Privacy Policy

1. By registering to the 19th International HETI Congress (Oslo, Norway 18-22 May 2027) organised by the Norwegian Association for horse assisted services (Hest og Helse; hereinafter referred to as “Data Controller”) participants acknowledge the processing of their data by the Data Controller in accordance with this information.

2. The Data Controller processes the following personal data for the following purposes and on the following legal basis:

• the types of the data processed a) name; b) address; c) e-mail address; d) telephone number; e) workplace, position; f) a statement concerning the photograph, video or other visual representation of the performance or contribution; g) CV details; h) delivered presentations, submitted papers;
• the purpose of the processing a) contacting, maintaining contact b) ensuring participation in the event (including allowing access to the event venue and, where appropriate, providing accommodation); c) providing information about the event to the participant, sending professional material d) securing the successful organisation and running of the conference.
• the legal basis for processing The data processing is necessary for the purposes of the legitimate interests pursued by the Data Controller related to the successful organisation and conduct of the conference (GDPR Article 6(1)(f))

• the types of the data processed h) the appearance of the data subject in film, audio and photographic recordings of the event, which the Data Controller keeps or makes public.
• the purpose of the processing e) documenting the activities of the Data Controller, informing the public about the association’s operations, accounting, and informing donors and contractors about the use of the support.
• the legal basis for processing The data processing is necessary for the purposes of the legitimate interests pursued by the Data Controller related to documenting its activities and make them available to the public (GDPR Article 6(1)(f))

3. Personal data are processed by the Data Controller for as long as necessary to ensure participation in the event and to provide information about the event. The Data Controller shall process image and sound recordings of the event until the date on which the rights and obligations related to the exercise of the interest expire.

4. The Data Controller’s

a) name: Hest og Helse

b) seat: Jønsbergvegen 430, 2335 Stange, Norway

c) website: https://www.hestoghelse.no

d) phone: +47 90183138

f) e-mail: post@hestoghelse.no

On the part of the data controller, the processing of personal data is carried out exclusively by the data controller’s officers and employees involved in the organisation of the conference or event.

5. The Data Controller processes the data in accordance with the following principles:

a) lawfulness, fairness and transparency: the personal data shall be processed lawfully and fairly and in a transparent manner for the Data Subject;

b) purpose limitation: personal data shall be collected only for specified, explicit and legitimate purposes and shall be processed only in a way compatible with those purposes;

c) data minimisation: personal data must be adequate, relevant and limited to the purposes for which they are processed;

d) accuracy: the Data Controller shall ensure that the personal data it processes are accurate and, where necessary, kept up to date. The Data Controller shall take all reasonable steps to ensure that personal data which are inaccurate for the purposes for which they are processed are erased or rectified without undue delay.

e) storage limitation: personal data shall be stored in a form which permits identification of Data Subjects for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods only if the personal data are processed for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the GDPR, subject to the implementation of appropriate technical and organisational measures as provided for in the GDPR to safeguard the rights and freedoms of Data Subjects.

f) Integrity and confidentiality: the Data Controller shall ensure adequate security of the personal data it processes, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage, by implementing appropriate technical and organisational measures.

g) accountability.

6. The Data Controller, where necessary, may transmit the personal data to the venue operator or accommodation provider for the purpose of allowing access to the venue or ensure accommodation. Otherwise, the Data Controller will not transfer personal data to any third party or to any country outside the European Union, except for the possible provision of data to public authorities on the basis of legislation.

7. Data Subjects are entitled:

a) to access to their own personal data when contacting the Data Controller at the contact details indicated in this notice, and receive information about the processing of their personal data upon request;

b) if they consider it justified for any reason, to request the rectification, erasure or restriction of the processing of their personal data by submitting a request to the Data Controller (the erasure does not affect the lawfulness of the processing prior to the request);

c) to object the processing of their personal data.

