ARTICLE 1 CONTROLLER IDENTITY

This privacy statement contains information about the processing of personal data by the companies and associations that are part of the Gipsy Horses Ranch group (hereinafter “GHR”), with its registered office at 2260 Westerlo, Mollemansstraat 14 bus C.

GHR processes personal data in accordance with the Belgian law of July 30, 2018 on the protection of natural persons with regard to the processing of personal data and the European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data (“General Data Protection Regulation” / “AVG”).

By using the website, submitting a request, registering or making a purchase from GHR, you acknowledge that you have been informed about the processing of your personal data.

ARTICLE 2 WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSES?

GHR processes the following personal data in the course of its activities:

– Customer data: When you enter into an agreement with us for riding lessons, competitions, events or purchases through our web shop, among other things, we process various personal data such as: name, address, e-mail address, telephone number, bank account number, preferences regarding activities and any other data you voluntarily submit to us.

This data is used to provide our services and goods, including taking riding lessons, organizing competitions and events, fulfilling the agreement and managing our accounts, with the legal basis of executing an agreement and complying with legal accounting obligations.

– Supplier Data: In case you supply goods or services to us, we process the following personal data such as, among others: name, address, e-mail address, telephone number, VAT number, bank account number and any other data you voluntarily submit to us. These data are used to receive a quotation, to pay invoices, to communicate and to manage our accounting records, with the legal basis of executing an agreement and fulfilling GHR’s legal accounting obligations.

– Communication Data: In the event you contact GHR by phone, submit a request by email or use our contact form, the following personal data may be processed: name, email, phone number, the request and any other information you voluntarily submit to us during the communication.

These personal data are processed to answer your question and process your request. The legal basis for processing this data is the performance of a service requested by you.

– Reservation and Payment Data: To manage online reservations and registrations for riding lessons or group activities, we process personal data such as name, e-mail address, desired date and time slot, number of participants, specific preferences and payment information. This data is processed to confirm, manage and process your reservation and payment, with the legal basis being the performance of a contract.

– Data for direct marketing: When sending newsletters from GHR, we process your name and email address. These personal data are processed only for sending newsletters from GHR, with the legal basis being our legitimate interest to inform existing customers about related services. If you are not a customer of GHR, your personal data are processed with your prior explicit consent. You can always unsubscribe from the newsletter via the opt-out option in the email.

– Cookies: When you visit the website, we may collect personal data, such as your IP address through the use of cookies and similar technologies. This data is only processed with your explicit consent (unless it is strictly necessary cookies) and is used to improve our website.

ARTICLE 3 RECIPIENTS OF PERSONAL DATA

In accordance with mandatory laws and regulations or pursuant to a court order, we may be required to share your personal data with government agencies, tax and customs authorities, financial investigation, judicial and police authorities.

In addition, we may share your personal data with third party service providers such as (sub)contractors, accounting and auditing firms, online payment service providers, reservation system providers and website hosting providers. In the event that these third parties are located outside the European Economic Area (“EEA”), we will ensure that your personal data is processed with the same level of security and protection as we maintain within the EEA and will take appropriate measures to protect your data during such transfers.

In the event of a change of control at GHR or a (partial) transfer of our business to another entity, your personal data will be transferred to ensure continuity of services.

ARTICLE 4 RETENTION PERIODS

We retain personal data for as long as necessary for the purposes of processing and in accordance with legal requirements. Customer and supplier data may be retained for up to 10 years after the termination of the contract, given our legitimate interest to retain supporting documents in the event of legal proceedings. In addition, due to legal accounting obligations, GHR may keep accounting and tax documents for 10 years after the taxable period to which they relate.

ARTICLE 5 SECURITY OF PERSONAL DATA

To ensure the security of the processing of your personal data, we have implemented appropriate technical and organizational security measures to protect personal data from unauthorized destruction, accidental loss and other unauthorized processing of personal data. GHR ensures that data is stored in a secure environment, protected by a combination of organizational and technical measures, such as use of personal login and password only for authorized persons, antivirus on personal & work computers, encryption on the website, awareness among staff regarding privacy.

ARTICLE 6 RIGHTS OF DATA SUBJECTS

In exercise of your rights under the AVG, you have the right to request the following from us:

– Right to information and access: you have the right to request information and access about the processing of personal data, including a copy of the personal data;

– Right to restriction, rectification and deletion: you have the right to request restriction, rectification or deletion (also called the “right to be forgotten”) of your personal data under certain circumstances;

– Right to object to the processing of your personal data: you have the right to object to the processing of your personal data on legitimate grounds. You have the right to object to the use of personal data for direct marketing purposes at any time;

– Right to data portability: you have the right to receive your personal data in a structured, digital and readable format or to request the transfer of your personal data to another controller, as far as this is technically feasible;

– Right to withdraw consent: to the extent that the processing of your personal data is based on your explicit consent, you have the right to withdraw your consent at any time;

– Right to lodge a complaint: if you consider that your rights with respect to the processing of your personal data are not respected, you have the right to lodge a complaint with the Data Protection Authority (GBA), Press Street 35, 1000 Brussels or at contact@apd-gba.be.

You may exercise your rights by sending an e-mail to info@gipsyhorsesranch.be or by registered mail to Gipsy Horses Ranch, at 2260 Westerlo, Mollemansstraat 14 box C.

ARTICLE 7 COOKIES 

The GHR website uses cookies and similar technologies. A cookie is a small data file placed on your computer by a website. Cookies are used primarily to improve the efficiency of a website and your website experience, to store users’ preferences, to analyze Internet traffic and to track browsing behavior.

There are “first party cookies,” which are cookies set by the owner of the website. In addition, other third parties may also set cookies for analytical and marketing purposes, these are the “third party cookies.”

This Website uses strictly necessary, functional, performance and marketing/advertising cookies.

Strictly necessary cookies

Strictly necessary cookies are used to make our website function correctly and are therefore placed without your consent. No personal data is collected with strictly necessary cookies.

Here is an overview of strictly necessary cookies: