Privacy Policy

Amber Networks, Owner Mst. Martin Höck, Obere Dorfstraße 20, 6323 Bad Häring, Austria · Email: hello@vyraequine.com

This website is hosted via Google Firebase App Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When visiting our site, the server automatically collects technical server log files, including your IP address, date and time of request, requested URL, browser type, operating system, and data volume transferred. This data is strictly necessary for the secure and reliable delivery of the website. The legal basis is our legitimate interest in secure operations (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

When you contact us via the web contact form or email, we process the information you provide (name, email address, optional phone number, stable/practice, and message content) to handle your inquiry and any follow-up questions. The legal basis is the performance of pre-contractual measures or contractual obligations (Art. 6(1)(b) GDPR) and our legitimate interest in providing prompt and reliable customer communication (Art. 6(1)(f) GDPR). For rental inquiries including a partner referral code, we store this attribution for commission billing purposes.

To protect our contact form against automated abuse and spam bots, we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Turnstile verifies whether form submissions originate from human users without displaying intrusive visual puzzles. In doing so, telemetry and browser data, including your IP address, may be transmitted to Cloudflare. Turnstile is only triggered upon contact form submission. The legal basis is our legitimate interest in the security and stability of our website (Art. 6(1)(f) GDPR). Data transfers to the USA are safeguarded under the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

To send transactional system emails – such as inquiry confirmations and order confirmations – we use Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Your name, email address, and notification contents are transmitted to Resend solely for message dispatch. The legal basis is Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in reliable transactional communications). Transfers to the USA are governed by the European Commission's Standard Contractual Clauses.

A customer account is completely voluntary – you can place orders in our shop as a guest at any time. When registering an account, we process your email address, authentication credentials, and user IDs via Firebase Authentication, and store your account profile and order history in Cloud Firestore (both Google Ireland Limited, Dublin, Ireland). The database is hosted in Frankfurt am Main, Germany (region europe-west3). Sign-in is available via email/password, email sign-in links, or Google Sign-In. The legal basis is contract fulfillment for the user account (Art. 6(1)(b) GDPR).

Payments in the online shop are processed securely by Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland). Checkout occurs directly through hosted Stripe interfaces: Sensitive payment details (e.g. credit card numbers) are entered directly with Stripe and never pass through or get stored on our servers. Stripe transmits to us only the transaction status and necessary order details (name, email address, billing and shipping address, amount, purchased items, transaction ID). The legal basis is contract performance (Art. 6(1)(b) GDPR).

With your explicit consent, we use Google Analytics 4 via Firebase (Google Ireland Limited, Dublin, Ireland) for audience measurement and website optimization. The analytics script is only loaded after your confirmation. Google Analytics collects pseudonymized usage data (e.g. visited pages, visit duration, browser type, approximate geographic region without storing full IP addresses) as well as eCommerce events. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with future effect via 'Cookie settings' in the footer.

Where service providers process data in countries outside the European Economic Area (specifically the USA), transfers are made on the basis of adequacy decisions by the European Commission (in particular the EU-US Data Privacy Framework) or the Standard Contractual Clauses (SCCs). Our primary database containing customer and order records is located within the European Union (Frankfurt am Main, Germany).

All typography and fonts on this website are served locally and self-hosted on our servers. No connections are made to third-party font servers.

Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You may withdraw any granted consent at any time with future effect by sending an informal request to hello@vyraequine.com. You also have the right to lodge a complaint with a supervisory authority. In Austria, the competent authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, website: www.dsb.gv.at).