Effective from 27 September 2026
Alvaritall OÜ processes only the data needed to answer your enquiry, provide services and operate the website securely. The controller is Alvaritall OÜ, Jõevälja tee 1, Jõelähtme, 74202 Harju County, Estonia. For privacy matters, contact
What data do we use and why?
- Enquiries: your name, email address, message subject and content, and any contact details you provide voluntarily. For service enquiries, the basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)); for other enquiries, it is our legitimate interest in responding to your request (Article 6(1)(f)).
- Services and the client area: client names, contact details, account information and service and horse-related information insofar as it relates to an identifiable person. The basis is performance of a contract (Article 6(1)(b)). Billing data is processed to comply with legal obligations (Article 6(1)(c)).
- Security: IP addresses, request times, technical browser information and login attempts. The basis is our legitimate interest in protecting the website, accounts and data against misuse (Article 6(1)(f)).
Providing data is voluntary, but we need your contact details and enquiry to respond; we cannot provide an account or service without the information needed for it. Please do not send sensitive or unnecessary personal data through the form. We do not make automated decisions with legal or similarly significant effects or carry out profiling.
Who can access your data?
Authorised staff use data according to their duties. Our hosting and email provider WaveCom AS, IT providers and accounting providers have access only as necessary. We disclose data to authorities only where there is a legal basis. We do not sell personal data.
How long do we keep data?
We delete ordinary enquiries no later than 12 months after the last communication. Contract-related data is kept for performance of the contract and subsequently until the relevant limitation periods expire; in a dispute, until its final resolution. Accounting documents are retained as required by law for 7 years from the end of the relevant financial year. Account data is kept while the account is in use and removed after closure unless another retention basis applies. Technical logs are kept for the time needed to detect and resolve faults and security incidents. Data in backups is removed through the normal backup overwrite cycle.
Cookies and external services
The website uses cookies necessary for its operation, language selection and login. You can delete or restrict them in your browser, but this may affect website functionality.
The Google Maps map is an optional external service. It loads with your consent (GDPR Article 6(1)(a)). You can withdraw consent using the close button below the map; this stops the map on this page but does not delete cookies already stored by Google. Opening it shares information including your IP address and browser data with Google, which may also use cookies. Google may process data outside the European Economic Area using an applicable adequacy decision or standard contractual clauses. For details and safeguards, see Google’s Privacy Policy. You may choose not to use the map and use the written address instead. When you open a social media or navigation link, the relevant service’s privacy policy applies.
Your rights
Subject to the conditions in law, you may access your data, request correction, erasure or restriction of processing, and request data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
Contact
The current notice is always available on this page. We will inform you of significant changes to our processing before they take effect.