II. Collection of general data and information when visiting our website
Every time you visit the www.stable.ist website, the following user data are automatically recorded and stored in server log files:
- Browser type used
- Operating system used
- The website from which the user came to our website
- The sub-websites which are accessed on our website
- Date and time of access
- The Internet Protocol address (IP address)
- The Internet service provider of the user
- Other similar data and information serving the danger prevention in case of attacks on
- our information technology systems
The collection is necessary in the sense of art. 6(1) point f GDPR. From these data, we will not draw any conclusions regarding the identity of the users. They will be stored anonymously and separately from personal data that we collect for other reasons. They are used to
- Allow for correct presentation of the website
- Optimise the contents of the website and our advertisement
- Ensure the functionality of our website and the underlying technology
- Provide law enforcement authorities with the information necessary for the prosecution in case of a cyber attack.
III. Establishing contact via the website
Due to legal requirements, our website include details allowing for contacting us quickly by electronic means, which also includes a general address of the so-called electronic mail (e-mail address). If we receive a message by e-mail or using a contact form, the transmitted personal data will be automatically saved. Such data transmitted to us voluntarily will be stored for processing purposes or establishing contact, which is necessary in the sense of art. 6(1) point f GDPR. These personal data will not be passed on to third parties.
We use so-called “cookies”. Cookies are small text files that are saved on your computer. Cookies allow us to track and determine your preferences and to identify you during your visit on the website – anonymously, however as a certain user. After the end of the browser session, some of the cookies used will be deleted from your hard disk again (“session cookies”). The so-called “permanent cookies” (e.g. in order to be able to identify you as member and to allow for your log-in), however, remain on your computer and thus allow for your recognition during your next visit.
You have the possibility to prevent the storage of cookies on your computer by setting the browser accordingly. Please consult your browser provider for the specifics of the procedure. You can then still access the website, it may, however, only work with restrictions or not at all.
V. Data protection provisions regarding the use of Google Analytics (including anonymisation function)
On our website, we have included the Google Analytics component (including anonymisation function). The use is based on art. 6(1) point f GDPR. Google Analytics is a service for the collection, compilation and evaluation of data concerning the behaviour of visitors of websites. Such web analysis is carried out to improve a website and to carry out a cost-benefit analysis of advertising.
The Google Analytics component is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
For the web analysis via Google Analytics, we use the add-on „_gat._anonymizeIp“. This guarantees that your IP address will be masked, so that all data will be collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google Analytics sets a cookie on your device. The setting of cookies allows Google to analyse the use of our website. By accessing one of the individual pages of our website on which a Google Analytics component was integrated, your Internet browser is automatically triggered by the relevant Google Analytics component to transmit data to Google. In this way, Google gains knowledge of personal data such as the IP address of the user, allowing Google to determine the origin of the visitor and the clicks and, in the process, to issue commission settlements.
With the help of these cookies, personal data is stored, including the time of access, the place from which access took place and how often our website was visited. Upon every visit of our websites, these personal data, including the IP address of the Internet connection used by the user, are transmitted to Google in the USA. These personal data are stored by Google in the USA. Google may transfer these personal data collected by means of the technical procedure to third parties.
As already explained above, you can prevent the setting of cookies at any time by setting your Internet browser accordingly, and thus object to the setting of cookies. This would also prevent Google from setting a cookie on your end device. In addition, you can also delete a cookie which has already been set by Google Analytics at any time.
Beyond this, you can object to any recording of the data generated by Google Analytics referring to any use of this website as well as to the processing of these data by Google and prevent it. To do so, you need to download a browser add-on at the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics that no data and information may be transferred to Google Analytics. The installation of the browser add-on is considered by Google to be an objection. If your device is deleted, formatted or reinstalled at a later point in time, the browser add-on must be re-installed in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated, it can be re-installed or re-activated.
VI. Collection, storage and use of personal data within the scope of a Stableist service contract of use
Apart from that, we collect data upon conclusion of a contract on the use of the Stableist services or upon performance of the contractual obligations resulting from this contract.
All of the data will be treated confidentially. The data will not be made available to third parties for use unless the contractual partner has granted their consent or we are entitled or obliged to disclose these data.
