Privacy Policy
Privacy Policy – Cora’s House & Horses Version: 28 December 2025
1. Controller
Cora’s House & Horses
Email: corashouseandhorses@gmail.com
2. Processing of personal data
Personal data is processed where provided in connection with enquiries, bookings or use of the website. This includes contact and booking details as well as information required for the safe conduct of riding activities.
3. Purposes and legal bases
Data processing is carried out to handle enquiries, perform and administer contracts, process payments, and ensure the organisation and safety of riding activities. Legal bases include contract performance, pre-contractual steps and legitimate interests.
4. Data sharing
Personal data is only shared with third parties where necessary for contract performance or required by law.
5. Data retention
Personal data is retained only for as long as necessary for the stated purposes or as required by statutory retention obligations.
6. Data subject rights
In accordance with applicable law, rights include access, rectification, erasure, restriction of processing and objection to certain processing activities.
7. Right to lodge a complaint
A complaint may be lodged with the competent supervisory authority. In Iceland, this is Personuvernd.
8. Changes to this Privacy Policy
This Privacy Policy may be updated where necessary. The version published on the website applies.