This English version is provided for convenience. If it differs from the Ukrainian version, the Ukrainian version prevails.
1. Who processes your data
This policy explains how we process the personal data of visitors to the website of the Nikolo’s Horse Club equestrian club (36 Tvarynnykiv St, Kharkiv) and of people who contact the club through the website.
The data controller is [full name of the sole proprietor or legal entity] ([tax number / EDRPOU code]), address: [registered address] (“the club”, “we”). For any question about personal data, write to [email] or call 050 692 76 14.
We process data in accordance with the Law of Ukraine “On Personal Data Protection”. For visitors from the European Union we also follow the EU General Data Protection Regulation (GDPR).
2. What data we receive
Lesson request (the “Book a lesson” form): your name, phone number, who the lesson is for — you or a child, the child’s age if you are booking for a child, your riding experience and when it suits you to come.
Review (the “Your review” form on the home page): the text of the review and the name you enter.
Technical data. When you open the website, the hosting provider’s server automatically receives your IP address, browser and device details, the page address and the date and time of the request. The website cannot work or be protected from attacks without this.
Calls and messengers. If you call us or write to us on Telegram, Viber or Instagram, we see your number or profile and what you tell us.
We do not ask for health information through the website. If the trainer needs to know about any limitations (see the lesson terms), tell the administrator by phone or on site: this information is used only for the safety of the lesson and only with your consent.
A child must be booked by a parent or another legal guardian.
3. Why we process data and on what basis
- To book your lesson: to contact you, suggest a time and a trainer, and confirm the booking. Basis: steps taken at your request before entering into a contract (Article 11(1)(3) of the Law of Ukraine “On Personal Data Protection”; for the EU, Article 6(1)(b) GDPR), and the consent you give by sending the request.
- To publish your review on the website with the name you gave, after moderation. Basis: your consent (Article 11(1)(1) of the Law; Article 6(1)(a) GDPR).
- To keep the website secure and the forms free of spam. Basis: the club’s legitimate interest (Article 11(1)(6) of the Law; Article 6(1)(f) GDPR).
- To show the Google Maps map — only with your consent: the “Accept” button in the cookie notice or “Show map” on the map itself. Basis: your consent.
- To comply with the law where it applies to this data.
We do not use your data for advertising, do not sell it and do not send newsletters. We do not take decisions with legal effects for you based solely on automated processing.
4. Who else receives the data
Only club staff who need the data for their work can see it: the administrator and the trainer you are booked with.
To run the website we use services that process data on our behalf or as independent controllers:
- Vercel Inc. (USA) — website hosting. Passes the requests and reviews sent through the forms on to the club administrator in Telegram without storing them, and keeps the server’s technical logs.
- Telegram — the messenger in which the club administrator receives requests and reviews from the website’s forms. Telegram processes these messages under its own rules.
- Google (Google LLC, USA; for users in the EU, Google Ireland Limited) — the Google Maps map, only if you allowed it to be shown. See the Cookie policy for details.
- Telegram, Viber, Meta (Instagram) — if you choose to write to us on a messenger or Instagram. These companies process data under their own rules.
We disclose data to public authorities only in the cases and in the manner provided by law.
5. Transfers abroad
Vercel and Google have servers in the USA, among other places, and Telegram’s servers are outside Ukraine. By sending a form or turning on the map you agree to such a transfer. It is needed to handle your request and is carried out in accordance with Article 29 of the Law of Ukraine “On Personal Data Protection”.
6. How long we keep data
- Lesson requests arrive in the administrator’s work chat in Telegram. We keep them as long as needed to book you and run the lesson, but no longer than 12 months from the day the request arrived. After that we delete them.
- Reviews — while the review is published on the website or until you withdraw your consent. Unpublished reviews are deleted within 3 months.
- Messages that turn out to be spam are deleted.
- Server technical logs are kept by Vercel for a limited period under its own rules.
If the law requires us to keep data longer, we keep it for as long as the law requires.
7. How we protect data
The website works only over a secure HTTPS connection. Requests go only to the club’s work chat in Telegram, which only authorised staff can access. We regularly delete requests that are no longer needed and do not forward them to outsiders.
8. Your rights
Under Article 8 of the Law of Ukraine “On Personal Data Protection” you have the right to:
- know where your data came from, where it is stored, why it is processed, who controls it and who receives it;
- access your data and, within 30 calendar days, get an answer as to whether your data is processed, and receive its content;
- request that your data be changed or destroyed if it is inaccurate or processed unlawfully;
- object to the processing of your data;
- withdraw your consent at any time — this does not affect the lawfulness of processing before the withdrawal;
- protect your data from unlawful processing, accidental loss or destruction;
- complain to the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or to a court.
If the GDPR applies to you, you also have the right to restriction of processing, to data portability and to lodge a complaint with the supervisory authority in your country.
To exercise your rights, write to [email] or call 050 692 76 14. To protect your data, we may ask you to confirm that the request really comes from you.
9. Cookies
The website does not set its own cookies and does not use analytics or advertising trackers. How the Google Maps map works and how to withdraw your consent is explained in the Cookie policy.
10. Changes to this policy
We may update this policy, for example if a new form or service appears on the website. The new version is published on this page with the date of the update.