Privacy Policy(pursuant to GDPR, Austrian DSG and TKG 2021)1. Data Controllerthe HUND dog club SB KGRegistered office: Johannesgasse 15/31, 1010 Vienna, Austria
Business location (animal boarding facility):
Hollgasse 8/1, 1050 Vienna, Austria
Phone: +43 664 9118191
Email:
info@thehund.club2. Principles of ProcessingWe process personal data exclusively:
- lawfully, fairly and transparently,
- for specified purposes,
- limited to what is necessary,
- accurate,
- stored only as long as necessary,
- using appropriate technical and organizational measures.
3. Categories of Processed Data3.1 Customer Data- first and last name,
- address,
- phone number,
- email address,
- emergency contact.
3.2 Contract and Reservation Data- booked services,
- care period,
- cancellation data,
- internal notes,
- documentation references.
3.3 Payment DataAs no online payments are processed, we process:
- payment method (cash / card),
- invoice data,
- tax-required information.
3.4 Dog-Related Data- dog’s name,
- breed,
- age,
- weight,
- vaccination status,
- medication,
- allergies,
- health information,
- behavioral specifics.
No health data of customers is processed.
4. Purposes of ProcessingProcessing is carried out for:
- pre-contractual measures (online reservation),
- contract performance,
- compliance with animal welfare authorizations,
- compliance with trade regulations,
- quality assurance,
- risk minimization,
- evidence preservation,
- defense and enforcement of legal claims.
5. Legal BasesContract performance – Art. 6(1)(b) GDPR
Legal obligation – Art. 6(1)(c ) GDPR
Legitimate interests – Art. 6(1)(f) GDPR
Our legitimate interests include in particular:
- Protection of the animals,
- Protection of employees,
- Protection of other customers,
- Prevention of incidents,
- Preservation of evidence,
- Minimization of liability risks.
The required balancing of interests has been documented.
6. Video Surveillance at the Business Premises6.1 Monitored Areas- Play area,
- Sleeping area,
- Grooming room,
- Waiting area.
No covert video surveillance takes place. No audio recording is performed. Appropriate signage is displayed at the premises.
6.2 Purposes- Safety of dogs in care,
- Safety of customers and employees,
- Compliance with animal welfare due diligence obligations,
- Quality control,
- Preservation of evidence in case of incidents.
Video surveillance is not used for employee performance or behavioral monitoring.
6.3 Technical ConfigurationThe cameras are positioned so that:
- No systematic identification of other customers occurs,
- The waiting area is not part of the external live access,
- No public observation takes place.
Surveillance is limited in scope and duration to what is necessary.
6.4 Live Access for Dog OwnersDuring the active care or grooming period, time-limited live access is provided.
This access:
- Is individualized,
- Is technically secured,
- Is time-limited,
- Automatically deactivates,
- Does not allow downloads via our systems,
- May not be shared with third parties.
There is no entitlement to uninterrupted or technically error-free availability.
Legal basis: Art. 6(1)(f) GDPR
6.5 Retention Period of Video Recordings- Storage exclusively on a local server,
- No cloud storage,
- Automatic deletion no later than 72 hours.
Longer retention occurs only in case of:
- A specific incident,
- An official request,
- Legal necessity.
6.6 Access RestrictionsAccess to video recordings is restricted exclusively to:
- Management,
- Expressly authorized employees.
Access is:
- Password-protected,
- Role-based,
- Limited to defined devices.
Administrator access is additionally secured.
6.7 Data Protection Impact AssessmentAn assessment pursuant to Art. 35 GDPR has been conducted. Due to the limited spatial scope, short retention period, local storage, and strict access control, a data protection impact assessment is not required.
7. Photo and Video Documentation (Internal)Recordings may be created for documentation purposes:
- Before/after grooming,
- In case of injuries,
- In case of irregularities,
- For evidentiary purposes.
Storage is maintained until expiry of possible civil law limitation periods.
8. Veterinary EmergenciesIn the event of an emergency, relevant data may be transmitted to veterinarians.
Legal basis:
Art. 6(1)(b) GDPR
Art. 6(1)(c ) GDPR
9. Data DisclosureData is disclosed exclusively to:
- Tax advisors,
- IT service providers (with data processing agreement),
- Authorities (MA 60, trade authority),
- Veterinarians in emergencies.
No commercial data transfer takes place.
10. Technical and Organizational MeasuresWe use:
- SSL encryption,
- Local server architecture,
- Access restrictions,
- Password protection,
- Role-based authorizations,
- Automatic deletion routines,
- Regular data backups.
11. Use of Analytics and Marketing Services11.1 Google AnalyticsWe use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of the use of our website. IP addresses are truncated (IP anonymization activated). Processing is carried out exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR. A transfer of data to the United States cannot be excluded. Google is certified under the EU-US Data Privacy Framework. In addition, Standard Contractual Clauses pursuant to Art. 46 GDPR are applied.
11.2 Meta PixelWe use Meta Pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
Meta Pixel is used to analyse user behaviour and optimise advertising measures. Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
Personal data may be transferred to third countries, in particular to the United States.
11.3 Instagram FeedAn Instagram feed is integrated on our website.
When loading the feed, a connection to Meta Platforms servers may be established. The integration takes place only after prior consent via the implemented consent tool.
11.4 Tilda StatisticsOur website is operated via the platform Tilda Publishing Ltd. Tilda may collect statistical information regarding the use of the website.
Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
11.5 Withdrawal of ConsentYou may withdraw or modify your consent at any time via the “Cookie Settings” link in the footer of our website. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
12. Retention Period- Contract data: 7 years,
- Reservation data without contract conclusion: max. 12 months,
- Documentation data: until expiry of possible liability periods,
- Video recordings: max. 72 hours (unless an incident occurs).
13. Data Subject RightsYou have the right to:
- Access,
- Rectification,
- Erasure,
- Restriction of processing,
- Data portability,
- Objection to processing pursuant to Art. 6(1)(f) GDPR.
14. Right to Lodge a ComplaintAustrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at15. No Automated Decision-MakingNo automated decision-making or profiling takes place.