GDPR & Data Processing

Last updated April 14, 2026

1. Data Controller

MyHorseBase acts as the data controller for personal data collected through our platform. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR).

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• **Contract performance:** Processing necessary to provide our services (account management, data storage).
• **Legitimate interest:** Analytics and service improvement.
• **Consent:** Marketing communications and non-essential cookies.

3. Your Rights Under GDPR

As a data subject, you have the right to:

• **Access:** Request a copy of your personal data.
• **Rectification:** Correct inaccurate personal data.
• **Erasure:** Request deletion of your data ("right to be forgotten").
• **Portability:** Receive your data in a machine-readable format.
• **Restriction:** Limit how we process your data.
• **Objection:** Object to processing based on legitimate interest.
• **Withdraw consent:** Withdraw previously given consent at any time.

4. Data Transfers

Your data is processed and stored within the European Economic Area (EEA) wherever possible. Where transfers outside the EEA are necessary, we ensure appropriate safeguards are in place (Standard Contractual Clauses).

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy. Account data is deleted within 30 days of account closure.

6. Data Protection Officer

For GDPR-related enquiries, contact our Data Protection Officer at info@myhorsebase.com.

7. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data rights have been violated.