Legal Information for
working with us
Legal Information for
working with us
Always up-to-date
We – Veterinärmedizinisches Dienstleistungszentrum (VetZ) GmbH – offer a wide range of products across all areas of animal health. Our portfolio includes solutions such as our practice and imaging management software for veterinarians, digital X-ray systems, online purchasing platforms, as well as web applications and apps for pet owners.
1 Scope
For any business activities with Veterinärmedizinisches Dienstleistungszentrum GmbH (hereinafter “VetZ”), Sattlerstraße 40, 30916 Isernhagen, the following terms and conditions shall apply exclusively. German law shall apply exclusively, excluding the UN Convention on Contracts for the International Sale of Goods (CISG) and excluding international law.
A consumer is any natural person who enters into a legal transaction for purposes that predominantly cannot be attributed to that person’s commercial or self-employed professional activity.
An entrepreneur is a natural or legal person or a partnership with legal capacity who, when entering into a legal transaction, acts in the exercise of its commercial or self-employed professional activity.
The following terms and conditions shall also apply to future deliveries and services, even if no specific reference is made to these terms and conditions in the individual case.
These General Terms and Conditions shall also apply to future business relationships with entrepreneurs without VetZ having to refer to them again. If an entrepreneur uses conflicting or supplementary general terms and conditions, their applicability is hereby rejected; they shall become part of the contract only if VetZ has expressly agreed to them.
If special terms apply to individual products, offers, or services of VetZ, these shall be listed separately. In the event of contradictions, the special terms and provisions shall take precedence.
Below you will first find the General Terms and Conditions (GTC) for business interaction with VetZ including the Data Processing Agreement (DPA); on additional pages, the service terms for the individual software and cloud applications of VetZ (easyVET, easyIMAGE, VCS, vetOS, vetsXL, mayBASE, workBASE and petsXL) including the license, support and service conditions (SLA), as well as the data protection provisions of VetZ.
2 Contracting party and conclusion of contract
The purchase agreement or service engagement shall be concluded between you and us.
The presentation of our products does not constitute a legally binding offer, but rather a non-binding display and presentation of our products. After you contact us, we will submit to you a time-limited offer, which you may accept by returning the order form enclosed with the offer and completed by you within the acceptance period stated therein.
The purchase agreement/order shall be concluded upon acceptance of our offer within the acceptance period. Upon handing over the hardware to the transport company, the obligation to pay the purchase price (transfer of price risk) shall pass to you. Electronic messages, item information, or similar messages and information from us following an order do not constitute acceptance of an order or engagement.
Our offer and the services specified therein shall be decisive for the content and performance of the contract. Deliveries shall be made according to the specifications of the respective manufacturer or our own specifications in accordance with the version current at the time the contract is concluded. Unless expressly agreed otherwise in writing, you are responsible for selecting the ordered products and the results you intend to achieve. The same applies to the interaction of individual components. We are entitled to have the contract performed in whole or in part by third parties.
The contract language binding for the conclusion of the contract is German.
3 Prices and delivery
All our prices are generally in euros plus statutory VAT and plus any shipping costs incurred. In principle, the prices applicable at the time of our offer or your order shall apply, unless different prices have been agreed separately. Non-cash payments shall be accepted only on account of performance. Collection costs shall be borne by you. Bills of exchange will not be accepted.
You will receive the invoice after shipment of the goods by email, together with the goods, or by mail.
We generally deliver by shipment. Self-collection of the goods is possible by arrangement.
4 Payment
Payment shall be made by invoice with the payment term stated therein.
If facts arise that give rise to doubts regarding your ability or willingness to pay (for example, an application to open insolvency proceedings over your assets) and in the event of default in payment, we are entitled to suspend the performance of deliveries and services until full advance payment or an appropriate security has been provided, and to charge statutory default interest.
If you do not comply with a corresponding request for payment within an additional period of 10 days, we are entitled to withdraw from the contract in whole or in part. Further claims remain reserved.
You may only offset claims if the counterclaims are undisputed or have been finally adjudicated. You may exercise a right of retention only insofar as the counterclaim arises from the same contractual relationship as the disputed claim.
5 Performance times and right of withdrawal in case of non-compliance and delay of the delivery date
We provide our services Monday through Friday during usual business hours. Shipment of goods ideally takes place within 2–4 business days. No warranty can be assumed for uninterrupted operational readiness of devices and programs that we do not solely control.
Delivery and performance time information in the respective order confirmation is provided to the best of our judgment based on the respective delivery and order situation. For merchants, correct and timely self-supply remains reserved.
If non-compliance with or delay of an agreed delivery period is due to force majeure, riot, strike, lockout, depletion of raw materials, operational disruptions not attributable to us, or other circumstances not attributable to us, the delivery period shall be extended for the duration of these events. This shall apply accordingly if we are already in default of delivery when one of these events occurs. We will notify you of the beginning and end of such obstacles as soon as possible. We also have the right, in the event of persistent operational disruptions due to force majeure, riot, strike, lockout, depletion of raw materials, or operational disruptions not attributable to us, or in the event that we are not supplied by our upstream suppliers without our fault, to withdraw from the contract in whole or in part, excluding any claims for damages.
If performance is prevented for more than six weeks due to force majeure, riot, strike, lockout, depletion of raw materials, operational disruptions not attributable to us, or other circumstances not attributable to us, both we and you are entitled to withdraw from the contract. If the delivery date is not met for reasons other than those mentioned above, only you have a right of withdrawal. For withdrawal by you, it is required that you have set us an appropriate grace period of at least 3 weeks in writing.
Compliance with delivery and performance times presupposes the timely and proper fulfillment of your contractual and cooperation obligations, insofar as this is required.
In the event of delay on your part, the delivery and performance time shall be interrupted.
6 Right of withdrawal (revocation)
Consumers have the statutory right of withdrawal. Entrepreneurs are not granted any voluntary right of withdrawal.
7 Retention of title
The delivered goods remain our property until full payment of the respective claim has been made. In the case of a running account, the retained title shall serve as security for the balance claim.
As an entrepreneur, you are entitled, until revoked, to resell the goods subject to retention of title in the ordinary course of business. You hereby already assign to us, by way of performance, all claims and receivables from a resale as well as from a processing of the goods subject to retention of title, together with all ancillary rights, in the amount of the value of the delivered and unpaid goods, with priority over the remaining portion of the claims; we accept the assignment. You are authorized, until revoked, to collect the assigned receivables. We will not exercise our rights of revocation as long as you properly meet your obligations and no case under Section 4 paragraph 2 exists. You must keep the collected amounts separate until the secured claims are settled and immediately remit them to us insofar as and as soon as our claims are due. Upon request, you must provide us with all information and documents required to collect the assigned receivables. We are entitled to disclose the assignment to your debtors. In the event of default in payment, we may demand return of the goods. Your right of retention is excluded, except for undisputed or finally adjudicated claims. After written notice with an appropriate period, the goods may be sold privately at the best possible price with credit toward the purchase price. You shall bear the costs of return and realization of the goods. Unless proven otherwise, the costs of realization amount to 25 percent of the realization proceeds including VAT. The return of the goods subject to retention of title shall be deemed a withdrawal from the contract only if expressly declared by us.
8 Customer’s cooperation obligations
You shall grant us the necessary time and opportunity to perform our services, insofar as this is required for the service and has been communicated in advance. During preparation and performance of the work, any necessary and reasonable support shall be provided.
You are responsible for the proper use of your own devices and programs included in the contract. Before work on devices and/or programs, you will independently back up all programs and data and store them on external data media. You will provide, at your expense, all facilities required for the performance of on-site work, including telephone connections and transmission lines, unless these are expressly owed by us.
9 Subsequent performance and reduction of purchase price toward consumers
Claims for subsequent performance, withdrawal, and reduction for all defects occurring within the statutory warranty period of 2 years exist in accordance with statutory provisions. This does not apply to the right of withdrawal in the event of delay or non-compliance with the delivery date, which is governed in Section 5 of these General Terms and Conditions. For claims for damages, the provisions set out in Section 11 of these General Terms and Conditions apply. The warranty period begins upon receipt of the goods.
You only have to compensate for any loss in value of the goods if such loss in value is due to handling that is not necessary to examine the nature, characteristics, and functioning of the goods.
10 Warranty and guarantees toward entrepreneurs
The limitation period for claims for defects is one year from the transfer of risk.
Only our own information and the manufacturer’s product descriptions included in the contract shall be deemed an agreement on the quality of the goods; we assume no liability for public statements or other advertising claims by the manufacturer. However, according to the state of the art it is not possible to guarantee flawless functioning of data processing equipment and combinations of equipment under all conceivable application conditions and to exclude errors in data processing programs.
If the delivered item is defective, we shall initially provide warranty performance at our discretion by remedying the defect (repair) or delivering a defect-free item (replacement). We must be granted the necessary and reasonable time and opportunity to carry out the repair and/or replacement delivery.
The above restrictions and shortening of limitation periods do not apply to claims due to damage caused by us, our legal representatives, or vicarious agents.
11 Claims for damages
Claims for damages against us, our legal representatives, or vicarious agents are excluded, regardless of the legal basis on which they are based.
This does not apply to claims due to damage caused by us, our legal representatives, or vicarious agents. In these cases, we are liable without limitation, in particular if
- the damage consists of injury to life, body, or health;
- the damage was caused intentionally or by gross negligence;
- the asserted claims are based on the Product Liability Act;
- we are liable due to initial inability or impossibility for which we are responsible, i.e., performance of the contract was impossible for us from the outset; in the case of guarantees or a procurement risk, insofar as agreed and we are liable therefrom.
In the event of a breach of so-called cardinal obligations by slight negligence on our part, our legal representatives, or vicarious agents, liability shall be limited in amount to the foreseeable damage at the time the contract was concluded, the occurrence of which must typically be expected. This does not apply if we are liable without limitation as described above.
Cardinal obligations in the above sense are those material contractual obligations on whose proper performance the buyer relies and may rely because they characterize the contract and whose performance makes the proper execution of the contract possible in the first place.
The existence of a breach of duty must be proven by you; the absence of fault must be proven by us (statutory allocation of burden of proof).
12 License and copyright rights
You are obligated to comply both with our license and copyright conditions and with the license and copyright conditions of our manufacturers and suppliers.
You are entitled to use the programs, drawings, process descriptions, and other documents provided for the performance of the contract for the contractually intended use. All copyrights and further rights of use remain with us. Any use, reproduction, or transfer to third parties beyond the necessary contractual use is not permitted unless expressly agreed otherwise.
13 Data protection
Personal data is stored and used in accordance with our data protection provisions.
14 Data processing agreement
-
By using VetZ’s cloud applications, VetZ processes personal data on your behalf. For this purpose, you commission VetZ, under the following conditions, with data processing within the meaning of Article 28 of Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR). The provisions set out under this Section 14 therefore apply directly to activities in which VetZ employees or sub-processors commissioned by VetZ process personal data of the customer. Where terms from the GDPR are used, the definition within the meaning of Article 4 GDPR shall apply. The term corresponds to the term of the main contracts concluded.
