Privacy Policy

Last updated: 28 November 2020
This privacy policy sets out how The Breed Archive uses and protects any information that you give us when you use this website. We are committed to ensuring that your privacy is protected. You can be assured that we will use your personal data solely in accordance with the applicable legal regulations and this privacy statement.

Data processing activities and data controllers

The data processing activities consist of providing information about breeding animals, and their breeders and owners.

Data controller
TBA - The Breed Archive OG
Kegelgasse 30/17, 1030 Wien
e-mail: contact@breedarchive.com

Purpose of and legal basis for data processing

Contract fulfilment or contract preparation

As the processing of your data is a prerequisite for fulfilling a concluded contract, we may and must process your data. The use of The Breed Archive as an unregistered visitor is subject to our terms of use; a voluntary registration results in a registration relationship.

The purpose of the data processing is to ensure the retrievability of information and to provide communication channels for disseminating content and servicing customers.

Legitimate interest

The Breed Archive (formerly The Whippet Archive) is an online pedigree database, available since 2006. Users worldwide provide and maintain the content for it. There is a public interest in the content of the archive within the meaning of the GDPR Art 5 para 1 sub-para b.

Other legitimate interests include: the operational safety and data security of our services; the distribution of information by The Breed Archive; the measurement and analysis of user behaviour for the purpose of improving our services; the freedom of expression and information; and the placement of our own or third-party advertising, which make it possible for us to maintain many aspects of the service.

Freedom of communication

The primary purpose of the data processing is to provide information to users on breeding animals, and their breeders and owners, in the form of a publicly accessible archive.

The right to process the data is derived from the legal principles of the freedom of the press, opinion, and communication.

Consent

We explicitly ask for your consent to use your data for individual services (e.g. for newsletters) for which there is no direct legal basis for processing. You can revoke this consent at any time with effect.

Processed information

Information posted by registered users

  • name
  • user-name
  • e-mail address
  • address
  • display name
  • profile picture
  • password (encrypted)
  • agreement to our terms of use and our rules and guidelines
  • website
  • description
  • profile settings
  • notification settings for e-mails
  • link to person entry

Additional data collected by The Breed Archive on registered users

  • information on account usage (e.g., creation date, number of logins, date of last login)
  • information about the subscription status (e.g., expiration of the subscription, start and end dates of previous subscriptions, the payment methods used, amounts paid)
  • information on changes to archive entries (additions/modifications on person and animal entries, uploaded photos – with date and details of changes)
  • content of user messages
  • content of issues reported by users
  • information about personal links to entries (e.g., animals marked as favourites, private entries and notes that are not visible to other users)

Data collected by registered users on breeders and owners

  • name
  • kennel
  • city, province or state, country of the kennel
  • website
  • notes

Data collected by The Breed Archive without attribution to users

  • IP addresses (log files)
  • data about the device
  • used browser
  • used device

Storage location and data recipients

All data collected and managed by The Breed Archive is stored in ISO-certified data centres within the European Union.

External data recipients and transfer to third countries:
The following external data recipients, in their capacity as contracted processors of the data, receive access to electronic identification data:

  • Google, Inc. (USA): access to the anonymized IP address by Google Analytics to analyze the use of this website
  • Hetzner Online GmbH (Germany): access to the IP address as the host provider
  • ZOHO Corporation (USA): access to e-mail addresses for incoming and outgoing mail as the mail provider

We reserve the right to use additional contracted processors of our data, and will inform users of any changes in this privacy policy that occur as a consequence.

Storage period

Unregistered users: Personal data (in particular IP address data) on website visitors is kept for IT security purposes for seven days and then deleted.

Registered users: Data on registered users is processed and kept for as long as the user remains a registered user. Our right to use your data expires upon deletion of the account or automatically after 60 months of inactivity. Deletion of the account leads to an immediate deletion of all personal data. The freely selectable display name will, however, remain active for archival purposes, notably for tracking the change history of entries.

Your rights

Under the data protection law, you as the data subject have the following rights:
Right of access: You have the right to request information from us about whether and to what extent your personal data is being processed.

Right to rectification: You have the right to request the rectification of incorrect personal data or its completion.

Right to erasure: You have the right to demand that your personal data be deleted immediately, provided that the legal requirements for deletion exist.

Right to restriction of processing: You have the right to request the restriction of processing. In this case, the data must remain stored, but may no longer be used otherwise.

Right to data portability: You have the right to receive your personal data in a structured, common and machine-readable format.

Right to object: You have the right to object to the processing of your personal data on the basis of an overriding legitimate interest.

Right to complain: You have the right to complain to the supervisory authority if you believe that the processing of your personal data violates the GDPR. In Austria, this is the data protection authority.