Privacy Policy

We are pleased that you are visiting our (www.pawsagnes.co.uk) website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. In this context, personal data is all data with which you can be personally identified.

The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and the UK`s Data Protection Act 2018 (DPA 2018), both collectively the “GDPR” is

PawsAgnes

www.pawsagnes.co.uk

Tel: 07801 914 347

E-Mail: info@pawsagnes.co.uk

Pinterest: https://www.pinterest.co.uk/PawsAgnes/_created/

Twitter: https://twitter.com/AgnesStrzechow1

Instagram: https://www.instagram.com/pawsagnes/

Facebook: https://www.facebook.com/PawsAgnes

Security

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or enquiries to the controller). You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser line.

Data collection when visiting our website

When you use our website for information purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognised the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which

may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser. For more details about the cookies, we use please refer to our Cookie Policy.

Contacting us

Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

WhatsApp business

We offer contact via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "business version" of WhatsApp.

If you contact us via WhatsApp on the occasion of a specific purpose, we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. b. GDPR to process and respond to your request. On the basis of the same legal basis, we may ask you to provide further data (order number, customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.

If you use our WhatsApp contact for general enquiries (e.g., about our range of services, availability or our website), we will store and use the mobile phone number you used on WhatsApp and - if provided - your first name and surname in accordance with Art. 6 (1) f GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data will only ever be used to respond to your request via WhatsApp. It will not be passed on to third parties.

Please note that WhatsApp Business obtains access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. For the operation of our WhatsApp business account, we use a mobile device whose address book only stores the WhatsApp contact data of those users who have also contacted us via WhatsApp.

This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of his or her WhatsApp telephone number from the address books of his or her chat contacts in accordance with Art. 6 (1) lit. a GDPR when using the app on his or her device for the first time by accepting the WhatsApp terms of use. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.

Online appointment

We process your personal data within the framework of the online appointment arrangement provided. You can see which data we collect for the online appointment from the respective entry form or the appointment request for the appointment. If certain data is required in order to make an online appointment, we will indicate this accordingly in the entry form or the appointment request. If we provide you with a free text field in the input form, you can describe your request in more detail there. You can then also control which additional data you would like to enter.

The data you provide will be stored and used exclusively for the purpose of making an appointment. When processing personal data that is necessary for the fulfilment of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Art. 6 para. 1 lit. b GDPR serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) lit. a GDPR. Consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this declaration.

Zoom

The "Zoom" tool is used to conduct some of our sessions and online meetings (hereinafter: "online meetings"). "Zoom" is a service provided by Zoom Video Communications, Inc. which is based in the USA.

Insofar as you call up the website of "Zoom", the provider of "Zoom" is responsible for data processing. However, accessing the website is only necessary to use "Zoom" in order to download the software for using "Zoom". You can also use "Zoom" if you enter the respective meeting ID and, if applicable, further access data for the meeting directly in the "Zoom" app. If you do not want to or cannot use the "Zoom" app, the basic functions can also be used via a browser version, which you can find on the "Zoom" website.

When using Zoom, the user information listed below may be collected. The scope of the data also depends on the data you provide before or during participation in an "online meeting". The following personal data are subject to processing:

• User information: first name, last name, telephone (optional), e-mail address, password (if "single sign-on" is not used), profile picture (optional), department (optional).
• Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information.
• For recordings (optional): MP4 file of all videos, audio, and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
• For dial-in with the telephone: information on the incoming and outgoing call number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be stored.
• Text, audio, and video data: You may have the opportunity to use the chat, question or survey functions in an "online meeting". In this respect, the text entries you make are processed in order to display them in the "online meeting" and, if necessary, to record them. In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device are processed accordingly during the meeting. You can switch off or mute the camera or microphone yourself at any time via the "Zoom" applications.

To participate in an "online meeting" or to enter the "meeting room", you must at least provide information about your name. If you are registered as a user at "Zoom", then reports on "online meetings" can be stored at "Zoom" for up to one month.

Contract & payment data

When concluding a contract, we collect personal data such as your billing address, as well as payment data for the purpose of processing the contract on the basis of contract and our legitimate interest.

When paying by direct debit, the payment data you enter is transmitted to the payment service provider. When paying by credit card, our payment service provider collects the data directly. PawsAgnes does not have direct access to the credit card data you enter but receives the credit card number shortened to the last four digits and the card verification number. The payment service providers use the data transmitted to you on behalf of PawsAgnes to have the price of your subscription collected by your bank or debited by your credit card company. The transmission of payment data only takes place via encrypted connections.

E-mail communication and advertising

We use the email address you provide, on the one hand, to contact you regarding our respective contractual relationship and to be able to send you all important and further information that is of interest to you. The legal basis for this is contract.

On the other hand, we use your email address to inform you about products and other offers from PawsAgnes in which you have a presumed interest. This also applies to the advertising of our fee-based offer. The legal basis for this use is found in our legitimate interest. You can object to this use at any time by sending a message to the e-mail address below or by clicking on the unsubscribe link in the email without giving any reasons, without incurring any costs other than the transmission costs according to the basic rates.

We may also use your contact details, which we have collected in the course of entering into a contractual relationship with you, to be able to inform you about offers. This is done on the basis of our legitimate interest. The processing of personal data for the purpose of direct advertising constitutes a legitimate interest.

In addition, we carry out general analyses of existing customers in order to obtain a better picture of our customer base and, if necessary, to be able to potentially approach new, similar customers based on this. In some cases, we use external providers for this purpose, with each of whom we conclude an order processing agreement for the protection of the data. The legal basis for the aforementioned processing is our legitimate interest. The processing of existing customer data in this way for our own advertising purposes is to be regarded as a legitimate interest.