VetZ receives access to personal data on your part. Smooth access by VetZ is required in order to be able to carry out the agreed work and/or services. In this respect, VetZ has the possibility to view data. Depending on the main contracts concluded, this concerns the following types and categories of data: name, address, telephone number, fax number, email address, date of birth, profile picture, vetsXL ID, petsXL ID, position, function, laboratory, imaging and health data of animals, examination certificates of animals, communication data, veterinary referral data, pet health insurance data, appointment data, ordering and order data, animal registration data, bank data, creditworthiness data (not viewable) as well as invoicing and payment data.
Within the scope of certain functions of the cloud-based applications vetOS and petsXL, supporting processes based on Artificial Intelligence (AI) may be used. These AI procedures serve exclusively for analysis, pattern recognition, and the generation of suggestions to support veterinary, animal health, or administrative processes. They do not replace human decision-making. The processing of personal data in these AI processes takes place exclusively within system environments controlled by VetZ or commissioned by VetZ and is subject to the same technical and organizational measures pursuant to Article 32 GDPR. Use for training or development purposes takes place only in anonymized or aggregated form.
The processing of personal data affects your employees and customers, as well as veterinary practices, companies, and organizations with which you cooperate.
-
You are the controller within the meaning of Article 4(7) GDPR for the processing of data on behalf of VetZ. Under Article 14(2) of this agreement, VetZ has the right to inform you of data processing that, in VetZ’s opinion, is legally impermissible.
As controller, you are responsible for safeguarding data subject rights. VetZ will inform you without undue delay if data subjects assert their rights against VetZ.
You have the option, to an appropriate extent before the start of data processing and thereafter regularly pursuant to these provisions, to inform yourself about compliance with the technical and organizational measures for data security adopted by VetZ, insofar as you have a substantiated reason to believe that VetZ will not comply, or is not complying, with its obligations to an appropriate extent. Any deficiencies must be substantiated by you. You may document the result in an appropriate manner.
You have the right to issue supplementary instructions to VetZ at any time regarding the type, scope, and procedure of data processing. Instructions may be given in writing or by email. You should confirm oral instructions, insofar as oral instructions are permissible under this agreement, without undue delay in text form (for example, by email) to VetZ.
You may designate persons authorized to issue instructions. You shall notify VetZ of these before processing begins. If the authorized persons change, you will notify VetZ in writing or in text form.
You shall inform VetZ without undue delay if you discover errors or irregularities in connection with the processing of personal data by VetZ.
VetZ processes personal data exclusively within the scope of the agreements made and/or in compliance with any supplementary documented instructions issued by you, unless VetZ is obliged to do so under the law to which VetZ is subject. In that case, VetZ will inform you of these legal requirements before processing, unless the relevant law prohibits such disclosure for important reasons of public interest. Purpose, type, and scope of data processing are determined exclusively by this agreement and the concluded license, support and usage agreements and/or your instructions.
When using AI systems, VetZ undertakes to use only such technologies or partners that demonstrably meet the requirements of the GDPR. VetZ ensures that personal data processed within the scope of AI processes is used exclusively for the purposes authorized by the customer. Automated decision-making with legal effect pursuant to Article 22 GDPR does not take place.
VetZ undertakes to carry out commissioned data processing only in Member States of the European Union (EU), the European Economic Area (EEA), or a third country for which an adequacy decision of the EU Commission pursuant to Article 45 GDPR exists, unless you have expressly consented to data transfer to other third countries. This applies expressly also to the cloud-based provision of vetOS, which takes place exclusively in certified European data centers (ISO 27001 or equivalent standards).
VetZ is obliged to structure its company and operational processes so that the data processed by VetZ on behalf of the customer is secured to the extent required and protected against unauthorized access by third parties.
VetZ will inform you without undue delay if, in VetZ’s opinion, an instruction you have issued violates legal provisions. VetZ is entitled to suspend implementation of the relevant instruction until it is confirmed or amended by you.
VetZ will inform you without undue delay if a supervisory authority pursuant to Article 58 GDPR takes action against VetZ and this may also concern an inspection of the processing that VetZ performs on your behalf.
VetZ shall report to you a personal data breach without undue delay. Where available, the report should include a description of the nature of the breach and possible adverse consequences of unlawful access, as well as what measures VetZ has taken to mitigate the breach and/or prevent it in the future. VetZ is aware that you may have notification obligations pursuant to Articles 33 and 34 GDPR, which provide for notification to the supervisory authority and/or affected persons. VetZ will support you with corresponding notification obligations.
VetZ will name to you the persons authorized to receive instructions.
If a form of processing is likely to result in a high risk to the rights and freedoms of natural persons, you must carry out an assessment of the consequences of the intended processing operations for the protection of personal data. Taking into account the nature of the processing and the information available to VetZ, VetZ shall assist you in complying with the obligations set out in Articles 35 and 36 GDPR.
Provided data media and data sets remain your property.
After completion of the contractually agreed services or earlier upon your request, but no later than upon termination of the service agreement, VetZ shall hand over to you or, with your prior consent, destroy in a data protection-compliant manner all documents in its possession, created processing and usage results, and data inventories (including any copies or reproductions thereof) that are related to the commissioned relationship, unless the law to which VetZ is subject requires storage of the personal data.
VetZ may retain documentation serving as proof of commissioned and proper data processing beyond the end of the contract in accordance with the applicable retention periods until their expiry. Alternatively, VetZ may hand them over to you upon termination of the contract for the purpose of exoneration.
-
You have the right to audit compliance with statutory data protection provisions and/or compliance with the contractual arrangements agreed between you and VetZ and/or compliance by VetZ with your instructions at any time to the extent required, whereby an audit is required if you have a substantiated reason to believe that VetZ is not meeting its obligations to an appropriate extent. VetZ is obliged to provide you with information insofar as this is necessary to carry out the audit within the meaning of the foregoing sentence.
You may request access to the data processed by VetZ for you as well as to the data processing systems and programs used, insofar as this is necessary to carry out the audit within the meaning of the foregoing paragraph.
In the event of measures by the supervisory authority against you within the meaning of Article 58 GDPR, in particular with regard to information and audit obligations, VetZ shall, where available, provide the required information to you and the competent supervisory authority, and an on-site audit shall be enabled. Where legally permissible, you shall be informed about planned measures by VetZ. Statutory confidentiality obligations and rights to refuse testimony remain unaffected.
-
VetZ may commission other veterinary practices, companies, and organizations (sub-processors). VetZ will indicate all sub-processing relationships existing at the time of conclusion of the contract. VetZ will expressly inform you at least 20 days in advance in written or electronic form about any intended changes to this list by adding or replacing sub-processors and will thereby allow you sufficient time to raise objections to such changes before the commissioning of the respective sub-processor(s). VetZ will provide you with the necessary information so that you can exercise your right to object.
VetZ must carefully select the sub-processor and, before commissioning, verify that the sub-processor can comply with the agreements made between you and VetZ. In particular, VetZ must, in advance and regularly during the term of the contract, monitor that the sub-processor has implemented the technical and organizational measures required under Article 32 GDPR to protect personal data. The result of the audit must be documented by VetZ and provided to you upon request.
VetZ must ensure that the provisions agreed in this agreement and any supplementary instructions issued by you also apply to the sub-processors.
VetZ must conclude a data processing agreement with the sub-processor that meets the requirements of Article 28 GDPR and the present data processing arrangements. Upon request, a copy of the sub-processing agreement must be provided to you.
VetZ is in particular obligated to ensure by contractual provisions that your audit powers and those of supervisory authorities also apply to the sub-processor, and that corresponding audit rights of you and supervisory authorities are agreed. It must also be contractually stipulated that the sub-processor must tolerate these audit measures and any on-site inspections.
Not considered sub-processing relationships within the meaning of Sections 14.4.1 to 14.4.5 are services that VetZ uses from third parties as purely ancillary services to carry out its business activity. These include, for example, cleaning services, pure telecommunications services without specific relation to services that VetZ provides for you, postal and courier services, transport services, security services. Nevertheless, VetZ is obligated, even in the case of ancillary services provided by third parties, to ensure that appropriate precautions and technical and organizational measures have been taken to ensure the protection of personal data. Maintenance and servicing of IT systems constitutes a sub-processing relationship requiring consent and commissioned processing within the meaning of Article 28 GDPR if such maintenance and servicing concerns IT systems that are also used in connection with the provision of services for you.
If VetZ uses specialized sub-processors to provide AI-supported functions that exclusively carry out algorithmic analyses or automated classifications on behalf of VetZ, these will be contractually integrated as processors within the meaning of Article 28 GDPR. VetZ ensures that obligations regarding data security, transparency, and deletion also apply without restriction to these systems.
-
When processing data, VetZ is obligated to maintain confidentiality regarding data that it receives or becomes aware of in connection with the engagement. VetZ undertakes to observe the same confidentiality protection rules that apply to you. You are therefore obligated to notify VetZ of any special confidentiality protection rules.
VetZ assures that it familiarizes its employees with the provisions of data protection relevant to them and that they are obligated to confidentiality. In addition, VetZ will obligate in writing all employees who provide services in connection with the engagement to treat all your data, in particular the personal data processed for you, confidentially. Proof of this obligation must be provided to you upon request.
-
You are responsible for safeguarding data subject rights.
Insofar as assistance by VetZ is required to safeguard data subject rights—especially rights of access, rectification, restriction, or erasure—VetZ will take the necessary measures in accordance with your instructions.
-
VetZ undertakes to comply with the technical and organizational measures required to comply with the applicable data protection regulations. This includes in particular the requirements of Article 32 GDPR.
You agree that changes to the technical and organizational measures may become necessary to adapt to technical and legal circumstances. VetZ will coordinate with you in advance regarding material changes that may impair the integrity, confidentiality, or availability of the personal data. Measures that entail only minor technical or organizational changes and do not adversely affect the integrity, confidentiality, or availability of the personal data may be implemented by VetZ without coordination. You may request a current version of the technical and organizational measures implemented by VetZ at any time.
VetZ will regularly, and also on an ad hoc basis, review the effectiveness of its technical and organizational measures. If optimization and/or changes are required, VetZ will inform you.
AI-based components are operated exclusively in cloud environments controlled by VetZ. All data transmissions are encrypted, and internal processes exist to ensure traceability of processing steps. VetZ regularly reviews the effectiveness of these measures and does not process personal data outside the authorized system architecture.
15 Final provisions
If you are an entrepreneur, the law of the Federal Republic of Germany shall apply exclusively, excluding all international and supranational (contractual) legal systems, in particular the UN Convention on Contracts for the International Sale of Goods (CISG).
If you are a merchant within the meaning of the German Commercial Code (HGB), a legal entity under public law, or a special fund under public law, the exclusive place of jurisdiction—for all disputes arising from contractual relationships between us and you, including international disputes—shall be our registered office in Hanover. For consumers: Online
Dispute resolution pursuant to Article 14(1) of the ODR Regulation: The European Commission provides a platform for online dispute resolution (ODR), which you can find at https://ec.europa.eu/consumers/odr/.
The invalidity of individual provisions shall not affect the validity of the other provisions. In particular, the contract shall remain effective for both parties.
Special provisions
1 General service terms for easyVET
These Service Terms describe the framework conditions under which VetZ GmbH provides, operates and supports the practice management software easyVET. They form the basis for the use, operation, support and technical availability of easyVET and consist of the license terms, which govern the contractual rights and obligations between you and VetZ, the support terms, which define the scope and process of technical customer service, as well as the cloud terms, which describe the provision of optional hosting services.
