This privacy policy, pursuant to Art. 13 of EU Regulation 2016/679 of April 27, 2016 (hereinafter, the "Regulation", or the "Applicable Legislation"), is issued to the users (hereinafter, the "Data Subjects") of the mobile application "Veterly" ("Veterly"), also available in a desktop version at www.veterly.com, who, upon registration, request to subscribe to the software platform developed by Bake One S.r.l., with registered office in Milan, via Carlo Farini n. 5, tax code, VAT number, and registration number with the Register of Companies of Milan Monza Brianza Lodi 11745420965, which is a Software as a Service operating in the cloud (the "Platform"). This Platform operates without the need for installation on PCs or other devices and utilizes artificial intelligence to organize the relationship between the veterinarian (the "Veterinarian") and the owners of the pets under their care (the "Pet Owners"), allowing the Veterinarian to simplify and increase the efficiency of the relationship with Pet Owners, including the possibility of offering certain services directly online.
"Processing of personal data" means any operation concerning any information relating to an identified or identifiable natural person. For example: name, surname, and email address with a "username" that can identify a specific subject (e.g., andreabianchi@....) are considered "common personal data," and the act of collecting, recording, and using them to send a communication are considered "processing" operations, as are storage and sharing with other subjects. Information relating to a person's health status represents personal data belonging to a special category, which requires specific protection. We invite you to visit the website of the Italian Data Protection Authority ("GPDP") for further useful information to better understand the topic (www.garanteprivacy.it).
1. Data Controller
Bake One S.r.l., with registered office in Milan, via Carlo Farini n. 5, tax code, VAT number, and registration number with the Register of Companies of Milan Monza Brianza Lodi 11745420965 (hereinafter the "Controller") shall operate as an independent Data Controller for the management of data relating to registration on the Platform.
2. Personal Data Subject to Processing
Through the Platform, the Controller processes the following personal data collected directly from the Data Subject:
Common personal data: name, surname, date of birth, tax code, VAT number, residential/domicile address, postal code, gender, educational qualification, profession, email address, telephone number, and data/images of their pet.
The data are collected directly from the Data Subject during registration on the Platform.
3. Purpose of Processing
Your personal data will be processed lawfully by the Controller pursuant to Art. 6 of the Regulation for the following processing purposes:
Contractual obligations and provision of services: to allow you to register on the Platform, interact with it, and use the related services;
Administrative-accounting purposes: to carry out activities of an organizational, administrative, financial, and accounting nature, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations;
Legal obligations: to comply with obligations provided for by law, an authority, a regulation, or European legislation.
The provision of personal data for the processing purposes indicated above is optional but necessary, as failure to provide them will make it impossible for the Controller to provide the services available through the Platform.
4. Further Processing Purposes: Marketing
With your free and optional consent, some of your personal data (name, surname, email address, telephone contact, residential/domicile address) may also be processed by the Controller for marketing purposes (sending advertising material and/or newsletters, direct sales, and commercial communication). This allows the Controller to contact you via mail, email, telephone (landline and/or mobile, with automated calling or communication systems with and/or without the intervention of an operator) and/or SMS and/or MMS and/or mobile push notifications (if you have downloaded and activated the "Veterly" app) to propose products and/or services offered by the Controller and/or third parties, and to present offers, promotions, and commercial opportunities.
The legal basis for this processing is your explicit consent. Failure to provide consent will not affect your ability to use the Platform services. If consent is given, you may revoke it at any time by making a request to the Controller as indicated in paragraph 8. You may also easily object to further promotional emails by clicking the "unsubscribe" link in each email. For technical reasons, you may receive further messages within 24 hours of exercising your right to object; if this persists after 24 hours, please report the issue to the Controller.
5. Further Processing Purposes: Communication of Data to Third-Party Partners
With your free and optional consent, the Controller may communicate some of your personal data to the following categories of third-party companies (collectively, "Third-Party Companies" or "Controller Partners"):
Food/Pet Food
Breeding
Insurance
Pharmaceutical companies
Pharmacies
Equipment/Plant engineering
Accessories
Veterinarians
Animal Husbandry
Transport
Trade/Commerce
Software development
These Partners, acting as independent Data Controllers, will process your personal data for their own marketing purposes. Once the data is transferred, the Partner is responsible for providing you with all information required by Art. 14 of the Regulation. Failure to consent will not affect your registration or use of the Platform. If you wish to stop receiving communications from Partners to whom data has already been sent, you must contact those Partners directly.
6. Processing Methods and Data Retention Period
The Controller will process your personal data using electronic, automated, and/or paper tools, with logic strictly related to the purposes themselves and in a way that guarantees security and confidentiality.
Data for contractual purposes (Para 3) will be kept for the time necessary to fulfill those purposes and as required by legal retention obligations.
Data for marketing purposes (Para 4 & 5) will be kept for the time necessary to fulfill those purposes, and in any case for 24 months from the date of collection.
7. Scope of Communication and Dissemination of Data
Your personal data may be shared with:
Employees and/or collaborators of the Controller tasked with providing Platform services, who are bound by confidentiality.
Third parties processing data on behalf of the Controller as "External Data Processors" (e.g., hosting providers, technical maintenance services, banking, accounting, and tax consultants). You have the right to obtain a list of appointed Data Processors upon request. Your personal data will not be transferred outside the European Union.
8. Rights of the Data Subjects
You may exercise your rights by contacting the Controller:
By registered mail with return receipt to: Bake One S.r.l., via Carlo Farini n. 5, 20154 Milan;
By email to: info@veterly.com;
By Certified Email (PEC) to: bakeone@legalmail.it.
You have the right to obtain:
Information on the origin, purposes, and methods of processing.
Access, updating, rectification, or integration of data.
Erasure (Right to be Forgotten), transformation into anonymous form, or blocking of data processed in violation of the law.
Data Portability (receiving your data in a structured, machine-readable format).
Restriction of processing.
Withdrawal of consent at any time.
Right to Object to processing for legitimate reasons or for direct marketing/profiling.
Right to lodge a complaint with a Supervisory Authority (in Italy, the Garante per la protezione dei dati personali, Piazza Venezia n. 11, 00187 – Rome, www.garanteprivacy.it).
This privacy policy is effective as of 12/05/2022.
