Data Processing Agreement (December 26, 2023)

1.1. This Personal Data Processing Agreement (hereinafter referred to as the "Agreement") defines the procedure for collecting, using, transferring, and protecting the personal data of users of the shunnukatun. am website (hereinafter referred to as the "Website"), provided during the use of the Website.

1.2. The processing of personal data is carried out in accordance with the legislation of the Republic of Armenia, including the Law of the Republic of Armenia "On Personal Data," as well as international data protection standards, including the General Data Protection Regulation (GDPR), where applicable.

1.3. Users express their consent to the terms of this Agreement at the moment they provide personal data through forms on the Website, during registration, placing an order, booking an appointment, or using other Website functions.

1.4. LLC "Vetmir", the operator of the shunnukatun. am website, undertakes to ensure the confidentiality and security of the provided personal data and to take all necessary measures to protect it from unauthorized access.

1.5. This Agreement applies to all data that the Company may obtain from Users when they use the Website. Personal data refers to information that can identify a user, such as: surname, first name, contact information, information about a pet, and any other information provided by the User.

1.6. If the User does not agree with the terms of this Agreement, they must immediately cease using the Website and not provide their personal data.

2.1. Categories of Collected Data: The Company may collect and process the following categories of users' personal data:

• Surname and first name.
• Contact information (phone number, email address).
• Information about pets (species, gender, name).
• Data related to interactions with the website (e.g., appointment bookings, order history).
• Technical data, such as IP address, cookies data, and other unique device identifiers.

2.2. Sources of Data: Personal data is provided directly by the user through forms on the Website, during registration, placing an order, or booking an appointment. Technical data may be collected automatically when the Website is used through the use of cookies and similar technologies.

2.3. Additional Data: The Company may also collect additional data if provided voluntarily by the user, such as during communication via the feedback form or when submitting a request.

2.4. Third-Party Data: If the user provides data of third parties (e.g., when booking an appointment for a pet owned by someone else), the user confirms that they have obtained all necessary consents from the third party to provide such data.

3.1. Service Provision: Personal data is processed to provide users with the services offered on the Website, including:

• Booking appointments with veterinarians.
• Processing and fulfilling orders in the online store.
• Communicating with users, including responding to inquiries and sending appointment or order confirmations.

3.2. Marketing Goals: With the user’s consent, personal data may be used for:

3.3. Legal Obligations: The Company may process personal data to fulfill its legal obligations, including but not limited to:

3.4. Website Improvement: Personal data may be used for:

4.1. User Consent: Personal data is processed based on the explicit consent of the user, which is provided when filling out forms on the Website, registering, placing an order, or booking an appointment.

4.2. Contract Performance: Data processing is necessary for the performance of the contract between the user and the company when the user orders services or goods through the Website.

4.3. Legitimate Interests of the Company: The Company may process personal data to protect its legitimate interests, such as improving the quality of services provided, ensuring user security, and preventing fraud.

4.4. Compliance with Legal Obligations: Data processing may be necessary to comply with the legal requirements of the Republic of Armenia, for example, for accounting purposes or providing data upon request by government authorities.

5.1. Internal and External Contractors: The Company may transfer personal data to users, contractors, and partners who assist in providing services, such as:

5.2. Transfer of Data to International Organizations or Third Countries: If personal data is transferred outside the Republic of Armenia or to international organizations, the Company ensures that all necessary security measures are taken in accordance with applicable laws and international data protection standards.

5.3. Compliance with Laws and Legal Requirements: The Company may disclose personal data to third parties if required to comply with laws, enforce court decisions, or respond to requests from government authorities.

5.4. Requirements for Third Parties: All third parties to whom data is transferred are required to maintain confidentiality, ensure the security of personal data, and use it only for the purposes specified in this Agreement.

6.1. Data Retention Period: Users' personal data is stored no longer than necessary to achieve the purposes for which it was collected or as required by the legislation of the Republic of Armenia. After these purposes are fulfilled, the data may be anonymized or deleted.