All three sections jointly apply as the General Service Terms for easyVET and are an integral part of the user relationship between you and VetZ.
In the event of contradictions between the General Terms and Conditions of VetZ GmbH and these Service Terms for easyVET, these Service Terms shall apply exclusively for the use of easyVET.
1.1 License terms
-
Upon installation of easyVET, VetZ grants you the non-exclusive right (hereinafter “License”), limited in time to the term of this contract, to use the copy of the contract software on a single platform, i.e., on a computer. If the platform is a multi-user system, the copy may be used simultaneously only on as many computers as multi-user licenses have been acquired.
-
You are prohibited, without VetZ’s written consent, from modifying, translating, reverse engineering, decompiling or disassembling easyVET, creating derivative works based on easyVET, or reproducing, translating or modifying the written material, or creating derivative works based on the written material.
-
By acquiring easyVET you obtain ownership only of the physical data media on which easyVET is recorded. This does not entail the acquisition of any rights in easyVET itself. In particular, VetZ reserves all publication, reproduction, editing and exploitation rights in and to easyVET.
You are prohibited from selling, renting or lending easyVET without VetZ’s consent.
-
easyVET is protected by copyright. Making a single copy is permitted only for backup purposes. You are obligated to affix or include VetZ’s copyright notice on the copy. Any copyright notice contained in easyVET as well as license numbers included in it may not be removed. It is expressly prohibited to copy or otherwise reproduce easyVET in whole or in part in original or modified form, or mixed with other software or embedded in other software.
-
The license grant is for an indefinite term. VetZ is entitled to terminate this contract without notice if you violate a condition. Upon termination of the right of use, you are obligated to return the original data media and all copies, including any modified copies, as well as the written material, to VetZ, or to destroy them at VetZ’s option.
-
VetZ is entitled, at its sole discretion, to create updates (updates and upgrades) to easyVET. VetZ has no obligation to develop and provide updates on a regular basis.
-
VetZ warrants that, at the time of handover, the data media on which easyVET is recorded are in flawless condition.
If the data media are not free of defects, you may request a replacement delivery. For this, you must return the data media to VetZ and request a defect-free delivery.VetZ points out that, according to the state of the art, it is not possible to create easyVET in such a way that it operates error-free in all applications and combinations. The subject matter of the contract is therefore only software that is fundamentally usable within the meaning of the program description and the integrated help system.
For these reasons, VetZ assumes no liability for the error-free operation of easyVET. In particular, VetZ assumes no warranty that easyVET meets your requirements and purposes or works together with other programs selected by you. You bear responsibility for the correct selection and the consequences of using easyVET as well as for the results intended or achieved thereby. The same applies to the written material accompanying easyVET. If easyVET is not fundamentally usable, you have the right to rescind the contract. VetZ has the same right if producing usable software is not possible with reasonable effort.
VetZ is liable to you only for intentional or grossly negligent conduct. The limitation of liability does not apply to damages resulting from injury to life, body or health, nor to damages resulting from the breach of material contractual obligations (so-called cardinal obligations).
In the event of a breach of cardinal obligations, liability for slight negligence is limited to the amount that was foreseeable at the time of the respective performance.Liability for consequential damages not covered by an assurance is excluded, as is liability for lost profits and loss of data.
Liability based on guarantees by VetZ is excluded.
Neither force majeure, operational disruptions not attributable to VetZ, nor temporary interruptions of use due to technically unforeseeable circumstances give rise to VetZ’s liability.
If both contracting parties are full merchants, you undertake to inspect the software delivered by VetZ immediately upon receipt and to notify VetZ in writing of any damage, defects and complaints within a reasonable period. If defects are not notified in time, your warranty claim is excluded unless the defect could not be detected during inspection and within the reasonable period.
1.2 Support terms
VetZ provides support services for individual applications and software distributed by VetZ—such as easyVET. If you commission such services, the following special provisions for VetZ support services apply.
-
VetZ will provide the support services using such technical tools as VetZ deems necessary or appropriate and which are available to VetZ. This also includes remote support via the internet, provided this is technically possible and made available by you. VetZ is entitled to engage subcontractors to perform the tasks pursuant to the data processing agreement. By commissioning support from VetZ pursuant to these support terms, you also agree to this.
VetZ provides all support services exclusively on business days Monday through Friday between 8:00 a.m. and 5:00 p.m., unless other times are specified below.
VetZ provides all support services in compliance with the applicable data protection provisions and VetZ’s data processing agreement.
-
Upon notification of defects in the cloud application occurring during the term of this contract, VetZ will respond within the following timeframes:
- For critical defects (disruption causing an outage of the contract software or essential parts thereof such that use is wholly or almost wholly impossible) within one hour after receipt of the report;
- For material defects (disruption impairing use of the contract software such that reasonable work with the contract software is no longer possible or only possible with disproportionate effort) within two hours after receipt of the report;
- For other defects within one business day after receipt of the report.
VetZ will remedy defects within the following timeframes:
- Critical defects within one business day after receipt of the report;
- Material defects within two business days after receipt of the report;
- Other defects within ten business days after receipt of the report, but at the latest with the next program version of the contract software.
If it is foreseeable that a critical or material defect cannot be remedied within the time periods defined above, VetZ will provide an interim solution (workaround).
To ensure compliance with the response times, you must use the helpdesk communication channels specified for reporting defects.
-
VetZ offers three different contract types: Standard Support Contract, Software Support Contract and Premium Support Contract. The choice is made when you acquire the cloud application.
- Standard Support Contract:
The Standard Support Contract grants you access to VetZ’s helpdesk for questions regarding the application and functionality of the cloud application as well as for installing updates of corresponding software. The helpdesk is available Monday through Friday between 8:00 a.m. and 5:00 p.m. Access can be by phone or email. - Software Support Contract:
The Software Support Contract grants you fee-based access to our helpdesk for questions regarding the application and functionality of the cloud application as well as for installing updates of the underlying software. The fee-based helpdesk is available Monday through Friday between 8:00 a.m. and 5:00 p.m. Access can be by phone or email. - Premium Support Contract:
The Premium Support Contract grants you access to our helpdesk for questions regarding the application and functionality of the cloud application as well as for installing updates of the corresponding software. The helpdesk is available 24/7 from Monday to Sunday and on public holidays. Access can be by phone or email. If issues with the cloud application cannot be solved by our helpdesk, VetZ provides on-site assistance. On-site service is provided within 24 hours from Monday to Sunday and on public holidays between 8:00 a.m. and 5:00 p.m.
- Standard Support Contract:
-
- On-site services not covered by Section 3;
- Services following an intervention by you and/or other third parties into the cloud application or the underlying software or the system settings, insofar as this makes support more difficult;
- Services relating to the interaction of the cloud application with other software that is not part of this contract;
- Services for installation, commissioning or maintaining operation of the cloud application;
- Individual adaptations and programming of the software;
- Training and instruction for the cloud application;
- Support for other software or IT systems;
- Data entry.
-
The services listed in Section 1.2.4 are not part of the support contract, but may be separately agreed for a fee in accordance with our current price list.
Ongoing development of operating systems and other software may lead to changes in the technical requirements for the cloud application. The resulting technical changes, hardware expansions or modifications, operating system changes and organizational requirements are at your expense and may be agreed for a fee.
-
You must describe error reports and questions in detail. This includes, in particular, written descriptions of defects specifying the program name, version number, intermediate results and, where applicable, the results you consider correct. If, for troubleshooting, it is necessary to review a backup at our premises, you must provide it without delay. You undertake to provide all necessary information materials.
You ensure that, during the term of the contract, qualified personnel trained in operation are available.
You ensure that the technical prerequisites for remote support via the internet are in place at your practice or business.
You are obliged to follow the operating instructions contained in the customer manuals and circular letters. In particular, you are obligated to carry out the measures provided therein for at least one daily data backup.
In the course of support measures, VetZ shall have access to personal data only to the extent required for error analysis or contract performance. Any further access or storage does not take place.
-
Prices and payment terms are based on the respective individual offer.
-
We provide the support services set out in these terms and any services separately commissioned by the customer under these General Support Terms. If we cannot identify the alleged defect during our review, you bear the costs of the review, especially in the case of incorrect use of the cloud application or other disruptions not attributable to us. Warranty is excluded for programs or program components that were modified or extended by the customer after we made them available.
If more than two attempts at subsequent performance by us fail or we do not offer a newer version or workaround for the error, you may terminate the support contract with a notice period of 2 months. Assertion of warranty rights or termination of the support contract does not affect other contracts concluded between you and us.
Your claims become time-barred one year after the statutory start of the limitation period.
We are liable for the loss of data and programs and their restoration only insofar as this loss would not have been avoidable by reasonable precautionary measures on your part, in particular by regular and at least daily backup copies of all data and programs. Liability for data loss is limited to the typical restoration effort that would have occurred with regular backups appropriate to the risk. In any case, the duty to compensate is limited to the foreseeable damages.
Liability under the Product Liability Act remains unaffected.
VetZ is not liable
- for outages not directly attributable to VetZ, in particular external DNS and routing problems, attacks on our network or email infrastructure and outages of parts of the internet outside our control;
- for outages caused by you, in particular outages caused by incoming or outgoing hacking attacks due to faulty and/or insufficient maintenance of your own hardware and software;
- for outages based on improper use or repair of your own hardware or software, or systems not installed, operated and/or maintained in accordance with our or the manufacturers’ guidelines and/or specifications;
- for outages falsely reported to you due to errors in internal or external monitoring;
- for outages caused by maintenance work by VetZ.
VetZ is also liable for any culpable injury to life, body or health. Otherwise, VetZ is liable without limitation only for gross negligence and intent. For slight negligence, VetZ is liable only if an obligation is breached whose observance is of particular importance for achieving the contract purpose (so-called cardinal obligation). In the event of a breach of a cardinal obligation, liability is limited to twice the annual support fee of the affected contract software and to such damages whose occurrence must typically be expected when concluding the contract. In the event of delay damage and slight negligence, you have a claim limited to 10 percent of the agreed support fee of the affected contract software.
-
The term is based on the respective individual offer.
1.3 Cloud terms
If VetZ provides hosting services for easyVET, these are governed exclusively by the following terms. VetZ operates its hosting services in a secured hosting environment of Deutsche Telekom in Hanover on VetZ’s own hardware. No personal data is processed outside the EU.
-
Support time is the period during which the responsible technical customer service can be reached via the respective communication channel. The guaranteed support time is agreed separately.
-
The response time generally begins upon receipt of your report via the specified communication channel by VetZ. If your report does not reach VetZ via the correct channel, delays may occur.
Within the defined response time, you will receive a qualified statement from a VetZ employee containing an initial assessment of the report and information about the further procedure and, where possible, already the solution. The statement also includes information about the expected duration and scope of the reported disruption.
-
Within the defined restoration time, the error you reported will be remedied and the service made available again. The starting point for this period is likewise receipt of the report by VetZ via the aforementioned communication channels.
-
General maintenance work is not subject to these cloud terms and does not constitute a disruption within the meaning of these cloud terms. General maintenance work is usually not performed during normal business hours. VetZ will inform you about planned system maintenance as early as possible.
