Privacy policy
This policy explains which personal data EQUIPIX processes on the website www.equipix.fr, in its pro area and for its equestrian laundry service, why, for how long, and how to exercise your rights. It complies with the General Data Protection Regulation (GDPR, EU 2016/679) and the Luxembourg law of 1 August 2018.
Article 1 – Data controller
Olivier DEFOORT – EQUIPIX
51 rue Pierre Schuetz
L-4946 Bascharage
Luxembourg
Contact: contact [at] equipix.fr or contact form.
For drop-off slips in the pro area, each partner (shop, riding centre…) remains responsible for the data of its own customers that it enters; EQUIPIX uses this data only to handle the drop-off (washing, follow-up, return). For its own customers, EQUIPIX is the controller and emails the drop-off receipt when the customer has given an email address.
Article 2 – Data processed, purposes and legal bases
| Situation | Data | Why | Legal basis |
|---|---|---|---|
| Visiting the site | IP address, date and time, page viewed, browser (server logs) | Site security and visitor statistics calculated on our own server | Legitimate interest |
| Cookie choice | Your answer to the cookie banner | Respect your choice | Legal obligation |
| Audience measurement (only if you accept) | Random identifier, pages viewed, visit length, device type, country, region and approximate city | Visitor statistics (Google Analytics) | Your consent |
| Contact form | First name, last name, email address, subject and message; a fingerprint of the IP address for one hour; IP address and technical browser information sent to Cloudflare for the anti-robot check (Turnstile) | Answer your message; block abusive sending | Legitimate interest or pre-contractual steps |
| Laundry customers | Identity, contact details, items entrusted, invoices and payments (bank transfer or cash) | Perform and invoice the service | Contract and accounting obligations |
| Pro-area partners | Business name and contact details, login email addresses, staff who create slips, login history (date, time, email address, device type; no IP address) | Give access to the pro area, secure accounts, manage the partnership | Contract and legitimate interest (security) |
| Laundry customers: partners’ customers and EQUIPIX’s own customers (drop-off slips) | First name, last name, phone, email address (optional), items dropped off, partner’s follow-up notes, photos and videos of the items | Handle the drop-off, email the drop-off receipt (EQUIPIX customers who gave their address), notify the customer, keep a record of the items’ condition | Performance of the service and legitimate interest |
| Event photos and videos | Image of riders, owners or spectators; riders’ names in captions | Cover and promote equestrian events | Legitimate interest (removal on simple request) |
We make no automated decisions and do no profiling. We do not send newsletters.
Article 3 – Recipients and service providers
Your data is used by EQUIPIX (Olivier DEFOORT and his staff) and, for drop-off slips, by the partner concerned, who only sees the slips of its own business. It is never sold or rented. It may be disclosed to authorities where the law requires.
Our service providers, each only for what is necessary:
| Provider | Role | Data location |
|---|---|---|
| OVH SAS (France) | Hosting of the EQUIPIX server: website, logs, photos and videos of drop-off slips | Strasbourg, France (European Union) |
| Cloudflare, Inc. (United States) | Routing and protecting the site (network, bot filtering); anti-robot check of the contact form (Turnstile) | Worldwide network; possible transfers (Article 4) |
| Supabase Pte. Ltd. (Singapore) | Pro-area database and login | European Union (Frankfurt) |
| Brevo (Sendinblue SAS, France) | Sending emails: contact form messages, login codes, new-slip notices, drop-off receipts for EQUIPIX’s customers | European Union |
| Microsoft Ireland Operations Ltd | Email (receiving contact messages) | European Union; possible transfers (Article 4) |
| Odoo SA (Belgium) | Invoicing | European Union |
| Google Ireland Ltd | Audience measurement, only with your consent | European Union and United States (Article 4) |
Article 4 – Transfers outside the European Union
Pro-area data is stored in the European Union. Where a provider may access or process data from a country outside the European Union (in particular Supabase, Microsoft, Google and Cloudflare), the transfer is covered by a European Commission adequacy decision (EU–US Data Privacy Framework) or by standard contractual clauses.
Article 5 – Cookies
A cookie is a small file stored on your device when you visit a website. On your first visit, a banner lets you accept or reject optional cookies; rejecting is as easy as accepting. Until you accept, Google is not even contacted.
| Cookie | Purpose | Duration | Consent required |
|---|---|---|---|
cc_cookie | Remember your cookie choice | 6 months | No |
_ga, _ga_* | Audience measurement (Google Analytics) | Up to 2 years | Yes |
__cf_bm, cf_clearance | Protecting the site against bots (Cloudflare) | __cf_bm: 30 minutes after the last activity; cf_clearance: duration set in Cloudflare | No (strictly necessary) |
You can change your mind at any time with the “Manage cookies” link at the bottom of every page, or delete cookies in your browser settings.
The site has no advertising and no embedded videos or social networks, and its fonts are hosted on our server: no other outside service is contacted during your visit, except Cloudflare, which routes and protects the site, and its anti-robot check (Turnstile) on the contact page.
Article 6 – Retention periods
- Server logs: 12 months at most.
- Audience-measurement data in Google Analytics: 14 months.
- Contact-form messages: 3 years after the last exchange.
- Drop-off slips (data of partners’ and EQUIPIX’s customers, follow-up notes, photos and videos of the items): 3 years after the items are returned or the slip is cancelled.
- Pro-area login history: 3 years.
- Partner accounts: for the whole duration of the partnership.
- Laundry customers: for the duration of the business relationship; invoices and accounting records are kept for 10 years, as required by law.
- Event photos and videos: as long as they are published, unless removal is requested.
Article 7 – Security
The site is served over HTTPS. The pro area opens with a one-time code sent by email, and each partner only sees its own slips. The administration requires a password and a two-step verification code. Photos and videos of slips are kept outside the public site and are shown only to signed-in people who are entitled to see them. Login attempts and message sending are limited.
Please also protect access to your mailbox: that is where your login code arrives.
Article 8 – Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw your consent at any time (without affecting what was done before). To exercise them, write to contact [at] equipix.fr; we reply within one month. Proof of identity may be requested if in doubt. If you are a partner’s customer, you can contact the partner or us: we will handle the request together.
You may lodge a complaint with the CNPD, the Luxembourg National Commission for Data Protection (cnpd.public.lu), or with the data protection authority of the country where you live.
Article 9 – Changes
This policy may change, for example if the site offers a new service. The date of the last update appears at the bottom of the page.
Article 10 – Contact
For any question about your personal data:
- Email: contact [at] equipix.fr
- Contact form
- Post:
Olivier DEFOORT – EQUIPIX
51 rue Pierre Schuetz
L-4946 Bascharage
Luxembourg