Privacy Notice

Privacy Policy of animonda petcare GmbH

Welcome to the animonda website! We are pleased that you are interested in our company and our products. The protection of your personal data is very important to us. Therefore, we strictly adhere to all applicable data protection laws, particularly the General Data Protection Regulation (GDPR).

This Privacy Policy explains which data we collect when you visit our website, what we use it for, and what rights you have. We have tried to explain everything as clearly and understandably as possible.

1. General Information Concerning Every Website Visitor

1.1 Who is responsible for this website?

animonda petcare GmbH is responsible for the collection and processing of data on this website. You can find our exact contact details in our Legal Notice.

1.2 To which websites does this Privacy Policy apply?

This Privacy Policy applies to all services offered by animonda petcare GmbH (hereinafter referred to as “animonda”). It does not apply to websites of other providers that we only link to.

1.3 What is personal data?

Personal data is any information that relates to an identified or identifiable natural person. This can be your name, address, email address, telephone number, or even your IP address. Data with which your identity cannot be determined (e.g., your gender or the browser used, without reference to your person) is not personal data.

1.4 Do I remain anonymous on the animonda website?

Yes, you generally remain anonymous as long as you do not voluntarily provide us with personal data (e.g., when you order something in the shop or sign up for the newsletter). The only exception is the temporary storage of your IP address, which we need to protect our systems. You can find out more about this in the next section.

1.5 Which data is automatically collected when visiting the website?

When you visit our website, certain information is automatically collected and stored in so-called log files on our web server. This includes:

Your IP address: This is stored for a maximum of seven days to protect our systems from misuse. The legal basis for this is our legitimate interest in accordance with Art. 6(1) lit. f) GDPR. After this period, the IP address is deleted or anonymised.
The browser and operating system you use.
The web pages you have visited.

This data is generally not used to identify you personally. If we want to use these log files to create usage profiles (e.g., for advertising or market research), the IP addresses will be anonymised beforehand.

2. How We Otherwise Use Your Data (Special Cases)

We collect, process, or use your personal data only when you voluntarily provide it to us and it is legally permitted or you have given your explicit consent. This usually happens in the following situations:

2.1 Subscribing to the Newsletter

If you would like to order our email newsletter, we process your email address. The newsletter is only sent with your explicit consent (Art. 6(1) lit. a) GDPR).

Newsletter platform: We use the Birdsview platform (Birdsview GmbH, Reudnitzer Straße 1, 04103 Leipzig) for sending our newsletters.
Withdrawal: You can withdraw your consent at any time and unsubscribe from the newsletter, for example, via the unsubscribe link in every newsletter email. The lawfulness of the processing carried out until the withdrawal remains unaffected.

2.2 Shopping in the Online Shop

If you would like to order products in our online shop, we require your contact details. You can register or order as a guest. The processing of this data is for contract fulfilment (Art. 6(1) S. 1 lit. b GDPR).

Data collected: First name, last name, email address, billing address, delivery address, payment method, order history.
Purpose: Your data is used exclusively for processing your orders. We use your email address for communications regarding the status of your order (e.g., order confirmation, sending the invoice).
Deletion: If you have a registered customer account, you can change or delete your profile at any time. The data will then be removed from our system unless there are legal retention periods or the data is still required for outstanding claims.

2.3 Creating a Customer Account (Access-Protected Area)

To use our access-protected area, registration (a customer account) is necessary. We only collect the data required for registration (Art. 6(1) S. 1 lit. b GDPR) or process it based on our legitimate interest in providing you with these services (Art. 6(1) lit. f GDPR).

Voluntary information: Other data that you voluntarily provide is based on your consent (Art. 6(1) S. 1 lit. a GDPR).
Unsubscribe: You can log out of your customer account at any time.

2.4 Payment Processing

Payment processing in our online shop is handled by the payment service provider Mollie B.V. (Keizersgracht 126, 1015 Amsterdam, Netherlands). The personal data you enter at the checkout (e.g., name, address, payment details) is transmitted directly to Mollie via an encrypted SSL or TLS connection.

Mollie is responsible for forwarding your data to your chosen financial service provider. We do not store or process any payment data ourselves; we only store the information about the payment method you have chosen for your order.

The processing of this data is based on contract fulfillment (Art. 6(1) S. 1 lit. b GDPR) or your consent (Art. 6(1) S. 1 lit. a GDPR).

We use the following payment methods, which are processed via Mollie:

Klarna
PayPal
EPS (only available in Austria)
Credit Card

2.5 Address Verification

To avoid delivery errors and ensure that your contact details are valid, we use the service provider Endereco, Balthasar-Neumann-Straße 4b, 97236 Randersacker, for real-time verification of address data in our forms.

Data processed: Address (country, city, postcode, street, house number), email address, telephone number.
Purpose: Error checking of the entries.
Legal basis: Performance of the contract or pre-contractual measures (Art. 6(1) lit. b GDPR).
Data storage: The data is processed separately and deleted no later than 30 days after the status of the data has been determined and the storage in the web shop has been completed.

3. Analytics and Marketing

We use various technologies to make our website more user-friendly, optimise our offer, and show you relevant content and advertising. Many of these services use cookies.

