Privacy Policy

1. Data controller

The data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) and the Slovak Personal Data Protection Act No. 18/2018 is KASTA Slovakia, s.r.o., having its registered seat at Štefanová 135, 900 86 Štefanová, Slovak Republic, Company ID 30997178, operating under the trading name HORSETRANS (the “Controller”).

Contact for data-protection matters: hello@horsetrans.sk

2. Data we process

When you book and we provide the transport service we process:

• identification data (name, surname, optionally company name);
• contact data (email, phone number);
• billing data (address, Company ID, Tax ID, VAT for businesses);
• loading and delivery addresses;
• number and identification of horses to be transported;
• order notes and communication with the Controller;
• technical data when visiting the website (IP address, browser type).

3. Purpose and legal basis

We process your data for the following purposes:

• performance of the transport contract and related communication — Article 6(1)(b) GDPR;
• invoicing and accounting under the Slovak Accounting Act and tax legislation — Article 6(1)(c) GDPR;
• legitimate interests of the Controller in protecting legal claims, fraud prevention and service improvement — Article 6(1)(f) GDPR;
• marketing communication (newsletter) where you have given consent — Article 6(1)(a) GDPR.

4. Retention period

• order data: 4 years after the transport is completed;
• accounting and tax records: 10 years (Slovak Accounting Act No. 431/2002);
• consent-based data (newsletter): until consent is withdrawn, max 5 years;
• website technical data (logs): 12 months.

5. Recipients

Your data may be shared with the following processors:

• website hosting and server infrastructure provider (Vercel Inc., USA — under EU Standard Contractual Clauses);
• email communication provider (Resend, Inc., USA — under EU Standard Contractual Clauses);
• the Controller’s accountant and tax adviser;
• partners for customs and border procedures in international transport (only to the extent necessary);
• public authorities where required by law.

We do not sell your data to any third party for marketing purposes.

6. Transfers outside the EU

Some of our processors (Vercel, Resend) operate servers in the USA. Personal data transfers are conducted under the EU Standard Contractual Clauses approved by the European Commission (Decision 2021/914), providing an adequate level of protection.

7. Your rights

As a data subject, you have the following rights under GDPR:

• right of access to your personal data (Art. 15);
• right to rectification of inaccurate data (Art. 16);
• right to erasure (“right to be forgotten”, Art. 17);
• right to restriction of processing (Art. 18);
• right to data portability (Art. 20);
• right to object to processing based on legitimate interest (Art. 21);
• right to withdraw consent at any time where processing is consent-based (Art. 7(3));
• right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.

You can exercise your rights by contacting us at hello@horsetrans.sk. We respond within 30 days of receiving your request.

8. Cookies and tracking

The horsetrans.sk website uses strictly necessary cookies for the site to function and anonymised traffic analytics (Vercel Analytics) on the basis of our legitimate interest in service improvement. We do not place marketing cookies.

9. Security of processing

We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or loss — including transport-layer encryption (HTTPS/TLS), access controls and regular backups.

10. Changes to this policy

This policy may be updated. The current version is always available at horsetrans.sk/privacy. Material changes will be communicated to data subjects by email or notice on the website.