-
VetZ is not liable for:
- Outages not directly attributable to VetZ, in particular external DNS and routing problems, attacks on VetZ’s network/mail infrastructure (viruses) and outages of parts of the internet outside VetZ’s control.
- Outages caused by you, in particular outages caused by incoming/outgoing hacking attacks due to faulty and/or insufficient maintenance of your own hardware and software.
- Outages based on improper use or repair of your own hardware or software, or systems not installed, operated and/or maintained in accordance with the manufacturer’s or VetZ’s guidelines or specifications.
- Outages falsely reported by you due to errors in internal or external monitoring.
- Outages caused by maintenance work by VetZ.
Liability is in any case limited to the monthly amount of the booked product.
VetZ is liable without limitation in cases of intent or gross negligence, for injury to life, body or health, under the provisions of the Product Liability Act, and within the scope of a guarantee assumed by VetZ. Otherwise, all further claims due to a breach of duty by VetZ of whatever kind and legal basis are, insofar as not mandatorily otherwise regulated by law, limited to the order value of the individual order affected by the breach of duty. Claims for compensation for consequential damages, in particular lost profits, are excluded unless they concern personal injury.
2 General service terms for vetOS
These Service Terms describe the framework conditions under which VetZ GmbH provides, operates and supports the cloud-based software platform vetOS. They form the basis for the use, operation, support and technical availability of vetOS and consist of the Terms of Use, which govern the contractual rights and obligations between you and VetZ, as well as the Service Level Agreement (SLA), which describes the specific performance and support standards.
Both documents jointly apply as the General Service Terms for vetOS and are an integral part of the user relationship between you and VetZ.
In the event of contradictions between the General Terms and Conditions of VetZ GmbH and these General Service Terms for vetOS, these Service Terms shall apply exclusively for the use of vetOS.
2.1 Terms of use
-
These Terms of Use govern the contractual rights and obligations between you as a user of the cloud-based software platform vetOS and VetZ GmbH. Together with the associated Service Level Agreement (SLA), they form the General Service Terms for vetOS. By using vetOS you agree to these Service Terms, the Data Processing Agreement (DPA) and our data protection provisions.
-
With vetOS, VetZ provides a multi-tenant cloud platform for practice management, diagnostics and communication. The specific functional scope results from the respective product descriptions and published features.
VetZ reserves the right to continuously develop or adjust the functional scope in order to improve efficiency, security and user-friendliness. Changes will be made while safeguarding the legitimate interests of vetOS users.
-
Use of vetOS is reserved exclusively for veterinarians, veterinary facilities and their authorized employees. Authentication is carried out via suitable evidence (veterinary ID card or equivalent identification documents).
You are obligated to store your access credentials securely and prevent unauthorized access.
-
You undertake to use vetOS only for the intended purposes and in compliance with applicable law. In particular, it is prohibited to manipulate vetOS, copy or distribute it without authorization, or circumvent security-relevant systems.
You are responsible for the accuracy of the data entered.
-
VetZ performs regular automated backups in European data centers. These backups are redundant and encrypted. You do not need to create your own backups.
VetZ ensures data integrity, data availability and data restorability in accordance with the SLA below.
Personal data is processed in accordance with VetZ’s data protection provisions and DPA. Personal data is transferred to third parties only insofar as this is necessary to provide the contractual services.
-
VetZ may use automated or AI-supported systems to provide certain analysis, evaluation or documentation functions. These systems are operated exclusively in compliance with applicable data protection regulations and serve process optimization, quality assurance and efficiency gains in veterinary work.
VetZ ensures that there is no impermissible profiling or automated decision-making within the meaning of the GDPR.
-
VetZ uses software components and libraries from third parties in vetOS, including open-source software. These are used exclusively in accordance with the applicable license terms.
VetZ ensures that no disclosure obligations of its own source code arise and that your rights are not impaired.
The list of open-source components used can be viewed upon request.
To expand functionality, vetOS may be connected to third-party services via standardized APIs, e.g., for AI-supported analyses, image evaluation or external diagnostics.
VetZ regularly reviews the data protection and technical suitability of these providers and ensures that no impermissible data transfer outside the EU occurs.
You do not receive any separate right of use in these third-party software components. They are exclusively part of the overall vetOS application and may neither be used in isolation nor extracted. VetZ remains responsible for their correct licensing, integration and maintenance.
VetZ assumes no liability for disruptions directly attributable to external systems, but undertakes to monitor them without undue delay and to take suitable measures to restore operations.
-
Use of vetOS is based on monthly license fees, which include all support and service as per the SLA. All fees are plus applicable statutory VAT.
VetZ reserves the right to adjust prices in the event of material changes in technical, legal or operational conditions.
Paid add-on services such as installations, data migrations, system integrations and trainings are not included in the monthly license fee and will be billed separately based on effort if used.
-
VetZ is liable without limitation in cases of intent or gross negligence and in the event of injury to life, body or health. In cases of simple negligence, VetZ is liable only if an essential contractual obligation has been breached.
VetZ is liable for data loss only if such loss is attributable to intentional or grossly negligent conduct.
-
The user contract is concluded for an indefinite term and may be terminated with 30 days’ notice.
The right to terminate without notice for good cause remains unaffected.
After the end of the contract, all personal data will be deleted in accordance with statutory retention periods.
-
German law applies to the exclusion of the UN Convention on Contracts for the International Sale of Goods.
Jurisdiction is Hanover, insofar as you are a merchant within the meaning of the German Commercial Code (HGB).
2.2 Service level agreement (SLA)
-
This Service Level Agreement (SLA) specifies the service, support and availability standards referenced in the Terms of Use for vetOS. It applies in addition to the Terms of Use for vetOS.
-
The monthly license price includes all support and service for vetOS.
To ensure clear and efficient support, VetZ operates a three-tier support system:- 1st Level Support – AI-assisted first contact
The integrated AI chatbot answers frequent questions, supports navigation in vetOS and refers to relevant content in the vetOS knowledge base. This enables immediate help without waiting times. - 2nd Level Support – Advanced technical support
If the chatbot cannot fully resolve an issue, qualified VetZ employees take over during normal business hours (Monday to Friday 08:00–17:00, except on public holidays). They analyze technical details, use internal tools and resolve more complex requests to restore practice operations as quickly as possible. Contact is by phone or, if necessary, via remote access. - 3rd Level Support – Expert service (24/7)
The telephone expert support is available around the clock. Specialists from development, product management and system administration handle technical escalations or critical system events.
In addition, the comprehensive vetOS knowledge base is available, containing step-by-step guides, best-practice examples, video tutorials and articles on all vetOS functions. It supports self-help and continuous knowledge transfer for practice teams.
In particular, the monthly license price includes:
- Access to the vetOS knowledge base with articles, videos and best-practice examples
- Use of the integrated AI-based support chatbot (1st level)
- Telephone 2nd-level support by VetZ employees during business hours (Monday to Friday 08:00–17:00, except public holidays)
- 24/7 expert hotline (3rd level) for technical escalations and system outages
- Proactive system monitoring, troubleshooting and maintenance
- Regular security and feature updates
Paid add-on services such as installations, trainings, data migrations and individual system customizations are not part of the regular service scope and will be billed based on effort in accordance with the valid price list.
- 1st Level Support – AI-assisted first contact
-
Support requests are primarily submitted via the integrated AI chatbot. If the issue cannot be resolved there, you will be automatically escalated to telephone support (2nd level).
VetZ uses an internal GDPR-compliant system to document support cases.
-
- 1st Level Support (AI chatbot): available 24 hours a day, 7 days a week
- 2nd Level Support (VetZ employees): Monday to Friday, 08:00–17:00 (except public holidays)
- 3rd Level Support (VetZ specialists): available 24 hours a day, 7 days a week
Maintenance work is generally performed outside peak usage times and announced in advance.
-
VetZ undertakes to handle support requests according to urgency with defined response and resolution targets. Severity is determined based on impact on practice operations.
For critical incidents (Priority 1) that affect the entire system or essential functions of vetOS, VetZ responds within one hour—regardless of day or time—and works with highest priority on restoring functionality. Target resolution is within eight hours.
For medium priority incidents (Priority 2) where central functions are restricted but basic operation remains possible, VetZ responds within two hours during support times. Target resolution is within 24 hours.
For low priority incidents (Priority 3) that do not immediately impair practice operations, VetZ responds within four hours during business hours and generally resolves the cause within three business days.
General inquiries, improvement suggestions and cosmetic topics (Priority 4) are considered by agreement as part of release planning.
VetZ will inform you if a longer processing time is expected and keep you updated on progress.
-
VetZ guarantees monthly system availability of at least 99% (excluding scheduled maintenance windows). Availability is continuously monitored and documented.
-
VetZ performs regular technical maintenance, feature updates and security optimizations. Major changes are announced and documented in advance.
-
All data is backed up automatically and encrypted in EU data centers. VetZ guarantees daily backups and recovery in emergency operations. You do not need to create your own backups.
-
VetZ continuously monitors vetOS for stability, performance and security.
Upon request, evidence or status reports regarding system availability can be provided. -
This SLA is part of the Terms of Use for vetOS and takes effect upon first use of vetOS. Changes will be announced with 30 days’ notice. In the event of objection, the contract may be terminated without notice for cause.
3 Terms of use for vetsXL
-
These Terms of Use govern the provision and use of the veterinary communication and integration platform vetsXL by VetZ GmbH.
vetsXL digitally connects veterinary practices, laboratories, diagnostics companies, pharmaceutical manufacturers, universities, insurers and other partners of the veterinary ecosystem. Via vetsXL, veterinary data, laboratory results, images, orders and documents are exchanged and stored securely and in a structured manner.
Technical provision is performed in a secured hosting environment of Deutsche Telekom in Hanover, operated on VetZ’s own hardware.
VetZ continuously develops vetsXL to ensure functionality, security and user-friendliness. Changes will be made while safeguarding your legitimate interests.
-
Registration is required to use vetsXL. Registration may be performed manually or—if an integration with easyVET exists—automatically.
Use is reserved exclusively for professional users (veterinarians, veterinary facilities and authorized employees). Proof of professional qualification may be provided by suitable documents (veterinary ID card, practice verification or business registration).
Upon completion of registration, the user contract between you and VetZ is concluded.
-
vetsXL serves the secure and encrypted transmission, storage and management of veterinary data between authorized communication partners. VetZ does not perform any content control or editorial processing of transmitted data, but stores it permanently insofar as required for provision, traceability and legally permissible archiving.
You grant VetZ a simple right of use in the transmitted data, limited to the duration of use, which is required exclusively for technical storage, provision and transmission within vetsXL. Any further use of the data by VetZ does not take place.
-
vetsXL enables connection and communication with external providers such as laboratories, pharmaceutical companies or insurers. For content, services and data provided by these providers, their own terms of use and data protection provisions apply. VetZ provides only the technical connection and does not become a contractual partner of third-party services processed via vetsXL.
For all services mediated or integrated via vetsXL, the General Terms and Conditions and data protection provisions of VetZ GmbH additionally apply.
-
Processing and storage of personal data within the scope of using vetsXL occurs on behalf of the customer pursuant to Article 28 GDPR and the provisions of the Data Processing Agreement (DPA) of VetZ GmbH.
