Equestrian shop in Tangstedt near Hamburg
Ahrens Reitsport

Privacy policy

This English translation is provided for your convenience. Only the German version is legally binding.

As at: 15 October 2026

1. Controller

The controller responsible for data processing on this website and in our online shop is:

Ahrens Reitsport GmbH
Dorfring 2
22889 Tangstedt
Phone: +49 4109 252173
Fax: +49 4109 252175
Email: info@ahrens-reitsport.de

You can find further information about the company in the legal notice.

2. Your rights

You have the following rights vis-à-vis us regarding the personal data concerning you:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7 para. 3 GDPR)

Right to object: Insofar as we process data on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR), you may object to this processing at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without stating reasons.

To exercise your rights, it is sufficient to send an informal message to the contact details given above. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (Independent Centre for Privacy Protection Schleswig-Holstein)
Holstenstraße 98
24103 Kiel
Phone: 0431 988-1200
Email: mail@datenschutzzentrum.de

3. Hosting and server log files

This website is operated on servers of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, which processes the data on our behalf (Art. 28 GDPR). The servers are located in Germany.

Every time you access our website, your browser automatically transmits data to our server, which is stored in log files:

  • IP address
  • Date and time of the request
  • Page or file accessed, access status (HTTP status code) and volume of data transferred
  • Website from which access takes place (referrer)
  • Browser and operating system used

We need this data in order to deliver the website and to ensure its stability and security. The legal basis is Art. 6 para. 1 lit. f GDPR. The web server log files are deleted after no more than 14 days. In the logs of our shop application, the IP address is stored only in truncated form.

The transmission of all data between your browser and our server is encrypted using TLS.

4. Cookies and local storage

Without your consent we only store information on your device that is strictly necessary for the operation of the shop (§ 25 para. 2 no. 2 TDDDG, Art. 6 para. 1 lit. b and f GDPR):

  • Cookie “cart_session”: assigns your cart to you, storage period 30 days.
  • “cookie_consent” (local storage of your browser): stores your selection in the cookie notice.
  • “customer_token” (local storage): keeps you logged in to your customer account until you log out (for a maximum of seven days).
  • “recently_viewed” (local storage): records the products you last viewed so that we can show them to you again. The list remains in your browser. To display the products, only the product numbers are transmitted to our server, without being assigned to you personally.

We only load additional services (currently Google Maps, see section 15) if you select “Accept all” in the cookie notice or explicitly load the map (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can change or withdraw your selection at any time via the “Cookie settings” link in the footer. You can also delete or block cookies and local storage in your browser. In this case, some shop functions (for example the cart) will not be available.

5. Contacting us

If you contact us by email, telephone or via our contact form, we process the information you provide (for example name, email address, where applicable telephone number and your message) in order to respond to your enquiry. Messages from the contact form are sent to us by email and you will receive an acknowledgement of receipt (sent via Brevo, see section 13). The legal basis is Art. 6 para. 1 lit. b GDPR insofar as your enquiry is related to a contract, otherwise Art. 6 para. 1 lit. f GDPR. We erase the data as soon as it is no longer required, provided that there are no statutory retention obligations to the contrary.

6. Orders in the online shop

For an order we require your name, your billing address and where applicable delivery address, your email address, optionally your telephone number and your order and payment information. Mandatory information is marked in the order form. We process this data in order to handle your order (Art. 6 para. 1 lit. b GDPR). You can order as a guest or with a customer account.

We pass on your name and delivery address to the shipping company that carries out the delivery. If you collect your order from our pick-up station at our shop in Tangstedt, your order will be marked with your name and the order number. For settlement we use the payment service providers named in section 12.

If you withdraw using our “Withdraw from contract” function, we process your name, your email address, the order number and your information on the items and your message in order to handle the withdrawal and to confirm receipt to you (Art. 6 para. 1 lit. b and c GDPR). We store this information together with the order data.

Due to commercial and tax law requirements we store order, invoice and payment data for the statutory retention period (up to ten years). They are then erased.

7. Customer account

You can voluntarily create a customer account. In this case we store your name, your email address, your password (only in encrypted form as a hash value), your address and optionally your telephone number as well as your orders, your wish list and the reviews you write. You confirm your email address via a link which we send to you. The legal basis is Art. 6 para. 1 lit. b GDPR.

In the customer area you can change your data at any time, download it as a file and delete your account. After deletion, only the data that we must retain for legal reasons remains (see section 6). This data is separated from your account.

8. Loyalty card

If you have an Ahrens loyalty card and link it to your customer account, we store the card number, the amount you have spent in the current bonus period and the resulting discount level in order to grant you the loyalty card discount (Art. 6 para. 1 lit. b GDPR).

9. Product reviews

If you submit a review, we store the name you provide, your rating and your text. Name, rating and text are published on the product page after we have checked them. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR), which you can withdraw at any time. We will then remove the review.

