (fulfilment of legal obligations)

Authorities and state institutions (e.g. tax authorities, public prosecutors’ offices or courts)

Auditors

Compliance with governmental monitoring and reporting requirements, including (regulatory) official or criminal notification and reporting obligations

• the data provided by you, insofar as they are relevant to the official enquiry

Art. 6 para. 1 lit. c) GDPR (fulfilment of legal obligations)

Authorities and state institutions (e.g., tax authorities, public prosecutors’ offices or courts)

Further development & improvement of our services and care offers

• Type of services you have chosen,
• Quality of service,
• possible disruptions

Art. 6 para. 1 lit. f) GDPR; legitimate interest in the development and improvement of our services

Ensuring legally compliant action, prevention of and protection against legal violations (especially animal violations or criminal offences)

• Contact and contract data, i.e.:
  • Name,
  • Address,
  • Email address,
  • Order data,
  • Credit and account data

Art. 6 para. 1 lit. f) GDPR (our legitimate interest in ensuring legally compliant action, prevention of and protection against legal violations, in particular animal violations or criminal offences)

Assertion of and defence against legal claims

• Contact and contract data, i.e.:
  • Name,
  • Address,
  • Email address,
  • Order data,
  • Credit and account data
• Documentation of services provided,
• and invoice data

Art. 6 para. 1 lit. f) GDPR (our legitimate interest in defending against and asserting legal claims)

Authorities and state institutions (e.g., tax authorities, public prosecutors’ offices or courts)

Consultants:

• Lawyers
• Mediators
• Business consultant

Use of the Maxi Zoo contact form

• Name,
• Email address,
• IP address
• Date and time of your request

Art. 6 para. 1 lit. b) GDPR (establishment, performance or termination of the contract with you),

Art. 6 para. 1 lit. f) GDPR (our legitimate interest in answering your questions, which do not serve to the performance of pre-contractual/contractual measures).