PRIVACY POLICY

This translation is for information purposes only. The German version is authoritative.

1.1 DATA PROTECTION EQUOVIS GMBH

Privacy policy (status: 01.01.2019)

1.1.1 PREFACE

Regardless of whether you are a customer, prospective customer, applicant or visitor to our website: We, EQUOVIS GmbH (hereinafter: “EQUOVIS”, “we”) take the protection of your personal data very seriously. But what does this mean in concrete terms?

In the following, we provide you with an insight into what personal data we collect from you and how we process it. You will also receive an overview of the rights to which you are entitled under applicable data protection law. We will also tell you who to contact if you have any questions.

1.1.1.1 WHO ARE WE?

We see it as our duty to be at the forefront of progress with perseverance and innovation, without forgetting our own tradition. Today, EQUOVIS is one of the largest horse feed manufacturers in Europe, and our expertise and quality are recognized worldwide. So our experience is your security - experience you can buy.

Experience that many top stud farms, breeding facilities, show and racing stables and, since 2003, the German Olympic Committee for Equestrian Sports (DOKR) trust in. Highly trained specialist advisors are available throughout Germany to provide practical information on the targeted use of feed and a wide range of tips on general horse feeding.

Talk to us if you have any questions about needs-based nutrition. Because the well-being of your horses is our motivation.

As the responsible party within the meaning of the applicable data protection law, we,

EQUOVIS GmbH

Industrieweg 110

48155 Münster

Phone: + 49 (0) 251-682-2580

Email: info@equovis.de

take all measures required by applicable data protection law to ensure the protection of your personal data.

If you have any questions regarding this privacy policy, please contact our data protection officer.

2B Advice GmbH

Joseph Schumpeter

Allee 25

53227 Bonn, Germany

E-Mail: datenschutz@agravis.de.

1.1.2 SCOPE OF APPLICATION OF THE DATA PROTECTION DECLARATION

The legislator defines the processing of personal data as activities such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

Personal data is any information relating to an identified or identifiable natural person. This privacy policy concerns the personal data of customers, interested parties, applicants or visitors.

This privacy policy applies both to our website https://www.derbymed-shop.eu

1.1.3 WHAT PERSONAL DATA DO WE PROCESS?

We collect your personal data when you contact us, e.g. as an interested party or customer. This may happen, for example, if you are interested in our products, register for our online services, contact us via our communication channels and contact forms, or if you use our products or services as part of an existing business relationship.

We process the following types of personal data:

Personal identification data e.g. first and last name, address data, e-mail address, telephone number, fax number
Order data e.g. customer number, order number, invoice data
Company-related data e.g. company name, department, activity
Data about your online behavior e.g. IP addresses, user names, data about your visits to our website, the customer portals or the app, actions performed on our websites and customer portals, location of access
Information about your interests and wishes that you communicate to us e.g. via our contact form or other communication channels
Information about your professional career e.g. vocational training, previous employers, other qualifications

and other information comparable with these data categories.

1.1.3.1 SENSIBLE DATA

Sensitive data, i.e. special categories of personal data such as information on religious affiliation or trade union membership, are not collected in this way.

1.1.3.2 PERSONAL DATA OF MINORS

Personal data of children or minors is only collected if they create a customer account with us, register in the career portal, use our communication channels or use the app.

1.1.3.3 USE OF COOKIES

1.1.3.3.1 WHAT ARE COOKIES?

Cookies are files that are stored on your computer by our website or customer portals when you visit the site. These files store information that makes your use of this site more efficient.

We use Google Analytics as a web analysis service to analyze usage behavior on the website and in the customer portals. For this analysis, the usage information generated by the cookie (including the shortened IP address of the user) is transmitted to our servers and stored for usage analysis purposes. We use the usage analysis to optimize our own websites, the customer portals, the customer approach and other advertising measures as well as for market research purposes. The IP address of the user is immediately shortened during this process so that it is no longer possible to identify the user via the IP address.

Any user who does not agree to the storage and analysis of their anonymized user data relating to their visit to our website can object to this storage and use at any time. Anonymized use of the customer portals is not possible.

