Personal Data Processing Policy
This policy describes what personal data we process on the PEDIA.dog website, for what purpose, on what legal basis, and what rights you have in connection with the processing under the GDPR (EU Regulation 2016/679).
1. Data controller
The data controller is Alena Konaříková, company ID (IČO) 73879631, with registered office at Hovězí 755, 756 01 Hovězí, Česká republika. Contact: info@pedia.dog.
Given the scope of processing, the controller is not required to appoint a data protection officer (DPO).
2. What data we process
We only process data that you voluntarily provide to us:
- Registration data: name, e-mail address, role (prospective buyer / breeder). We do not store passwords — sign-in uses a one-time code or social login.
- Kennel and dog data: kennel name and description, photographs, location, dog details (name, breed, date of birth, microchip, health tests, pedigree).
- Usage data: internal messages between users, reviews, favourites, sign-in logs and cookies.
- Social login: when using Google / Facebook / Apple, we receive basic identification data (name, e-mail, identifier) needed to create your account.
We do not process special categories of data (biometric or health data about persons) or data about minors.
Feedback
When you submit feedback via the website form, we process the text of your message, any attached images, the address of the page the form was sent from, the language, screen resolution and browser type; for signed-in users also the account e-mail, for guests only an e-mail they voluntarily provide to receive a reply. We do not store IP addresses. Resolved reports are deleted, including attachments, after 24 months.
3. Purposes of processing
We process data in order to provide the service, verify users and kennels, enable communication between users, comply with legal obligations and protect rights and security. We do not sell data and do not use it for profiling for targeted advertising.
4. Legal basis for processing
Processing is based on the performance of a contract (providing the service), compliance with legal obligations, the controller’s legitimate interest (security and development of the service) and consent (e.g. for optional cookies). You may withdraw your consent at any time.
5. E-mail notifications and news
As part of the service we send you operational e-mail notifications (e.g. about a new message, a pedigree request or kennel verification) — these are necessary for providing the service and are based on the performance of the contract. We may also occasionally send news and tips from PEDIA.dog about our service to the e-mail address provided at registration; we do so on the basis of the controller’s legitimate interest in accordance with Section 7(3) of Czech Act No. 480/2004 Coll., on certain information society services.
You can turn off individual types of notifications and news at any time in your account settings (Notifications section), and you can also unsubscribe from news directly from each such e-mail. Turning off news does not affect operational notifications necessary for the functioning of the service.
6. Retention period
- Active account: for as long as it exists.
- Deleted account: personal data is anonymised or deleted within 30 days.
- Accounting and tax documents: for the statutory period.
- Sign-in logs: generally up to 12 months.
- Records of consent given: for the time necessary to demonstrate consent.
7. Recipients and processors
Data may be accessed, to the extent necessary, by technical service providers who process data for us under a contract pursuant to Art. 28 GDPR — in particular the server hosting provider, the e-mail delivery service and the Stripe payment gateway (processing of breeder subscription payments). We only disclose data to public authorities where required by law.
8. Address autocomplete
When entering the kennel location, we use an address autocomplete service based on OpenStreetMap data (Photon). Only the address text you type is sent to this service’s server in order to suggest matching places. This is the kennel’s publicly displayed address.
Postcodes and municipality names are filled in from our own list based on freely available data from Czech Post (list of postcodes of municipal districts) and the GeoNames database (licensed under CC BY 4.0). No data is sent anywhere when they are filled in.
9. Transfers to third countries
We process data primarily within the European Union. Should any processor transfer data outside the EU, the transfer will be protected by appropriate safeguards (in particular EU standard contractual clauses).
10. Your rights
In connection with the processing of personal data, you have the right to: access your data, rectification, erasure, restriction of processing, data portability, objection to processing, withdrawal of consent and lodging a complaint with the supervisory authority. We generally handle requests within 30 days.
11. Data security
We protect data with encrypted transmission (HTTPS), restricted data access, backups and ongoing security updates. We generally do not store user passwords, as sign-in uses a one-time code or a verified social login provider. In the event of a security breach posing a risk to your rights, we will inform you in accordance with the GDPR.
12. Cookies
Details about cookies and the option to manage your consent can be found in the Cookie Policy document.
13. Contact and complaints
For questions about the processing of personal data, please contact info@pedia.dog.
The supervisory authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz, with which you have the right to lodge a complaint.