Privacy
Privacy policy
On psimikrobiom.cz we collect only what we really need to reply to you and send what you ask for. Here is a clear overview of what we do with your data, why and for how long.
1. Who is the controller
Tom Tomčo, self-employed sole trader (registered in the Czech Republic)
Company ID (IČO): 05347190
Place of business: Doubravice 125, 511 01 Hrubá Skála, Czech Republic
Email: info@psimikrobiom.cz
The controller is an independent Fermatigo World distributor. We are not employees or representatives of Fermatigo World or of the manufacturer Trevalo, and we do not act on their behalf.
The controller runs the website psimikrobiom.cz, including its English version, and decides how your personal data is processed. We have not appointed a data protection officer, because the law does not require us to. For anything concerning your data, please use the email address above.
2. What this website is and how you buy
Psimikrobiom.cz is not an online shop. It is an information website about the canine microbiome, with a blog and a contact form, run by an independent Fermatigo World distributor. You do not order or pay for anything on this website.
You buy Trevalo products (manufacturer Trevalo) in the online shop shop.fermatigo.world, run by the seller Fermatigo World. You create your own account there to buy. The shop operator is responsible, as a separate controller, for the data you enter in the shop (account, order, payment, delivery) and follows its own privacy policy.
We link to products with a partner (referral) link. The link contains our referral code, which lets the shop recognise that you came from us. We do not pass any of your personal data to the shop. We are not the seller: you buy directly from the Fermatigo World online shop, which also ships your order.
3. What data we process and why
Contact form, questionnaires and emails
- Data: name, email, phone, information about your dog, the text of your message or your answers in the questionnaire, and the language version of the website the message came from. A phone number may be required in the contact form or questionnaire so that we can also reach you by phone. If you write to us by email, we also process the data from that email.
- Purpose: to reply to your question or questionnaire, advise you and, if needed, call you.
- Legal basis: our legitimate interest in answering a question you sent us yourself (Art. 6(1)(f) GDPR).
- Retention: 5 years from our last communication, so that we can follow up on earlier questions. After that we delete the messages.
- Messages from the form are saved in the website administration, which only the controller can access, and are also sent by email to our mailbox. After 5 years they are deleted from the website automatically.
- We use your phone number only to call or write to you about your question. We do not use it for advertising calls.
PDF download
- Data: email, optionally your name.
- Purpose: to send you the PDF you asked for.
- Legal basis: providing content at your request (Art. 6(1)(b) GDPR).
- Retention: only as long as needed to send the PDF, at most 30 days. If you also consent to the newsletter, the newsletter rules apply.
Newsletter
- Data: email, optionally your first name (so that we can address you), the time and source of your sign-up, your consent, and data on whether you open our emails and what you click in them.
- How you sign up: you enter your email in the form on the website and tick the consent box. The contact is saved directly in the Ecomail service together with the time and source of the sign-up, so that we can prove your consent.
- Purpose: to send you news, articles and tips about caring for your dog’s tummy.
- Legal basis: your consent (Art. 6(1)(a) GDPR). Consent is voluntary and separate, and downloading a PDF does not depend on it.
- Retention: until you unsubscribe. You can unsubscribe with one click in every email or by writing to info@psimikrobiom.cz.
“For professionals” section
- Data: email and the communication in which a vet or other professional asks us for the password. After you enter the password, we store a technical cookie in your browser saying that access is unlocked.
- Purpose: to make professional content available only to professionals.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Retention: communication as with the contact form (5 years), the login is valid for 30 days.
Technical data and website protection
- Data: IP address, time of access, browser and device type in server logs. To protect the forms and logins to the professionals section, we briefly store a hash of your IP address.
- Purpose: safe and reliable running of the website, protection against spam and attacks.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Retention: the IP hash for 10 to 15 minutes, server logs according to the settings of the hosting provider and Cloudflare, usually at most a few weeks.
We do not make any automated decisions and we do not profile you in a way that would have legal or similarly significant effects on you.
