1. General
This policy on the processing of personal data ("Privacy Policy") describes how Stutteri Hesthøj ("Hesthøj", "us", "our", "we") collects and processes information about you.
The Privacy Policy applies to personal data you provide to us or that we collect via Stutteri Hesthøj's website, hesthoej.dk.
Stutteri Hesthøj is the data controller for your personal data. Any inquiries to Stutteri Hesthøj can be made via the contact details listed in section 7.
2. What Personal Data We Collect, For What Purposes, and the Legal Basis for Processing
When you visit the website, we automatically collect information about you and your use of the website, such as the type of browser you use, search terms you use on the website, your IP address, including your network location, and information about your computer.
The purpose is to optimize the user experience and website functionality, as well as conduct targeted marketing, including retargeting via Facebook, Instagram, YouTube, X, and Google. This processing of information is necessary for us to pursue our interest in improving the website and showing you relevant offers.
The legal basis for the processing is EU General Data Protection Regulation Article 6, para. 1, litra f.
When you communicate with us on the website, we collect the information you provide yourself, such as name, address, email address, phone number, as well as the IP address from which the inquiry is made.
The purpose is to respond to your inquiry.
The legal basis for the processing is EU General Data Protection Regulation Article 6, para. 1, litra b, c, and f.
3. Recipients of Personal Data
Information may be disclosed to external partners who process the information on our behalf. We use external partners for technical operations and improvements of the website, targeted marketing, including retargeting, and to evaluate our business and products. These companies are data processors under our instruction and process data for which we are the data controller. The data processors may not use the information for any purpose other than fulfilling their agreement with us and are subject to confidentiality regarding these. We have entered into written data processor agreements with all data processors processing personal data on our behalf.
Two of these data processors, Google Analytics by Google LLC. and Facebook Inc., are established in the USA. The necessary guarantees for the transfer of information to the USA are ensured through the data processor's certification under the EU-U.S. Privacy Shield, cf. EU General Data Protection Regulation Article 45.
Copies of Google LLC’s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
Copies of Facebook Inc.’s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
4. Your Rights
To create transparency about the processing of your information, we, as the data controller, must inform you of your rights.
Right of Access
You are entitled at any time to request information about, among other things, what data we have registered about you, the purpose of the registration, what categories of personal data, and recipients of information may exist, as well as information about where the information originates from.
You have the right to receive a copy of the personal data we process about you. If you wish to receive a copy of your personal data, you must send a written request to info@hesthoej.dk. You may be asked to provide proof that you are the person you claim to be.
Right to Rectification
You have the right to have incorrect personal data about yourself corrected by us. If you become aware that there are errors in the information we have registered about you, you are encouraged to make a written request to us so that the information can be corrected.
Information collected in connection with your membership in our customer club can be corrected by logging in to your user profile.
Right to Deletion
In certain cases, you have the right to have all or certain personal data deleted by us, for example, if you withdraw your consent and we have no other legal basis for continuing the processing. To the extent that continued processing of your data is necessary, for example, for us to comply with our legal obligations or for legal claims to be established, exercised, or defended, we are not obliged to delete your personal data.
Right to Restrict Processing to Storage
You have, in certain cases, the right to restrict the processing of your personal data to only consist of storage, for example, if you believe that the data we process about you is incorrect.
Right to Data Portability
You have, in certain cases, the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format and have the right to transfer this data to another data controller.
Right to Object
You have the right at any time to object to our processing of your personal data for direct marketing purposes, including the profiling carried out to target our direct marketing.
You also have the right at any time, for reasons relating to your personal situation, to object to the processing of your personal data that we carry out based on our legitimate interests cf. section 2.
Right to Withdraw Consent
You have the right at any time to withdraw any consent you have given us for a specific processing of personal data. If you wish to withdraw your consent, please contact us at info@hesthoej.dk.
Right to Complain
You have the right at any time to file a complaint with the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K, regarding our processing of your personal data. Complaints can be submitted via email to dt@datatilsynet.dk or phone +45 33 19 32 00.
5. Deletion of Personal Data
Information collected about your use of the website cf. section 2 will be deleted no later than when you have not used the website for 5 years.
Information may, however, be stored for a longer period if we have a legitimate need for longer storage, for example, if it is necessary for legal claims to be established, exercised, or defended, or if storage is necessary for us to comply with legal requirements.
6. Security
We have implemented appropriate technical and organizational security measures to prevent personal data from being accidentally or illegally destroyed, lost, altered, or impaired, as well as to prevent it from becoming known to unauthorized persons or being misused.
Only employees who have a real need to access your personal data to perform their work have access to these.
7. Contact Information
Stutteri Hesthøj is the data controller for the personal data collected via the website.
If you have any questions or comments about this Privacy Policy or wish to exercise one or more of your rights described in the section about your rights, you can contact:
Stutteri Hesthøj
J. F. la Coursvej 6
9293 Kongerslev
Phone: +45 22 44 69 31
E-mail: info@hesthoej.dk
8. Changes to the Privacy Policy
If we make changes to the Privacy Policy, you will be informed about this on your next visit to the website.
Versions
This is version 1 of Stutteri Hesthøj's Privacy Policy dated 07/01/2024.