Privacy Policy

Data controller

HB EQUESTRIAN, a French simplified joint-stock company with share capital of 1,000 euros, registered office 47 rue Vivienne, 75002 Paris, Paris Trade and Companies Register 106 860 091. Contact: contact@equestrianpaddockpass.com. Full details are set out in the legal notice.

Data collected

We only collect data necessary to process your requests: first name, last name, email, phone (optional), booking information and any comments you send us. Browsing data is collected in aggregate form by audience measurement, with your consent.

Purposes and legal bases

• Handling booking requests and gift vouchers — performance of the contract.
• Customer relationship, follow-up and service improvement — legitimate interest.
• Audience measurement and waiting-list sign-up — consent, which can be withdrawn at any time.

Processors and recipients

• Supabase: database and form hosting, infrastructure in the European Union.
• Google Workspace (Gmail): sending confirmation emails from our professional address, governed by standard contractual clauses.
• Stripe: bank card payment processing.
• Google: audience measurement, only after your consent.
• Formspree: waiting-list fallback form, United States.

Your data is never sold or transferred to third parties for advertising purposes.

Transfers outside the European Union

Stripe, Google (Workspace and audience measurement) and Formspree are established in the United States. Transfers to these providers are governed by the European Commission's standard contractual clauses and, where applicable, by the EU–US Data Privacy Framework. The Supabase database is hosted in the European Union.

Retention periods

• Booking requests and customer data: 3 years after the last contact.
• Accounting records and supporting documents: 10 years, as required by law.
• Waiting list: until you withdraw your consent, and no longer than 3 years.
• Audience measurement and cookie consent: 13 months maximum.

Security

Exchanges with the site are encrypted in transit (HTTPS/TLS). Database access is restricted to authorised persons and the site's forms do not allow stored data to be read back.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object and port your data, as well as the right to withdraw your consent. To exercise your rights, write to contact@equestrianpaddockpass.com or to the postal address given in the legal notice.

You may also lodge a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.

Cookies

Details of the cookies used are set out in the cookie policy.