Our Website Privacy Policy – Dartmouth Canine Care
We want to inform you about what personal data is collected when you use both our website and products, how your data is processed and the rights you have regarding your data. We have summarised this information for you in the privacy policy below.
1. Information about the collection of your personal data
The controller is:
Dartmouth Canine Care, 46Townstal Road, Dartmouth, Devon, TQ6 9HR, United Kingdom
Questions relating to data protection can be directed to our data protection officer by email at info@dartmouthcaninecare.com
2. Your rights as a data subject
Right of access
You have the right to obtain information from us about the categories of data stored, the purpose of processing, the recipients of the data, the planned storage period and your rights regarding data protection. For personal data not collected directly from you, you have the right to be informed about the source of the data.
Right to rectification
If the personal data we process is inaccurate or incomplete, you have the right to have your data rectified.
Right to erasure
You have the right to request that we delete your personal data. In certain cases, however, your data cannot be deleted. For example, if your data is required for an active contract or for our accounting and statutory responsibilities.
Right to restriction of processing
You can request that we restrict the processing of your data in the following cases:
In the event of a restriction, we will ensure that the personal data cannot be further processed or changed by us. If processing has been restricted in accordance with the above conditions, the controller will inform you before lifting the restriction.
Right to data portability
You have the right to receive the personal data that you provided to us in a structured, commonly used and machine-readable format and, if necessary, to have it transferred to third parties.
The right to data portability shall not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to object
You have the right to object at any time to the processing of personal data that we process on the basis of a "legitimate interest"; this also applies to profiling based on these provisions.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
You can object to data processing for the purpose of direct advertising at any time without providing a reason. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
To exercise your right to object, you must submit an objection to us, the data controller. In some cases you can do this directly online (e.g. in the case of cookies) or in the Dartmouth Canine Care Control panel (e.g. for advertising). You are also welcome to address your data protection concerns (e.g. your objection) directly to the responsible contact person at info@dartmouthcaninecare.com.
Right to withdraw
You have the right to withdraw your consent to future processing (e.g. to be contacted for advertising purposes) at any time.
Please send your notification of withdrawal to us at info@dartmouthcaninecare.com.
If you are already a customer, you can also withdraw your consent yourself in the Control Panel.
You can withdraw your consent for cookie-based data processing at any time here.
If you would like to exercise any of the above rights, please write to us at info@dartmouthcaninecare.com and we will take care of your request immediately.
Right to lodge a complaint with a supervisory authority
You also have the right to lodge a complaint with the supervisory authority responsible for data protection at any time.
Here you will find the contact information for the UK Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Personal data managed by you
Our customers use our services to host, transmit or process data on our hosting platforms, which may include personal data of their own customers.
In this scenario, it is our customers who stipulate the process for collecting their customers' data. Most importantly, we do not have knowledge of or view, share or collect this specific customer data.
In accordance with our Privacy Notice, it is our customers who are responsible for managing the security of their customers’ data which they upload to our platforms. Customers are responsible for encrypting data that is uploaded to our network and ensuring access to our platforms are secure.
Our relationship is with our customers directly and there is no agreement in place between us and our customers’ customers.
Additionally:
We merely process such data on your behalf, subject to our Terms and Conditions and you are responsible for any applicable legal requirements in respect of your content. Therefore, any video, image, or other content posted, uploaded or otherwise made available by you on your website, whether published or not, is not subject to our Privacy Notice.
3. Visiting our website
We also collect personal data when you visit our website. We collect data when you order something from us, as well as when you view our websites or our profiles on social media. The details are explained below.
Cookies
We use cookies to optimise the design of our websites, to improve our products for you and to show you advertising tailored to your interests in cooperation with third-party providers.
You can find more detailed information about cookies on our separate cookie page. You will also find information about how to change your cookie settings.
Social media
In order to optimise our corporate presence, we maintain company pages on various social media platforms. We use these pages to inform prospective customers about our services and also to communicate with you via these channels.
