Data controller
The controller of your personal data is DIGONE Sp. z o.o., registered office in Łódź, Poland (ul. Ogrodowa 8, 91-062 Łódź), KRS 0000942377, NIP 7292741970 — the entity operating the Holopet service (holopet.eu).
For data-protection matters, contact us: kontakt@holopet.eu.
What data we process
- Account data
- Email address, password (encrypted), first name (optional), settings and preferences.
- Pet data
- Species, breed, age, weight, condition and — if you provide them — the animal's allergies and health conditions.
- Activity data
- Scanned products, favourites, weight history, journal.
- Payment data
- Subscription scope and status. We do not store card data — it is handled by the payment operator.
- Technical data
- IP address, device type, logs and cookies (see the cookie policy).
Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the service (account, personalisation) | Art. 6(1)(b) — performance of a contract |
| Payment and subscription handling | Art. 6(1)(b) and (c) — legal obligation |
| Accounting and settlements | Art. 6(1)(c) — legal obligation |
| Security, abuse prevention | Art. 6(1)(f) — legitimate interest |
| Marketing (with your consent) | Art. 6(1)(a) — consent |
Pet health data
Allergies and conditions concern the animal, not a natural person — they are not special-category data under Art. 9 GDPR. We nonetheless treat them with extra care: we do not share them with third parties for marketing and do not use them for advertising profiling.
Data recipients
Data may be entrusted to trusted processors acting on our behalf, only to the extent necessary:
- Payment operator — Przelewy24 (PayPro S.A.) — to handle payments and subscriptions,
- Hosting and infrastructure provider — to run the service,
- Tooling providers — transactional email and analytics (as described in the cookie policy).
Retention
- Account data — until the account is deleted,
- Billing data — for the period required by tax law (generally 5 years),
- Data processed on the basis of consent — until consent is withdrawn.
Your rights
You have the right to:
- access your data and receive a copy,
- rectification and completion,
- erasure ("right to be forgotten"),
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time (without affecting prior processing).
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Transfers outside the EEA
If any provider processes data outside the European Economic Area, this occurs only under mechanisms ensuring an adequate level of protection (e.g. the European Commission's standard contractual clauses).
Data contact
Questions, exercising rights, requests.