Privacy Policy
1. Introduction
Thank you for your interest in our website. The protection of your privacy is important to us. This privacy policy provides you with detailed information on how we handle your data in accordance with the General Data Protection Regulation (GDPR). It gives you a comprehensive overview of the most important points in connection with the collection and processing of your personal data.
Our aim is to fulfil the different interests of our visitors by providing relevant information and interfaces to other thematic services. We want to ensure that you understand how your data is used and what options you have to protect your privacy.
This privacy policy is primarily aimed at visitors to our website who have an affinity with our thematic world. We have therefore endeavoured to present the information in clear and understandable language. In addition, we provide explanations to give you a brief but meaningful overview of the processing of your user data. However, if you have any questions or comments about the processing of your data, please contact Sonja Westermann at westermann(ät)Westfalenpferde.de .
2. Data Security
a. Pseudonymisation
Where we collect usage data, we always store it under pseudonyms (in the case of cookies, for example, using a unique session key). This session key is deleted at the end of the session and the usage data is analysed by us anonymously for statistical purposes and to improve our website. We do not merge your pseudonymised usage data with the data you have entered (e.g. from the contact form).
b. Use of Encryption Technologies
Our website automatically supports strict transport encryption via HTTPS. This prevents your data from being read or modified by unauthorised persons during transmission over the Internet. When our website is accessed via the unencrypted HTTP protocol, the system automatically switches to an encrypted connection for your protection and ours. We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
3. Person Responsible
The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations and contact person for data processing on this website is
Westfälisches Pferdestammbuch e.V.
Mr Carsten Rotermund
Sudmühlenstraße 33
48157 Münster
Phone: 0251 328090
Fax: 0251 3280924
Email: info@westfalenpferde.de
4. Name and Address of the Data Protection Officer
The data protection officer of the controller is:
Sachverständigenbüro Mülot GmbH
Grüner Weg 80
48268 Greven
Phone: +49 2571 5402-0
Email: datenschutz@svb-muelot.de
5. Overview
With the following declaration, we inform you about the type, scope and purposes of the collection, processing and use of your data in connection with your visit to the website and any further use of the content and services.
We store and process your personal data (hereinafter collectively referred to as "processing") in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
We observe the principles of data protection. This means that personal or personal-related data is processed to the extent necessary to fulfil the purposes of processing, as is appropriate and necessary to provide a functional website and with regard to the content and services offered. When you access our web-based services (digital services), we process certain usage data in compliance with the Telecommunications Digital Services Data Protection Act (TDDDG) in order to enable you to use our services.
Brief explanation of the Telecommunications Digital Services Data Protection Act (TDDDG)
The TDDDG regulates the protection of your privacy in telecommunications and digital services. Our website is a digital service. Therefore, according to Section 25 (1) TDDDG, the principle applies here that read and write access to your end devices (PC, laptop, tablet or smartphone etc.) is subject to consent when visiting our website, regardless of whether personal data is processed or not. You give us this voluntary consent in accordance with the TDDDG as part of the settings of the cookie consent tool. You can adjust these cookie settings at any time and thus easily revoke your consent.
However, in accordance with Section 25 (2) No. 2 TDDDG, your consent is not required if this access is technically necessary in order to provide you with the requested information and expressly requested services of our website when you visit our website.
You can find out which cookies are technically absolutely necessary and therefore fall under this exemption and therefore do not require consent in the information on the cookie settings. If personal data is processed in this context, the legal basis for the processing is derived from the GDPR (Art. 6 para. 1 sentence 1 GDPR). The applicable legal basis for the processing of personal data in the specific case can be found below in the respective cookie or in the respective processing itself.
You have a right to information regarding your data or to rectification, erasure and restriction of the processing of your data, a right to object to the processing, a right to data portability and a right to lodge a complaint with a supervisory authority. These and other rights are explained in more detail below.
Possible Legal Bases
1. If we obtain your consent as a data subject for the processing of your personal data, Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR serves as the legal basis for the processing of personal data or special categories of personal data.
2. when processing your personal data that is necessary for the fulfilment of a contract with us, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
3. insofar as the processing of your personal data is necessary to fulfil a legal obligation to which our organisation is subject, Art. 6 para. 1 lit. c or Art. 9 para. 2 lit. b GDPR serves as the legal basis.
4. if processing is necessary for the purposes of the legitimate interests pursued by our organisation or by a third party, processing will only take place if your interests, fundamental rights and freedoms as the data subject do not override these interests. Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing in this case.
Data Erasure and Storage Duration
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we as the controller are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Transfer of Data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
- you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
- this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
Further information can be found below.