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Demographic characteristics in Google Analytics: This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

Facebook Pixel

We use the so-called “Facebook pixel” of Facebook Inc (“Facebook”). This allows users of our website to be shown interest-based advertisements (“Facebook ads”) when they visit the Facebook social network or other websites that also use the process. Through the Facebook pixel, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating the Facebook pixel, Facebook receives the information that you have clicked on an advertisement from us or called up the corresponding website of our Internet presence. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible for the provider to find out and store your IP address and other identifying features.

By using the Facebook pixel, we pursue the purpose of displaying Facebook ads placed by us only to those Facebook users who have also shown an interest in our website. With the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. We can also use the Facebook pixel to track the effectiveness of Facebook ads for statistical purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad.

c) You can object to the use of the Facebook pixel at any time by opening the cookie consent details (bottom left) and deactivating your consent to the Facebook pixel.

d) Information from the third-party provider: Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA;

http://www.facebook.com/policy.php

Further information on data collection:

http://www.facebook.com/help/186325668085084,

http://www.facebook.com/about/privacy/your-info-on-other#applications

and http://www.facebook.com/about/privacy/your-info#everyoneinfo.

1.1.3.4. PLUGINS AND TOOLS

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Google Web Fonts: This site uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

1.1.4 WHAT DO WE PROCESS YOUR PERSONAL DATA FOR - AND ON WHAT LEGAL BASIS? 1.1.4.1 CONTRACT FULFILLMENT

We process your data in order to be able to fulfill our contracts. This also applies to information that you provide to us in the context of pre-contractual correspondence. The specific purposes of data processing depend on the respective product and the application made and may also be used to analyze your needs and check which products and services are suitable for you.

1.1.4.1.1 EXECUTION OF THE CONTRACTUAL RELATIONSHIP

We need your name, address, telephone number or e-mail address so that we can contact you.

1.1.4.1.2 OFFERING GOODS AND SERVICES

We also need your personal data in order to be able to check whether and which products and services we can and may offer you. Details on the respective purposes of data processing can be found in the contract documents and our General Terms and Conditions.

1.1.4.1.3 EXECUTION OF THE APPLICATION PROCEDURE

We process the data you have sent us as part of your application in order to check whether your professional qualifications are suitable for the advertised position. We only use your information for the application process and transfer it to your personnel file if a contract is concluded. If no agreement is reached, your information will be deleted or destroyed. We will not use your applicant information for any other purpose than to carry out the application process.

1.1.4.2 AFTER WEIGHING UP YOUR INTERESTS: WE IMPROVE OUR SERVICES AND OFFER YOU SUITABLE PRODUCTS

1.1.4.2.1 TO STRENGTHEN AND OPTIMIZE THE CUSTOMER RELATIONSHIP

As part of our efforts to continuously optimize our relationship with you, we occasionally ask you to take part in our customer surveys. The results of the surveys are used to better tailor our products and services to your needs.

1.1.4.2.2 DATA PROCESSING AND ANALYSIS FOR MARKETING PURPOSES

Your needs are important to us, and we try to provide you with information on products and services that suit you exactly. To do this, we use the findings from our joint business relationship and from market research. The main aim is to adapt our product suggestions to your needs. In this context, we guarantee that we always process the data in accordance with applicable data protection law.

Important: You can object to the use of your personal data for this purpose at any time. What specifically do we analyze and process?

Results of our marketing activities to measure the efficiency and relevance of our campaigns;
Information from your visits to our website;
We analyze the potential demand for our products and services.

1.1.4.2.3 NEWSLETTER

You have the option of subscribing to our newsletter via our website. We only need your e-mail address to send you the newsletter; all other information is voluntary. You will only receive our newsletter once you have successfully completed a double opt-in procedure. You have the right to view your declaration of consent or unsubscribe from the newsletter at any time. Corresponding links are implemented in every letter accompanying our newsletter. If you unsubscribe from our newsletter, we will immediately delete your contact details from our newsletter distribution list.

The legislator places certain requirements on the effectiveness of electronic consent, such as that used to register for the newsletter. This also includes the logging of your declaration of consent. We therefore log the date and time of consent, the text of the declaration of consent, whether the checkbox was selected, your email address and all other voluntary information. We also log the date and time of the click on the confirmation link and the link in the confirmation email. We only collect this information in order to comply with legal obligations.

