Privacy Policy

We, Kluth & Walkenhorst Sports GmbH, operate the website https://www.gk-sporthorses.com and collect certain data from you where necessary. In the following privacy policy, you will learn what we do with your personal data, why we do this, how we protect your data, when it will be deleted, and what rights you have under data protection law.

Who can I contact?

The party responsible for this website is:

Kluth & Walkenhorst Sports GmbH
Königsallee 42
40212 Düsseldorf
E-Mail: office@kwsports.de

Feel free to contact us at any time if you have questions about your data, its deletion, or your rights.

What are my rights?

You can contact us at any time if you have questions about your data protection rights or wish to exercise the following rights:

Right of withdrawal (Art. 7(3) GDPR): You may withdraw any consent you have given at any time with effect for the future.
Right of access (Art. 15 GDPR): You have the right to find out what personal data we store about you and for what purpose we use it.
Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data or the completion of incomplete data.
Right to erasure (Art. 17 GDPR): You may request that we delete your data — for example, if it is no longer needed or you withdraw your consent.
Right to restriction of processing (Art. 18 GDPR): In certain cases, you may request that your data be processed only in a restricted manner.
Right to data portability (Art. 20 GDPR): You may request that we provide your data in a common, machine-readable format or transfer it to another controller.
Right to object (Art. 21 GDPR): You may object to the processing of your data, in particular where it is based on legitimate interests.
Right to lodge a complaint (Art. 77 GDPR): You may lodge a complaint with a data protection authority — for example: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, E-mail: poststelle@ldi.nrw.de

Deletion of data and storage period

Unless stated otherwise, we delete your data as soon as it is no longer needed — for example, your contact details after your enquiry has been fully processed. Data will also be blocked or deleted when a retention period expires. Certain data may need to be retained for longer due to legal requirements. You may of course request information about the stored data at any time. Data protection requests and other legal matters may also be stored for longer periods within the legally relevant retention and limitation periods.

Visiting the website

If you are simply browsing our website, we do not collect any personal data, except for the data your browser transmits to enable the visit, in particular:

IP address
Approximate location based on IP range
Internet provider
Internet speed
Date and time
Last visited website
Browser
Operating system
Hardware

As a privacy protection measure, the IP address is deleted or anonymised after your visit to our website. As a result, the other technical data can no longer be attributed to you and is used solely for anonymous, statistical purposes to optimise our website.

The purpose of the temporary storage of data is, on the one hand, the technical necessity for establishing the connection and, on the other, the correct, error-free display of our website. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Hosting

Our website is hosted by: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access our website, Vercel processes the technical data mentioned above under “Visiting the website” (in particular the IP address) in server log files in order to provide the website securely and reliably. We have concluded a data processing agreement with Vercel. Vercel is certified under the EU-U.S. Data Privacy Framework, meaning an adequacy decision of the EU Commission applies to data transfers to the USA. The legal basis is our legitimate interest in the secure and efficient operation of our website (Art. 6(1)(f) GDPR).

Web analytics

We use Vercel Web Analytics, a privacy-friendly analytics service provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, to measure in aggregate how our website is used (e.g. page views, referrers, country, browser and device type).

Vercel Web Analytics does not use cookies and does not store any identifiers on your device. Visitors are counted by means of a hash generated from the incoming request, which is automatically discarded and cannot be used to track you across websites or over longer periods. Your full IP address is not stored. We have concluded a data processing agreement with Vercel; Vercel is certified under the EU-U.S. Data Privacy Framework. The legal basis is our legitimate interest in the statistical analysis and optimisation of our website (Art. 6(1)(f) GDPR).

Map content (Mapbox)

Our website displays an interactive map of the competition season. The map is provided by Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, D.C. 20005, USA. When the map is loaded, your browser establishes a direct connection to Mapbox servers to retrieve the map tiles. In the process, your IP address and technical data (e.g. browser, operating system) are transmitted to Mapbox. We have no influence over this data processing. Mapbox is certified under the EU-U.S. Data Privacy Framework, meaning an adequacy decision of the EU Commission applies to data transfers to the USA.

The legal basis is our legitimate interest in an appealing presentation of the competition season (Art. 6(1)(f) GDPR). Further information can be found in Mapbox’s privacy policy: https://www.mapbox.com/legal/privacy

Contact by email

You have the option of contacting us by email via the addresses linked on this website. In doing so, you may provide us with the following data:

First/last name
Email address
Message or enquiry

After successful contact and completion of processing, your data will be deleted, subject to statutory retention periods. The sole purpose of the processing is to communicate with you. Our email is handled by our email provider united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany, which processes the data on our behalf within the European Union. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in communicating with you).

Social media presence

You can access Grace Kay’s social media profiles via hyperlinks on our website. When you interact with us through these channels (e.g. via comments or messages), we process the contact data you provide (e.g. profile name, email address) and content data (e.g. posts, messages).

The following platforms are linked:

Instagram & Facebook, operated by: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
TikTok, operated by: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
LinkedIn, operated by: LinkedIn Ireland Unlimited Company, Wilton Place (One Wilton Park), Dublin 2, Ireland

We use social media services exclusively for communication and brand presence. The processing is based on our legitimate interest in effective public relations and communication (Art. 6(1)(f) GDPR). Please refer to the privacy policies of the respective providers to find out what additional data the platform operators collect and how they process it.

Instagram content on our website

On our website, we may display recent posts from Grace Kay’s Instagram profile. We retrieve the post data (images, thumbnails, captions, profile picture) via the Instagram API. When this content is loaded, your browser establishes a direct connection to servers of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In the process, your IP address is transmitted to Meta; Meta may also collect further technical data (e.g. browser, operating system). We have no influence over this data processing. A transfer to the USA cannot be ruled out; Meta is certified under the EU-U.S. Data Privacy Framework.

The legal basis is our legitimate interest in an appealing presentation of our social media activities (Art. 6(1)(f) GDPR). If you do not want data to be transmitted to Meta when visiting our website, you can block the loading of images in your browser or visit the Instagram profile directly. Further information can be found in Meta’s privacy policy: https://privacycenter.instagram.com/policy

Cookies

Our website does not use any cookies — in particular no marketing, statistics or analytics cookies, and no other identifiers stored on your device. For this reason, our website does not use a cookie banner.

Data sharing with third parties and third countries

We only share data that is necessary for the performance of our mutual contract or where you have given us your consent. Where no contract exists, we share data in certain cases on the basis of legitimate interests. This is the case, for example, when you merely visit our website or wish to get in touch. In this case, it is in the mutual interest of both parties to provide access to our services and to communicate with each other.

Some of the service providers mentioned above — where indicated — also process data in the United States. There is currently an adequacy decision between the EU and the US within the framework of the EU-U.S. Data Privacy Framework. This confirms that certified US companies ensure an adequate level of data protection.