6. Collection and Storage of Personal Data as well as Type and Purpose of Use
6a) Visiting the Website
When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information, which is technically necessary within the meaning of Section 25 TDDDG, is collected without your intervention and stored until it is automatically deleted:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved fileName and URL of the retrieved file
- Website from which the access is made (referrer URL)
- Browser used and, if applicable the operating system of your computer and the name of your access provider.
Purposes and Legal Bases
We process the aforementioned data for the following purposes
- Ensuring a smooth connection to the website
- Ensuring convenient use of our website
- Analysing system security and stability
- For other administrative purposes relating to the website.
An example:
If our website receives an unusually high number of requests from a particular IP address, we can recognise this in the log files and take measures to prevent a possible attack. This helps us to ensure the security of our systems and therefore also the protection of your data.
Read and write access to the terminal device you are using is technically necessary within the meaning of Section 25 TDDDG and therefore does not require consent in accordance with Paragraph 2.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
The legal basis for storing and analysing the data is Section 12 TDDDG in conjunction with Art. 95 GDPR. Art. 95 GDPR as well as Art. 6 para. 1 lit. c GDPR, insofar as action by the provider is required for reasons of information security.
Retention and Deletion Periods
For security reasons, we store your IP address and the name of your Internet service provider as log data for a period of 7 days, after which they are automatically deleted. Otherwise, we delete your personal data as soon as the purpose for which we collected and processed the data no longer applies. In most cases, this happens when you end your visit to our website. Beyond this point in time, data will only be stored if this is necessary in accordance with the laws, regulations or other legal provisions to which we are subject.
Automated Decision-Making/Profiling
Automated decision-making, including profiling, does not take place.
Data transfer to third countries
We do not transfer your usage data to countries outside the EU/EEA.
6b) Cookies and Consent
Our website uses cookies and plugins that can be activated with consent to enable the use of certain functions and the services listed above. These are small text files that are stored on your end device. Some of the cookies we use are deleted again at the end of the browser session (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies).
An important cookie we use is the "allowed cookie". This cookie saves the settings you selected in the cookie consent. An example of the content of this cookie could look like this: ["ehorses", "podigee"]. Depending on the settings selected, various scripts are activated that lead to the activation of the plugins & tools listed above.
You can configure your browser settings according to your wishes and, for example, refuse to accept cookies or all cookies. However, we would like to point out that in this case you may not be able to use all the functions of this website.
Deleting the "allowedCookies" in your browser will cause the cookie banner to appear again, as this cookie is one of the necessary cookies required to save and apply your cookie settings. The cookie duration is one month. After expiry, renewed consent is required.
6c) Use of the Contact Form
For questions or concerns of any kind, we offer you the opportunity to contact us using the contact form provided on our website. In order to be able to reply to you, it is necessary to provide at least your valid e-mail address. Other information, such as your name or a pseudonym for a personalised form of address, is voluntary or an integral part of your individual enquiry.
Purposes and Legal Basis
We process and store the aforementioned contact data, including your other details from the enquiry form, exclusively for the purpose of processing the enquiry. We do not pass on this data without your consent.
Data processing for the purpose of contacting us is based on our legitimate interest in the effective processing of enquiries addressed to us in accordance with Art. 6 para. 1 lit. f GDPR.
If your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR may also be used as a legal basis.
Retention and Deletion Periods
The data you enter in the contact form will remain with us until the purpose for data storage no longer applies (e.g. after your enquiry has been processed) or you have withdrawn your enquiry, unless mandatory statutory provisions - in particular retention periods - or our legitimate interest in further storage (e.g. to prevent damage) prevent immediate deletion.
Automated decision-making/profiling
Automated decision-making, including profiling, does not take place.
Data Transfer to Third Countries
We do not transfer your personal data to countries outside the EU/EEA.
6d) Enquiry by Email, Telephone or Fax
You will find contact details in various places on our website that you can use to contact us by email, telephone or fax.
Purposes and Legal Basis
If you contact us directly by email, telephone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us exclusively for the purpose of processing your request. We will not pass on the processed data without your consent.
This data is processed on the basis of our legitimate interest in the effective processing of the enquiries addressed to us in accordance with Art. 6 para. 1 lit. f GDPR or on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the implementation of pre-contractual measures or the fulfilment of a contract or on the basis of your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested by us; consent can be revoked at any time.
Retention and Erasure Periods
We will store the data you provide until the purpose for which it was collected no longer applies (e.g. after your enquiry has been processed or you declare that your request has been dealt with). The data will then be deleted or blocked immediately, unless mandatory statutory provisions etc. - in particular statutory retention periods - or our overriding legitimate interest in further storage (e.g. in the event of legal disputes) prevent deletion.