6.2. Storage Conditions: The Company undertakes to store users' personal data in accordance with security and confidentiality requirements. Technical and organizational measures are applied to protect the data from unauthorized access, alteration, loss, or destruction.

6.3. Data Deletion: At the request of the user or after the expiration of the retention period, personal data may be deleted or anonymized, unless further storage is required by law.

6.4. Third-Party Data Storage: In cases where personal data is transferred to third parties to fulfill services or legal obligations, the Company undertakes to ensure compliance with all security and data retention requirements.

7.1. Right of Access: The user has the right to request information about which personal data is being processed by the company and to receive a copy of this data.

7.2. Right to Rectification: The user has the right to request the correction of inaccurate or outdated data if it is incorrect or has changed.

7.3. Right to Deletion (Right to be Forgotten): The user can request the deletion of their personal data if:

7.4. Right to Restriction of Processing: The user can request the restriction of the processing of their data if:

7.5. Right to Data Portability: The user has the right to receive their personal data in a structured and machine-readable format for transfer to another controller, if technically possible.

7.6. Right to Withdraw Consent: The user can withdraw their consent to the processing of personal data at any time if the data is processed based on consent, without affecting the lawfulness of the processing before the withdrawal.

7.7. Exercising Rights: To exercise their rights, the user can contact the company via the feedback form or through the contact details provided in this Agreement.

8.1. Technical and Organizational Measures: The Company takes all necessary technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. This includes the use of encryption, firewalls, threat detection systems, and other data protection technologies.

8.2. Data Protection During Transmission: The Company commits to ensuring the security of personal data during transmission between systems, using secure communication channels such as SSL/TLS protocols and internal security policies.

8.3. Access Restriction: Only authorized employees, partners, or contractors who need access to personal data for their work duties, and solely for the purposes specified in this Agreement, have access to the data.

8.4. User Responsibilities: The user is responsible for maintaining the confidentiality of their account credentials (login and password) and for actions taken on the Website on their behalf. The Company is not responsible for unauthorized access to data caused by the user’s breach of security.

8.5. Breach Notification: In the event of a security breach that may affect personal data, the Company will notify users within a reasonable timeframe and take the necessary steps to minimize potential risks.

9.1. What are Cookies: Cookies are small text files that are stored on the user’s device when visiting websites. These files allow websites to remember the user’s actions and preferences (such as language, settings), making the Website easier to use.

9.2. Purposes of Using Cookies: The Company uses cookies and similar technologies for the following purposes:

9.3. Types of Data Collected via Cookies: Cookies may collect the following data:

9.4. Cookie Management: Users can configure cookie settings at any time through their browser settings by disabling or deleting already saved cookies. However, disabling cookies may limit the functionality of the Website.

9.5. Third-Party Cookies: The Website may use third-party cookies for traffic analysis and improving marketing campaigns. Third-party providers (such as Google Analytics) may set their own cookies in accordance with their privacy policies.

10.1. Notification of Changes: The Company reserves the right to modify or update this Agreement at any time. When changes are made, the updated version of the Agreement will be posted on the Website, and the date of the last update will be indicated at the top of the page.

10.2. Effective Date of Changes: Changes take effect from the moment the new version of the Agreement is published on the Website, unless otherwise stated. Users are responsible for periodically reviewing this policy to stay informed of any changes. Continued use of the Website after changes are made constitutes acceptance of the updated terms by the user.

10.3. Notification of Significant Changes: If the changes significantly affect users' rights, the Company agrees to notify users via the contact information provided during registration or by other available means.

11.1. If the user has any questions or suggestions regarding this Agreement or the processing of personal data, they can contact the Company using the following contact details:

12.1. All disputes and disagreements arising in connection with the processing of personal data are governed in accordance with the legislation of the Republic of Armenia.

12.2. In the event of disputes, the user and the Company agree to first attempt to resolve them through negotiations and finding a mutually acceptable solution.

12.3. If the dispute cannot be resolved through negotiations, it shall be submitted to the court of the Republic of Armenia in accordance with applicable legislation.