Controller
What this is about
This site is a sign-up page. It sells nothing, it measures nothing, it does not follow you across other sites. We collect only what you write into a form yourself, plus what any web server records for technical reasons anyway.
What we store
When you sign up we store what you entered in the form:
- First name and e-mail address, these are the required fields
- for an ambassador application, additionally your surname, postal address, telephone number, your social network profiles with approximate follower counts, your riding discipline, the number of horses you have and the text you wrote about yourself
- the language you were using the site in
- the time you signed up and the time you confirmed
- whether you want to hear from us
Optional fields stay empty if you leave them empty. There are no hidden fields.
Why, and on what basis
The legal basis is your consent under Article 6(1)(a) GDPR. You give it with the tick box in the form and confirm it by clicking the link in the e-mail we send you. The sign-up only counts after that click. Without confirmation we delete the entry.
The purpose is to send you what you asked for, to give you access to the emoji gallery, to consider your ambassador application, and, if you ticked that box, to tell you about MËHNEH.
For how long
For as long as you want to stay. If you withdraw your consent we delete your data in full, normally within a few days. Sign-ups that were never confirmed are deleted after thirty days at the latest.
Who else sees the data
Our web space is hosted by STRATO GmbH in Germany. STRATO processes the data on our behalf under a data processing agreement pursuant to Article 28 GDPR. We do not sell the data and do not pass it to advertisers.
The services we use
We deliberately keep the number small. This list is complete:
- STRATO GmbH, Berlin. This is where the web space with this site and the sign-up list is held, and where the confirmation e-mails go out from. STRATO processes the data on our behalf under a contract pursuant to Article 28 GDPR. The servers are in Germany.
- Google Ireland Limited. We additionally mirror every sign-up into a Google spreadsheet so that we can work with it more easily. What is transferred is the same information you wrote into the form, and it travels by way of Google Apps Script, a small program inside our own Google account. The spreadsheet is not public, it is shared with us alone. Where this involves data reaching the United States, it is based on the European Commission standard contractual clauses.
- ipapi.co and ipwho.is, but only where country detection is switched on, which suggests the right language on your first visit. Our server, not your browser, then asks which country your IP address belongs to. With it switched off, the language follows your device settings alone.
Search engines and social networks
So that the site can be found, we have registered it with Google Search Console and with Microsoft Bing Webmaster Tools. These two tools show us how often and for which search terms the site appears in results. They receive no data from this site, they do not read sign-ups, and they are not built into the page. They only report to us about searching on the respective search engine.
Plain links lead to Instagram and Facebook. Nothing from there is embedded: no like button, no tracking pixel, no embedded posts. Unless you click, Meta learns nothing about your visit.
Server logs
When you open the site our host records, as every web server does, the file requested, the date and time, the browser used and the IP address. These logs serve secure operation and are deleted automatically by STRATO after a short period. We do not analyse them and do not combine them with your sign-up.
No advertising cookies, no third party services
We set no cookies for advertising and embed no analytics services. Fonts and program libraries are held on our own web space, so opening the page calls no outside provider. Your chosen language and the unlocked gallery are remembered locally by your browser and never leave your device.
Your rights
You have the right at any time to be told what data we hold about you, to have it corrected, to have it deleted, to have its processing restricted, to object to processing, and to receive your data in a portable format. You can withdraw consent at any time with effect for the future. An informal message is enough, the address is above.
You can also complain to a data protection supervisory authority, in Germany the authority of the federal state where we are based, or the authority where you live.
A withdrawal takes effect for the future; processing up to that point remains lawful. Giving us your data is voluntary, you are entering into no contract and are under no obligation. Without a first name and an e-mail address, however, we cannot carry out the sign-up. There is no automated decision-making and no profiling.
Last updated: 02.10.2026