My Cheval, with registered offices at Nesta Business Centre, Suite 302, Old Airport Road, Santry, Dublin 9, www.mycheval.com, hello@mycheval.com, hereafter ‘My Cheval’, handles personal data with the utmost care at all times.

This Privacy Policy indicates which personal data is collected and how it is used, as well as how My Cheval seeks to ensure an adequate protection of the data concerned.

My Cheval will observe the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereafter ‘GDPR’.

In addition, My Cheval will ensure to comply, to the extent possible, to the provisions of the implementing decisions that are taken in accordance with the aforementioned legislation. Personal data Personal data entail any information relating to an identified or identifiable natural person. A natural person is considered to be ‘identifiable’ if he can be identified, directly or indirectly, in particular by reference to an identifier or to one or more factors specific to the physical, physiological, mental, economic, cultural of social identity of that natural person.

As a controller, My Cheval can collect e.g. a data subject’s name, first name, company name, telephone number, e-mail address etc. Processing of data My Cheval will provide sufficient security regarding the personal data that is stored and processed. Both My Cheval and her appointees will take the appropriate technical and organisational measures to safeguard the processing that will take place. As far as possible and can reasonably be expected, My Cheval will make sure that the personal data she has in

her possession is updated and that incorrect, incomplete and redundant personal data are corrected or deleted.

Moreover My Cheval will, as far as possible and can be reasonably expected, make sure to only grant limited access to the personal data to her appointees. This access will be restricted to those appointees that need the personal data in order to execute their duties or to what is necessary information with regard to the requirements of the department.

In this manner My Cheval will attempt to offer an appropriate level of security for this personal data and the processing thereof.

The data subject will be required to provide all requested personal data to My Cheval because it is a requirement necessary to enter into a contract and to enable the execution of that contract. In case the data subject does not provide the requested personal data, My Cheval will not be able to render the services that have been demanded.

This website uses Google Analytics, a web analysis service of Google LLC ("Google"), Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the

site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. The legal basis for data processing within the scope of Google Analytics is Art. 6 Para. 1 lit. f) DSGVO (German Data Protection Act).However, if IP anonymisation is enabled on this website, Google will previously truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area, and only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to website operators relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however

please note that if you do this you may not be able to use the full functionality of this website. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f) DSGVO. The data processed in the context of the use of Google Analytics is automatically deleted after 26 months.

Pursuant to Art. 21 (1) DSGVO, you have the right to object at any time to the processing of your personal data within the scope of the use of Google Analytics for reasons arising from your particular situation. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=enOn our website we use the Google Tag Manager of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The Google Tag Manager is a Google tool used to integrate, manage, and continue to use Google services and third-party services on our website for analytical, website optimisation, and/or promotional purposes. These services are embedded on our website through tags (i.e. additional programming that is inserted into the source code of our website). Google collects information about how Google Tag Manager is used and which tags are implemented and how. Google uses this data only to improve, maintain, protect and develop the Google Tag Manager. Google Tag Manager does not set cookies, but rather triggers other tags that may set cookies or collect data. http://www.networkadvertising.org/managing/opt_out.aspFor more information about Google AdWords Remarketing and Google's privacy policy, please visit: https://policies.google.com/technologies/ads?hl=en

Facebook Custom Audience is used on individual pages of our website. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Facebook Custom Audience enables target group-oriented advertising on Facebook. The Facebook pixel also allows you to associate which views of our website are made by clicks on our Facebook ads. Facebook Custom Audience and Facebook Pixel therefore serve our legitimate interest in analysing, optimising and economically operating our online advertising.

When using Facebook Custom Audience via the customer list, our customer list is transmitted to Facebook and converted into fixed character strings using a hash procedure.

Facebook can use this data to compare which of our customers are also members of Facebook and then play Facebook advertising to these customers or a part of these customers selected according to certain characteristics (e.g. age or interests) or to a comparable target group.

