Privacy policy

Last updated: 11 July 2026

1. Who we are

Stutteri Hestehøj ("we", "us") is the data controller for personal information processed through our websites — stutteri-hestehoj.dk and hestehoj.dk — and our services: the sale of Icelandic horses and the hourly rental of our training facilities (Oval Track, Manège, Lunge Ring).

2. What information we collect

We only collect information you give us directly:

  • Account details — username, email address, and password, when you register or we create an account for you.
  • Rider membership — your account status and the date your account was approved. The liability contract and emergency contact details are held on a paper contract managed by our staff, not on this website.
  • Bookings and orders — the facilities and times you book, horses you purchase or place a deposit on, credit packs you buy, and your billing name and address.
  • Payment details — we accept payment by bank transfer and cash only. We see the details of your transfer on our bank statement; we never collect or store card numbers.
  • Messages — anything you send us through the contact form or by email.
  • Technical data — standard web server logs (IP address, pages visited) used for security and troubleshooting.

We do not collect sensitive personal information (such as health, ethnicity, or beliefs) and we do not buy or receive information about you from third parties. Riders must be 18 or over to sign a rider contract independently. Riders under 18 may participate if a responsible adult (parent or legal guardian) signs the contract on their behalf; we do not collect or store the responsible adult's details on this website — those are held on the paper contract.

3. Why we process it, and on what legal basis

  • To provide what you asked for (contract): managing your account, bookings, orders, deposits, and refunds.
  • Because the law requires it (legal obligation): keeping accounting records of orders and payments under the Danish Bookkeeping Act.
  • To run the site safely (legitimate interests): security logs, fraud prevention, and fixing problems.
  • In an emergency (vital interests): contacting your emergency contact if something happens to you at our facilities.
  • With your consent, for anything optional — which you can withdraw at any time.

We do not use your information for marketing, profiling, or automated decision-making.

4. Who we share it with

We do not sell your information and we do not share it with advertising networks. It is shared only with:

  • Service providers who host our website (OVHcloud, France) and deliver our email (Open-Xchange GmbH, Germany), acting under our instructions.
  • Authorities and advisers where the law requires it — for example, our accountant and the tax authorities.
  • A buyer of the business, if Stutteri Hestehøj is ever sold or merged, in which case this notice continues to apply.

Both providers are based within the EU. Your information does not leave the EU/EEA.

5. Cookies

The site uses only the cookies it needs to work: your login session and your cookie-consent choice. We use no analytics and no advertising or tracking cookies. You can review or change your choices at any time via "My privacy settings" in the site footer.

6. How long we keep it

  • Orders, invoices, and payment records: 5 years from the end of the financial year, as required by the Danish Bookkeeping Act.
  • Your account and bookings: for as long as you have an account with us. When you close your account, your personal records are deleted immediately. Operational records that reference your account (such as booking history) are anonymised and no longer linked to you personally.
  • Contact messages: deleted 12 months after you send them.
  • Registration applications we never approve: if you apply for an account and it is never approved or used, we delete the application — including your name and e-mail address — 12 months after you applied.

Where a record must be kept for legal reasons after you close your account (such as an invoice), we keep only that record, no longer used for anything else, and delete it when the retention period ends.

7. How we protect it

We use appropriate technical and organisational measures to protect your information. No internet service can be guaranteed 100% secure, but access to your information is limited to those who need it.

8. Your rights

Under the GDPR and the Danish Data Protection Act you can ask us to:

  • show you the information we hold about you (access);
  • correct it (rectification);
  • delete it (erasure), where no legal retention duty applies;
  • restrict or object to how we use it;
  • hand it over in a portable format (portability); and
  • withdraw any consent, at any time, without affecting earlier processing.

If you have an account, you can review and update most of your details yourself at stutteri-hestehoj.dk/user. For anything else — including if you bought a horse without creating an account — email info@stutteri-hestehoj.dk and we will respond in accordance with applicable law.

If you believe we are processing your information unlawfully, you can complain to the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk) or to the data protection authority in your own EEA country.

9. Changes to this notice

If we change this notice, we will update the date at the top and, for material changes, post a notice on the site or contact you directly.

10. Contact

Stutteri Hestehøj

Tobjergvej 27B

4300 Holbæk

Denmark

info@stutteri-hestehoj.dk