Skip to main content Skip to search Skip to navigation

Privacy policy

This is a courtesy translation of the German original. In the event of any discrepancy, only the German version is legally binding.

The protection of your personal data is important to me. Below I inform you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) which data are processed when you visit this website and use my services, for what purpose, on what legal basis, and what rights you have.

“Personal data” means any information relating to an identified or identifiable natural person.

1. Controller

The controller responsible for data processing on this website is:

Stefan Sens
Sattlerei Essence
Potsdamer Straße 30
14612 Falkensee, Germany
Phone: +49 176 94991875
E-mail: info@reitsport-essence.de

No data protection officer has been appointed, as there is no legal obligation to do so.

2. General information

Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract. You are not obliged to provide the data; not providing them has no consequences other than that the respective function (e.g. an enquiry or order) cannot be used.

Transfers to third countries: Some of the service providers named below are based in the USA or process data there. For the USA there is an adequacy decision of the EU Commission (EU-U.S. Data Privacy Framework). Transfers to companies certified under this framework are based on Art. 45 GDPR; otherwise on the basis of EU standard contractual clauses (Art. 46(2)(c) GDPR).

3. Hosting and server log files

This website is hosted by the following provider: Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the host.

Each time the website is accessed, your browser automatically transmits data that are stored in log files (server log files). These include, for example, IP address, date and time of access, page accessed, amount of data transferred, referrer URL, browser type and operating system. These data serve to ensure the trouble-free and secure operation of the website. They are not merged with other data sources.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the technically error-free presentation, the security and the statistical evaluation of the server operation. The IP address is anonymised after 24 hours (truncation of the last octet); the log files are deleted after 7 days at the latest.

4. Cookies and consent management

This website uses cookies and similar technologies (e.g. local storage). These are small data records that are stored on or read from your device.

Technically necessary cookies (e.g. for the shopping cart, customer account, session management and storing your privacy settings) are used on the basis of Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as they are strictly necessary for the service you have expressly requested. The subsequent processing is based on Art. 6(1)(b) GDPR (initiation and performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in a functioning website).

All other cookies and services (statistics, advertising, extended payment functions) are only used with your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. We obtain your consent on your first visit via the consent window (“cookie banner”). There you can accept all services, select them individually or reject them.

Your choice is stored in your browser's local storage. You can withdraw or change your consent at any time with effect for the future by clicking the fingerprint icon at the bottom left of the page. The lawfulness of processing carried out before the withdrawal remains unaffected.

In addition, you can manage and delete cookies in your browser settings. Please note that some functions of the website may then not be available.

5. Contact (contact form, e-mail, phone)

If you contact me via the contact form, by e-mail or by phone, I process the data you provide (e.g. name, e-mail address, phone number, subject, content of your message) in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR if your enquiry is related to a contract or its initiation, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data are deleted as soon as the enquiry has been fully dealt with and no statutory retention obligations prevent this.

6. Request form for saddle appointments

Using the form “Request a saddle appointment”, you can register for an appointment without obligation. The following data are processed: your name, name of the horse, postcode and town where the horse is kept, optionally the name of the stable/yard, e-mail address, optionally phone number and optionally your comments, as well as the date and time of the request.

Purpose: Planning my tours and contacting you as soon as I am in your region, as well as preparing the appointment.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at your request) and your consent given in the form pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time by e-mail to info@reitsport-essence.de ; your request will then be deleted.

Recipients: For the technical transmission and storage of the requests I use Google Apps Script and Google Sheets of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Your details are stored on Google servers. Processing in the USA by Google LLC cannot be ruled out; Google LLC is certified under the EU-U.S. Data Privacy Framework. Further information: https://policies.google.com/privacy.

Spam protection: The form contains a field that is invisible to humans in order to detect automated spam entries. No additional data about you are collected for this purpose.

Storage period: Your request will be deleted as soon as it has been dealt with, but no later than 12 months after receipt if no order is placed. If an order is placed, the periods under section 14 apply.

7. Customer account

If you open a customer account, I process the data provided there (e.g. name, address, e-mail address, password in encrypted form) in order to give you password-protected access to your data and orders. The legal basis is Art. 6(1)(b) GDPR. You can have your customer account deleted at any time; a message to the address given above is sufficient. Statutory retention obligations for order data remain unaffected.