To render the contractually owed services, it is necessary to collect, to process and to use personal data that are specified within the scope of the contract conclusion and upon use of the Stableist service. In this connection, the data collection exclusively serves the performance of the contractual relationship.
a) Upon contract conclusion, we collect the following information:
- Name of the contractual partner
- Address of the contractual partner
- Name of a contact person
- E-mail address of the contact person
- Phone number of the contact person
b) During the use of the Stableist service, the following data need to be provided, which will then be collected by us:
- User name
- Rider data (name, country of origin, discipline and if necessary age group)
- Data of the horses (name, sex, bedding, FEI ID, national ID)
- License plate of the horse transporter
- Emergency contact (Name, mobile number)
c) These data are collected
- to be able to identify you as our contract partner;
- to be able to perform our contractual obligations;
- for correspondence with you;
- for invoicing purposes;
- for settlement of potential warranty and liability claims as well as assertion of possible claims against you
2. The Stableist service is rendered via the https://app.stable.ist website. Number II applies to visits to this website.
In the so-called login datasets, the following user data are stored every time the Stableist customer logs in to the Stableist service:
- Date and time of the login
- User name
These data are collected
- to identify the user as being authorised to use the service;
- to be able to perform our contractual obligations;
3. Data processing will be carried out upon your request and is required according to art. 6(1), sentence 1, point (b) GDPR for the purposes stated above for mutual fulfilment of contractual obligations resulting from the license agreement.
VII. Erasure of personal data
The personal data collected by us will first of all be stored. They will be erased as soon as they are no longer necessary for the purposes specified above. Unless we are – according to article 6(1), sentence 1, point c GDPR due to retention and documentation obligations under fiscal and commercial law (under the Commercial Code, Tax Code or Fiscal Law) – obliged to longer storage period or you have consented to further storage according to art. 6(1), sentence 1, point a GDPR.
VIII. Forwarding of data to third parties
Your personal data are not disclosed to third parties for any purposes other than the purposes listed below. Your personal data will be forwarded to third parties to the extent required for performance of the contractual relationship with you as pursuant to art. 6(1), sentence 1, point (b) GDPR. The disclosed data may only be used by third parties for the specified purposes.
IX. Rights of data
subjects You have the right:
- pursuant to article 7(3) GDPR, to revoke at any time any consent you granted us. This will have the consequence that we will no longer be allowed to continue any data processing that was based on this consent in the future;
- pursuant to art. 15 GDPR, to request access to information on whether we process personal data about you. If this is the case, you have a right of access to these data. In particular, you may demand access to information regarding the purposes of processing, the category of personal data, the categories of recipients towards whom your personal data were or are disclosed, intended storage period, existence of a right to rectification, erasure, restriction of processing or objection, the existence of the right to lodge a complaint, the origin of your data if they were not collected by us, as well as the existence of an automated decision-making process including profiling and, where applicable, conclusive information regarding their particulars;
- pursuant to art. 16 GDPR, to request the immediate rectification of inaccurate data or completion of your personal data stored by us;
- pursuant to art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is required in order to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or in order to establish, exercise or defend legal claims;
- pursuant to art. 18 GDPR, to demand the restriction of processing of your personal data insofar as you contest their accuracy, if processing is unlawful, but you object to their erasure and if we do no longer require the data, but you require them to establish, exercise or defend legal claims of if you have objected to processing pursuant to art. 21 GDPR;
- pursuant to art. 20 GDPR, to receive the personal data which you have provided to us in a structured, commonly used and machine-readable format, or to request their forwarding to another data controller and
- pursuant to art. 77 GDPR, to submit a complaint to a supervisory authority. Usually, you can contact the supervisory authority at your habitual place of residence or work or the supervisory authority at our place of business for this purpose.
X. Right to object
Insofar as your personal data are processed pursuant to art. 6(1), sentence 1, point f GDPR on the basis of legitimate interests, you have the right, pursuant to art. 21 GDPR, to submit an objection to the processing of your personal data insofar as appropriate reasons exist which arise from your particular situation. If you want to make use of your right to object, simply send an e-mail to firstname.lastname@example.org
XI. Existence of automated decision-making
We would like point out that we do not make use of automated decision-making or profiling in the sense of the GDPR.