Note: Placeholder — requires legal review before production.
1. Data controller
Data controller: Sendormeco Holding sp. z o.o., ul. Złota 75a/7, 00-819 Warsaw, Poland (VAT ID: PL5252866457). GDPR contact: gdpr@hovera.app.
2. Data we process
- Identification (name, email, phone)
- Company data (name, VAT ID, address)
- Operational data (stable clients, horses, transactions)
- Technical data (IP, cookies, access logs)
3. Purposes
- Service provision (Art. 6(1)(b) GDPR)
- Payments and invoicing (Art. 6(1)(c))
- Marketing of own services (Art. 6(1)(f), legitimate interest)
- Inquiry handling (Art. 6(1)(a), consent)
4. Retention
Operational data — duration of contract + 5 years (legal requirement). Marketing — until consent withdrawn.
5. Your rights
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object
- Right to lodge a complaint with the supervisory authority
6. Processing location
Data stored in the EU (Frankfurt, Warsaw). No transfers outside the EEA.
7. Sub-processors
- Hetzner Online (hosting)
- Stripe (payments)
- Postmark (transactional email)
- Cloudflare (CDN)
8. Security
Encryption at rest (AES-256) and in transit (TLS 1.3). Production access limited, 2FA required. Audit logs for every change.