10. Notification of availability

If an item is out of stock, you can use your customer account on the product page to request a notification as soon as it becomes available again. For this we store the email address of your customer account together with the item. As soon as the item is available again, we send you a one-off email and then erase your address. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw it at any time. An informal message to us is sufficient and we will then erase your address immediately.

11. Google Customer Reviews

After you have placed an order, we offer you the opportunity on the order confirmation page to take part in the Google Customer Reviews programme. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google service is only loaded when you click on “Participate” there. If you agree in the subsequent Google window, we transmit your order number, your email address, the delivery country and the expected delivery date to Google. After delivery Google will send you an email asking you to rate your purchase with us. Google may display your review together with others as a merchant rating. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR), which you can withdraw at any time. Transmission to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework. You can find further information in Google’s Privacy Policy at https://policies.google.com/privacy.

12. Payment service providers

Payment processing takes place, depending on the chosen payment method, via the following service providers. We transmit the data required for payment in each case (in particular name, address, email address, order number and amount). The legal basis is Art. 6 para. 1 lit. b GDPR.

  • Prepayment (bank transfer): Your bank transfer is credited to our account with Sparkasse Holstein. In doing so, we process the information contained in your transfer.
  • Credit card, Klarna, Apple Pay and Google Pay: via Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. You enter your payment data directly on Mollie’s payment page. We do not receive it. Privacy information: https://www.mollie.com/de/privacy
  • Klarna: For payment by Klarna, Mollie passes your data on to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may carry out its own checks to verify your identity and creditworthiness and is itself responsible for this. Privacy information: https://www.klarna.com/de/datenschutz/
  • Apple Pay and Google Pay: Payment is additionally processed via Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Their privacy policies apply.
  • PayPal: via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg. You log in directly to PayPal and confirm the payment there. For certain payment methods PayPal may carry out a credit check. Privacy information: https://www.paypal.com/de/legalhub/paypal/privacy-full

13. Email dispatch

We send order confirmations, payment and shipping information, emails regarding your customer account, acknowledgements for the contact form and the confirmation email for newsletter registration and notifications of availability via the Brevo service of Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France, which processes the data on our behalf (Art. 28 GDPR). In doing so your email address, your name and the content of the email are processed. The legal basis is Art. 6 para. 1 lit. b GDPR, for the newsletter confirmation and notification of availability Art. 6 para. 1 lit. a GDPR.

14. Newsletter

With your consent (Art. 6 para. 1 lit. a GDPR) we inform you by newsletter about offers and news from our range. The only mandatory information is your email address.

We use the double opt-in procedure. After you register, we send you an email with a confirmation link. You will only receive the newsletter after you have confirmed. We store the time of registration and confirmation in order to be able to prove your consent. We erase unconfirmed registrations after 30 days.

You can unsubscribe from the newsletter at any time via the unsubscribe link in every newsletter email or by sending a message to info@ahrens-reitsport.de. After you unsubscribe we record this so that you no longer receive the newsletter (Art. 6 para. 1 lit. f GDPR).

15. Google Maps

We embed a Google Maps map on our contact page (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded when you select “Accept all” in the cookie notice or explicitly load it. Google then receives your IP address, information about your browser and the information that you have accessed the page. In this context data may be transmitted to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision of the European Commission. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG), which you can withdraw at any time via “Cookie settings” in the footer. Google’s privacy information: https://policies.google.com/privacy

16. Audience measurement using Umami

In order to understand which pages and products are in demand we use the open-source software Umami. Umami runs on our own server in Germany. No data is transmitted to third parties. Umami does not set any cookies and does not store anything on your end device. The following is recorded: the page accessed, the page you come from, browser, operating system, device type, screen size, language and the country derived from the IP address. The IP address itself is not stored. A visit is only aggregated via a non-reversible value that changes daily so that no profiles are created over several days and no conclusions can be drawn about you personally. The legal basis is our legitimate interest in designing our shop according to demand (Art. 6 para. 1 lit. f GDPR). Consent under § 25 TDDDG is not required because no information is stored on your end device and none is read from it.

17. Our pages on social networks

We operate company pages on Facebook and Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland). Our website only links to these pages. No data is transmitted to Meta when you access our website. When you visit our pages there, Meta processes your data under its own terms, including in the USA (Meta is certified under the EU-US Data Privacy Framework). For the page statistics (“Insights”), we and Meta are joint controllers (Art. 26 GDPR). The legal basis is our legitimate interest in communicating with customers and interested parties (Art. 6 para. 1 lit. f GDPR). Meta’s privacy information: https://www.facebook.com/privacy/policy/ and https://privacycenter.instagram.com/policy

18. Storage period

Insofar as no specific storage period is stated in this policy, we erase personal data as soon as the purpose of processing no longer applies and there are no statutory retention obligations.

19. Amendments to this privacy policy

We adapt this privacy policy if our website, our services or the legal situation change. The version published here at any given time is applicable.