You can object to the use of your personal data for the aforementioned marketing purposes at any time free of charge with effect for the future by sending an e-mail to info@pawsagnes.co.uk.

Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, our location is shown to you and a possible journey is made easier.

When you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interest in the display of personalised advertising, market research and/or the needsbased design of Google websites. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Rights of the data subject

The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) with regard to the processing of your personal data, which we inform you about below:

Right to information in accordance with Art. 15 GDPR: You have in particular the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period and/or the criteria for determining the storage period. the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, where

applicable, meaningful information about the logic involved and the implications for you and the intended effects of such processing, as well as your right to be informed about what guarantees exist in accordance with Art. 46 GDPR in the event of onward transfer of your data to third countries;

Right to rectification pursuant to Art. 16 GDPR: You have the right to have any inaccurate data relating to you rectified without delay and/or to have any incomplete data held by us completed.

Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data that you dispute is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the assertion, exercise or defence of legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation as long as it has not yet been determined whether our legitimate grounds prevail;

Right to information in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible.

Right to revoke consent given in accordance with Art. 7 (3) GDPR: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

Right of Objection

If we process your personal data in the context of a balancing of interests on the basis of our overriding legitimate interest, you have the right to object to this processing with effect for the future at any time on grounds arising from your particular situation.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights, and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims.

Privacy Policy

If we process your personal data for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing. You may exercise the right to object as described above.

If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

Duration of storage of personal data

The duration of the storage of personal data is measured on the basis of the respective legal basis, the processing purpose and - if relevant - additionally on the basis of the respective statutory retention period (e.g., retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) lit. a GDPR, this data is stored until the data subject revokes his/her consent.

If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) of the GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfilment or initiation of a contract and/or we do not have a legitimate interest in continuing to store it.

When processing personal data on the basis of Art. 6 (1) f GDPR, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Article 6(1)(f) of the GDPR, such data shall be stored until the data subject exercises his or her right to object pursuant to Article 21(2) of the GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Data security

Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Disclosure of personal data to third parties

Your personal data will only be passed on if there is a legal obligation to do so or to service providers and partner companies that have been carefully selected in advance and are contractually obliged to comply with the requirements of data protection law.

a) Disclosure within affiliated companies

We pass on your personal data for the conclusion and processing of contracts for offers on our website

to affiliated companies. This is particularly necessary so that you can use all our offers. If you contact a store or our customer hotline with questions, complaints or returns as well as other complaints, they will also receive access to your order data in order to be able to process your request.

b) Disclosure to service providers

For the operation and optimisation of our website and our services and for the processing of contracts, various service companies work for us, e.g., for central IT services or the hosting of our website, for the payment and delivery of products or for the dispatch of newsletters, to whom we pass on the data required for the fulfilment of the task (e.g. name, address).

Some of these companies act for us by way of commissioned processing and may therefore use the data provided exclusively in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies we commission. We therefore agree on specific data security measures with these companies and monitor them regularly.

In contrast to order processing, in the following cases we transmit data to third parties for their own use in order to process the contract in the case of payment for services to the payment service provider specified when the order was placed. We do not collect or store any payment transaction information such as credit card numbers or bank details during the payment process. You only provide this information directly to the respective payment service provider.

c) Disclosure to other third parties

We will disclose your data to third parties or government agencies within the framework of existing data protection laws if we are legally obliged to do so, e.g., due to official or court orders, or if we are entitled to do so, e.g., because this is necessary for the prosecution of criminal offences or for the exercise and enforcement of our rights and claims.

Social Media

The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc. are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is our legitimate interest. The data processing is carried out in the interest of our public relations and communication.

If you wish to object to certain data processing over which we have an influence, please contact us. We will then examine your objection. If you send us a request on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the response required. You always have the option of sending us confidential enquiries to our address stated in the imprint.

As already stated, where the social media platform provider gives us the opportunity, we take care to design our social media pages to be as data protection compliant as possible. With regard to statistics that the provider of the social media platform makes available to us, we can only influence these to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.

Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we can unfortunately hardly influence the web tracking methods of the social media platform. We cannot, for example, switch this off.

Please be aware: It cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.

Content Delivery Network

Our web site uses a so-called Content Delivery Network (CDN). A CDN is a network of powerful servers that cache content at various locations around the world. A CDN has two main tasks: to deliver content in the shortest possible time and to reduce the load on the web host by distributing traffic. CDNs transmit two types of content: Static and dynamic content. Static content is delivered to all website

visitors in the same form, such as video content from streaming services or code frameworks (e.g. Javascript, jQuery). Dynamic content is first adapted to the user and only created at the moment of the request. This includes content that takes place via web applications, email or online shops and is personalised. In order to use the latter, information about the website visitor must first be transmitted to the CDN. The legal basis for the use of a CDN and the transmission of your data to it is our legitimate interest. The legitimate interest results from our need for a technically flawless and fast presentation of our web site and the relief of our IT infrastructure. You can object to the processing of your data on the basis of our legitimate interest at any time. To do so, please use the contact details provided.

Automated decision-making

We do not use automated decision-making or profiling.

Do Not Sell My Personal Information

We do not sell information that directly identifies you, like your name, address or phone records.

Accuracy

It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.

Changes and updates to the privacy policy

We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the data processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

Queries and Complaints

Any comments or queries on this policy should be directed to us. If you believe that we have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify us.