DEENESITFR
Visit the online shop
Data Protection

Privacy Policy

Name and contact details of the data controller in accordance with Article 4(7) of the GDPR

Company: fauna topics Zoobedarf, Zucht- und Handels GmbH
Address: Backnanger Straße 58, 71672 Marbach am Neckar OT Rielingshausen
Telephone: +49 7144 / 700 1400
Fax: +49 7144 / 700 1401
Email: info@faunatopics.de

Security and protection of your personal data

We regard it as our primary responsibility to safeguard the confidentiality of the personal data you provide and to protect it from unauthorised access. We therefore exercise the utmost care and apply state-of-the-art security standards to ensure the highest level of protection for your personal data.

As a company governed by private law, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the provisions of the Federal Data Protection Act (BDSG). We have implemented technical and organisational measures to ensure that data protection regulations are observed both by us and by our external service providers.

Definitions

The law requires that personal data be processed lawfully, fairly and in a manner that is transparent to the data subject (“lawfulness, fairness and transparency”). To ensure this, we set out below the individual legal definitions, which are also used in this privacy policy:

1. Personal data

„Personal data“ means any information relating to an identified or identifiable natural person (hereinafter referred to as the „data subject“); a natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. Processing

„Processing“ means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of making available, the matching or linking, the restriction, erasure or destruction.

3. Restriction of processing

„Restriction of processing“ means the marking of stored personal data with the aim of restricting its future processing.

4. Profiling

„Profiling“ means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

5. Pseudonymisation

„Pseudonymisation“ means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person.

6. File system

„File system“ means any structured collection of personal data which is accessible according to specific criteria, regardless of whether that collection is organised centrally, decentrally or according to functional or geographical criteria.

7. Data controller

„Controller“ means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States.

8. Data processors

„Data processor“ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

9. Recipient

‘Recipient’ means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, irrespective of whether or not they are a third party. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union law or the law of the Member States shall not be regarded as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in line with the purposes of the processing.

10. Third party

‘Third party’ means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

11. Consent

‘Consent’ on the part of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by a statement or by a clear affirmative action, by which the data subject indicates that they agree to the processing of their personal data.

Lawfulness of processing

The processing of personal data is lawful only if there is a legal basis for such processing. In accordance with Article 6(1)(a) to (f) of the GDPR, the legal basis for processing may include, in particular:

  • a. The data subject has given their consent to the processing of their personal data for one or more specific purposes;
  • b. processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the data subject’s request;
  • c. the processing is necessary for compliance with a legal obligation to which the controller is subject;
  • d. the processing is necessary to protect the vital interests of the data subject or of another natural person;
  • e. the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • f. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

Information on the collection of personal data

(1) Below, we provide information on the collection of personal data when you use our website. Personal data includes, for example, your name, address, email addresses and user behaviour.

(2) If you contact us by email, we will store the data you provide (your email address and, where applicable, your name and telephone number) in order to answer your enquiries. We will delete the data collected in this context once it is no longer necessary to store it, or restrict its processing where statutory retention obligations apply.

(3) If you use our contact form, the information set out in the ‘Contact Form’ section applies.

Collection of personal data when visiting our website

When you use the website purely for information purposes – that is, if you do not register or otherwise provide us with any information – we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Article 6(1), first sentence, point (f) of the GDPR):

  • IP address
  • Date and time of the enquiry
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • the amount of data transferred in each instance
  • Website from which the request originates
  • Browser
  • Operating system and its user interface
  • Language and version of the browser software

Hosting

Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. STRATO processes, on our behalf, the data generated when the website is accessed, on servers in Germany. We have a data processing agreement with STRATO in accordance with Article 28 of the GDPR. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest lies in the secure and reliable provision of the website.

Server log files

When you visit our website, the server automatically stores the access data mentioned above in log files. STRATO anonymises the IP address in the process. The log files are used for security and troubleshooting purposes and are deleted after six weeks. The legal basis for this is Article 6(1)(f) of the GDPR.

Contact form

If you send us an enquiry via the contact form, we will process your details (name, company, email address, telephone number, customer type, estimated weekly spend and your message) in order to respond to your enquiry. The details are sent by email to info@faunatopics.de and are not stored in the website database. Mandatory fields are name, email address, telephone number and message.

The legal basis is Article 6(1)(b) of the GDPR, insofar as your enquiry relates to a contract; otherwise, it is Article 6(1)(f) of the GDPR. We will delete the data as soon as your enquiry has been fully processed and provided there are no statutory retention obligations to the contrary.

Fonts

We use the ‘Open Sans’ font. It is hosted locally on our server. When you visit the website, no connection is established with servers belonging to Google or other providers.

WordPress content management system

Our website runs on the WordPress content management system on our web hosting space with STRATO. External content such as emojis, videos or maps is not loaded from third-party providers.

Links to Facebook and the online shop

On our website, we provide links to our Facebook page and our online shop, faunatopics.eu. These are simple links. Data is only transferred once you click on a link. Thereafter, the privacy policy of the respective provider applies.

Use of cookies

Our website does not set any cookies for visitors. Cookies are only created when editors log in to the admin area, where they are technically necessary.

Further features and services on our website

(1) In addition to the purely informational use of our website, we offer various services which you may use if you are interested. To do so, you will generally need to provide further personal data, which we use to provide the relevant service and to which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us; they are bound by our instructions and are regularly monitored.