1.1.4.2.4 MEASURES THAT BENEFIT YOUR SAFETY

We use your personal data in the following cases, among others:

To protect you or your company from fraudulent activities, we analyze your data. This may occur, for example, if you have been the victim of identity theft or if unauthorized persons have gained access to your user account in some other way;
To improve the reliability of our web applications, our IT support works closely with you in the event of technical problems. In this context, we also analyze logs of page accesses, actions performed, etc.;
In order to ensure IT security;
In order to be able to record and prove facts in the event of possible legal disputes.

1.1.4.3 ON THE BASIS OF YOUR CONSENT

If you have consented to the processing of your personal data for one or more specific purposes, we are permitted to process your data. You can revoke this consent at any time with a view to the future without incurring any costs other than the transmission costs according to the basic rates (costs of your Internet connection). However, the withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal.

1.1.4.4 DUE TO LEGAL REQUIREMENTS OR IN THE PUBLIC INTEREST

As a company, we are subject to a wide variety of legal requirements (e.g. from tax legislation). In order to comply with our legal obligations, we process your personal data.

1.1.5 WHERE WE TRANSFER DATA TO AND WHY

1.1.5.1 DATA USE WITHIN EQUOVIS

Within EQUOVIS GmbH, access to your personal data is only granted to those departments that need it to fulfill our contractual or legal obligations or to protect our legitimate interests.

1.1.5.2 DATA USE OUTSIDE EQUOVIS

We respect the protection of your personal data and only pass on information about you if this is required by law, if you have given your consent or to fulfill contractual obligations. The following recipients, for example, may be subject to a legal obligation to disclose your personal data:

Public bodies or supervisory authorities, e.g. tax authorities, customs authorities; judicial and law enforcement authorities, e.g. police, courts, public prosecutor's office;

Lawyers or notaries, e.g. in legal disputes;
auditors.

We cooperate with other companies so that we can fulfill our contractual obligations. These include:

Transport service providers and freight forwarders;
Organizers and training service providers, if you have registered for certain trade fairs or events through us;

Banks and financial service providers to handle all financial matters.
Our own service providers In order to make our operations efficient, we use the services of external service providers who may receive personal data from you to fulfill the purposes described, including IT service providers, printing and telecommunications service providers, debt collection, consulting or sales companies.

Important: We pay close attention to your personal data!

In order to ensure that the service providers comply with the same data protection standards as our company, we have concluded corresponding contracts for order processing. These contracts regulate, among other things:

that third parties only have access to the data they need to perform the tasks assigned to them;
that only employees who have explicitly undertaken to comply with data protection regulations have access to your data at the service providers;
that the service providers comply with technical and organizational measures that ensure data security and data protection;
what happens to the data when the business relationship between the service provider and us is terminated.

For service providers based outside the European Economic Area (EEA), we take special security measures (e.g. by using special contractual clauses) to ensure that the data is treated with the same level of care as in the EEA. We regularly audit all our service providers to ensure compliance with our requirements. Very important: Under no circumstances do we sell your personal data to third parties!

1.1.5.3 DATA USE WITHIN THE AGRAVIS RAIFFEISEN AG GROUP

In order to offer you the best possible service, we occasionally exchange data within the Group. In doing so, we ensure that the applicable data protection regulations are complied with and that your personal data is adequately protected at all times. For this reason, we have taken appropriate measures to ensure compliance with data protection within the AGRAVIS RAIFFEISEN AG Group: We have concluded appropriate contracts with the individual subsidiaries to ensure that personal data exchanged within the Group remains protected at all times. In accordance with these contracts and applicable data protection law, we only transfer personal data to our production and sales subsidiaries for the purposes specified in this privacy policy. In doing so, we support our subsidiaries both operationally and in complying with the technical and organizational measures that we also use at the parent company to ensure the security of your personal data. Where possible, we protect your data by means of pseudonymization or anonymization measures. If subsidiaries are located outside the EEA, we take appropriate measures to ensure that the personal data processed there is protected in the same way as within the EEA.

1.1.6 ARE YOU OBLIGED TO PROVIDE US WITH PERSONAL DATA?

In the context of the business relationship between you and EQUOVIS, we require the following categories of personal data from you: all data necessary for the establishment and execution of a business relationship; data required for the fulfillment of contractual obligations; data that we are legally obliged to collect. Without this data, it is not possible for us to enter into or execute contracts with you.

