Privacy policy

This is the Pharmacy4pets website and for your privacy, we have established a number of policies in the form of a privacy policy. Pharmacy4pets cares a lot about your privacy. We therefore only process data that we need for (the improvement of) our services and treat the information we have collected about you and your use of our services with care. The starting date for the validity of these conditions is 25/05/2018, with the publication of a new version the validity of all previous versions lapses. This privacy policy describes what information about you is collected by us, what this information is used for and with whom and under what conditions this information may be shared with third parties. We also explain to you how we store your data and how we protect your data against misuse and what rights you have with regard to the personal data you provide to us. When you visit our website, our web server automatically recognises only your domain name and not your e-mail address. When you visit our website, we will retain your e-mail address if you communicate this to us.

Webshop software

Magento
Our webshop has been developed with software from Magento. Personal data that you make available to us for the purpose of providing our services will be shared with this party. Magento has access to your data in order to provide us with (technical) support, they will never use your data for any other purpose. On the basis of the agreement we have concluded with them, Magento is obliged to take appropriate security measures. These security measures include the application of SSL/TLS encryption, a strong password policy and secure data storage. Magento reserves the right to share data collected within its own group and affiliated partners in order to further improve its services. Magento takes the applicable legal retention periods for (personal) data into account. We host our webshop on a server under our own management. We have taken appropriate technical and organisational measures to prevent abuse, loss and corruption of data as far as possible. These security measures include at least SSL encryption and a strong password policy. Backups are made on a regular basis to prevent loss of data.

E-mail and mailing lists

Klaviyo
We send our e-mail newsletters with Klaviyo. Klaviyo will never use your name and email address for your own purposes. At the bottom of every e-mail sent automatically via our website you will see the unsubscribe link. You will no longer receive our newsletter. Your personal data will be stored securely by Klaviyo. Klaviyo uses cookies and other Internet technologies to monitor whether emails are opened and read. Klaviyo reserves the right to use your data to further improve the service and to share information with third parties as part of that service. 

Freshdesk
For our regular e-mail traffic we use the services of Freshdesk. This party has taken appropriate technical and organizational measures to prevent abuse, loss and corruption of your and our data as much as possible. Freshdesk does not have access to our inbox and we treat all our email traffic confidentially.

Payment processors

MultiSafepay
To process (part of) the payments in our webshop we use the platform of MultiSafepay. MultiSafepay processes your name, address and residence details as well as your payment details such as your bank account or credit card number. MultiSafepay has taken appropriate technical and organisational measures to protect your personal data. MultiSafepay reserves the right to use your data to further improve the service and to share (anonymised) data with third parties in the context of this. All the above warranties regarding the protection of your personal data also apply to the parts of MultiSafepay's services for which they engage third parties. MultiSafepay does not store your data for longer than is permitted by law.

Prescriptions

OpenAI
We use the OpenAI API for the automatic reading of prescriptions. Before you can add a prescription-only (veterinary) medication to your cart, you must consent to this method of processing. Your consent is provided on a per-document basis, meaning you grant permission only for the processing of the (repeat) prescription associated with the order you are placing at that moment. Prescriptions you submitted earlier or will submit later will not be processed in this way without your specific consent.

To protect your privacy in accordance with GDPR, we have established a data processing agreement (DPA) with OpenAI. OpenAI employs numerous security measures to ensure your privacy, which can be reviewed here. OpenAI may retain your data for up to 30 days, after which it is deleted. Your personal data will not be used by us or by OpenAI for training purposes.

We use the OpenAI API solely as a tool for reading your prescription. The reading will then be further reviewed by us.

Reviews

Kiyoh
We collect reviews through Kiyoh's platform. If you leave a review via Kiyoh, you are required to provide your name, place of residence and email address. Kiyoh will share this information with us so that we can link the review to your order. Kiyoh also publishes your name and place of residence on its own website. In some cases, Kiyoh may contact you to explain your review. In case we invite you to leave a review, we will share your name and email address with Kiyoh. They only use this data for the purpose of inviting you to leave a review. Kiyoh has taken appropriate technical and organisational measures to protect your personal data. Kiyoh reserves the right to engage third parties for the provision of the service, subject to Kiyoh's consent. All the above safeguards relating to the protection of your personal data also apply to the parts of Kiyoh's services for which they engage third parties. Kiyoh will retain your personal information for as long as you publish the review on the platform. Kiyoh has appointed a Data Protection Officer, whose contact details can be found on the Kiyoh website.

Shipping and logistics

DHL and Deutsche Post
If you place an order with us, it is our task to have your package delivered to you. We use DHL's and Deutsche Post's services to carry out deliveries. It is therefore necessary for us to share your name, address and place of residence with DHL/Deutsche Post. DHL/Deutsche Post will only use this information for the purpose of performing the contract. In the event that DHL/Deutsche Post engages subcontractors, DHL/Deutsche Post will also provide your information to those parties.

