Privacy Policy | Little Hooves

1. Who we are

The controller responsible for your personal data is Mark Viter, 31 Syretska Street, Kyiv, 04073, Ukraine (“we”, “us”), who runs this website for the planned Little Hooves Resort & Casino. For anything relating to your personal data, please write to [email protected].

We are based outside the European Economic Area (EEA). Because this website is aimed at people in Norway and elsewhere in the EEA, we apply the General Data Protection Regulation (GDPR), which is part of Norwegian law through the Personal Data Act (personopplysningsloven). As a controller based in Ukraine, we also follow the Law of Ukraine “On Personal Data Protection”.

We have not appointed a representative in the EEA under Article 27 GDPR, because our processing is small in scale, does not involve special categories of data and is unlikely to put your rights at risk. If that changes, we will appoint a representative and name them in this policy.

2. What this policy covers

This policy covers the website littlehoovesrescue.com, the interest list form on our contact page and emails you send to any of our addresses at littlehoovesrescue.com.

It does not cover future reservations. Reservations are not open, and a separate privacy notice will be published before they are. It also does not cover other websites we link to, such as Hjelpelinjen, which have their own policies.

3. The data we collect

Information you send us

Through the interest list form: your name, your email address, the option you choose under “Interested in”, the fact that you ticked the consent box, and the date and time recorded in the message. The form does not send anything by itself. It opens your own email app with a prepared message to [email protected], and we receive it only if you choose to send it.
By email: your email address, your name if you include it, the content of your message and any attachments, and the technical information that email services add to every message.

Technical data

Like almost every website, our web server records basic technical data when a page is requested: your IP address, the date and time, the page requested, the referring page, your browser’s user agent and the response code. These server logs are used only to keep the website running and secure.

What we do not collect

This website uses no analytics, no advertising trackers, no social media pixels and no fingerprinting, and it sets no cookies. It stores a single technical setting in your browser, which never leaves your device; our Cookie Policy explains it. We do not collect payment details, donations, or information about animals. Please do not send us sensitive information, such as health data or identity documents, by email.

4. Why we use your data and our legal bases

Purpose	Data	Legal basis (GDPR)
Replying to your emails and questions	Name, email address, message	Article 6(1)(f): our legitimate interest in answering people who contact us
Sending interest list updates and project news	Name, email address, chosen interest, consent record	Article 6(1)(a): your consent. For email marketing in Norway, section 15 of the Marketing Control Act (markedsføringsloven) also requires prior consent
Keeping a record of consent and withdrawal	Date and time of consent and of withdrawal	Article 6(1)(c) and (f): showing that we comply with the rules on consent
Running and protecting the website	Server logs	Article 6(1)(f): our legitimate interest in a secure, working website
Legal obligations and legal claims	Relevant records only	Article 6(1)(c) and (f)

We do not use your data for automated decision-making or profiling, we do not sell it, and we do not share it with advertisers.

5. The interest list and project news

Receiving project news is a separate purpose from getting a reply to a question. We add you to the interest list only if you tick the consent box in the form or ask us to add you by email. Writing to us does not put you on the list.

We will send occasional updates about the project, its planned opening and the moment reservations open. We expect to write no more than a few times a year.

You can withdraw your consent at any time by writing to [email protected] or by replying to any of our emails and asking to be removed. At present this is handled by hand: our emails do not yet contain an automatic unsubscribe link, and we do not use a double opt-in confirmation. We will act on your request without undue delay, and at the latest within one month, and confirm by email. Withdrawing consent does not affect anything we did lawfully before.

6. How long we keep data

Interest list data: until you withdraw your consent, or until the project ends if that happens first.
Record of consent and withdrawal: up to three years after you withdraw, so that we can show we respected your choice.
Correspondence: up to 24 months after our last exchange, unless we need it longer to deal with a legal claim.
Server logs: normally no longer than 30 days, unless we need them to investigate a specific security incident.

When a retention period ends, we delete the data or make it anonymous.

7. Who receives your data

We share personal data only as far as necessary, with:

our hosting provider, which runs the web server and keeps the server logs on our behalf as a processor;
our email provider, which hosts our mailboxes as a processor;
professional advisers, such as lawyers or accountants, who are bound by confidentiality, when we need their help;
public authorities, when the law requires us to.

We do not currently use a separate newsletter service. If we start to, we will name the provider in this section before any of your data is shared with it.

8. International transfers

We are located in Ukraine, which is outside the EEA and is not covered by an adequacy decision of the European Commission. Your data is therefore processed outside the EEA. Where personal data is transferred from the EEA to us, or between our service providers in other countries, we rely on the European Commission’s Standard Contractual Clauses (SCCs), together with any additional measures needed to protect your data. You can ask for a copy of the relevant safeguards by writing to [email protected].

9. Your rights

Under Articles 15 to 22 GDPR you have the right to:

access the personal data we hold about you and receive a copy;
have inaccurate data corrected;
have your data erased;
have the processing of your data restricted;
receive data you gave us, based on consent, in a portable format;
object to processing based on our legitimate interests;
not be subject to decisions based solely on automated processing (we make none).

You can also withdraw your consent at any time. To use any of these rights, write to [email protected]. It is free of charge. We will reply within one month; for complex requests this can be extended by two further months, and we will tell you if that happens. We may ask you to confirm your identity before we act.

10. How to complain

If you are unhappy with how we handle your data, please tell us first so that we can try to put it right. You also have the right to complain to a supervisory authority:

in Norway, the Norwegian Data Protection Authority, Datatilsynet;
in Ukraine, the Ukrainian Parliament Commissioner for Human Rights;
if you live elsewhere in the EEA, the data protection authority in your own country.

11. Children

This website and the interest list are intended for adults aged 18 and over, and the planned gaming lounge will admit adults only. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.

12. Security

The website is a set of static pages without user accounts or a database, and it is served over an encrypted HTTPS connection. Access to our mailboxes is limited to the people who need it and protected by strong passwords and two-step verification. No method of sending data over the internet is completely secure, so please keep sensitive information out of your emails.

13. Changes to this policy

We will update this policy when our processing changes, for example before reservations open or if we start using a newsletter service. The effective date at the top shows the latest version. If a change is significant, we will also tell people on the interest list by email.

14. Contact

Privacy questions: [email protected]
Postal address: Mark Viter, 31 Syretska Street, Kyiv, 04073, Ukraine