We use these channels for the following purposes:
Legal basis
The legal basis for this processing of your personal data is our legitimate interest in communicating with our customers and prospective customers, as well as analysing and improving our products, services and business processes. We also make direct contact with customers as part of our Social Media Support service; this processing is based on our contractual relationship customers or pre-contractual actions with prospective customers.
Further information about the social media platforms:
Facebook and Instagram: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
We are jointly responsible with Facebook for the processing of Insights data on our Facebook fan page. The corresponding agreement can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum.
Further information on Page Insights can be found at:
https://www.facebook.com/legal/terms/information_about_page_insights_data.
Your general use of Facebook is your own responsibility. You can find Facebook’s privacy policy directly on our Facebook fan page.
You can edit your preferences and objections for personalised advertising from Facebook at any time in your Facebook settings.
Twitter: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
For information about the data collected by Twitter, purposes of processing and all other data protection information, please refer to the Twitter privacy policy (https://twitter.com/en/privacy).
You can opt out at: https://twitter.com/personalization
YouTube: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Further information about data protection and the personal data collected by Google/YouTube through integrated features can be found in the following privacy policy:
https://www.google.com/policies/privacy/
You can opt out at: https://adssettings.google.com/authenticated
LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
We also maintain a company profile on the networking platform LinkedIn.
If you are a member, LinkedIn can assign any access of content and functions on our profile to your user own profile. For more information, please see LinkedIn Ireland’s privacy information at:
https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
Xing: New Work SEDammtorstrasse 30, 20354 Hamburg, Germany.
We also maintain a company profile on the networking platform Xing.
If you are a member, Xing can assign any access of content and functions on our profile to your user own profile. For further information, please refer to New Work SE’s data protection information at:
https://privacy.xing.com/en/privacy-policy.
Insofar as Dartmouth Canine Care transfers data to third countries, suitable data transfer guarantees are agreed with all processors or data controllers in accordance with the requirements of Chapter V of the GDPR, or the adequacy decisions of the EU Commission are applied.
Social media links
Links to social media platforms are integrated in such a way that data is not directly transmitted to the social media operator. Social media services are integrated on our website using links. Data is transferred only if you have clicked on the link.
Video content
YouTube and Vimeo
We include videos on our website. The content of these videos is stored directly on the respective platforms and embedded on our site. If you access such a video, we communicate your IP address, the website you visited, and technical information such as your browser, operating system and basic device information. We have embedded the YouTube videos in “privacy enhanced mode” to protect your privacy.
Personal data is transferred only when you access a video. Only then will a server connection to YouTube or Vimeo be established and a corresponding cookie set, which is used to save your settings. By accessing the videos, you leave our area and enter the external platforms of YouTube and Vimeo, which are beyond our control.
You will be informed of this fact again before you access a video. If you have an account with the video service provider, they may be able to identify you. You can avoid this by logging out of your account before playing a video.
Legal basis
The legal basis for the activation of these videos is your consent, which is connected to your consent to cookies (cookie page).
Provider of the YouTube platform
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google/YouTube can be found here: https://www.google.com/policies/privacy/.
You can opt out of all personalised advertising here: https://adssettings.google.com/authenticated
Provider of the Vimeo platform
Vimeo, LLC, 555 West 18th Street, New York, NY 10011, USA. Further information on data protection at Vimeo can be found here: https://livestream.com/legal/cookie-preferences.
Friendly Captcha
Purpose and legal basis
We use the Friendly Captcha service. This involves embedding a JavaScript element in the source code, which causes the software to load in the background. Your device calculates the solution to a crypto-puzzle for the service, which is used to be able to track whether the visitor is human or whether the use is abusive through automated, machine processing (e.g. bots).