Automated Decision-Making/Profiling
Automated decision-making, including profiling, does not take place.
Data Transfer to Third Countries
We do not transfer your personal data to countries outside the EU/EEA.
6e) Plugins and Tools
1. Podcasting Service Podigee
We use the podcast hosting service Podigee from the service provider Podigee GmbH, Revaler Straße 28, 10245 Berlin, Germany, to provide our podcast series. The service is deactivated by default and does not process any of your personal data in this state. The podcast episodes will only be activated once you have consented to the use of the service via the cookie consent tool.
We use plugins from the podcast hosting service Podigee on our website to play the podcasts. When embedded podcasts are played, a connection to the Podigee servers is established. The selected podcasts are loaded by Podigee or transmitted via Podigee.
When you play a podcast, Podigee processes IP addresses and device information in log files on our behalf to enable download and playback of the podcast. The temporary storage of the IP address and other system information (e.g. browser type) for the duration of your visit to our website by the system is necessary to enable delivery of the functions (calling up a podcast via Podigee and transferring it to the podcast player and subscribing to a podcast via Podigee) to your respective end device. Podigee has read and write access to your device via our website.
In addition, Podigee collects statistical data on podcast views on our behalf. This data is anonymised or pseudonymised before being stored in Podigee's database, unless it is required for the provision of the podcasts. The values determined are used to optimise our podcast offering and service quality.
Podigee does not use the data for any other purpose and does not pass it on to third parties. This data is not stored together with other personal data of the user.
To ensure an appropriate level of data protection when Podigee processes your data, we have concluded an order processing contract with Podigee GmbH in accordance with Art. 18 GDPR.
Legal Basis
The access and use of the data is based on the following legal basis
a) If read/write access to your terminal device is technically necessary for the provision of the service, no consent is required for this in accordance with Section 25 (2) TDDDG.
b) In this case, the processing of personal data is based on our legitimate interest in the error-free provision of the service in accordance with Art. 6 (1) lit. Art. 6 para. 1 lit. f GDPR
c) The legal basis for the non-technically necessary read and write access to your end device is your consent via our cookie consent tool in accordance with § 25 para. 1 TDDDG
d) The processing of personal data for the use of our podcast offer is carried out in accordance with Art. 6 para. 1 lit. a. GDPR on the basis of your consent.
Further information and objection options can be found in Podigee's privacy policy: https://www.podigee.com/de/about/privacy/.
2. ehorses Platform for Horse Sales
Our website uses plugins from the website offering of ehorses GmbH & Co KG, Rittergut Osthoff 5, 49124 Georgsmarienhütte, Germany, to present horse adverts and other information. ehorses, a platform for horse sales, shares data with partners and service providers to enable transactions and carry out marketing activities. ehorses GmbH & Co KG, based in Germany, processes this data mainly in order to provide you with the service technically and to improve user-friendliness and fulfil legal obligations. Third-party services such as Google Maps and YouTube are also integrated for the provision of information.
In addition, analytical cookies, cookies for displaying personalised advertising and, if applicable, cookies from third-party providers are also used with your consent. You can find ehorses' privacy policy here: https://www.ehorses.de/static/datenschutz
The service is deactivated by default and does not process any of your personal data in this state. The functions are only activated and we transmit your data to ehorses GmbH & Co KG once you have consented to the use of the service via the cookie consent.
The access and transfer of data to ehorses takes place on the following legal basis:
a) if read/write access to your terminal device is technically necessary for the provision of the service, no consent is required for this in accordance with Section 25 (2) TDDDG.
b) In this case, the processing of personal data is based on our legitimate interest in the error-free provision of the desired service in accordance with Art. 6 para. 1 lit. f GDPR
c) The legal basis for the non-technically necessary read and write access to your end device is your consent via our cookie consent in accordance with § 25 para. 1 TDDDG
d) The transmission of personal data for the information offered by ehorses is based on your consent to the activation of the service in accordance with Art. 6 para. 1 lit. a. GDPR. GDPR.
To ensure an appropriate level of data protection when Podigee processes your data, we have concluded an order processing contract with Podigee GmbH in accordance with Art. 18 GDPR.
6f) Handling of Your Application Data
We process your personal data that we receive from you by post, email, data upload or other sources in the course of contacting you for application purposes or your application, insofar as this is necessary for the decision on the establishment of an employment relationship with us. This may include basic personal data (name, address, contact details, etc.), information about your professional qualifications and school education, further professional training and possibly also other data that you send us in connection with your application.
Only those persons within our company who need to be involved in the decision-making process for professional, organisational and legal reasons will have access to and view your personal data.