Via vetsXL, VetZ processes and stores transmitted personal data insofar as this is necessary to provide the contractually agreed services. This includes in particular secure storage, archiving and provision of communication, order and diagnostic data between veterinary practices and their partners.
All data is processed and stored in a secured VetZ server environment. VetZ ensures compliance with applicable data protection regulations, in particular the GDPR, as well as the technical and organizational measures listed in the DPA.
Personal data is transferred to third parties only insofar as this is necessary for the respective communication or order purpose or a legal obligation exists.
-
You undertake to use vetsXL only for the intended purposes, not to transmit unlawful content or infringe third-party rights, to keep access data confidential and to prevent unauthorized access.
In the event of recognizable security risks, malfunctions or unauthorized access, you are obligated to inform VetZ without undue delay.
-
VetZ guarantees availability and security of vetsXL in accordance with the state of the art.
VetZ is liable without limitation in cases of intent and gross negligence and in the event of injury to life, body or health. In cases of simple negligence, VetZ is liable only for breach of essential contractual obligations and only for the foreseeable, typical contractual damage.
VetZ is not liable for outages outside VetZ’s sphere of influence (e.g., internet disruptions, errors by third-party providers, attacks by third parties).
-
VetZ operates vetsXL with the aim of high technical stability and continuous availability. The platform is generally available around the clock; scheduled maintenance work is carried out, where possible, outside peak usage times and announced in advance.
Support inquiries can be submitted during normal business hours via the known communication channels. VetZ endeavours to respond to incoming support inquiries within a reasonable time and to remedy any disruptions promptly.
VetZ does not guarantee specific response or restoration times, but ensures the best possible availability through continuous system monitoring and proactive maintenance.
-
All rights in and to the vetsXL platform, including software, APIs, design and documentation, remain with VetZ.
Use is permitted only within the scope of the granted user contract. Disclosure, reproduction or decompilation of the software is prohibited.
-
The user contract is concluded for an indefinite term. It may be terminated by either party with 30 days’ notice to the end of the month.
The right to terminate without notice for good cause remains unaffected.
After the end of the contract, all stored personal data will be deleted or anonymized in accordance with statutory retention periods.
-
VetZ reserves the right to amend these Terms of Use due to technical or legal changes. You will be informed of changes in text form in due time. If you do not object to the changes within 30 days, they shall be deemed accepted.
-
German law applies to the exclusion of the UN Convention on Contracts for the International Sale of Goods.
Jurisdiction is Hanover if you are a merchant within the meaning of the German Commercial Code (HGB) or have your registered office outside Germany.
4 Terms of use for petsXL
-
These Terms of Use govern the contractual rights and obligations between VetZ GmbH and you as a registered user of the petsXL platform—a web-based and mobile application for pet owners to manage pet-health-related information and to communicate with veterinary practices.
Use of petsXL is free of charge; certain optional additional functions may be unlocked for a fee via in-app purchases.
By registering for and using petsXL, you agree to these Terms of Use for petsXL, the data protection provisions and the Data Processing Agreement (DPA) of VetZ GmbH.
-
petsXL enables you to digitally manage your pets’ health, access health documents and communicate with participating veterinary practices. In addition, petsXL offers features such as online appointment booking, digital patient intake, electronic signatures, reminders for vaccinations and preventive measures, management of invoices, payment processing and a comprehensive health record.
VetZ reserves the right to continuously develop and adjust the functional scope to increase security, user-friendliness and efficiency. Changes will be made while safeguarding your legitimate interests.
-
Use of petsXL requires your registration as a user. You undertake to provide correct and complete information during registration and to keep your access data confidential.
The petsXL app is available for all common operating systems via app stores as well as as a web application.
-
If you connect with a veterinary practice via petsXL, you expressly consent to the exchange of data between you and the veterinary practice. The connection occurs only after mutual confirmation (consent by you and the veterinary practice).
You can remove this connection at any time on your own. After removal, no new data will be exchanged. Data already transmitted remains with the respective contractual partners in accordance with applicable data protection provisions.
-
VetZ processes personal data exclusively in accordance with the GDPR and VetZ’s data protection provisions.
The data is stored exclusively within the European Union and operated in a certified data center of Deutsche Telekom on VetZ’s own hardware.
Personal data is transferred to third parties only insofar as this is necessary to provide the contractual services or you have expressly consented.
All transmissions between petsXL, connected veterinary practices and third parties are encrypted.
-
petsXL uses AI-based systems to support you in information search, communication and organization of pet-health-related data. This includes in particular a digital AI assistant (chatbot) that answers general questions about pet health, petsXL functions or communication with veterinary practices. In the future, further AI-supported modules may be integrated, e.g., to provide personalized health content or to analyze anonymized data patterns to improve the platform.
All AI systems serve exclusively as support and efficiency enhancement and do not replace veterinary advice or diagnosis.
VetZ or its partners do not make automated individual decisions with legal effect within the meaning of Article 22 GDPR. Data processed by AI systems remains within the EU and is used exclusively to provide the function. Storage for training or development purposes takes place only in anonymized or aggregated form.
VetZ uses only certified technology providers who are obligated to comply with the GDPR and the European AI Regulation (AI Act). You will be clearly informed in petsXL when you are interacting with an AI function. VetZ ensures that all systems used are regularly reviewed for security, fairness, transparency and traceability.
-
You undertake to use petsXL only for the intended purposes and not to upload or transmit content that violates applicable law or third-party rights.
You may not misuse petsXL to endanger or circumvent the security or integrity of the system.
You are responsible for the data entered and content shared by you.
-
The basic functions of petsXL are available free of charge.
Certain additional functions may be activated via in-app purchases or optional subscriptions. The respective fees are transparently displayed and billed via the relevant app store systems.
-
VetZ is liable without limitation in cases of intent or gross negligence and in the event of injury to life, body or health. In cases of simple negligence, VetZ is liable only for breach of essential contractual obligations.
VetZ is not liable for damages caused by improper use, technical disruptions outside its sphere of influence, or third parties.
-
The user contract is concluded for an indefinite term. You may delete your registration at any time without notice.
VetZ reserves the right to terminate the contract with immediate effect for good cause, in particular in the event of misuse or violations of these terms.
After termination of the contractual relationship, personal data is deleted in accordance with statutory retention and deletion periods.
-
VetZ reserves the right to amend these Terms of Use due to technical or legal changes. You will be informed of changes in text form in due time. If you do not object to the changes within 30 days, they shall be deemed accepted.
-
German law applies to the exclusion of the UN Convention on Contracts for the International Sale of Goods.
Jurisdiction is Hanover if you are a merchant within the meaning of the German Commercial Code (HGB) or have your registered office outside Germany.
Privacy policy
Well protected. Well informed.
We – Veterinärmedizinisches Dienstleistungszentrum (VetZ) GmbH – offer a wide range of products across all areas of animal health. These include products such as our local and cloud-based laboratory, imaging, and practice management solutions easyVET and vetOS for veterinarians, digital X-ray systems, B2B platforms such as vetsXL for companies, as well as B2C web applications and apps such as petsXL for pet owners.
You – veterinarians, pet owners, organizations and companies, employees, and applicants – entrust us and our products with personal data every day. We regard it as part of our corporate responsibility to use this data sparingly and transparently and to protect it in the best possible way.
With this privacy policy, we describe when we collect personal data through interactions with you or through our products and how we manage this data. It applies to all interactions between you and VetZ and to all VetZ services, websites, apps, software, and diagnostic devices. Please also note the product-specific privacy information, which you will find at various places on this page.
When we collect personal data
We follow the principle of data minimization. This means that when collecting your personal data within the scope of our products and on our websites, we always ensure that we collect only the personal data that is necessary for the use of our products or that you voluntarily provide to us based on your consent.
We collect personal data, among other things, in the following situations:
-
If you use the contact forms on our websites or the email addresses provided there, we automatically store the personal data you transmit.
-
If you use the contact forms on our websites or the email addresses provided there, we automatically store the personal data you transmit.
-
If you register with vetsXL or petsXL, we store, in addition to the personal data you provide, your IP address as well as the date and time of your registration.
-
If you subscribe to our newsletters, we store, in addition to the personal data you provide, your IP address as well as the date and time of your registration.
We use Rapidmail for the dispatch of newsletters. Registration for our newsletter takes place in a so-called “double opt-in procedure.” After registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that no unauthorized person can register using your email address. When registering for the newsletter, your IP address as well as the date and time of registration are stored. This serves to prevent misuse of our services or of your email address.
Your data will not be passed on to third parties. An exception applies if there is a legal obligation to disclose the data. Your data is used exclusively for sending the newsletter. You can cancel your newsletter subscription at any time. You can also revoke your consent to the storage of your personal data at any time.
Your consent constitutes the legal basis for the processing of your data in accordance with Article 6 paragraph 1 (a) GDPR. The legal basis for sending newsletters following the sale of goods or services is § 7 paragraph 3 UWG (German Act Against Unfair Competition).
For the email dispatch of newsletters, we use the provider Rapidmail. The server location is Germany. For marketing purposes, the emails sent via Rapidmail contain a so-called tracking pixel, which connects to Rapidmail’s servers when the email is opened. This allows us to determine whether a newsletter has been opened. Clicks on links within the newsletter may also be analyzed.
-
When you register for our webinars, seminars, and other events.
-
If you apply to us, we store the personal data you provide as well as your application documents.
-
If you use Microsoft Teams, information such as user details, email address, profile picture, preferred language, meeting metadata, as well as text, audio, and video data is processed. This depends on the information you provide.
If you use the chat function, the text entries you make are processed so that they can be displayed. To enable the display of video and the playback of audio, data from your device’s microphone and camera is processed for the duration of the meeting. You may deactivate your camera or microphone at any time.
VetZ GmbH is responsible for data processing that occurs in direct connection with the conduct of online meetings. If you access the Microsoft Teams website, the provider of Microsoft Teams is responsible for the associated data processing.
-
If you participate in remote maintenance, TeamViewer GmbH processes your IP address, location, MAC address of your computer, and the start and end of the TeamViewer connection. We do not process any connection data.
During technical maintenance work, technicians may gain knowledge of content on your computer. No further data processing takes place.
-
-
Our practice management software with its electronic case file is the central platform for practice management, imaging management, animal health, and communication for veterinary practices, clinics, associated sites, and veterinary medical faculties.
easyVET collects personal data of veterinarians, employees in veterinary practices, pet owners who have their animals treated in veterinary practices, and employees in veterinary practices, organizations, and companies with which veterinary practices collaborate.
As a veterinarian, your personal data is collected when purchasing the software, during installation, and as part of registrations.
As an employee in a veterinary practice, your personal data is collected if a veterinary practice using easyVET creates a user account for you.
As a pet owner, your personal data is collected when you have your animals examined and treated in a veterinary practice using easyVET.
As an employee in veterinary practices, organizations, or companies, your personal data is collected if a veterinary practice using easyVET records you as a contact.
easyVET is connected to our web applications vetsXL and petsXL, facilitating data exchange with third parties. More information can be found in the section “When we share personal data” under vetsXL and petsXL.
-
Our imaging management software with its electronic image archive is a veterinary PACS with comprehensive viewing and diagnostic functionality for images, videos, and series from any cameras, digital X-ray systems, ultrasound devices, endoscopy systems, CT, and MRI equipment.
easyIMAGE collects personal data of veterinarians, veterinary practice employees, and pet owners who have their animals treated in veterinary practices.