To prevent fraudulent activity, the service is typically used in the following context: Forms (requests, contacting, password reset), orders, login pages. The service helps Dartmouth Canine Care to prevent automated attacks that can lead to risks in the company's infrastructure. In addition, it also provides protection for our customers to become potential victims of cyber crime.
Legal basis
The legal basis for this processing is therefore our legitimate interest according to Art. 6 (1) lit. f GDPR.
Type of data
Provider of the service
Friendly Captcha GmbH, Wörthsee, Germany
For more information about FriendlyCaptcha's privacy policy, please click here:
https://friendlycaptcha.com/de/legal/privacy-end-users/
The following provider is used by Friendly Captcha for hosting and delivery of the service (CDN = Content Delivery Network):
Cloudflare Inc, San Francisco, USA
ReCAPTCHA
Purpose and legal basis
We use the reCAPTCHA service from Google. With reCaptcha, a JavaScript element is embedded in the source code that causes the software to load in the background and analyse your user behaviour. The data is already being used and analysed before you have ticked the “I am not a robot” box. Google uses the data to calculate a score, which is used to determine whether the visitor is a human being or whether input is being manipulated by automated processes (e.g. bots). It also serves to prevent fraudulent bulk orders, which can pose risks to the company’s infrastructure. ReCAPTCHA also helps protect our customers against cyber crime.
Legal basis
The legal basis for this processing is therefore our legitimate interest.
Type of data
The IP address transmitted to Google is truncated and not merged with other Google data.
Provider of the ReCAPTCHA service
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find more information about Google’s privacy policy here:
https://www.google.com/policies/privacy/.
To have your data deleted directly by Google, contact Google Support at:
https://support.google.com/?hl=de&tid=331578294933
If you want as little data as possible to be transmitted to Google about you and your behaviour, you must log out of Google and delete any Google cookies before visiting our website or using the reCAPTCHA software.
Insofar as Dartmouth Canine Care. transfers data to third countries, suitable data transfer guarantees are agreed with all processors or data controllers in data protection legislation, or the adequacy decisions of the EU Commission are applied.
Orders and order processing
Contractual data
When you order one of our products, we ask you to provide personal data that we need to conclude the contract. We store this contractual data for the duration of the contractual relationship, as we need it to fulfil the contract. If you terminate your contract, we will continue to store your contractual data if there are objections or claims that have yet to be resolved. We also store your data for a longer period if there are statutory retention obligations. In the latter case, processing of your data is limited to compliance with the statutory retention periods and will not be processed for any other purposes.
You can make changes to this data yourself at any time via our Control Panel. Once your order has been verified, you will receive information about creating your personal login credentials by email.
Type of data
Legal basis
We need your data to initiate and execute a contract.
Storage period
We will keep your personal data for the duration of the period you are a customer of Dartmouth Canine Care. We shall retain your data only for as long as necessary in accordance with applicable laws.
On the closure of your account, we may keep your data for up to 7 years after you have cancelled your services with us. We may not be able to delete your data before this time due to our legal and/or accountancy obligations or as reasonably necessary to prevent fraud, abuse, enforce our terms and to protect our legitimate interests. We assure you that your personal data shall only be used for these purposes stated herein.
Option to withdraw
If you have given us your consent to data processing, you can withdraw your consent to future processing at any time by contacting info@dartmouthcaninecare.com. This withdrawal will also be communicated to ThreatMetrix, so that you can have them delete your data at any time as well.
Your data will be transmitted to the following service providers for the purpose of fraud prevention:
In order to carry out the measures described above, we have commissioned as our service provider CRIF Bürgel GmbH, Radlkoferstrasse 2, 81373 Munich, Germany, which in turn has subcontracted ThreatMetrix B.V, The Base 3/F, Tower C, Evert van de Beekstraat 1, 1118 CL Schiphol, the Netherlands, for aspects of the data processing, in particular the creation of the device ID. Data processing (including data storage) by CRIF Bürgel GmbH and ThreatMetrix takes place in data centres in Germany and Europe. CRIF Bürgel acts exclusively as a contracted processor and in accordance with the instructions of Dartmouth Canine Care.