8. Orders and contract processing

When you place an order, I process the data required to process it (e.g. name, billing and delivery address, e-mail address, phone number if applicable, order and payment data). The provision of these data is necessary for the conclusion of the contract; without them no contract can be concluded. The legal basis is Art. 6(1)(b) GDPR.

I only pass on your data to the extent necessary for processing the contract, in particular to the shipping company commissioned with the delivery (name, delivery address) and to the payment service provider you have chosen (payment data). In addition, I use service providers within the framework of data processing on my behalf (e.g. web host, inventory management).

Passing on your e-mail address to shipping companies: If you have expressly agreed to this during the ordering process, I pass on your e-mail address to the shipping company so that it can inform you about the shipping status. The legal basis is Art. 6(1)(a) GDPR. You can withdraw this consent at any time vis-à-vis me or the shipping company.

9. Payment via PayPal

If you pay via PayPal, your payment data are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). The legal basis is Art. 6(1)(b) GDPR. For certain payment methods (e.g. instalment payment, purchase on account), PayPal may carry out a credit check; PayPal itself is responsible for this.

PayPal Express Checkout and instalment offers: To display Express Checkout and instalment offers already on product and cart pages, scripts and cookies from PayPal are loaded. This only takes place with your consent via the consent window (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Without consent, only the data transfer to PayPal that is technically necessary for the payment takes place.

Further information: https://www.paypal.com/de/legalhub/privacy-full.

10. Google Analytics 4

If you have given your consent, I use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics enables me to evaluate how visitors use the website (e.g. pages viewed, time spent, origin, device and browser, approximate location). For this purpose cookies are set (e.g. “_ga”, “_ga_*”, storage period up to 2 years). IP addresses are not stored by Google Analytics 4 or are truncated beforehand.

The legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. The data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. A data processing agreement has been concluded with Google. The analytics data are kept for a maximum of 14 months and then deleted automatically.

You can withdraw your consent at any time via the fingerprint icon at the bottom left. Further information: https://policies.google.com/privacy.

11. Google Ads conversion tracking

If you have given your consent, I use Google Ads conversion tracking (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). If you reach this website via a Google ad, a cookie is set. This allows me to recognise that an ad was clicked and that, for example, an order or enquiry was subsequently made. I only receive statistical evaluations, no information that can be used to identify you personally. However, Google may link these data to your Google account if you are logged in there.

The legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. A transfer to Google LLC in the USA is possible (EU-U.S. Data Privacy Framework). You can withdraw your consent at any time via the fingerprint icon. Further information: https://policies.google.com/technologies/ads.

12. releva.nz retargeting

If you have given your consent, I use the retargeting service releva.nz of releva GmbH, Feilnerstr. 10, 10969 Berlin, Germany. Cookies (dmc-12, dmc-12-r, domain hyj.mobi, storage period up to 2 years) are set in order to record your interest in my products pseudonymously and to show you suitable advertising on other websites. Processing takes place within the European Union.

The legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the fingerprint icon. Further information: https://releva.nz/datenschutz.

13. Links to social networks

This website only contains links to my profiles on Facebook and Instagram (Meta Platforms Ireland Limited). These are simple links, not embedded plugins; data are only transferred when you click the link and visit the respective platform. Meta's privacy policy applies there: https://www.facebook.com/privacy/policy.

14. Storage period

Unless a more specific storage period is stated in this policy, I only store personal data for as long as is necessary for the respective purpose. After complete processing of the contract, contract data are stored for the duration of the warranty period and then in accordance with the statutory retention periods, in particular under commercial and tax law (up to 10 years), and then deleted, unless you have consented to further use.

15. Your rights

If the legal requirements are met, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. If your data are processed for direct marketing purposes, you can object to this processing at any time without giving reasons.

To exercise your rights, an informal message to the contact details given in section 1 above is sufficient.

16. Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is unlawful. The authority responsible for me is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (Brandenburg State Commissioner for Data Protection and Access to Information)
Stahnsdorfer Damm 77
14532 Kleinmachnow, Germany
www.lda.brandenburg.de

Last updated: October 2026