3.1 What are cookies and how can I manage them?

Cookies are small text files that are stored on your device when you visit our website. They help us to recognise your browser and to store certain information.

Session cookies: These are technically necessary for session control and are deleted as soon as you close your browser. They do not contain any personal data. The processing is based on Art. 6(1) lit. f) GDPR, to optimise user guidance.
Marketing cookies and tracking technologies: For other cookies that contain personal data or are used for marketing and analysis purposes, we obtain your explicit consent in advance (Art. 6(1) lit. a) GDPR).

How you can generally prevent cookies: You can set your browser to automatically block cookies or to warn you before a cookie is stored. However, please note that this may limit the functionality of our and other websites. You can also delete cookies at any time via your browser settings.

3.2 Cookiebot

We use the Consent Management tool Cookiebot (Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark) to manage your consent to the setting of cookies and to comply with legal requirements (Art. 6(1) lit. c GDPR).

Data processed: Anonymised IP address, date and time of consent, browser information, the URL of our site from which you gave your consent, a random and encrypted key, the consent status.
Storage duration: Cookie consents are stored for 12 months.

3.3 Google Analytics

We use Google Analytics (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to create pseudonymous usage profiles and to understand how our website is used. This helps us to tailor our offer to your needs. The data processing is based on Art. 6(1) S. 1 lit. f GDPR (legitimate interest).

Cookies: Google Analytics uses cookies that are stored on your device.
Improved data protection through Server-Side Tagging (SST): To ensure the best possible data protection for you and to meet the requirements of the GDPR, we use Server-Side Tagging (SST). This means that your IP address is already shortened on our servers within the European Union before it is even transmitted to Google in the USA. This ensures that Google never receives your full IP address. We have also concluded a data processing agreement with Google Inc.
Objection: You can object to the processing at any time by:

Preventing the storage of cookies in your browser settings.
Downloading and installing the available browser plugin from Google.

3.4 Google Marketing Services (Google Ads, Google Tag Manager)

We use the marketing and remarketing services of Google Marketing Services (Google Inc.) such as Google Ads and Google Tag Manager. These services are deactivated by default and are only activated if you have given us your consent to set tracking cookies (Art. 6(1) lit. a) GDPR).

Purpose: Allows us to display advertisements more targeted to your potential interests (remarketing).
Functionality: When you access our and other websites where Google marketing services are active, a Google code is executed and (re)marketing tags (cookies or similar technologies) are stored on your device. These store information about your website visits, interests, clicked offers, and technical information about your browser and device. Your IP address is anonymised.
Pseudonymisation: The data collected about you is processed pseudonymously, i.e., Google does not store your name or email address.
Objection: You can object to the collection by Google Marketing Services via the settings and opt-out options provided by Google.

3.5 Microsoft Clarity

We use Microsoft Clarity (Microsoft Corporation), an analysis tool to improve our website and adapt it to your needs. The data collected (clicks, scrolling behaviour, visited pages) is anonymised.

Legal basis: Your consent via the cookie banner (Art. 6(1) S. 1 lit. a GDPR).
Withdrawal: You can withdraw your consent at any time by clicking on the CookieBot icon in the bottom left corner of the screen.
Data processing: We have concluded a data processing agreement with Microsoft.
Storage duration: The data collected is stored for one year.

3.6 Facebook Pixel and TikTok Pixel

The Facebook Pixel (Facebook Inc. / Facebook Ireland Ltd.) and the TikTok Pixel (TikTok Technology Limited) are used within our online offer. Both are deactivated by default and are only activated with your consent to set tracking cookies (Art. 6(1) lit. a) GDPR).

Purpose: Allows Facebook and TikTok to determine visitors to our website as a target group for advertisements and to track the effectiveness of our ads.
Functionality: When you access our website, the pixels are integrated and can store a cookie on your device. Your visit is assigned to your respective profile if you are logged in there.
Anonymisation: The data collected about you is anonymous to us.
Objection: You can object to the collection by the pixels and the use of your data for the respective platform via the settings for usage-based advertising.

3.7 swat.io

We use swat.io (swat.io GmbH, Schottenfeldgasse 85/3, 1070 Vienna, Austria) to manage our social media channels and interact with you.

Data processed: Your social media username/profile name, content of your comments/messages/posts, publicly available information from your social media profile.
Purpose: Efficient and centralised management of our social media presence.
Legal basis: Our legitimate interest (Art. 6(1) lit. f GDPR).
Data processing: We have concluded a data processing agreement with swat.io GmbH.
Data transfer: swat.io is based in Austria (EU). A transfer to third countries does not generally take place.

3.8 Linkster Influencer Tracking

We use the tracking technology of Linkster GmbH, Colonnaden 5, 20354 Hamburg, to measure the efficiency of partnerships and advertising channels and to bill for advertising success.