ThreatMetrix acts as an autonomous body in storing your pseudonymised data in a combined data pool. The data ThreatMetrix receives is encrypted with an individual key from Dartmouth Canine Care, so that ThreatMetrix has no access to the real data. All data transmissions between Dartmouth Canine Care, CRIF Bürgel GmbH and ThreatMetrix are SSL-encrypted in accordance with the state of the art.
Storage period/criteria for determining the storage period:
The data collected for fraud prevention is kept for a maximum of six months for the purposes of ensuring traceability, optimising processes and responding to customer enquiries, after which time it is deleted.
During the contractual relationship
Contract information and invoices
We require your personal data for the performance of the contract.
We need this data to enable the communication necessary for an orderly procedure, to disseminate information through process communication and to bill services. We also use this data for controlling in our company and to improve our products. We have a legitimate interest in analysing the data we collect in order to improve our products and services. We protect your privacy through a range of appropriate technical and organisational measures, and we respect your choices about how we use your data.
Data stored and used
Legal basis
The legal basis for this processing is consent.
Storage period
We process your data until the termination of your contract. We continue to store your contractual data if there are objections or claims that are still under review. We also store your data for a longer period if there are statutory retention obligations. In the latter case, processing of your data is limited to compliance with the statutory retention periods and will not be processed for any other purposes.
Customer communication
Newsletter and product advertising
We will send you useful and complementary product solutions by email to help you make full use of the benefits of our products. We will also provide you with interesting news by phone and email from time to time. In each case, you can grant us the legally required consent to contact you when you place your order online or in the Control Panel. If you no longer wish to receive such information, you can withdraw your consent at any time in the Control Panel or by contacting info@dartmouthcaninecare.com.
Legal basis
The legal basis for this processing is consent.
Storage period:
Your consent will be deleted upon termination of your contract at the latest.
Advertising our own similar goods and services
In addition, we regularly provide you with offers for our own similar goods and services by email. The legal basis for this processing is consent
Surveys and market research
In order to improve our products and services, you have the possibility to rate us via our partner "Trustpilot" of Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen, Denmark. You can submit a rating, for example, as part of a product purchase. The ratings are recorded using an integrated rating form or via a simple link. If you submit a rating via the integrated rating form, we will transfer your name, email address, a reference number (usually your order number) including your rating to Trustpilot as soon as you click on the rating link. The transfer is solely for the verification of your online purchase with us to ensure that it is an authentic review. When you receive a review invitation via the simple link, you will be taken directly to the review form on Trustpilot. Alternatively, you can also rate us at any time via the Trustpilot platform. For submitting a rating on Trustpilot, the registration of a user profile is required so that it can be published on the portal accordingly.
In the event that you have given us consent to receive "surveys" in the Dartmouth Canine Care Control Panel, we may send you a corresponding evaluation invitation with a link to the survey.
If you would like to learn more about how Trustpilot processes your data, you can view the company's privacy policy here.
Legal basis
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR in the case of e-mail notification by us.
The legal basis for the transmission within the framework of the integrated evaluation form is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest to continuously improve our services.
Storage duration
The consent will be deleted at the latest with the termination of your contract. The storage period of the published rating depends on the terms of Trustpilot.
Communication regarding customer concerns
The satisfaction of our customers is important to us, which is why you can contact our customer support at any time. We need your data in order to review your concerns.
We therefore process the following personal data about you:
We store communications with you until the end of the contract term; beyond that, we store communications only until open enquiries have been finally concluded or insofar as required by statutory retention obligations.
Legal basis
The legal basis for this processing is the fulfilment of our contract with you.
Customer information
We will send you information about the function and use of your products or new additions to your contract. In particular, we will provide you with tips and tricks for your products and information about their functions.