1.1.7 DELETION TERMS

In accordance with the applicable data protection regulations, we do not store your personal data for longer than we need it for the purposes of the respective processing. If the data is no longer required for the fulfillment of contractual or legal obligations, it will be deleted by us on a regular basis, unless its temporary storage is still necessary. The following reasons may exist for further storage:

Commercial or tax retention obligations must be complied with: The periods for retention primarily in accordance with the provisions of the German Commercial Code and the German Fiscal Code are up to 10 years.
To preserve evidence in the event of legal disputes within the framework of statutory limitation periods: Limitation periods in civil law can be up to 30 years, whereby the regular limitation period is three years.

1.1.8 YOUR RIGHTS

You also have certain rights in connection with the processing of your personal data. Further details can be found in the corresponding provisions of the General Data Protection Regulation (Articles 15 to 21).

1.1.8.1 RIGHT TO INFORMATION AND RECTIFICATION

You have the right to obtain information from us about which of your personal data we process. If this information is not (or is no longer) correct, you can request that we correct the data, or complete it if the information is incomplete. If we have passed on your data to third parties, we will inform the relevant third parties in the appropriate legal situation.

1.1.8.2 RIGHT OF DELETION

You can request the immediate deletion of your personal data in the following circumstances:

If your personal data is no longer needed for the purposes for which it was collected;
If you have withdrawn your consent and there is no other legal basis for data processing;
If you object to the processing and there are no overriding legitimate grounds for data processing;
If your data is being processed unlawfully;
If your personal data must be erased to comply with legal obligations.

Please note that before deleting your data, we must check that there is no legitimate reason for processing your personal data.

1.1.8.3 RIGHT TO RESTRICTION OF PROCESSING (“RIGHT TO BLOCK”)

You may request that we restrict the processing of your personal data for one of the following reasons:

If you contest the accuracy of the data until we have had the opportunity to verify the accuracy of the data;
If the data is processed unlawfully, but instead of erasure you only request the restriction of the use of the personal data;
If we no longer need the personal data for the purposes of the processing, but you still need it for the establishment, exercise or defense of legal claims;
If you have objected to the processing and it is not yet clear whether your legitimate interests override ours.

1.1.8.4 RIGHT TO OBJECT

1.1.8.4.1 INDIVIDUAL RIGHT OF OBJECTION

If the processing is carried out in the public interest or on the basis of a balancing of interests, you have the right to object to the processing for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing your data that outweigh your interests, rights and freedoms, or because your personal data is used to assert, exercise or defend legal claims. The objection does not affect the lawfulness of the processing carried out prior to the objection.

1.1.8.4.2 ADVERTISING OBJECTION

In cases where your personal data is used for advertising purposes, you can object to this form of processing at any time. We will then no longer process your personal data for these purposes.

The objection can be made informally and should be addressed to:

EQUOVIS GmbH

Industrieweg 110

48155 Münster

E-mail: info@hoeveler.com

Phone: + 49 (0) 2133. 97877-50

1.1.8.5 RIGHT TO DATA PORTABILITY

You have the right to receive personal data that you have provided to us for processing in a portable and machine-readable format upon request.

1.1.8.6 RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY (ART. 77 GDPR)

We always try to process your inquiries and claims as quickly as possible in order to protect your rights accordingly. However, depending on the frequency of requests, it may take up to 30 days before we can inform you further about your request. If it should take longer, we will inform you promptly of the reasons for the delay and discuss the further procedure with you. In some cases, we may not or cannot provide you with any information. If legally permissible, we will inform you of the reason for the refusal to provide information. However, if you are not satisfied with our responses and reactions or believe that we are in breach of applicable data protection law, you are free to lodge a complaint both with our data protection officer and with the competent supervisory authority.

The supervisory authority responsible for us is

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Kavalleriestr. 2-4

40213 Düsseldorf

Phone: 0211/38424-0

Fax: 0211/38424-10

1.2 VERSION

This privacy policy is dated 01.01.2019. Registered customers will be informed of any changes to the privacy policy. Earlier versions of the privacy policy are available on the website or from our data protection officer.