8. Data Subjects may lodge a complaint about the processing of their personal data with the Norwegian National Authority for Data Protection (“Datatilsynet”). The contact details of Datatilsynet are:

a) seat: Trelastgata 3, 0191 Oslo, Norway

b) mail address: Postboks 458 Sentrum, 0105 Oslo, Norway

c) phone: +47 22 39 69 00

d) e-mail: postkasse@datatilsynet.no

e) website: http://www.datatilsynet.no

Data Subjects may also take legal action against infringements of the processing of personal data pursuant to Article 22 of the Data Protection Act.

9. The processing of personal data is governed primarily by

1. Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) and

2. Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Data Protection Act).

10. The Data Controller’s staff will be happy to provide any additional information on the processing of personal data upon request by the Data Subject.

11. To register, buy a ticket or submit an abstract on this website, you create an account. The Data Controller named in section 4 is responsible for the personal data processed through this website, as described in sections 11 to 18.

When you create an account, the Data Controller stores your first name, last name, e-mail address and password. The password is stored in encrypted form. The registration form also asks for what you register as, your HETI member organisation, the name of your organisation, a tax number, your title, date of birth, country, nationality, telephone number, role, student status, and how you plan to take part in the congress, on site or online. It also records your consent.

You can see your details on your account page. To correct data you cannot change there, or to ask for your account to be deleted, contact the Data Controller as described in section 7.

12. If you submit an abstract, the Data Controller stores the abstract and the data you give with it: the title, text and keywords of the abstract, any file you upload, the first name, last name, degree and affiliation of the presenting author and of each other author, the e-mail address and CV of the presenter, and your confirmation of the declaration in the submission form.

Abstracts are handled by the Data Controller and by reviewers appointed by the Data Controller. A reviewer can read only the abstracts assigned to that reviewer, and sees the names of the authors. You are not shown who reviewed your abstract. The Data Controller keeps a record of each step in the handling of an abstract, with the person who took the step and the time, and sends you e-mail messages about your abstract and its decision.

13. When you buy a ticket or another product on this website, the Data Controller stores your order: the products you ordered, the billing details you enter at checkout, the amount and the status of the payment.

Payments are processed by a payment service provider. You enter your payment details with the provider, and they are not stored on this website. The Data Controller receives confirmation of the payment.

The Data Controller uses your paid orders to give your account access to the parts of this website that your ticket includes, such as the congress streams. You can see your paid orders on your account page.

14. If you write to the Data Controller through the contact form, the Data Controller receives your name, e-mail address, subject and message by e-mail, and uses them to answer you. The message is not stored on this website. By ticking the box in the form, you agree that your details are used to answer your question.

The form is protected against automated misuse with Cloudflare Turnstile, described in section 18.

15. If you sign up for the newsletter, your e-mail address is stored in the newsletter system of this website and used to send you the newsletter. After you sign up, you receive an e-mail asking you to confirm your subscription, and you are subscribed only when you confirm. Each newsletter contains a link to unsubscribe.

16. The website sends e-mail messages, for example about your registration, your account, your orders and your abstracts, and delivers the messages from the contact form to the Data Controller. The messages are sent through the e-mail delivery service Mailgun, using its European region. Mailgun handles the messages for the Data Controller.

17. This website uses cookies. When you sign in, it sets cookies that keep you signed in, and when you use the shopping cart, it sets cookies that remember your cart. WooCommerce, the shop software of this website, also sets cookies whose names begin with “sbjs” when you open the website. They record how you reached the website, such as the website you came from and the time of your visit, together with your browser details, and are used to show the Data Controller where an order came from.

The website keeps a log of form submissions with the time, the kind of action, your IP address, your browser details and, if you are signed in, your user number.

The website does not use advertising cookies or a separate analytics service.

18. Some parts of this website are loaded from services of other companies. When your browser loads them, the company receives the data your browser sends, such as your IP address and browser details.

a) Contact form: the contact page loads Cloudflare Turnstile, a service of Cloudflare, which checks that the form is used by a person.

b) Congress streams: where a congress session is shown as a video, the video is played from a video platform such as YouTube or Vimeo.