As a veterinarian, your personal data is collected when purchasing the software, during installation, and during registrations.
As an employee in a veterinary practice, your personal data is collected if a practice using easyIMAGE creates a user account for you.
As a pet owner, your personal data is collected when you have your animals examined and treated in a veterinary practice using easyIMAGE.
easyIMAGE is connected to our web application vetsXL and enables simplified data exchange with third parties. More information can be found in the section “When we share personal data” under vetsXL.
-
Our VetZ Cloud Services provide ideal conditions for cloud-based work with the remote desktop apps of easyVET and easyIMAGE. When purchasing and setting up your cloud environment, we collect personal data of your veterinary practice.
All personal data you collect when using easyVET and easyIMAGE is stored in our own data center in Isernhagen (Germany) and never leaves the European Union.
-
Our cloud-based diagnostics and practice management platform vetOS provides veterinary practices with a central digital environment for practice workflows, diagnostics, organization, billing, data management, data analysis, and communication.
vetOS is available via web browser and apps on all major operating systems and is operated exclusively via secure servers within the European Union.
vetOS collects personal data of veterinarians, employees in veterinary practices, organizations and companies, and pet owners whose animals are treated in veterinary practices using vetOS.
As a veterinarian, your personal data is collected during registration, authentication, and use of vetOS. Authentication is available exclusively to licensed veterinarians or appropriately authorized individuals. Evidence such as a veterinary ID card or equivalent documentation may be required.
As an employee in a veterinary practice, your personal data is collected if a veterinary practice using vetOS sets up a user account for you.
As a pet owner, your personal data is processed when your animals are examined and treated in a veterinary practice using vetOS.
As an employee in veterinary practices, organizations, or companies, your personal data is collected if a veterinary practice using vetOS records you as a contact.
vetOS is connected to our web application petsXL, facilitating data exchange with third parties. More information is available in the section “When we share personal data” under petsXL.
All data exchange takes place exclusively via encrypted connections and within VetZ’s European cloud infrastructure. No processing takes place outside the European Union.
-
Our digital X-ray systems XDR and XCR enable the acquisition of digital radiographic images of animals. To associate these images with the animal, the pet owner, and the veterinarian performing the X-ray examination, XDR and XCR collect personal data of pet owners and veterinarians.
-
Our web applications for veterinary medicine connect veterinary practices, organizations, and companies with their customers and enable simple, secure, and standardized data exchange via a central platform.
vetsXL collects personal data of veterinarians, veterinary practice employees, employees of organizations and companies, and pet owners whose animals are examined and treated in veterinary practices, organizations, and companies connected to vetsXL.
As a veterinarian or employee in a veterinary practice, organization, or company, your personal data is collected as part of your registration with vetsXL. In addition to the personal data you provide, your IP address and the date and time of your registration are stored.
As a pet owner, your personal data is collected when veterinary practices, organizations, or companies in which your animals are examined and treated use vetsXL to exchange data with connected practices, organizations, and companies or to document examination results.
vetsXL is seamlessly connected to easyVET, easyIMAGE, or other software and web applications (collectively referred to as software). This significantly simplifies data exchange between the software used by veterinary practices and all vetsXL users.
The personal data collected when using the software is exchanged with vetsXL depending on the web application if you have provided your consent. More information is available in the section “When we share personal data” under vetsXL.
-
Our web application for animal health and communication connects pet owners with their veterinarians, veterinary practices, clinics, and other pet owners. petsXL provides pet owners with a comprehensive health record for their animals, supports them in various animal health activities, and serves as a communication platform and social network for everyone.
petsXL is available as a web application and as an app for all operating systems and devices. petsXL collects personal data of pet owners and other natural persons.
If you register as a pet owner or other natural person with petsXL, we collect your personal data including your IP address, information about your smartphone, tablet, or other mobile devices, as well as the date and time of your registration.
If your device includes a location function, we collect your location data if you have given us consent. Location data is collected solely to determine your location and is not stored.
If you personalize your petsXL profile with an image from your gallery, we access your image gallery. The selected image is used and stored exclusively to personalize your profile. It is not used for any other purpose and is not shared with third parties. You may replace or delete the selected image at any time via the corresponding function in your profile.
petsXL is seamlessly connected to easyVET and other software and cloud applications (hereinafter software). This significantly simplifies data exchange between the software used by veterinary practices and all petsXL users. The personal data collected when using the software is exchanged with petsXL depending on the area of application if you have provided your consent.
More information on data exchange via petsXL can be found in the section “When we share personal data” under petsXL.
-
Legal bases
Where the processing of personal data is necessary for the performance of a contract to which you, as the data subject, are a party, Article 6 paragraph 1 letter b GDPR serves as the legal basis. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6 paragraph 1 letter c GDPR serves as the legal basis.
In the event that vital interests of you as the data subject or of another natural person require the processing of personal data, Article 6 paragraph 1 letter d GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party and such interests are not overridden by your interests or fundamental rights and freedoms as the data subject, Article 6 paragraph 1 letter f GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities.
In the context of your application with us, the legal basis for the processing of your personal data is primarily Section 26 of the German Federal Data Protection Act (BDSG). According to this, the processing of data is permissible if it is necessary in connection with the decision on the establishment of an employment relationship. Should the data be required for the assertion of legal claims after completion of the application process, data processing may be carried out on the basis of the conditions set out in Article 6 GDPR, in particular for the purposes of the legitimate interests pursuant to Article 6 paragraph 1 letter f GDPR. Our interest then lies in the assertion or defense of claims.
Insofar as personal data of employees of VetZ GmbH is processed, Section 26 BDSG is the legal basis for the data processing. If, in connection with the use of Microsoft Teams, personal data is not required for the establishment, implementation, or termination of the employment relationship, but is nonetheless an essential component in the use of Microsoft Teams, Article 6 paragraph 1 letter f GDPR is the legal basis for the data processing. In these cases, our interest lies in the effective conduct of online meetings. Otherwise, the legal basis for data processing in the conduct of online meetings is Article 6 paragraph 1 letter b GDPR, insofar as the meetings are carried out in the context of contractual relationships. If no contractual relationship exists, the legal basis is Article 6 paragraph 1 letter f GDPR. Here too, our interest lies in the effective conduct of online meetings.
The legal basis for remote maintenance with TeamViewer is consent pursuant to Article 6 paragraph 1 letter a GDPR. Insofar as personal data of employees of VetZ GmbH is processed, Section 26 BDSG is the legal basis for data processing.
How we use personal data?
We use your personal data exclusively to ensure a smooth process for you and to enable the simple and functional use of our products. In doing so, we handle your data responsibly.
We process your personal data for the following purposes:
- For the preparation of offers, order processing, delivery, provision, and billing of our products.
- To inform you about new products and features, updates and upgrades, system extensions, special offers, and everything else with regard to VetZ and our products.
- To provide you with the option of creating a personal user profile with which you can access our offerings. In some of our products, you can share information about yourself (including personal data) with other registered users of the same offering and send emails, SMS messages, and other communications. By means of the functions of the respective offering, you can determine which information you wish to share.
- To enable you to have a personalized user experience and to display protected content.
- To safeguard and monitor the quality of our information and consulting services.
- To contact you, to respond to your inquiries, to provide information on shipping and billing matters, for feedback, and for support.
- To prepare our employees for questions that you may have about us and our offerings.
- To process job applications.
- To prepare anonymized data regarding the use of our websites and offerings, which we use exclusively to improve our websites and offerings.
- To fulfill contractual obligations.
- To comply with applicable regulatory requirements.
If personal data relating to you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. This also applies to profiling, insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. Further information about your possibilities to object can also be found under “Your control options regarding personal data and your rights.”
The collection and processing of your personal application data is carried out exclusively for the purpose of filling positions within our company.
Use of AI applications
In connection with the use of vetOS and petsXL, functions based on artificial intelligence (AI) are used. These technologies support veterinarians, veterinary medical professionals, and employees in veterinary practices as well as pet owners in the processing of information, communication, and organization.
In vetOS, AI-based functions are used in particular to support diagnostics, medical documentation, the organization of internal practice workflows, and administrative activities. In petsXL, AI systems are used, for example, in the form of a digital assistant (chatbot) that supports pet owners with questions about animal health, use of the platform, or communication with veterinary practices. In the future, AI-supported functions may also contribute to the analysis of veterinary information or the provision of personalized health content.
All systems used serve exclusively as support and to increase efficiency; they do not replace any veterinary decision or responsibility.
The processing of personal data takes place only on the basis of an appropriate authorization or your consent and within the protected system environment intended for this purpose.
VetZ or its partners do not make any automated individual decisions with legal effect within the meaning of Article 22 GDPR.
Data processed by AI systems is used exclusively for analysis, result generation, and optimization of functionality. Storage for training or development purposes takes place only in anonymized or aggregated form and exclusively to improve the systems.
When integrating external AI components, VetZ uses exclusively certified technology providers who are contractually obligated to comply with the General Data Protection Regulation (GDPR). The processing of personal data takes place exclusively within the European Union or in countries for which an adequacy decision of the European Commission exists.
In addition, VetZ undertakes to regularly review all AI systems in use for data security, fairness, transparency, and traceability and to use only such technologies that meet VetZ’s high quality and data protection standards. In this way, it is ensured that the use of AI in vetOS and petsXL genuinely contributes to relieving the workload and improving veterinary and pet-owner-related processes, while the protection of personal data is maintained at all times.
When we share personal data
We do not disclose your personal data to third parties for commercial purposes. Your personal data is neither sold nor rented to third parties.
We only disclose your personal data to business partners if they are bound to our data protection standards. Disclosure to business partners takes place, among other things, for the dispatch of orders and promotional materials, for the processing of payments, for the announcement of freight deliveries, and, where applicable, in the context of credit checks.
In the context of your application, your data is generally forwarded only to those internal departments and specialist units of our company that are responsible for the specific application process. Your personal application data is not passed on to third parties (our clients or other companies within any corporate groups) without your explicit consent.
Personal data processed in connection with participation in online meetings is generally not shared with third parties unless it is intended to be shared. Please note that content from online meetings—just as in face-to-face meetings—is often specifically intended to communicate information to customers, prospects, or third parties and is therefore intended for disclosure. As an additional recipient, the provider of Microsoft Teams necessarily gains knowledge of the above-mentioned data.
Some of our products require the disclosure of personal data to third parties in order to use the functions of the products to their full extent:
-
Our practice management software easyVET is connected to our online platforms vetsXL and petsXL and, depending on usage, transfers personal data to third parties. More information can be found under vetsXL and petsXL.
-
Our imaging management software easyIMAGE is connected to our online platform vetsXL and, depending on usage, transfers personal data to third parties. More information can be found under vetsXL.
-
The remote desktop apps of easyVET and easyIMAGE are connected to our online platforms vetsXL (easyVET and easyIMAGE) and petsXL (easyVET) and, depending on usage, transfer personal data to third parties. More information can be found under vetsXL and petsXL.
The VetZ Cloud serves for data exchange of the data processed via the remote desktop apps of easyVET and easyIMAGE. This means that other registered users of easyVET and easyIMAGE can access the VetZ Cloud.
