Privacy


Dear zooplus customers, dear visitors to the zooplus website, protecting your personal data is very important to us. The following information explains which data we collect and process in connection with your use of our website.

1. Who is responsible for data protection on this website?

zooplus SE (hereafter: zooplus), Herzog-Wilhelm-Strasse 18, D-80331 Munich, Germany is responsible for the processing of personal data on this website. Further information can be found here.

You can get in touch with our Data Protection Officer, Dr Philipp Herrmann, through our Privacy Portal:

- I have a zooplus customer account

- I do not have a zooplus customer account

2. Which data is processed on our website?

When you visit the zooplus website your web browser sends various data to our servers. This serves only to optimise the technology, configuration and stability of our website as well as the system security. We gather log file data, including IP addresses.

3. Do we use cookies on the website?

Yes, various cookies are used on our website. Detailed information on how they work, how you can delete these cookies or how you can prevent them from being stored can be found in the data protection information and in the Preference Centre.

4. Do we use web analytics tools on our website?

Yes, we work with various providers to design and optimise our website and our offers in line with our requirements. Detailed information about these service providers, how the analysis tools work and how you can switch off these tools can be found in the Preference Centre.

5. Is there user-targeted advertising?

Yes, we work with service providers who can display user and interest-related advertising for us or our advertising partners, with the help of cookies and advertising IDs. Detailed information about these service providers, how the advertising tools work and how you can switch them off can also be found in the Preference Centre.

6. Do we pass your data on to third parties?

No. We do not pass on your data to unauthorised third parties. Furthermore, we guarantee to have the necessary contractual agreements with all external providers.

7. Who do I contact if I have a query?

If you have any questions about data protection, please contact zooplus Customer Services or our Data Protection Officer. We look forward to receiving your queries through our Privacy Portal:

- I have a zooplus customer account

- I do not have a zooplus customer account

8. How to withdraw consent or object to processing under GDPR Article 6 (1) (f)

Here is a brief overview of your options. You can find more information in our privacy policy.

a. Cookies, custom audiences and similar technologies – go to the Preference Centre in our app or website. We cannot manage your preferences as they are device specific.

b. Push notifications (app only) - depending on your mobile device, you can change your settings directly in the app or in your system settings. We cannot manage your settings as they are device-specific settings.

c. Email - you can click on the unsubscribe link in an email at any time to withdraw or opt-out. If you have an account with us, you can also change your newsletter preferences in your account. If you only wish to receive emails regarding your orders and your zooplus account, you can contact us at zooplus Customer Services at any time.

d. Postal mail- if you do not wish to receive postal advertising, you can contact us at zooplus Customer Services at any time.

Other - If you wish to withdraw other consent, delete your data or object to processing, you can contact us at zooplus Customer Services at any time or visit our Privacy Portal:

- I have a zooplus customer account

- I do not have a zooplus customer account

Data Protection Information

1. Scope and Definition

1.1 This Privacy Statement includes information referred to in the General Data Protection Regulation (GDPR) Article 13 about data processing in the context of visiting our website and using the shop accessible via this website.

1.2 Information on the type and purpose of data processing in connection with the use of our contact functions on the website (customer care), our community services, the job application platform and our social media presence can be found separately in the corresponding portal or when using the respective application.

1.3 In as much as we link to other pages, we have neither influence nor control over the linked content nor the respective data protection regulations. We recommend that you check the privacy policies on the linked web pages to determine whether and to what extent personal data is collected, processed, used and made accessible to third parties.

1.4 The full text of the General Data Protection Regulation (GDPR) along with further definitions and terms can be found here.

2. Location of Data Storage

2.1 All personal data that we collect and process via the website and our shop is stored and secured both on local servers in Germany and at Amazon Web Services EMEA SARL (AWS), a specialised cloud provider. Due to its technical and organisation measures, AWS is able to guarantee the greatest possible protection of your customer and user data against loss and unauthorised access. Should it be necessary within this context to transfer your data outside the EU/EEA, it will only be done on the basis of a valid adequacy decision or concluded standard contractual clauses.

2.2 The purpose of this data processing is the hosting of our web servers and databases as well as the data protection (backup) on the basis of corresponding order processing contracts.

3. Common Data Processing

3.1 zooplus has many branches and subsidiaries in Europe. zooplus SE, headquartered in Munich, Germany is solely responsible for data protection as well as complying and guaranteeing the technical and organisational measures necessary to protect your personal data.

3.2 In order to ensure group-wide process control and customer service, the data will also be made available to other branches and subsidiaries, whereby this will done based on the corresponding contract for order process (GDPR Article 28) and these companies are obliged to process the personal data only in accordance with the instructions and under the responsibility of zooplus. These companies do not store this data locally. 

3.3 zooplus also processes data in so-called joint responsibility with bitiba GmbH. The basis for this is a comprehensive contact in accordance with GDPR Article 26, which regulates the respective accountabilities and responsibilities of the two companies. Further details may be obtained from zooplus Customer Services or from our Data Protection Officer.

4. General IT Services

We work together with various IT service providers who maintain our IT infrastructure and continually develop it further (in terms of security). If and insofar as these service providers have access to personal data in the course of these activities, this is always done under the supervision of zooplus and it is guaranteed that no personal data is stored outside of zooplus. Should it be necessary to transfer your data outside the EU/EEA in this context, this will only be done on the basis of a valid adequacy decision or concluded standard contractual clauses.

Legal basis: GDPR Article 6, (1) (f).

5. Data processing in the exercise of data subject’s rights

Should you choose to exercise your data protection rights, we will process your data separately from other processing activities in order to process and fulfil your request.

For the purpose of identity verification, we need your first and last name, address, email address and your order data.

For the purpose of fulfilment: In order to process your verified request, we will need to process the data relating to you that is included in the request.

Legal basis: GDPR Article 6, (1) (c).

We will transfer the above-mentioned data to our technology service provider Onetrust Technology Limited based on a corresponding contract for commissioned processing (GDPR Article 28).

Should it be necessary within this context to transfer your data outside the EU/EEA, it will only be done on the basis of a valid adequacy decision or concluded standard contractual clauses.

Regardless of any existing customer or order data, we will store any data related to your request separately for the purpose of fulfilling your rights as the data subject, and to ensure documentation and verification obligations (GDPR Article 5 (2)). The storage period is dependent on the relevant legal requirements.