The legal basis for this processing is consent.
Usage data within our contractual relationship
Usage data in our services and products
Usage data includes information about how, how much and when you use our websites. This data, some of which is stored on your device (e.g. as log files), directly identifies you or your device.
Some usage data is collected when you use our products and services. We use this data to quickly identify and rectify any errors that occur and to continuously improve our services for you.
Storage period
Your data will be deleted after 24 months at the latest.
Legal basis
The legal basis for this processing is the fulfilment of the contract, specifically for use in troubleshooting.
4. Disclosure of data to third parties
The legal basis for this processing is the fulfilment of the contract.
In cases where a Group company acts as a processor or there is a joint controllership, corresponding contractual arrangements will be made.
Law enforcement
In rare cases, the law obliges us to provide information to law enforcement agencies and courts for law enforcement purposes.
Service and sales partners
Our products are also marketed through various sales channels, such as customer-to-customer marketing. When cooperating with intermediaries, it is sometimes necessary to forward data to an intermediary to ensure excellent customer service. This is necessary, for example, to transmit the commission status, to allocate commissions and to reconcile incoming orders.
We need your data to initiate and execute the contract.
Reporting of bad debts or misuse
In the event of bad debts or disagreements between the contractual partners, we always endeavour to reach an amicable settlement. If this fails, we carefully weigh whether and to whom to report payment defaults or improper use.
Product partners
For some of our products, we cooperate with partner companies and sometimes even act as intermediaries. In some cases it is necessary to forward personal data to our product partners. This is the case, for example, when registering a domain or issuing an SSL certificate. We conclude the necessary contracts under data protection law with our product partners. We only cooperate with partners who comply with our data protection standards. If data is transferred to third countries, we comply with the statutory requirements for transfers to third countries.5. Cookies
For more information on the cookies we use, please click here.
6. Service specific data protection information
Domain Check
Purpose of processing
Domain name requests are stored and processed to improve domain name suggestions and products. These requests will never be used by Dartmouth Canine Care to register domains on its own behalf.
Categories of personal data
Processed domain name data is not linked to any customer or contract.
Website Design Service
Website Content Management System (CMS) & Webspace
Purpose of processing
Operation of the website editing and publishing platform, and hosting of the website.
Categories of personal data
Subscriber data, content data, usage data, traffic data
Legal basis
Performance of a contract Art. 6(1) lit. b GDPR
Involved subcontractors
CM4all GmbH, Cologne, Germany
Equinix Data Centre, Frankfurt, Germany
Design Service
Purpose of processing
Website creation and modification on behalf of the client.
Website project organisation and communication with the client.
Categories of personal data
Subscriber data, content data, usage data, traffic data
Legal basis
Performance of a contract Art. 6(1) lit. b GDPR
Retention period
45 days after end of contract
Involved subcontractors
Spotzer Media Group B.V., Amsterdam, Netherlands
Salesforce.com Inc, San Francisco, USA
Dartmouth Canine Care Status Page
Purpose of processing
Information about the products. Announcement of maintenance. Registration for automatic transmission of status information by email or SMS.
Categories of personal data
Contact data, traffic data
Legal basis
Performance of a contract, legitimate interest Art. 6(1) lit. b,f GDPR
Involved subcontractors
Atlassian. Pty Ltd, Sydney NSW 2000, Australia
https://www.atlassian.com/legal/privacy-policy
Customer Service
Purpose of processing
Call centre services for customer service.
Categories of personal data
Subscriber data, content data
Legal basis
Performance of a contract Art. 6(1) lit. b GDPR
7. Product specific data protection information
List of our current subprocessors
With some of our products we rely on the expertise of specialised partner companies to ensure that we provide the best possible products and service experience. In the event that you cease to use our products and services, we will delete your personal data within a given timeframe.
Web hosting
Content Delivery Network GoDaddy
Purpose of processing
Distribute website assets through multiple data centres to increase website performance.