(3) Where our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the implications of this in the description of the service.

Children

Our services are generally intended for adults. Persons under the age of 18 should not provide us with any personal data without the consent of their parents or legal guardians.

Rights of the data subject

(1) Withdrawal of consent

Where the processing of personal data is based on consent, you have the right to withdraw that consent at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of that consent prior to its withdrawal.

You may contact us at any time to exercise your right of withdrawal.

(2) Right to confirmation

You have the right to request confirmation from the data controller as to whether we are processing personal data relating to you. You may request such confirmation at any time using the contact details provided above.

(3) Right of access

Where personal data is processed, you may at any time request access to this personal data and to the following information:

  • a. the purposes of the processing;
  • b. the categories of personal data being processed;
  • c. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular where recipients are in third countries or are international organisations;
  • d. where possible, the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period;
  • e. the existence of a right to have personal data concerning you rectified or erased, or to have the processing restricted by the controller, or a right to object to such processing;
  • f. the existence of a right to lodge a complaint with a supervisory authority;
  • g. where the personal data are not collected from the data subject, any available information as to the origin of the data;
  • h. the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR and – at least in such cases – meaningful information about the logic involved, as well as the scope and intended consequences of such processing for the data subject.

Where personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards in accordance with Article 46 of the GDPR in relation to the transfer. We will provide a copy of the personal data being processed. For any further copies you request, we may charge a reasonable fee based on the administrative costs involved. If you submit your request electronically, the information must be provided in a commonly used electronic format, unless you specify otherwise. The right to receive a copy in accordance with paragraph 3 must not adversely affect the rights and freedoms of others.

(4) Right to rectification

You have the right to request that we rectify any inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed – including by means of a supplementary statement.

(5) Right to erasure (‘right to be forgotten’)

You have the right to request that the data controller erases personal data relating to you without delay, and we are obliged to erase personal data without delay if any of the following grounds apply:

  • a. The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • b. The data subject withdraws their consent on which the processing was based in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
  • c. The data subject objects to the processing in accordance with Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in accordance with Article 21(2) of the GDPR.
  • d. The personal data was processed unlawfully.
  • e. The erasure of personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
  • f. The personal data was collected in connection with information society services offered in accordance with Article 8(1) of the GDPR.

Where the controller has made the personal data public and is obliged to erase it in accordance with paragraph 1, the controller shall, taking into account the state of the art and the cost of implementation, take reasonable measures, including technical measures, to inform controllers who are processing the personal data that a data subject has requested the erasure of all links to that personal data, or of copies or replicas of that personal data.

The right to erasure (‘right to be forgotten’) does not apply where the processing is necessary:

  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • on grounds of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes in accordance with Article 89(1) of the GDPR, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of such processing, or
  • to assert, exercise or defend legal claims.

(6) Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if any of the following conditions apply:

  • a. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
  • b. the processing is unlawful and the data subject objects to the erasure of the personal data and instead requests that the use of the personal data be restricted;
  • c. the controller no longer requires the personal data for the purposes of the processing, but the data subject requires it for the establishment, exercise or defence of legal claims, or
  • d. the data subject has objected to the processing in accordance with Article 21(1) of the GDPR, until it has been established whether the controller’s legitimate grounds override those of the data subject.

Where processing has been restricted in accordance with the above conditions, such personal data – apart from its storage – shall be processed only with the data subject’s consent, or for the purpose of establishing, exercising or defending legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.

To exercise the right to restrict processing, the data subject may contact us at any time using the contact details provided above.

(7) Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller without hindrance from the controller to whom the personal data was provided, provided that:

  • a. the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a), or on a contract pursuant to Article 6(1)(b) of the GDPR, and
  • b. the processing is carried out using automated means.

When exercising the right to data portability in accordance with paragraph 1, you have the right to have your personal data transferred directly from one controller to another, in so far as this is technically feasible. Exercising the right to data portability does not affect the right to erasure (‘right to be forgotten’). This right does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(8) Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. The controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for the purposes of direct marketing, your personal data will no longer be processed for those purposes.

In connection with the use of information society services, you may, notwithstanding Directive 2002/58/EC, exercise your right to object by means of automated procedures using technical specifications.

You have the right to object, on grounds relating to your particular situation, to the processing of your personal data carried out for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1), unless the processing is necessary for the performance of a task carried out in the public interest.

You may exercise your right to object at any time by contacting the relevant data controller.

(9) Automated decisions in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

  • a. is necessary for the conclusion or performance of a contract between the data subject and the data controller,
  • b. is permitted under Union or Member State legislation to which the controller is subject, and that legislation provides for appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject; or
  • c. is carried out with the data subject’s explicit consent.

The controller shall take appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, including, at a minimum, the right to have a person appointed by the controller intervene, to put forward their own point of view and to challenge the decision.

The data subject may exercise this right at any time by contacting the relevant data controller.

(10) Right to lodge a complaint with a supervisory authority

Furthermore, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place where the alleged infringement occurred, if you consider that the processing of your personal data infringes this Regulation.

(11) Right to an effective judicial remedy

Without prejudice to any available administrative or out-of-court remedy, including the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR, you have the right to an effective judicial remedy if you consider that your rights under this Regulation have been infringed as a result of the processing of your personal data in a manner that is not in accordance with this Regulation.

Images from external websites

© Can Stock Photo / focalpoint (Bildnummern)

As at October 2026