-
Our cloud-based practice and diagnostics platform vetOS is used by veterinary practices as central software for practice management, communication, and diagnostics.
In the context of the use of vetOS, personal data is shared with other authorized participants in the veterinary ecosystem insofar as this is necessary for the fulfillment of the respective function. This includes in particular:
- pet owners whose animals are treated in a practice that uses vetOS,
- companies and organizations in the field of veterinary medicine (B2B partners) that are integrated into treatment or logistics processes via vetOS, and
- practice management systems that are connected to vetOS via the open vetOS API in order to facilitate data exchange and workflows.
-
Our online platform vetsXL enables secure data exchange between veterinary practices and partners in the veterinary ecosystem, such as laboratories, teleradiologists, expert reviewers, breeding organizations, pet health insurers, factoring companies, suppliers, and animal registration bodies.
The transfer of personal data takes place exclusively to the extent necessary to fulfill the respective order or communication purpose, or where there is a legal obligation.
In this context, personal data of veterinarians, employees, and pet owners may be processed and transmitted to or made available for retrieval by authorized recipients.
VetZ does not carry out any substantive evaluation or processing of the transmitted data; it merely provides the technical platform for secure communication and data exchange.
Insofar as the respective partners carry out their own data processing, this is done under the sole responsibility of the respective organizations in accordance with their own data protection provisions.
-
Our online platform petsXL enables registered pet owners to manage and securely exchange animal health data with their veterinary practices and other health service providers in digital form. In the course of its use, personal data is shared to the extent necessary for the provision of the respective functions and services.
This includes, in particular, the transfer of data:
- to veterinary practices for communication, appointment scheduling, registration, treatment documentation, and billing,
- to laboratory and diagnostics service providers, pet health insurers, pharmacies, and public authorities for the performance of commissioned services,
- to wholesalers, manufacturers, and suppliers for orders placed via petsXL,
- to external payment service providers for transactions, and
- to technical service providers that support VetZ in operating and securing the platform.
petsXL stores personal data for as long as is necessary for the use of the platform, to fulfill legal obligations, or to safeguard legitimate interests.
There is no disclosure for advertising or marketing purposes.
All data transfers are encrypted and take place exclusively within the European Union.
How we protect personal data?
The protection of your personal data is particularly important to us. We have therefore implemented a number of technical and organizational measures to ensure the protection of your personal data.
These include processing and storing your personal data only for as long as is necessary to achieve the purpose of storage. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws, or other provisions to which we are subject.
As soon as the storage purpose ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.
Your personal application data is generally deleted automatically three months after the completion of the application process or as soon as the position has been filled otherwise. This does not apply if statutory provisions prevent deletion, if further storage is required for the purpose of providing evidence—however, for a maximum of six months—or if you have expressly consented to longer storage. If we are unable to offer you a currently vacant position but, based on your profile, believe that your application may be of interest for future job offers, we will store your personal application data for twelve months, provided you have expressly consented to such storage and use.
To protect your personal data, we use access and authorization controls, firewalls, antivirus programs, SSL security mechanisms, and various data backup and encryption procedures.
In connection with participation in online meetings via Microsoft Teams, data processing does not generally take place outside the European Union, as we have limited our storage location to data centers within the European Union. However, we cannot exclude the possibility that data routing may occur via internet servers located outside the EU. This may in particular be the case if participants in online meetings are located in a third country. The data is, however, encrypted and thus protected against unauthorized access by third parties.
In the context of remote maintenance, we process your personal data exclusively for the duration of the session. Your data is not stored and not passed on to third parties. Users may at any time prevent access to data during remote maintenance by ending the TeamViewer program.
For vetOS, additional security measures apply that reflect the state of the art. These include: role-based access controls (RBAC), optional multi-factor authentication (MFA) for registered users, encrypted data transmission and storage (TLS 1.3 / AES-256), regular penetration tests and security reviews, and a multi-tenant architecture for the separation of customer data.
Our partners have also been obligated under the statutory provisions to handle your data in a trustworthy manner and to observe our own data protection standards.
Your control options regarding personal data and your rights
If personal data relating to you is processed, you are a data subject within the meaning of the General Data Protection Regulation (GDPR), and you have the following rights in relation to us as the controller:
-
You may request confirmation as to whether personal data concerning you is being processed by us. If such processing is taking place, you may request information from us about the following:
- the purposes for which the personal data is processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration of storage of the personal data concerning you, or, if specific information on this is not possible, the criteria used to determine that duration;
- the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- any available information as to the source of the data if the personal data is not collected from the data subject; or
- the existence of automated decision-making, including profiling, referred to in Article 22 paragraphs 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you as the data subject.
You have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
-
You have the right to rectification and/or completion if the processed personal data concerning you is inaccurate or incomplete. We will carry out the rectification without undue delay.
-
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
- if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
- if the processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of its use;
- if we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims; or
- if you have objected to processing pursuant to Article 21 paragraph 1 GDPR pending verification of whether the legitimate grounds on our part override your grounds.
If the processing of personal data concerning you has been restricted, such data shall—apart from storage—only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been obtained under the above-mentioned conditions, you will be informed by us before the restriction is lifted.
-
You may request that the personal data concerning you be erased without undue delay, and we are obligated to erase such data without undue delay where one of the following grounds applies:
- the personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
- you withdraw your consent on which the processing is based according to Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a GDPR, and there is no other legal ground for the processing;
- you object to the processing pursuant to Article 21 paragraph 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 paragraph 2 GDPR;
- the personal data concerning you has been unlawfully processed;
- the erasure of the personal data concerning you is required for compliance with a legal obligation in Union or Member State law to which we are subject;
- the personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8 paragraph 1 GDPR.
If you wish to initiate the erasure or modification of your additional data stored with us, please contact us in writing at privacy@vetz.de.
If we have made the personal data concerning you public and are obliged pursuant to Article 17 paragraph 1 GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copies or replications of, that personal data.
The right to erasure does not exist insofar as processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation that requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
- for reasons of public interest in the area of public health in accordance with Article 9 paragraph 2 letters h and i and Article 9 paragraph 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89 paragraph 1 GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise, or defense of legal claims.
-
If you have exercised your right to rectification, erasure, or restriction of processing towards us, we are obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about these recipients.
-
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, to whom the personal data has been provided, where
- the processing is based on consent or on a contract and
- the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from us to another controller, where technically feasible. The freedoms and rights of other persons must not be adversely affected thereby.
The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
-
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Article 6 paragraph 1 letter e or f GDPR; this also applies to profiling based on those provisions.
We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
-
You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Please send your withdrawal to privacy@vetz.de.
-
Profiling means the creation, updating, and use of profiles by collecting data and subsequently analyzing and evaluating it for the purpose of optimizing (direct) marketing.
You have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for entering into, or performance of, a contract between you and us,
- is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
- is based on your explicit consent.
However, these decisions may not be based on special categories of personal data unless otherwise provided for by law and suitable measures to safeguard the rights and freedoms and your legitimate interests have been taken.
With regard to the cases referred to in (1) and (3), we will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.
-
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.
Cookies, social plug-ins from Facebook, Instagram, LinkedIn and Vimeo, web fonts, Google Analytics and Bing Maps
We use so-called cookies on our websites www.vetz.de, www.vetsXL, www.petsXL and www.vetos.vet. Cookies are data that are stored by the internet browser on your computer system. Cookies that are necessary for carrying out the electronic communication process or for providing requested functions or for optimizing our websites are stored on the basis of Article 6 paragraph 1 letter f GDPR. As the website operator, we have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. Insofar as consent to the storage of cookies has been requested, the storage of the relevant cookies takes place exclusively on the basis of this consent (Article 6 paragraph 1 letter a GDPR). Consent can be withdrawn at any time by changing the settings on our website.
We collect your IP address, your vetsXL ID, your petsXL ID, your browser type, the VetZ websites you visit, the objects you click on on individual VetZ websites, the time you spend on a specific website, the referring website from which you accessed a VetZ website, and the external website you access from a VetZ website.
Cookies can be transmitted to a page when it is accessed and thus enable users to be assigned. Cookies help to make the use of internet pages easier for users.
You may object to the placement of cookies at any time by changing the appropriate setting in your internet browser. Cookies that have already been set can be deleted. Please note that if cookies are deactivated, not all functions of our website may be fully usable.
-
vetOS uses only technically necessary cookies and session tokens that are required for authentication and secure operation of the application. These cookies are automatically deleted after logging out or closing the session. No tracking for marketing or analysis purposes takes place in vetOS.
-
So-called social plug-ins are functions and/or buttons of social media platforms such as Facebook, Instagram, LinkedIn, or Vimeo that we have integrated on our websites www.vetz.de and www.petsXL and vetos.vet. This function enables you to interact with the respective social media platform by simply clicking on such a button.
In doing so, we ensure that your personal data – such as your IP address – is not transmitted to the respective social media account merely by visiting a webpage. This only takes place after you click on the corresponding button. We inform you about the data transfer as soon as you move the mouse pointer over the button.
-
For our online offering we use Facebook fan pages operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook”). Please note that you use the Facebook fan pages and their functions on your own responsibility. This applies in particular to the interactive functions on Facebook.
We are jointly responsible with Facebook for data processing operations within the meaning of Article 26 GDPR, provided that we actually make a joint decision with the operators regarding data processing and also have an influence on the data processing. You can generally assert your rights (right of access pursuant to Article 15 GDPR, right to rectification pursuant to Article 16 GDPR, right to erasure pursuant to Article 17 GDPR, right to restriction of processing pursuant to Article 18 GDPR, right to data portability pursuant to Article 20 GDPR, and right to lodge a complaint pursuant to Article 77 GDPR) both against us and against Facebook.
We would like to point out that, despite joint controllership pursuant to Article 26 GDPR with the operators of social networks, we do not have full influence on data processing by the individual social networks. The corporate policy of the respective provider has a significant impact on our options. In the event that data subject rights are asserted, we may only be able to forward such requests to the operator of the social network.
When you visit us on Facebook, this triggers processing of your personal data. Facebook processes personal data relating to your account, your IP address, and the devices you use. Cookies are used to collect data. Facebook describes in general terms in its data use policies which information Facebook receives and how it is used. There you will also find information on how to contact Facebook, ways to object, and settings for ads.
The data use policies are available at the following link: http://de-de.facebook.com/about/privacy.
Facebook’s full data policy can be found at: https://de-de.facebook.com/full_data_use_policy.The information may be used by Facebook to provide us, as the operators of the Facebook pages, with statistical information such as gender and age distribution regarding the use of the Facebook page. In addition, Facebook may show you further information or advertising according to your preferences. Further information can be found here: http://de-de.facebook.com/help/pages/insights.
The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook does not clearly specify and we do not know how Facebook uses data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data, and whether data from a visit to the Facebook page is shared with third parties.
When you access a Facebook page, your IP address is transmitted to Facebook. According to Facebook, a “German” IP address is anonymized and deleted after 90 days. Facebook also stores information about the devices of its users. It may thus be possible for Facebook to assign IP addresses to individual users. If you are currently logged in as a user with Facebook, a cookie with your Facebook ID is stored on your device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages.