Categories of personal data
Content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPRGo
SiteLock
Purpose of processing
Protect your website and remove malware.
Categories of personal data
Content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Retention period
SiteLock stores the webspace of customer for 30 days (the grace period). Deletion of personal data is within 90 days after cleanup.
Subprocessors
SiteLock, Scottsdale, USA
MyWebsite
MyWebsite Now (Current product generation)
Website Editor & Webspace
Purpose of processing
The processing and publication of the website, and hosting of the website.
Categories of personal data
Content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Equinex Datacenter, Frankfurt, Germany
Route description
Purpose of processing
Display of the location of the company / customer on a map (directions).
For this purpose, the product transfers the address data to the map provider.
Categories of personal data
Address data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Google LLC, Mountain View, USA
Shop
Purpose of processing
Seamless integration of an online shop in the website editor.
Categories of personal data
Contact data, content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Ecwid, Encinitas CA, USA
Amazon Web Services, Inc., Seattle WA, USA
MyWebsite Creator, eCommerce, Essential
(Current product generation)
Website Editor
Purpose of processing
Editing and publishing of website
Categories of personal data
Content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Duda Inc., Tel Aviv, Israel
Amazon Web Services, Inc., Seattle WA, USA
Webspace
Purpose of processing
Hosting of website
Categories of personal data
Content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
AWS - Amazon Web Services, Datacentre Frankfurt, Germany
Amazon Web Services, Inc., Seattle WA, United States
Content Delivery Network (CDN)
Purpose of processing
Hosting of website; distribute website assets through multiple data centres to maximise website performance.
Categories of personal data
Content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
AWS - Amazon Web Services ‘Cloud Front’, Datacentre Frankfurt, Germany
Amazon Web Services, Inc., Seattle WA, United States
Online Business Card
Purpose of processing
Fast publishing of an online business card. You have the choice of which information will be displayed on this business card. User data will be sent to Google and Facebook in order to display publicly available information.
Categories of personal data
Contact data, content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Google LLC, Mountain View CA, USA
Facebook, Menlo Park CA, USA
Shop
Purpose of processing
Seamless integration of an online shop in the website editor.
Categories of personal data
Contact data, content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Ecwid, Encinitas CA, USA
Amazon Web Services, Inc., Seattle WA, USA
Route description
Purpose of processing
GoDaddy uses address data to show the location of a company on a map. In order to do so the product transfers this data to Mapbox. This happens when you set up the first project.
Categories of personal data
Address data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Mapbox, Washington D.C., USA
Website Translator
Purpose of processing
If you set up multilanguage texts: GoDaddy sends the text content of the website to Google Translate in order to translate the content into one or several other languages.
Categories of personal data
Content data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Google LLC, Mountain View CA, USA
Multi Location
Purpose of processing
MyWebsite uses address data to mark one or several locations of a company on a map. Data is sent to the map company Mapbox. This takes place automatically when adding this widget and with additional locations.
Categories of personal data
Address data, content data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Mapbox, Washington D.C., USA
Consent Management
Purpose of processing
Provision and operation of a consent management function for the website.
Website visitors can give their consent for processing and setting cookies
and receive information about the functions applied and how data is used.
Categories of personal data
Subscriber data, usage data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Usercentrics GmbH, Munich, Germany
MyWebsite (Vers. 8, prior to Sept. 2017)
Google Maps
Purpose of processing
MyWebsite 8 transfers address data of the customer to Google in order to prefill address data in the Google Maps module or if selected sends another stored address to Google.
Categories of personal data
Address data, traffic data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
Subprocessors
Google LLC, Mountain View, USA
My Data
Purpose of processing
On publishing a website created with MyWebsite customer and other user defined data will be added to the website in schema.org format, in order to support search engines and improve SEO results.
