DogoVital
info@dogovital.eu

Privacy Policy

All questions and requests related to the processing of personal data by the data controller can be sent in writing via email to info@dogovital.eu or by regular mail to the address of the data controller provided in the previous paragraph.

PROCESSING, STORAGE AND COLLECTION OF PERSONAL DATA

While providing its services, the data controller processes personal data for various purposes and to varying extents. In this way, the controller processes, among other things, the following data (for an exact and updated list of personal data, individuals can contact the data controller):

Data about customers and buyers of products and programs:

  • full name;
  • address;
  • delivery address;
  • phone number (mobile);
  • email address;
  • past purchases;
  • payment information;
  • invoice number;
  • social media data (optional);
  • avatar (optional).

Personal data of individuals subscribed to regular messages/newsletters:

  • full name;
  • email address;
  • phone number (mobile);
  • response data to email messages;
  • location.

Data of website visitors of the data controller (scope of personal data depends on individual preferences):

  • IP address;
  • network location (if possible based on IP address);
  • unique identification number (automatically generated);
  • URLs (domains) of all visited web pages on the website;
  • date and time, duration of visits to each web page;
  • number of visited pages and time spent on each page;
  • URL of the website that redirected the individual to the controller’s website.

LEGAL BASIS AND PURPOSES OF PERSONAL DATA PROCESSING

Depending on the purpose, the data controller processes personal data based on one of the legal bases described below.

Contractual obligations

The data controller processes personal data for the purposes of concluding and fulfilling contracts in cases when an individual orders or purchases any product and/or program of the controller.

As part of contractual obligations, the controller sends SMS messages for notifications in the following cases:

  • to inform customers about the processing of their orders (e.g., in case of delivery delays, etc.).

Consent

The data controller processes personal data based on the individual's consent in cases where the individual signs up to receive regular messages/newsletters, participates in giveaways, or submits a recipe or review on the website. Consent is also used for sending SMS notifications (e.g., when a user abandons the shopping cart without completing the purchase).

The individual may withdraw their consent at any time without any negative consequences. This can be done using the unsubscribe options provided in each message or by contacting the data controller as described in this Policy.

Legal obligations

In certain cases, processing of personal data is necessary to fulfill the legal obligations of the data controller (e.g., processing personal data when issuing invoices for purchased goods/services).

Legitimate interest

The data controller uses legitimate interest as a legal basis for processing personal data in cases of sending emails when a user abandons the shopping cart without completing the purchase and when processing website visitor data for the purpose of preventing, detecting, and sanctioning any misuse or attempted misuse of the website.

STORAGE AND DELETION

The controller stores personal data in the user profile as long as the user is registered on the website.

Personal data processed on the basis of consent is stored permanently, i.e., until the individual withdraws such consent.

Data related to issued invoices is retained for 10 years from the date of issue.

Data necessary for concluding and fulfilling contracts between the controller and the buyer of products/programs is retained for 5 more years from the fulfillment of the contract.

After the above retention periods expire, personal data is deleted or anonymized, meaning the controller alters the data so that it can no longer be associated with an individual.

VOLUNTARY DATA PROVISION AND CONSEQUENCES OF NON-PROVISION

The provision of personal data is voluntary. If an individual does not provide their data, they cannot use certain services (e.g., it is not possible to conclude a purchase contract for products/programs as personal data is necessary for delivery and invoicing).

ACCESS TO PERSONAL DATA

The data controller does not share personal data and does not allow access to unauthorized third parties. Outside of the controller – the company N2X d.o.o. – only those persons who have signed a written data processing agreement with the controller and perform specific data processing tasks on behalf of the controller may access personal data. They must comply with the law and the controller’s requirements regarding the processing and protection of personal data (so-called processors).

The data controller’s processors who process personal data include:

  • marketing service providers;
  • email service providers;
  • SMS service providers;
  • software solution providers;
  • delivery services.

Data processors may process personal data only according to the controller’s instructions and must not process personal data for their own purposes. They and their employees are obliged to maintain the confidentiality of personal data.

INDIVIDUAL’S RIGHTS

Any individual who wishes to exercise their rights regarding their personal data, or has questions regarding the processing of their personal data, can do so at any time using the contact details provided at the beginning of this Policy.

For reliable identification when exercising rights related to personal data, the data controller may request additional information from the individual and may refuse to act only if they can prove that they cannot reliably identify the individual.

The data controller undertakes to respond to the individual's request to exercise any of the rights listed below within 30 days. If the request cannot be fully fulfilled within this timeframe, the controller will notify the individual with an appropriate explanation.

Right to information

The individual has the right to be informed about which personal data the controller processes, on what basis, for what purpose, and for how long it is retained.

Right to erasure (“right to be forgotten”)

If the individual no longer wishes for their personal data to be stored and processed by the controller, and provided there are no other legal grounds for their continued retention and processing, they may request deletion of such data at any time.

Right to rectification, erasure or to object

The individual may request rectification or deletion of their personal data at any time using the contact details provided in this Policy and may object to the processing of their personal data by the controller.

The individual may unsubscribe from the newsletter database at any time via the contact details provided in this Policy or by clicking the link at the bottom of promotional emails.

Registered users may stop using the online store and cancel their registration at any time. This is done by submitting a written statement of cancellation.

Before submitting a cancellation, the user must settle any outstanding obligations related to purchases made in the online store. The controller will maintain the confidentiality and privacy of personal data even after registration is canceled, in accordance with this Policy.

Right to data portability

The individual may request the controller to provide them with the personal data concerning them, which they have provided to the controller, in a structured, commonly used, and machine-readable format.

Right to legal remedies and sanctions

The individual has the right to lodge a complaint with the supervisory authority (Information Commissioner of the Republic of Slovenia), as well as the right to legal remedies against the decision of the supervisory authority or in case of its inaction.

In any case, the controller requests that the individual first exercise their right to object directly to the controller.

Rights related to automated processing

The individual has the right not to be subject to decisions based solely on profiling, analysis, or prediction using automated means of processing. In such cases, the individual may object to the data controller.

Right to withdraw consent

The individual has the right to withdraw consent for the further processing of their personal data when such processing is based on consent (e.g., in the case of receiving promotional messages).

Any changes to this Personal Data Protection Policy will be published on this website.
Updated: 19.2.2025