When using Facebook Custom Audience using the pixel method, an invisible Facebook pixel is integrated on our website which, among other things, transmits the Facebook user ID of the user (logged in to Facebook) and data for the use of our website to Facebook. This enables Facebook to track the online behaviour of the users of our website. Facebook can display targeted advertisements to registered users (for example, for a product not purchased after an aborted order process).In the pixel process as part of a so-called "extended comparison", such data (e.g. surname, first name, e-mail address, date of birth, etc. of users registered with us) are also transmitted to Facebook which enable Facebook to determine whether they are Facebook members even for visitors to our website who are not logged on to Facebook (in order to include such Facebook members in the above- mentioned target group advertising, if necessary). You can object to your collection by the Facebook pixel at any time. See Letter d. in the "Cookies" section of this Privacy Statement.

In your Facebook account, you can also set what types of ads you see on Facebook. For more information, see Facebook's Privacy Statement: https://www.facebook.com/policy.phpPurpose of processing My Cheval will process this personal data for different purposes. For any type of processing, only the personal data that are necessary in order to achieve the aforementioned purpose will be processed.

My Cheval will pursue the following purposes in particular: •customer management •the rendering of services • the execution of agreements • invoicing Legal basis for processing The processing of personal data by My Cheval will be based on the following legal bases: • consent given by the client/data subject •necessity for the performance of a contract to which the data subject is party or for the taking of pre-contractual measures •necessity for the purposes of the legitimate interests pursued by My Cheval, namely to ensure the continuity of its business activities, compliance with all legal or regulatory provisions that My Cheval is subject to. The sharing and transfer of data In principle, My Cheval will only share the personal data with others if the data subject has given its consent to do so or if it is necessary in order to complete a transaction, to deliver a product or to render a service.

If necessary, the personal data will also be shared with My Cheval’s suppliers, in case it is legally required, in case My Cheval is involved in a dispute with the data subject, in order to protect My Cheval’s clients, in order to guarantee product safety and in order to safeguard My Cheval’s (property) rights.

My Cheval will not transfer the personal data concerned to third countries or international organisations. Retention period of data The personal data that have been collected will be processed by My Cheval throughout the entire period that the data subject calls upon the services offered by My Cheval.

When a data subject no longer uses the services offered by My Cheval, his personal data will be stored by My Cheval for a period of ten years starting

from the end of the partnership with the data subject, unless certain legal statutes of limitation or retention periods should demand a longer period.

This period will give My Cheval the opportunity to fulfil her legal obligations, ensure requirements are abided by, disputes are settled, security is maintained, fraud or abuse is prevented, etc. Data subject's right My Cheval will facilitate the execution of the data subject’s following rights: •the right of access to its personal data •the right to rectification of incorrect personal data •the right to erasure of its personal data •the right to restriction of processing of its personal data •the right to data portability •the right to object to automated individual decision-making Furthermore, the data subject has the right to withdraw its consent regarding the processing of its personal data at any time. However, this withdrawal will not affect the lawfulness of the processing based on that consent before its withdrawal. To this end the data subject will need to send an e-mail in this regard to the following e-mail address: hello@mycheval.com. My Cheval will respond promptly and in principle within one month, to the data subject’s request. Software and services My Cheval is a software that manages horses on an easy way. To make life easier for our clients the software can setup an integration with the following services. YouTube API services: For organising horse video’s, managing playlists and/or adding or deleting videos, the My Cheval account is linked to the configured client’s YouTube account. For more information see YouTube’s API services policy:

https://www.youtube.com/t/termsGoogle API services:

For organising horse related documents by creating, updating or deleting folders or files, the My Cheval account is linked to the configured client’s Google account. For more information see Google’s services policy: https://policies.google.com/privacyGoogle security settings: https://myaccount.google.com/permissionsFinal provisions This privacy statement applies to the direct customers of My Cheval, as well as to the customers of the customers whose personal data are also processed in My Cheval. Should the data subject believe that the processing of its personal data constitutes a breach of the provisions of the GDPR, the data subject will have the right to lodge a complaint with the competent supervisory authority.

My Cheval explicitly reserves the right to amend this Privacy Policy at any time, without any prior notice.