Categories of personal data
Contact data, content data
Legal basis
Performance of a contract, Art. 6(1) lit. b GDPR
MyShop
Purpose of processing
Editing, maintenance and operation of online shops.
Categories of personal data
Contact data, content data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
Shop data will be deleted 31 days after end of contract lifetime.
Subprocessors
ePages, Hamburg, Germany
Domain & SSL Certificate
Domain
Purpose of processing
Registering, transfer, configuration, maintenance and deletion of the domain name
Categories of personal data
Subscriber data
Legal basis
Performance of a contract or at your request prior to entering into a contract, Art. 6 (1) lit. b GDPR
Retention period
Differs for the various top level domains (TLDs) depending on the Registrar Accreditation Agreement (RAA) of the registry.
Subprocessors
A dedicated overview for registries and escrow providers is available here.
SSL certificate
Purpose of processing
Registering, transfer, configuration, maintenance and deletion of SSL certificates. Automatic processing in MyWebsite products when connecting the domain with the website project.
Categories of personal data
Subscriber data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Subprocessors
DigiCert, Lehi UT, USA
Note
In the process of acquisition and maintenance of SSL certificates, Dartmouth Canine Care is only an intermediary between the customer and the respective issuer of the SSL certificate. Dartmouth Canine Care has no influence on the issuance of certificates and does not accept any liability that the certificate is assigned to the customer and that it will permanently exist.
Shop
Dartmouth Canine Care / Booking Button
Purpose of processing
Integration of an online store to existing website or social media accounts.
Editing, maintenance and operation of online shop.
Categories of personal data
Contact data, content data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Subprocessors
Ecwid, Encinitas CA, USA
Amazon Web Services, Inc., Seattle WA, USA
Dartmouth Canine Care
Please refer to the 'MyWebsite Creator, eCommerce, Essential' Section for more information.
Email & Office
Dartmouth Canine Care Mail Basic / Business
Purpose of processing
Provision of email services, including setting up, configuring and deleting email addresses
Categories of personal data
Subscriber data, content data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
7 days after deletion of content, all data will be purged 7 days past end of contract lifetime
28 days for logfiles
Subprocessors
1&1 Mail & Media GmbH, Monatbaur, Germany
Open-Xchange, Cologne, Germany
Email Archiving
Purpose of processing
Archiving of emails
Categories of personal data
Subscriber data, content data, usage data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
60 days after end of contract
Subprocessors
Strato AG, Berlin, Germany
Hosted Exchange
Purpose of processing
Provision of email services, including setting up, configuring and deleting email addresses
Categories of personal data
Subscriber data, content data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
End of contract lifetime
Subprocessors
Fasthosts Internet Limited, Gloucester, United Kingdom
Microsoft Office 365
Purpose of processing
Usage of Microsoft Office 365, including setting up, configuring and deletion of accounts and users
Categories of personal data
Subscriber data, content data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
User data will be stored up to one year after termination of the licence.
Subprocessors
Microsoft, Redmond WA, USA
OX App Suite
Purpose of processing
Usage of OX App Suite, including setting up, configuring and deletion of accounts and users
Categories of personal data
Subscriber data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
User data will be stored up to one year after termination of the last licence.
Subprocessors
Open-Xchange, Cologne, Germany
Google Workspace | G Suite
Purpose of processing
Usage of Google Workspace | Google G Suite, including setup, configuration, deletion and customer service.
Categories of personal data
Subscriber data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Subprocessors
Google LLC, Mountain View CA, USA
https://workspace.google.com/intl/en/terms/subprocessors.html
https://policies.google.com/privacy
HiDrive Cloud Storage & HiDrive Share
Purpose of processing
Providing cloud storage for you and your users for worldwide access from any device at any time. HiDrive Share: Allow to share files via a share link.
Categories of personal data
Subscriber data, content data, usage data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
Up to 4 months past end of contract lifetime.
HiDrive Share: Data is stored for 7 days.
