This policy explains what personal data we collect when you use the oPaddock application and website, why we collect it, how long we keep it and what your rights are.
1.Who is responsible for your data
The controller of your personal data is:
- Equimondo, a limited liability company (SARL) with capital of 1,000 €
- Registered office: 1 avenue des Essarts, 14470 Courseulles-sur-Mer, France
- SIREN: 824 571 145 · SIRET (registered office): 824 571 145 00013 · Caen Trade and Companies Register
- N° TVA intracommunautaire : FR47 824 571 145
- Legal representative: Sébastien Pesquerel, manager
- Contact: hello@opaddock.com
2.The data we collect
Account data
Last name, first name, email address, phone number, password (stored encrypted). For professional accounts: name of the business, address, contact details and information about the facilities offered.
Content you publish
Business listings and ads, photographs, descriptions of facilities, ride trails, reviews and ratings.
Location data
When you record a ride trail, the application records your geographical position (GPS) during the tracking. See the section 4.
Booking data
History of requests and bookings of equestrian facilities. We do not collect your card details: see the section 6.
Technical and browsing data
IP address, device and browser type, pages viewed. This data is used for the operation and the security of the service, and is kept in our technical logs. We use no third-party audience measurement tool: see the section 9.
Communications
Exchanges with our team (email, forms) and messages sent through the platform.
3.Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create and manage your account, give you access to the service | Performance of the contract (Terms) |
| Enable connection and booking of facilities | Performance of the contract |
| Record and display ride trails | Performance of the contract / your consent for geolocation |
| Publish and moderate reviews | Legitimate interest (reliability of the platform) |
| Send you emails and text messages related to the service | Performance of the contract |
| Send you promotional messages | Your consent |
| Automatically translate content into your language and answer your questions through our assistant | Performance of the contract / legitimate interest (making the service understandable and accessible) |
| Ensure security and prevent fraud | Legitimate interest |
| Meet our legal obligations | Legal obligation |
4.Geolocation and trails
The ride recording feature records your GPS position while recording. Geolocation is enabled only with your permission and can be turned off at any time in your device settings. We advise you not to include in a public trail anything that would locate your home.
5.Reviews and published content
Reviews are linked to your user name and are publicly visible. We process this content to inform the community and we reserve the right to withdraw a review that breaches our terms of use. How reviews are posted and moderated is set out in the CGU.
6.Recipients and processors
Your data is never sold. It is accessible to our team and to technical providers acting on our behalf:
- OVH SAS (2 rue Kellermann, 59100 Roubaix, France): hosting of the site, the application and the database. Data hosted en France.
- Brevo : sending of emails and text messages. Data hosted in the European Union.
- Mistral AI (société française, données traitées dans l'Union européenne) : traduction automatique des contenus affichés (descriptions de structures, avis, parcours) dans la langue que vous choisissez, et réponses de notre assistant d'aide en ligne. Lorsque vous posez une question à l'assistant, le texte de votre question est transmis à Mistral AI pour produire la réponse. N'y faites pas figurer d'informations sensibles.
- OpenStreetMap Foundation via Leaflet: map display of the trails. Displaying the maps may send your IP address to the OpenStreetMap Foundation.
- Payment providers : when a professional has enabled online payment, the payment is handled directly by the provider they have chosen (Stripe, HelloAsso or Stancer). These providers are solely responsible for processing card details, which oPaddock neither collects nor stores.
7.Transfers outside the European Union
Hosting (OVH), message sending (Brevo) and artificial intelligence processing (Mistral AI) take place in the European Union. Today we use no audience measurement tool that transfers your data outside the European Union. Should we add one, this policy would be updated and your consent would be collected beforehand.
Displaying the map backgrounds sends your IP address to the OpenStreetMap Foundation (United Kingdom), a country recognized by the European Commission as offering an adequate level of protection.
8.Retention periods
| Data | Retention period |
|---|---|
| User account | 3 years after the last sign-in, then deletion |
| Bookings | 5 years (civil and commercial limitation period) |
| Accounting records (any invoices) | 10 years (statutory accounting obligation) |
| Messages between users | 2 ans |
| Logs techniques | 12 mois |
| Published reviews and trails | As long as they are published or until the user deletes them |
| Prospecting data / marketing consent | 3 years from the last contact |
| Strictly necessary cookies (session, language) | Duration of the session, or 30 days for 'Remember me' |
9.Cookies and trackers
Today we use only cookies that are strictly necessary to the operation of the service: keeping your session, remembering your sign-in if you asked for it, form security and language choice. These cookies are exempt from consent under article 82 of the French Data Protection Act, so you see no banner.
We set no advertising cookie, no third-party tracker and no audience measurement tool. Should we decide to set one, a consent banner would be put in place and nothing would be stored before you agree.
10.Mineurs
A minor under 16 ans may only create an account with the prior consent of a holder of parental authority. For minors, we apply a strengthened minimization : only the necessary data is collected, no promotional message is sent to them, and their profile is not made public by default.
The Booking of a facility remains reserved for people of full age (18 and over).
11.Safety
We put in place appropriate technical and organizational measures to protect your data: password encryption, restricted access, secure communications (HTTPS). Card details are handled solely by PCI-DSS certified payment providers.
12.Your rights
Under the GDPR, you have the following rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of your consent at any time. You may exercise them by writing to hello@opaddock.com.
If you believe your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr) or of the data protection authority of your country.
13.Modifications
We may update this policy. In the event of a significant change, we will inform you by an appropriate means. The date of the last update appears at the top of this document.
14.Contact
For any question about your personal data: hello@opaddock.com, or by mail to Equimondo, 1 avenue des Essarts, 14470 Courseulles-sur-Mer, France.