By means of buttons embedded in websites, Facebook is able to record your visits to these websites and associate them with your Facebook profile. Based on this data, content or advertising can be tailored to you. If you wish to avoid this, you should log out of Facebook or deactivate the “stay logged in” feature, delete the cookies present on your device, and close and restart your browser. This will delete Facebook information that can directly identify you. You can then use our Facebook page without revealing your Facebook ID.
If you access interactive features of the page, a Facebook login screen will appear. After any login, Facebook will again be able to recognize you as a specific user. Alternatively, you can use a different browser than usual for visiting our Facebook page.
Information on how you can manage or delete information about you can be found on the following Facebook support pages: https://de-de.facebook.com/about/privacy#
We do not collect or process any additional data from your use of our Facebook fan pages.
-
For our profile provided on Instagram, we use the technical platform and services of Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (hereinafter referred to as “Instagram”). Please note that you use this Instagram page and its functions on your own responsibility. This applies in particular to the use of interactive functions.
When you visit our Instagram page, Instagram collects, among other things, your IP address and other information that is present in the form of cookies on your PC. This information is used to provide us, as the operators of the Instagram pages, with statistical information about the use of the Instagram page. The data collected about you in this context is processed by Instagram Inc. and may be transferred to countries outside the European Union.
Instagram describes in general terms in its privacy policy which information Instagram receives and how this is used. There you will also find information on how to contact Instagram and on the settings for advertisements. The privacy policy is available at the following link: https://help.instagram.com/519522125107875
When you access an Instagram page, the IP address assigned to your device is transmitted to Instagram. According to Instagram, a “German” IP address is anonymized and deleted after 90 days. Instagram also stores information about the devices of its users. It may thus be possible for Instagram to assign IP addresses to individual users.
Instagram does not clearly specify and we do not know how Instagram uses data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Instagram stores this data, and whether data from a visit to the Instagram page is shared with third parties.
If you are currently logged in as a user with Instagram, a cookie with your Instagram ID is stored on your device. This enables Instagram to track that you have visited this page and how you have used it. This also applies to all other Instagram pages.
By means of buttons embedded in websites, Instagram is able to record your visits to these websites and associate them with your Instagram profile. Based on this data, content or advertising can be tailored to you. If you wish to avoid this, you should log out of Instagram or deactivate the “stay logged in” feature, delete the cookies present on your device, and close and restart your browser. This will delete Instagram information that can directly identify you. You can then use our Instagram page without revealing your Instagram ID.
If you access interactive features of the page, an Instagram login screen will appear. After any login, Instagram will again be able to recognize you as a specific user. Information on how you can manage or delete information about you can be found in the Instagram help section.
We do not collect or process any additional data from your use of our Instagram profile.
-
For our profile on LinkedIn, provided at https://www.linkedin.com/company/vetz, we use the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”). Please note that you use this LinkedIn page and its functions on your own responsibility. This applies in particular to the use of interactive functions.
When you visit our LinkedIn page, LinkedIn collects your IP address and other information that is present in the form of cookies on your PC. This information is used to provide us, as the operators of the LinkedIn pages, with statistical information about the use of the LinkedIn page. Further information from LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.
The data collected about you in this context is processed by LinkedIn Inc. and may be transferred to countries outside the European Union. LinkedIn describes in general terms in its data use policies which information LinkedIn receives and how this is used. There you will also find information on how to contact LinkedIn and on the settings for advertisements. The data use policies are available at the following link: https://www.linkedin.com/legal/privacy-policy.
When you access a LinkedIn page, the IP address assigned to your device is transmitted to LinkedIn. According to LinkedIn, a “German” IP address is anonymized and deleted after 90 days. LinkedIn also stores information about the devices of its users. It may thus be possible for LinkedIn to assign IP addresses to individual users.
LinkedIn does not clearly specify and we do not know how LinkedIn uses data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are assigned to individual users, how long LinkedIn stores this data, and whether data from a visit to the LinkedIn page is shared with third parties.
If you are currently logged in as a user with LinkedIn, a cookie with your LinkedIn ID is stored on your device. This enables LinkedIn to track that you have visited this page and how you have used it. This also applies to all other LinkedIn pages.
By means of buttons embedded in websites, LinkedIn is able to record your visits to these websites and associate them with your LinkedIn profile. Based on this data, content or advertising can be tailored to you. If you wish to avoid this, you should log out of LinkedIn or deactivate the “stay logged in” feature, delete the cookies present on your device, and close and restart your browser. This will delete LinkedIn information that can directly identify you. You can then use our LinkedIn page without revealing your LinkedIn ID.
If you access interactive features of the page, a LinkedIn login screen will appear. After any login, LinkedIn will again be able to recognize you as a specific user. Information on how you can manage or delete information about you can be found at: https://www.linkedin.com/legal/privacy-policy.
We do not collect or process any additional data from your use of our LinkedIn profile.
-
For our XING profile, we use the technical platform and services of XING AG, Dammtorstraße 30, 20354 Hamburg, Germany (hereinafter referred to as “XING”). Please note that you use the service offered here and its functions on your own responsibility. This applies in particular to the use of interactive functions.
If you access the page and are logged into your XING account at the same time, XING can directly associate the visit to our website with your XING account. If you do not want XING to associate your data with your account, you must log out of XING before visiting our website.
Data about you can be collected via this social media profile by means of cookies, regardless of whether you have an account with XING or not. They are regularly stored on the users’ devices when visiting a XING page, including this profile. The information stored in the cookies is received, recorded, and processed by XING, in particular when a user visits XING services, services provided by other members of the corporate group, and services provided by other companies that use XING services.
In addition, other parties such as XING partners or even third parties may use cookies on XING services to provide services to companies advertising on XING. Further information on the use of cookies by XING can be found in XING’s privacy policy.
Cookies are primarily set to display personalized advertising to visitors of XING websites. This is done by showing users, on our XING profile, advertisements from XING partners whose websites the users have previously visited. In addition, cookies make it possible to create statistics on the use of a social media profile so that XING and we can understand the use of a social media profile.
The collection of your data by cookies in the context of the use of the social media profile is neither legally nor contractually required. Nor is it necessary for concluding a contract. You are therefore not obliged to transmit your data to XING. However, failure to transmit your data (for example, by blocking cookies) means that we may not be able to provide you with our social media profile or only in a limited manner.
We operate this XING page in order to present ourselves to XING users and other interested persons who visit this XING page, to provide information regarding recruiting and career opportunities with us, and to communicate with users. The processing of users’ personal data is based on our legitimate interest in an optimized corporate presentation (Article 6 paragraph 1 letter f GDPR).
XING users can influence the extent to which their user behavior may be recorded when visiting our XING page under the settings for advertising preferences. Further options are provided in the XING settings or via the objection form.
The processing of information by means of cookies used by XING can be prevented by not allowing third-party cookies or XING cookies in your own browser settings.
Further details on the use of cookies by XING can be found at: https://privacy.xing.com/de/datenschutzerklaerung
-
We have integrated videos from the provider Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011 (hereinafter referred to as “Vimeo”), into our online offering.
Some of our internet pages contain videos from Vimeo. When you access such an internet page of our website, a connection to the Vimeo servers is established. This transmits to the Vimeo server which of our internet pages you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. Clicking the start button of a video may also result in this information being assigned to an existing user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the relevant Vimeo cookies.
We use this service as part of our online offering on the basis of our legitimate interest in analyzing, optimizing, and operating our online offering in a commercially efficient manner. The legal basis is Article 6 paragraph 1 letter f GDPR.
Further information on data processing and privacy by Vimeo can be found at: https://vimeo.com/privacy.
Vimeo also calls up the Google Analytics tracker via an iFrame in which the video is invoked. This is Vimeo’s own tracking, over which we have no control. You can prevent tracking by Google Analytics by using the deactivation tools that Google provides for some internet browsers. Users can also prevent the collection of data generated by Google Analytics and related to their use of the website, including their IP address, as well as the processing of such data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
-
Our websites use so-called web fonts provided by Google to ensure uniform presentation of fonts. When you access a page, your browser loads the required web fonts into its browser cache so that text and fonts are displayed correctly.
For this purpose, the browser you are using must connect to the servers of Monotype GmbH. Through this, Monotype GmbH becomes aware that our website has been accessed via your IP address. The use of web fonts is in the interest of a uniform and appealing presentation of our websites. This constitutes a legitimate interest within the meaning of Article 6 paragraph 1 letter f GDPR.
If your browser does not support web fonts, a standard font from your computer will be used. Further information can be found in the privacy policy of Monotype GmbH.
-
Some of our websites use the Google Analytics web analytics service. Google Analytics stores cookies on your device so that we can analyze your use of our websites. The information generated by the cookie is transmitted together with your IP address to a Google server in the USA and stored there.
Analysis by Google Analytics takes place only with your consent pursuant to Article 6 paragraph 1 letter a GDPR. You can withdraw your consent at any time on our website by changing the settings.
Google uses this information to evaluate your use of our websites, to compile reports on website activity for us, and to provide other services related to website activity and internet usage. Google may transfer this information to third parties where required to do so by law or where such third parties process the data on Google’s behalf.
Google will not associate your IP address with any other data held by Google. Google has developed a browser add-on to disable Google Analytics. It enables you to have more control over whether the data generated by Google Analytics is collected. The add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that no information about website visits should be sent to Google Analytics. It can be downloaded from the following website: http://tools.google.com/dlpage/gaoptout
-
We use the Bing Maps map service (operated by Microsoft Corp., One Microsoft Way, Redmond, WA 98052-6399, USA) in petsXL to display geographic information.
By using Bing Maps, data about your use of petsXL may be transmitted to Microsoft, collected, and used by Microsoft. On each use of Bing Maps, a cookie may be set by Microsoft. In this way, Microsoft processes your user settings and user data. This cookie is not deleted by closing petsXL but expires after a certain time unless you delete it manually beforehand.
Further information can be found in Microsoft’s privacy statements. If you do not agree with the processing of your data, you can deactivate the JavaScript function in your internet browser so that no data is transmitted to Microsoft. Please note that in this case you may not be able to use Bing Maps, or only with limited functionality.
-
We use the Sentry service of Functional Software Inc. to detect, analyze, and log technical issues within vetOS and petsXL. This ensures the stability and quality of our applications and enables us to continuously improve them.
In the event of a malfunction and during monitoring of system stability, information such as IP address, browser type, technical device data, timestamps, and usage data (for example, called URLs or user interactions) may be collected and processed.
Data processing is carried out on the basis of Article 6 paragraph 1 letter f GDPR. Our legitimate interest lies in the secure, disruption-free, and user-friendly provision of our services. Data is processed exclusively on servers within the European Union (location: Germany). We have concluded a data processing agreement pursuant to Article 28 GDPR with the provider.
Contact
If you have any questions or wish to exercise your data protection rights in any of the cases mentioned, please feel free to contact us at privacy@vetz.de or privacy@effem.com.
Veterinärmedizinisches
Dienstleistungszentrum (VetZ) GmbH
The Data Protection Officer
Mars, Incorporated
c/o: Chief Data Protection
und Chief Privacy Officer
Dundee Road
Slough, Berkshire SL1 4LG
Kontakt: privacy@effem.com
Responsible body for data processing:
Veterinärmedizinisches
Dienstleistungszentrum (VetZ) GmbH
Sattlerstraße 40
D-30916 Isernhagen