Subprocessors
Strato AG, Berlin, Germany
Managed Nextcloud
Purpose of processing
Provision of an online storage solution for you and your users to access them colloboratively, worldwide and at any time from different end devices.
Categories of personal data
Subscriber data, content data, usage data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
Storage period of the data according to the settings/deletions made by you.
Deletion at the latest at the end of the contract period.
Subprocessors
Equinex Datacenter, Frankfurt, Germany
MyDefender
Purpose of processing
Provisioning and the use of the backup.
Customer service and operation of the platform.
Categories of personal data
Subscriber data, content data, usage data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
Time that the data was stored according to the settings you assigned.
Latest by the end of the contract lifetime.
Subprocessors
STRATO AG, Berlin, Germany
Video Chat
Purpose of processing
Provision and operation of an online video conference with invitation function for participants.
Categories of personal data
Content data, contact data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
Traffic data is deleted after 7 days, content data and contact data are not stored.
Subprocessors
Equinex Datacenter, Frankfurt, Germany
Marketing and other products
List Local
Purpose of processing
Publishing and synchronisation of company data in online listings to improve rankings in search engines
Categories of personal data
Contact data, content data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
30 days past end of contract lifetime
Subprocessors
uberall, Berlin, Germany
rankingCoach
Purpose of processing
Optimisation of search rankings of your websites in Google search engine. With the Pro version you can additionally set up Google Ads campaigns.
Categories of personal data
Subscriber data, Contact data, usage data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Subprocessors
rankingCoach, Cologne, Germany
Google Ads Management Service (Search Engine Marketing)
Purpose of processing
Setting up and managing Google Ads campaigns for your website.
Categories of personal data
Subscriber data, content data, usage data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
30 days
Subprocessors
Jellyfish, Warrington, UK
Email Marketing
Purpose of processing
Creation, sending and monitoring of newsletter campaigns.
Categories of personal data
Contact data, content data, usage data, traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Retention period
User data will be stored up to one year after the end of the contract lifetime.
Subprocessors
Mailjet, Paris, France
Hosting Mobile App
Purpose of processing
Mobile access to the Dartmouth Canine Care Control Centre.
Categories of personal data
Subscriber data, usage data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR, Legitimate interest Art. 6, para. 1, lit. of the GDPR
Retention period
Subscriber data is stored until the app is uninstalled.
12 months for usage data
Tracking
Statistical evaluation of the app's usage are only used internally. Your IP address will be anonymised and not merged with other data. The data collected in this way does not reveal any details about your identity.
Subprocessors
Adobe Analytics, San José CA, USA
Google LLC, Mountain View CA, USA
Dartmouth Canine Care SiteAnalytics
Purpose of processing
Statistical analysis and technical optimisation of your website.
Categories of personal data
Anonymised usage and traffic data
Legal basis
Performance of a contract, Art. 6 (1) lit. b GDPR
Subprocessors
1&1 Mail & Media GmbH, Montabaur, Deutschland
Transparency is our priority
All data we receive from you during the lifetime of your contract is used primarily to provide the level of service you would expect. We carry out statistical analyses to improve products and services. These analyses are conducted in compliance with data protection legislation and our internal privacy policies and processes.
Your rights
In respect of Art. 15 GDPR you have the right to obtain information as to whether or not your personal data are processed. You also have the right to have your personal data rectified if it is inaccurate in accordance with Art. 16 GDPR, the right to be forgotten (Art. 17 GDPR), a right to obtain restriction of processing under given cirumstances (Art. 18 GDPR) and the right to data portability stated in Art. 20 GDPR. You have the right to
object to the processing of your personal data, as to where the processing is based on Art. 6(1) lit f GDPR.
If you wish to exercise one of these rights, please contact our data protection officer and we will get this done for you.
Please email:
Supervisory authorities
You have the right to file a complaint with any supervisory authority.
Here you will find the contact information for the UK Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113