Functionality: When you click on an advertising integration, cookies are set in your browser. Your browser sends an HTTP request to the Linkster server with information such as URL, browser identifier, anonymised IP address, HTTP header, time of the request, and cookie content.
Data stored: A 24-digit, anonymous ID in the cookie, linked to encrypted touchpoint data in the database (e.g., when an advertisement was displayed or clicked). In the case of action requests, order number, shopping cart value, customer number, new customer feature, age, and gender can also be transmitted and stored.
Storage duration: Linkster cookies are deleted after 30 days at the latest.
Legal basis: Our legitimate interest in a correct attribution of advertising success and billing (Art. 6(1) S. 1 lit. f GDPR).
Objection: You can deactivate the storage of cookies in your browser settings or deactivate the data collection and processing via a tracking opt-out link.

3.9 Findologic for Product Discovery

To improve product search and navigation in our shop, we use the services of Findologic GmbH, Jakob-Haringer-Str. 5a, 5020 Salzburg.

Data processed: Cookies for storing information about the user, transmitted data includes IP address, browser identification, and associated behavioural data (search queries, visited categories, selected filters, viewed and purchased products).
Purpose: Understanding product interests and optimising the shopping experience.
Data processing: A data processing agreement has been concluded with Findologic.
Storage duration: Stored IP addresses are anonymised after 6 months.

3.10 trbo

We use the service of trbo GmbH, Leopoldstr. 41, 80802 Munich, a tracking tool for the best possible design of our website.

Purpose: Controlling and improving our online offers by measuring the use and effectiveness of our online advertising. Gaining insight into which pages and products interest our customers.
Technology: Use of “marketing cookies” and “web beacons” to collect information (visited pages, search queries, clicks, orders).
Pseudonymisation: The data collected is always stored under a pseudonym and is not combined with personal data (name, address).
Data processing: External service providers only have access to the data on our behalf and under our control.

4. Our Social Media Pages

4.1 animonda's Facebook/Instagram, TikTok, and LinkedIn pages

animonda operates official Facebook/Instagram, TikTok, and LinkedIn pages. We would like to point out that we do not collect, store, or process any personal data of our users on these pages.

Note: The respective platforms use their own web tracking methods. It cannot be ruled out that these platforms use your profile data to evaluate your habits and interests. We have no influence on the data processing by these providers.

5. External Service Providers to Improve Our Operations

5.1 Use of Zendesk

We use the Zendesk service to improve our customer service management.

Purpose: Efficient management and answering of customer inquiries, improvement and optimisation of customer service, ensuring reliable communication.
Data processed: Contact data (name, email address, telephone number), communication content (emails, chat messages), usage data (duration and frequency of interactions).
Legal basis: Our legitimate interest in providing effective and high-quality customer service (Art. 6(1) lit. f GDPR).
Data processing: We have concluded a data processing agreement with Zendesk.
Server location: The data processing takes place on servers within the European Union (EU).

5.2 Cloudflare

Cloudflare is a service provider that helps us to make our websites more secure and faster.

Purpose: Protection against DDoS attacks and other malicious activities, improving loading speed and providing content (CDN), ensuring availability.
Data processed: IP addresses, connection information (browser type, language settings, access time), usage data (activities on the website for traffic analysis and security measures).
Legal basis: Our legitimate interest in operating our website securely and efficiently (Art. 6(1) lit. f GDPR).
Disclosure of data: Cloudflare may disclose data to third parties if this is legally required or if third parties process data on behalf of Cloudflare. Cloudflare undertakes to comply with the GDPR.

6. Security of Your Data

animonda takes technical and organisational security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment that is not publicly accessible.

Note on emails: If you contact us by email, please note that the confidentiality of the information transmitted is not always guaranteed (similar to postcards, emails can be viewed by third parties). For confidential information, we recommend using the postal service.

7. Your Rights as a User of the Websites (GDPR)

As a user of our website, you have certain rights regarding the processing of your personal data:

Right of access (Art. 15 GDPR): You have the right to know whether we process personal data about you and what it is.
Right to rectification and erasure (Art. 16 and 17 GDPR): You can request the rectification of incorrect data and the erasure of your data if the legal requirements are met (e.g., if the data is no longer necessary for the purposes for which it was collected).
Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data if certain requirements are met (e.g., if you dispute the accuracy of the data, for the duration of the review).
Right to data portability (Art. 20 GDPR): In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transmission to a third party.
Right to object (Art. 21 GDPR): If data is processed based on our legitimate interest (Art. 6(1) lit. f GDPR), you can object at any time for reasons arising from your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): If you believe that the processing of your data violates data protection regulations, you have the right to lodge a complaint with a data protection supervisory authority.

8. Changes to this Privacy Policy

The rapid development of the internet and changes in data protection laws may make it necessary to adapt our Privacy Policy. Please therefore always note the current version. This Privacy Policy is valid as of 31.07.2025.

9. Data Protection Officer

Our company's Data Protection Officer will be happy to answer any questions or suggestions you may have on the topic of data protection: ds² Unternehmensberatung GmbH & Co. KG Falkenstraße 10 33775 Versmold Email: datenschutzbeauftragter-heristo@ds-quadrat.de

10. Who can I contact?

If you would like to exercise your rights of access or have general questions about this Privacy Policy or our data protection practices on the web, please contact us at: info@animonda.de