Purpose of the data processing

General purpose of the processing
We only use your data for the purpose of providing our services. This means that the purpose of the processing is always directly related to the order you give. Your information is used to improve the content of our website and if you wish we will send you information about new and relevant matters. The information is only used internally and is not passed on to other organisations for commercial purposes. If you share data with us and we use this data to contact you at a later time - other than at your request - we will ask you for explicit permission to do so. Your data will not be shared with third parties other than for the purpose of meeting accounting and other administrative obligations. These third parties are all bound to secrecy on the basis of the agreement between them and us or an oath or legal obligation. We have no partnerships or special relationships with third parties on the Internet.

Security of personal data
When we receive your data on our website, we always use the coding technologies that are recognised as common standards within the IT sector. When we receive certain critical information, such as financial or health information, we aim to use secure connections. DNSSEC is an additional security (in addition to DNS) for converting a domain name to the IP address associated with it; it is provided with a digital signature. You can have this signature checked automatically. DNSSEC prevents you from being redirected to a false IP address. For our checkout we use TLS (formerly SSL), which means that your data is sent via a secure internet connection.

Automatically collected data
Data that is automatically collected by our website is processed for the purpose of further improving our services. These data (e.g. your IP address, web browser and operating system) are not personal data.

Cooperation in tax and criminal investigations
Where appropriate, Pharmacy4pets may be required by law to share your information in connection with fiscal or criminal investigations by the government. In such a case, we will be forced to share your data, but we will oppose it within the limits of the law.

Storage Periods
We store your data as long as you are a client of us. This means that we will keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also regard this as a forgetful request. Pursuant to applicable administrative obligations we must store invoices with your (personal) data, so we will store this data for as long as the applicable term runs. However, employees no longer have access to your client profile and the documents we have created as a result of your order.

Customer account
You can view and/or change the data in your account at any time. If you no longer wish to use your account, please contact us and we will deactivate your account and delete your data.

Your rights
Pursuant to the applicable Dutch and European legislation, you, as the data subject, have certain rights with regard to the personal data that are processed by or on behalf of us. We will explain below what these rights are and how you can invoke them.
In principle, in order to prevent misuse, we only send copies and copies of your data to your e-mail address already known to us. In the event that you wish to receive the information by another e-mail address or, for example, by post, we will ask you to provide proof of identity. We keep records of completed requests; in the event of a request to forget, we administer anonymised data. You will receive all copies and copies of data in the machine readable data format that we use within our systems. You have the right to complain to the Personal Data Authority at any time if you suspect that we are using your personal data in the wrong way.

Entitlement

You always have the right to view the data that we process (or have processed) and that relate to your person or are traceable for that purpose. A request to this effect may be sent to [email protected]. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the e-mail address known to us with an overview of the processors in possession of this data, stating the category in which we have stored this data.

Right of rectification

You always have the right to have the data that we process (or have processed) and that relate to your person or are traceable for that purpose, modified. You can make a request to this effect via [email protected]. You will then receive a response to your request within 30 days. If your request is accepted, we will send you a confirmation that the details have been adjusted at the e-mail address known to us.

Right to limitation of processing

You always have the right to limit the data we process (or have processed) that relate to your person or are traceable to it. You can make a request to this effect via [email protected]. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the e-mail address known to us that the data will no longer be processed until you lift the restriction.

Right to portability

You always have the right to have the data that we process (or have processed), relating to your person or that can be traced back to you, carried out by another party. You can make a request to this effect via [email protected]. You will then receive a response to your request within 30 days.
If your request is granted, we will send you copies or copies of all data about you that we have processed or that have been processed by other processors or third parties on our behalf at the e-mail address known to us. In all probability, in such a case, we will no longer be able to continue to provide services, because the safe linking of data files will then no longer be guaranteed.

Right of objection and other rights

In such cases, you have the right to object to the processing of your personal data by or on behalf of Pharmacy4pets. If you object, we will immediately cease data processing in anticipation of the handling of your objection. If your objection is well-founded, we will make copies and/or copies of data that we process or have processed available to you and will then permanently cease processing. You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is the case, please contact us at [email protected].

Cookies

We use cookies to make your visit to our website even more convenient and personalised. Cookies are used to personalise ads. These cookies allow us and third parties to track your internet behaviour. Read our cookie policy here.

Changes to the privacy policy 

We reserve the right to change our privacy policy at any time. On this page, however, you will always find the most recent version. If the new privacy policy affects the way in which we process data already collected about you, we will notify you by e-mail.

Contact details:
Pharmacy4pets
Mijlstraat 35
5281 LJ Boxtel
the Netherlands

T +31 854012783
E [email protected]