Personal Data Protection Policy
Controller of Personal Data and Contact Information
This policy applies to the processing (use) of any personal data carried out by the company PANTAYA d.o.o. (controller) or on behalf of the controller.
Controller’s Information:
PANTAYA d.o.o.
Brezje pri Grosupljem 81
1290 Grosuplje
Slovenia
Registration Number: 8635641000
Phone: 00386 31 334 776
Email: info@holisticpantaya.com
Types of Personal Data We Process
- Basic contact information (name, phone number, email address).
- Data about the use of our websites (clicks on links, time spent) and data regarding responses to our email messages (whether the message was opened, which links were clicked).
- Data necessary for fulfilling contracts and delivering purchased goods (purchase details, price, delivery address, delivery time, payment method, payment date, complaint data, invoice data, etc.).
Legal Bases for Processing Personal Data
We may process your personal data based on the following legal grounds:
- When necessary to fulfil our legal obligations (e.g. issuing invoices for purchased goods).
- When processing personal data is necessary for the performance of a contract you have concluded with us or because you have requested an offer from us.
- When you have given your consent for processing your personal data for a specific processing purpose, with the right to withdraw your consent at any time.
- When we have a legitimate interest in processing your personal data (e.g., sending you an email if you have abandoned your shopping cart on our website without completing the purchase).
Purposes of Personal Data Processing
We may use your personal data for one or more of the following purposes:
- Communicating with you regarding the provision of our services and responding to your inquiries.
- Entering into contracts and fulfilling obligations arising from the contract.
- Marketing communications (sending emails and SMS messages).
- Enforcing any legal claims and resolving disputes.
- Conducting statistical analyses of the sale of our goods and the use of our websites.
Data Retention and What Happens to Your Data Afterwards
We retain basic personal data as long as you have the status of our registered user on our websites.
Personal data processed based on your consent is kept permanently or until you withdraw your consent.
Invoice data is retained for 10 years from the date of issuance.
Data necessary for the conclusion and performance of the contract between you and us are retained for 5 years after the contract is fulfilled (goods are delivered).
After the retention period expires, personal data are effectively deleted or anonymized, which means that they are processed in such a way that they can no longer be associated with you.
Voluntary Provision of Data and Consequences of Non-Provision
Providing personal data is voluntary. You are not obligated to provide us with personal data; however, if you do not provide them, you cannot enter into a contract with us (as we need them for order delivery). We will specify which data are such that their non-provision causes the mentioned consequences each time we collect personal data from you.
Who Has Access to Your Personal Data
We won’t disclose your personal data and won’t allow access to third parties (outside of PANTAYA d.o.o.) except to those who have entered into a written contract with us, based on which they perform certain tasks related to data processing and are obliged to comply with the legislation on data processing and personal data protection (so-called data processors). Data processors to whom we disclose personal data include:
- Marketing service providers
- Email service providers
- SMS service providers
- Programming solution providers
- Delivery services
Data processors may only process personal data within the scope of our instructions and may not process personal data for private purposes. They, along with their employees, are committed to maintaining the confidentiality of your personal data.
Data processors do not transfer personal data to third countries (outside the European Economic Area, which includes EU Member States, Iceland, Norway, and Liechtenstein).
Your Rights Regarding Personal Data, How to Withdraw Consent, and Consequences of Withdrawal
Regarding your personal data, you have the following rights:
- To request at any time:
- Confirmation of whether we are processing your personal data.
- Access to personal data and the following information: purposes of processing, types of personal data, recipients or categories of recipients to whom personal data have been or will be disclosed, especially recipients in third countries or international organizations, the envisaged period of personal data storage, or, if not possible, the criteria used to determine that period; the existence of automated decision-making, including profiling and the meaning and consequences of such processing for you.
- One (free) copy of personal data in a format of your choice (if the request is made by electronic means of communication and unless otherwise requested, the copy will be provided in electronic form); for additional copies you request, we may charge a reasonable fee based on administrative costs.
- Correction of inaccurate personal data.
- Restriction of processing when:
- You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data.
- Processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead.
- We no longer need the personal data for the purpose of processing, but you require them for the purpose of establishing, exercising, or defending legal claims.
- Erasure of all personal data (the right to be forgotten), if the conditions of Article 17 of the General Data Protection Regulation are met, especially if you withdraw your consent for personal data processing.
- Personal data transfer in a structured, commonly used, and machine-readable format, with the right to transmit those data to another controller without hindrance from us.
- Objection to our processing of personal data for direct marketing, including profiling.
- To not be subject to a decision based solely on automated processing, including profiling if the conditions of Article 22 of the General Data Protection Regulation are met.
Procedure for Asserting Rights
You can address your requests regarding the assertion of rights regarding personal data in writing to any contact listed at the top of this document under Controller of Personal Data and Contact Information.
For reliable identification when exercising rights regarding personal data, we may request additional information from you, and we can only reject your request if we can prove that we cannot reliably identify you.
Upon your request to assert your rights regarding personal data, we will respond without undue delay and at the latest within one month of receiving your request.
Any changes to our personal data protection policy will be posted on this website.
Date: 01.10.2023
DISCLAIMER:
Pantaya products are not intended to diagnose, treat, or prevent any diseases. The information on these pages is for educational purposes and does not replace veterinary consultation or care for animals. Consultation with a veterinarian is required before use. By continuing to use our website, you agree to our TERMS OF SERVICE and DATA PROTECTION POLICY.