4. Cookies and analytics
Cookies are small files that a website stores in your browser. We need necessary cookies for the website to work. We use analytics cookies only with your consent: until you give it, the analytics tools are not loaded at all. You can change your choice at any time with the “Cookie settings” link in the website footer. If you withdraw your consent, we delete the analytics cookies.
| Cookie | What it is for | Type | Validity |
|---|---|---|---|
| psm_consent | Remembers your cookie choice. | Necessary | 13 months |
| psm_pro | Remembers that access to the “For professionals” section is unlocked. | Necessary | 30 days |
| psm_pristup | Access to the website during maintenance (only with a secret link). | Necessary | 14 days |
| __cf_bm, cf_clearance | Protection of the website against bots and attacks (Cloudflare). | Necessary | 30 minutes to 1 year |
| _ga, _ga_* | Google Analytics 4: distinguishing visitors and sessions for traffic statistics. | Analytics (with consent) | up to 2 years |
| _clck, _clsk, CLID, MUID | Microsoft Clarity: statistics and anonymised recordings of movement on the page (what is read and what is clicked). | Analytics (with consent) | 1 day to 1 year |
- Google Analytics 4 (Google Ireland Ltd.): number of visits, where people came from, which pages they read and what they click (for example the link to the shop). We have switched off the advertising features. We keep the data for 14 months.
- Microsoft Clarity (Microsoft Ireland Operations Ltd.): click maps and recordings of movement on the page, which we use to improve the website. Text you type into forms is not recorded. Recordings are kept for at most 30 days, summary statistics for up to 13 months.
- Legal basis: your consent (Art. 6(1)(a) GDPR and the rules on electronic communications, which require consent for analytics cookies).
Without cookies and without consent, we keep only aggregate anonymous statistics: how many times each page was viewed, where visitors came from (for example a search engine or a social network), what type of device they used, how far they read the page, how long they stayed, where they went next on the website, how many times someone clicked on the order link, and how many article reads there were (an article kept open for at least a minute). So that we do not count the same visit twice, we keep only a hash of your IP address and browser for at most one hour, after which it deletes itself. Only daily totals are stored, they cannot be linked to you, and we do not pass them to anyone. The legal basis is our legitimate interest in knowing which pages and articles are useful (Art. 6(1)(f) GDPR).
The website fonts are loaded directly from our own website, without connecting to third-party servers.
5. Who works with data on our behalf
We do not pass your personal data to third parties for their own purposes and we do not sell it. It does not go to the Fermatigo World shop, to the manufacturer Trevalo or to any other company. It is handled only by the following processors, who provide the technical operation for us, only to the extent needed for their service, on our instructions and under a contract with us:
- Váš Hosting s.r.o.: website hosting and mailbox.
- Cloudflare, Inc.: speeding up and securing the website.
- Ecomail.cz s.r.o.: sending emails with PDFs and the newsletter.
- Google Ireland Ltd.: Google Analytics 4.
- Microsoft Ireland Operations Ltd.: Microsoft Clarity.
We may also pass data to authorities if the law requires us to.
6. Transfers outside the EU
Google, Microsoft and Cloudflare may also process data in the United States. These companies are certified under the EU-US Data Privacy Framework and use the standard contractual clauses approved by the European Commission. This ensures protection comparable to that in the EU.
7. Your rights
Under the GDPR you have the right:
- to know whether and what data we process about you, and to get a copy of it,
- to have inaccurate data corrected,
- to erasure, if we no longer need the data or process it unlawfully,
- to restriction of processing,
- to portability of the data you gave us on the basis of consent or a contract,
- to object to processing based on legitimate interest,
- to withdraw your consent at any time (newsletter, analytics cookies). Processing before the withdrawal remains lawful.
Just write to info@psimikrobiom.cz. We will reply within one month at the latest. To avoid disclosing your data to someone else, we may ask you to verify your identity.
If you believe we are handling your data improperly, you can lodge a complaint with the supervisory authority in the country where you live. The authority competent for the controller is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz. We would be glad, though, if you contacted us first.
8. Security
The website runs only over an encrypted connection (HTTPS). We send emails through a secure mail server, only the controller has access to the data, and access passwords are stored encrypted. The “For professionals” section is protected by a password and a limited number of login attempts.
9. Changes to this policy
We may amend this policy when the website or the law changes. The current version is always on this page, and the date it is valid from is at the top. If a change affects your consent, we will ask for it again.