Privacy Policy

Data Controller

The controller of your personal data is Horseback Sp. z o.o., ul. Piastowska 1, 42-400 Zawiercie, Poland, e-mail: [email protected], e-Delivery address: AE:PL-23014-83592-GDTWB-12.

What data we process

• Data you provide in forms on the site (e.g. name, e-mail address, phone number) - including the "Let's stay in touch" sign-up and your inquiries.
• Google account data (e-mail address, name) - if you sign in to fill in a participant card online.
• Participant and guardian data provided in a class or camp participant card and, where necessary, the PESEL number and health data (special-category data) - processed on the basis of explicit consent; details are provided when filling in the card.
• Data about your use of the site collected automatically (e.g. cookies, analytics data).

Purposes and legal bases

We process your data in order to:

• handle inquiries and sign-ups for classes and camps (performance of a contract or steps at your request),
• contact you and send information about our offer - if you consent to it (consent),
• operate, secure and improve the site (our legitimate interest),
• comply with legal obligations (legal obligation).

Special-category data (health data) is processed solely on the basis of explicit consent.

Who we share data with

We use trusted providers that process data on our behalf, only to the extent necessary to run the site:

• Google (login authentication, hosting, analytics),
• Cloudflare (site delivery, security and bot protection).

We share only the data necessary to run the site. We do not sell your data and do not share it with anyone for any other purposes.

Cookies

We use necessary cookies (authentication, session, security) - they are required for the site to work and cannot be disabled - and, with your consent, analytics cookies (Google Analytics).

Data retention

We keep your data for as long as needed for the purposes above: until the matter is handled, the account is kept or consent is withdrawn, and, where required by law, for the period resulting from those regulations. After that, we delete the data.

Your rights

Under the GDPR you have the right to: access your data, rectify it, erase it, restrict processing, data portability, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You also have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (UODO) in Poland.

Contact

For privacy matters and to exercise your rights, write to: [email protected].

Changes to this policy

We may update this policy from time to time. We will announce material changes on the site. Continued use of the site after changes means acceptance of the updated policy. In case of any discrepancy, the Polish version prevails.