3. Personal Data processed and sources of information

The information we collect include the following categories of Personal Data:

• Indentity and contact details (such as name, email, telephone number and shipping, billing address)
• Payment or credit card information
• personal preferences (such as your wish list as well as marketing and cookie preferences)
• Electronic identification data (Internet Protocol (IP) address, username, password, cookies, device identification data such as type, MAC address, browser and operating System)
• Location data (such as general location based on Internet Protocol address, geolocation from your mobile device)

Active Horse Service e.K. collect the information in following ways:

Active Horse Service e.K. ask you for certain Personal Data that Active Horse Service e.K. need in order to provide you the products or services you request. For example, when you make purchases, contact Active Horse Service e.K., request to receive communications, or interact with Active Horse Service- sites or our shop.

When interacting with Active Horse Service e.K. sites, Personal Data is automatically collected and shared with Active Horse Service e.K. by the technology platforms providing the experience. For example, your web browser or mobile device may share certain Personal Data with Active Horse Service e.K. as those devices interact with Active Horse Service sites.

 

4. Purpose and legal basis for processing Personal Data

Active Horse Service e.K. use the Personal Data that Active Horse Service e.K. collect from you in the following ways:

To deliver and fulfil your purchases and other services you request

when you use Active Horse Service e.K.-sites, we will use your Personal Data to provide the product or service you have selected. For example, if you make a purchase on Active Horse Service e.K. websites, or participate in an event or promotion, we will use the contact information you give us to communicate with you about the purchase or promotion. If you reach out to Active Horse Service e.K., we will use information about you, such as delivery or payment information, or the product you have purchased to help you resolve a problem or question.

In many cases, to use particular features within our sites, and services you may need to provide Active Horse Service e.K. with additional Personal Data or additional consent to use particular personal data in a certain way.

The legal basis for processing this Personal Data is the purchase contract with its terms and conditions.

To communicate information about our products and services.

If we use your data, we ask for your consent to send you marketing information about products, services, events and promotions.

The legal basis for processing this Personal Data is your consent and our legitimate interest to provide information, news and offers.

To operate, improve and maintain our business, products and services

we use the Personal Data you provide to us to operate our business. For example, when you make a purchase, we use that information for accounting, auditing and other internal functions. As another example, we use Personal Data about how you use our products and services to enhance your user experience and to help us diagnose technical and service problems and administer our sites.

The legal basis for processing this Personal Data is a legitimate interest.

To protect our or others' rights, property or safety based on legitimate interest, we may also use personal data about how you use our sites to prevent or detect fraud, abuse, illegal uses and violations of our terms of use and to comply with court orders, governmental request or applicable law.

For general research and analysis purposes

Active Horse Service e.K. use Personal Data about how our visitors use our sites and services to understand customer behavior or preferences. For example, we may gather and analyze information about site search to better understand how to optimize our product offering and customer experience to our customers and site visitors.

Other Purposes

We may also use your personal data in other ways, but we will provide specific notice at the time of collection and obtain your consent where necessary. In these cases the legal basis for processing your Personal Data is based on your consent or our legitimate interest.

5. Consent

We take privacy very seriously. It is important for us to be transparent and ask for your consent when required for processing your Personal Data.

Parental consent

If you are below 16 years old and using our services, please make sure that your parents approve the processing of your Personal Data.

If you believe that we might have any information from or about a child under the age that requires parental consent, without a parental consent, please contact us at 

a.sokollis@active-horse-service.de

Withdrawal of consent

You can withdraw your consent at any time. We will comply with such request unless there is another legitimate ground to process the Personal Data.

For Cookie consent: Please read our cookie policy.

You can contact us for all other requests related to withdrawal of consent.

6. Retention of Personal Data

The Personal Data we collect is retained for the period necessary to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required by law. Thereafter, the Personal Data will be deleted within a reasonable timeframe or rendered anonymous.

The retention periods depend on the purpose of the processing and type of the information.

Personal Data and retention periods are listed in the table below:

	Personal Data Core customer and transactional data Active Horse Service keeps all customer data for 10 years since the transaction date for legal basis reasons. After that data will be anonymized. This also includes customer service tickets that are directly related to an order. Customer service data Support tickets and other customer service data related will be deleted 3 years after last update to the case. Shipping data Shipping companies have different policies related to retension. See privacy policy for each shipping provider in the section "Processing Operations" Payment data Payment providers are under strict regulation from goverments in each country. See privacy policy for each payment provider in the section "Processing Operations". Horze does not keep any personally identifiable financial information such as credit card numbers.
	Marketing Data Browsing data Browsing Data will be stored for 6 months since your last session. Email marketing data If you withdraw your consent to email marketing Active Horse Service e.K. will delete your contact data within one year of the withdrawal. If you have given your consent but we do not register any activity (read, click or purchase) we will delete your contact data from our database within reasonable time period. Other third-party marketing data Facebook and other third-party marketing services that Active Horse Service e.K. is using have their own privacy policy.
	Analytics Data Google Analytics Analytics data will be automatically deleted after a retention period of 38 months.

7. Transfer of Personal Data

Active Horse Service e.K. is using various systems to provide a good and personalized service and keep our websites operational. Such third-party systems will only store and use Personal Data that is needed for them to complete the service they provide to us.

Active Horse Service e.K. only uses top professional third-party partners and systems that comply to the EU data protection regulations. Furthermore, Active Horse Service e.K. has signed a data protection agreement with each of them to ensure they do not misuse any of our customers Personal Data.

Some third party service providers, e.g. payment providers, are under goverment regulations and have strict guidelines for information we have to give them for your purchase related transactions. When you leave the shop at our web-site or get directed to third-party website, you are no longer governed by this privacy notice and our terms and conditions.

 

Active Horse Service is transferring Personal Data to the following data recipients:

	Payment processors: Active Horse Service e.K. uses Paypal and Stripe for payment processing. These third party payment processors process payments made to us. In connection with the processing of such payments, Active Horse Service e.K. does not retain any personally identifiable financial information such as credit card numbers. Rather, all such information is provided directly to our third party processors, whose use of your Personal Data is governed by their privacy policy.   Shipping:
	GLS, DHL, DPD, HERMES are used to provide the delivery service for Active Horse Service. We provide these shipping companies with necessary information such as name, address and phone-number so they can fullfil the delivery service to your satisfaction.   Analytics:
	Active Horse Service e.K. uses Google Analytics for analytics services. It helps for example to identify issues at the website so we can improve the experience for you as a visitor/customer.
	Marketing: Active Horse Service e.K. use the following marketing systems for various marketing purposes: Facebook and Google Adwords.

8. Protection of Personal Data

We commit to follow to the security provisions of applicable data protection regulation(s), as well as to process Personal Data in compliance with good processing practices. Our personnel and processors that process Personal Data are obliged to keep Personal Data strictly confidential. Access to Personal Data is only granted to those employees that need the information to perform their work tasks.

All Personal Data is protected by appropriate industry standards and technical and organizational safety measures.

We inform the authorities and users/data subjects of data breaches according to applicable information security and data protection regulation(s).

 

9. Rights of the Data Subjects and Supervisory Authority

Right to access and correct

You have the right to obtain information from us regarding your Personal Data that we process. You have the right to have corrected and/or removed any incorrect, incomplete, outdated, or unnecessary Personal Data.

Right to object and restriction of processing

You have the right to object to certain types of processing of your Personal Data, including direct marketing, if such data are processed for other purposes than purposes necessary for delivering the products and/or services to you or for compliance with a legal obligation.

You have the right to object to any further processing of your Personal Data after prior given consent. If you object to the further processing of your Personal Data, this may lead to fewer possibilities to use products and/or services.

You have the right to request us to restrict processing of your Personal Data. This may however lead to limited possibilities to use our products and services.

Right to erasure

You have the right to ask us to delete your Personal Data that we process. We will comply with such request unless we have a legitimate ground to not delete the data.

After the data has been deleted, we may not immediately be able to delete all residual copies from our active servers and backup systems. Such copies shall be deleted as soon as reasonably possible.

Right to data portability

You have the right to receive Personal Data provided by you to us, in a structured, commonly used format. You have the right to transmit the Personal Data to another controller. You can also have the Personal Data transmitted directly to another controller, if technically feasible.

Objecting to direct marketing and withdrawal of consent

You can deny any direct marketing and withdraw your consent regarding electronic direct marketing. You can always withdraw any other consent including parental consent. See separate chapter on Consent.

How to use the rights

These rights can be used by sending an e-mail to us on a.sokollis@active-horse-service.de, including the following information: name, phone number, email address, user id and details of the products and services you have used. We may request additional information necessary to confirm your identity. We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.

Right to lodge a complaint with the supervisory authority

In case you consider our processing activities of your Personal Data to be inconsistent with the General Data Protection Regulation (GDPR) (EU) 2016/679, you have the right to complain to the data protection supervisory authorities.

Contact information of the applicable supervisory authority (Data Protection Ombudsman) can be found here: http://ec.europa.eu/consumers/odr/

 

10. Changes to this Privacy Notice

We may change this Privacy Notice from time to time, whenever necessary. We will inform of the changes in the products and services by email, if available, in case of any significant changes affecting your rights.

 

This Privacy Notice has been published on 25.05.2018 based on the new policy on the General Data Protection Regulation (GDPR) / EU 2016/679