Purposes and Legal Basis
We process your personal data insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG and, if applicable, Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships.
If an employment relationship is established between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG, further process the personal data already received from you for the purposes of establishing, implementing and terminating the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works agreement (collective agreement).
Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6 para. 1 lit. c GDPR) or for the defence of legal claims asserted against us. The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, for example a burden of proof in proceedings under the General Equal Treatment Act (AGG).
If you give us your express consent to process personal data for specific purposes, e.g. for the transfer of your application data to a talent pool for later consideration in other job advertisements, the lawfulness of this processing is given on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can withdraw your consent at any time with effect for the future. Please send this cancellation to: ...
Retention and Deletion Periods
We store your personal data for as long as this is necessary for the decision on your application. If the application procedure is followed by an employment relationship, training relationship or internship relationship, your data will, if necessary and permissible, initially continue to be stored and then transferred to the personnel file.
If your application is unsuccessful, your personal data or application documents will be deleted or destroyed a maximum of 6 months after the end of the application process (date of the rejection decision), unless longer storage is legally required or permitted.
We only store your personal data beyond this if this is required by law or in a specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute.
You may receive an invitation to join our talent pool following the application process. If you consent, you will allow us to consider you for suitable vacancies in the future. If we have your consent to do so, we will continue to store your application data in accordance with your consent and delete it after the deadline has expired or if you withdraw your consent.
Automated Decision-Making/Profiling
Automated decision-making, including profiling, does not take place.
Data Transfer to Third Countries
We do not transfer your personal data to countries outside the EU/EEA.
6g) Fanshop enquiries
In our fanshop area, we offer various products for fans of our club and friends of equestrian sports, for which you can request a quote. To do this, please enter the relevant information on the desired product versions (size and colour etc.) or the desired order quantity, your name and e-mail address if applicable. When you click on the "Request product" button, your data will automatically be sent to us by e-mail. We will then send you a corresponding offer by e-mail.
Purposes and Legal Basis
The processing of the data serves to initiate and prepare a purchase contract in accordance with your enquiry. The legal basis for the processing of your personal data, which is necessary for the implementation of pre-contractual measures or for the fulfilment of a contract with us, is in this case Art. 6 para. 1 lit. b GDPR.
Retention and Deletion Periods
We store personal data for as long as it is necessary to fulfil the purposes described above or as long as corresponding laws do not prescribe extended storage (cf. §§ 257 para. 1 HGB: 6 years, 147 para. 1 AO: 10 years) or the storage is necessary for evidence purposes. Proper deletion is reviewed on an annual basis. If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted.
Automated Decision-Making/Profiling
Automated decision-making, including profiling, does not take place.
Data Transfer to Third Countries
We do not transfer your personal data to countries outside the EU/EEA.
6g) Social media links
We offer links on our website to our social media offerings on Facebook Instagram and YouTube. Clicking on the links will cause you to leave our website and open a new browser window or, if applicable, the associated app on your device in order to access the social media offer. Since you have left our website, we as the website operator are no longer responsible for the data processing that takes place in this context. Rather, you will find the relevant data protection information in the respective social media offer.
7. Your Rights as a Data Subject
a. Right to information (Art. 15 GDPR)
You have the right to request information about your personal data processed by the provider. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.
b. Right to rectification (Art. 16 GDPR)
You have the right to demand the immediate rectification of incorrect or incomplete personal data stored by us.
c. Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
d. Right to restriction of processing (Art. 18 GDPR)
You have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.
e. Right to data portability (Art. 20 GDPR)
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
f. Right to object (Art. 21 para. 3 GDPR)
If we process your personal data on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
g. Right not to be subject to automated decision-making (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you.
h. Right to lodge a complaint (Art. 77 GDPR/§ 19 BDSG)
You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
The supervisory authority responsible for us is
State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
Kavalleriestraße 2 - 4
40213 Düsseldorf
Fax: 0211 38424-999.
Email: poststelle@ldi.nrw.de
https://www.ldi.nrw.de
i. Right to withdraw your consent (Art. 7 para. 3 GDPR)
You have the right to revoke your consent once given to us at any time without giving reasons with effect for the future. As a result, we will no longer continue the data processing based on this consent in the future and will delete your data immediately, provided that there are no retention periods to prevent deletion.
If you wish to exercise your right of revocation or objection, simply send an e-mail to info@westfalenpferde.de.
8. Topicality and Amendment of This Privacy Policy
This privacy policy is currently valid and was last updated on 09 September 2024.
It may become necessary to amend this privacy policy as a result of the further development of our website and offers on it or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on this website.
