Menu

Privacy Policy

Data protection at a glance

General information > The following information provides a simple overview of what happens to your personal data when you visit this website. Detailed information can be found in the full privacy policy set out below.
Data collection on this website > * Who is responsible? Data processing is carried out by the website operator (see the section “Controller”).
  • How do we collect data? Firstly, through information you provide to us (for example via the contact form), and secondly automatically through our IT systems when you visit the website (technical data such as browser information and time of access).
  • What do we use the data for? To provide the website securely and without errors, and to respond to enquiries.
  • What rights do you have? You have the right at any time to obtain information about your data free of charge, to have it corrected or erased, and to lodge a complaint with the supervisory authority.

Contents

1. Controller

The controller responsible for the collection, processing and use of your personal data within the meaning of Article 4(7) GDPR is:

HS Sportpferde GmbH, Stadionstraße 31, 52249 Eschweiler, Germany

Email: kontakt@hs-sporthorses.com

Telephone: +49 (0) 177 407 52 57

Website: https://hs-sporthorses.com

If you wish to object to the collection, processing or use of your data by us under this privacy policy, either in general or in relation to specific processing activities, you may address your objection to the controller.

2. Applicable legal bases & purposes

We use personal data for the purpose of operating this website and responding to enquiries.

  • Consent: Article 6(1)(a) GDPR.

  • Performance of a contract: Article 6(1)(b) GDPR.

  • Legitimate interests: Article 6(1)(f) GDPR (for example security and efficient provision of the website).

3. Hosting and data security

3.1 External hosting

This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider(s). This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access data and other data generated via a website.

External hosting is used for the purpose of performing contracts with our prospective and existing customers (Article 6(1)(b) GDPR) and in our legitimate interest in the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) GDPR). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as that consent covers the storage of cookies or access to information on the user’s terminal device. Consent may be withdrawn at any time.

Our hosting provider will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions in relation to this data.

We use the following hosting provider:

ALL-INKL.COM
Hauptstraße 68
D-02742 Friedersdorf

3.2 Security (TLS)

To protect your data, we maintain technical and organisational security measures in accordance with Article 32 GDPR. We use TLS/SSL encryption (HTTPS) to protect data transmitted over the internet.

4. Storage period and deletion

Unless otherwise specifically stated, we store personal data only for as long as necessary to fulfil the purposes for which it is processed. In some cases, statutory retention obligations apply (for example, ten years under tax law). In such cases, the data is blocked from use for other purposes and deleted once the retention period has expired.

5. Cookies

We use cookies. These are small text files stored on your hard drive.

  • Session cookies: These are automatically deleted when you close your browser.

  • Consent management: We use a cookie tool to manage your preferences.

  • Details & management: A detailed list of all cookies used, their providers and storage periods, together with the option to change your settings at any time, can be found in our separate  Cookie Policy.

6. Embedded services (plugins, tools & fonts)

Google Fonts (local hosting)

This website uses Google Fonts. To maximise data protection, the fonts are installed locally on our server. No connection to Google servers is established.

Wordfence (security scan)

 We use the Wordfence security plugin to protect our website against cyberattacks and malicious access.

7. International data transfers

For transfers of data to the USA, we rely on the EU-U.S. Data Privacy Framework (DPF) and on the European Commission’s Standard Contractual Clauses. Information about the DPF: https://www.dataprivacyframework.gov/.

8. Your rights as a data subject

You may exercise your rights at any time by email or post using the address given above:

  • Access (Article 15 GDPR): You have the right to confirmation and free access to information about your stored data.

  • Rectification (Article 16 GDPR): The right to have inaccurate data corrected.

  • Erasure (Article 17 GDPR): The right to erasure (“right to be forgotten”), provided there are no legal grounds preventing deletion.

  • Restriction (Article 18 GDPR): The right to restrict processing under certain conditions.

  • Data portability (Article 20 GDPR): The right to receive your data in a machine-readable format.

  • Right to object (Article 21 GDPR): You may object to processing on grounds relating to your particular situation.

  • Withdrawal of consent: Consent that has already been given may be withdrawn at any time with effect for the future.

Right to lodge a complaint with the supervisory authority: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf. Email: poststelle@ldi.nrw.de

Last updated: September 2026