Privacy Policy

Date of last update: 21.08.2025

1. Introduction

The protection of your personal data is important to us. In this privacy policy, we inform you about the nature, scope and purposes of processing personal data.

This privacy policy applies to the website canicomplete.de and all associated services.

2. Responsible party

CaniComplete Matalino e.U.

Paul Zipperer

Säulengasse 26/11

1090 Wien, Austria

E-Mail: info@canicomplete.com

3. Data collection

We only collect personal data if you provide it voluntarily or if it is technically necessary.

The collection is for various purposes and includes the following categories:

The following data types are collected:

Personal information (name, address, email, phone)
Technical data (IP address, browser, operating system)
Usage data (visited pages, duration of stay)
Communication data (email traffic, inquiries)

4. Legal basis

The processing of your personal data is based on the following legal bases:

Art. 6 para. 1 lit. b GDPR - Contract fulfillment
Art. 6 para. 1 lit. f GDPR - Legitimate interests
Art. 6 para. 1 lit. a GDPR - Consent
Art. 6 para. 1 lit. c GDPR - Legal obligation

5. Data processing

Your data is used exclusively for fulfilling the contractual relationship and processing your inquiries.

Transfer to third parties only takes place insofar as this is necessary for contract fulfillment or you have expressly consented.

6. Cookies

Our website uses cookies to provide you with the best possible user experience.

You can adjust your cookie settings at any time in our cookie banner.

Technically necessary cookies cannot be deactivated as they are required for the function of the website.

7. Your rights

You have the following rights regarding your personal data:

Right to information about your stored data
Right to rectification of incorrect data
Right to deletion of your data
Right to restriction of processing
Right to data portability
Right to object to processing
Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

For Austria: Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Austria, Email: dsb@dsb.gv.at

8. Storage period

Your data will only be stored as long as necessary for the respective purposes.

Statutory retention periods remain unaffected.

8.1 Specific retention periods

Order data: 10 years (tax and legal retention obligations per § 132 BAO)
Account data: Until account deletion plus 30 days
Analytics data: 26 months or until consent is withdrawn
Marketing data: Until consent is withdrawn

9. Third parties and processors

We use various third-party services to provide our website and services.

These providers only process data on our behalf and according to our instructions.

9.1 Processors (Art. 28 GDPR)

We work with the following processors:

WooCommerce (Autobi Pty Ltd) – E-commerce platform, order processing, customer account management. Location: Australia (EU adequacy decision). Privacy Policy
Stripe (Stripe, Inc.) – Payment processing, fraud prevention. Location: USA (Standard Contractual Clauses). Privacy Policy
PayPal (PayPal Europe) – Alternative payment processing. Location: Luxembourg (EU). Privacy Policy
Google Analytics (Google LLC) – Website analytics, traffic measurement. Location: USA (Standard Contractual Clauses). Privacy Policy
Amazon Web Services (Amazon.com, Inc.) – Cloud infrastructure, image/CDN hosting. Location: USA (Standard Contractual Clauses). Privacy Policy
Supabase (Supabase, Inc.) – Database, authentication, real-time features. Location: USA (Standard Contractual Clauses). Privacy Policy
Deutsche Post / DHL – Shipping and delivery. Location: Germany (EU). Privacy Policy
Amazon Multi-Channel Fulfillment (MCF) – Auftragsabwicklung und Versandlogistik (Amazon.com, Inc., USA, EU-US Data Privacy Framework)
Vercel Inc. – Website-Hosting und Content Delivery (Vercel Inc., USA, EU-US Data Privacy Framework)

Delete Account (GDPR Art. 17)

You have the right to request the deletion of your account and all associated personal data at any time (right to erasure under GDPR Art. 17).

Order records are retained anonymously for 7 years under Austrian commercial law (UGB §212) and cannot be fully deleted. All other personal data (name, email, address, profile information) will be permanently erased.

Request account deletion

8. Children and Young People

Our services are intended exclusively for persons who have reached the age of 16. We do not knowingly collect personal data from children under 16. If parents or guardians become aware that their child has submitted personal data without consent, please contact us immediately at datenschutz@canicomplete.com. Persons under 16 require verifiable parental consent pursuant to GDPR Art. 8.

10. Contact

If you have any questions about data protection, you can contact us at any time: