Services
This privacy policy applies to the below services
· EQUINET App (mobile application) and
· equinetapp.com (website).

The APPs and IPPs apply to the extent that our Services are made available in Australia and New Zealand respectively and collect information about individuals located there ('Australia or New Zealand persons').

Personal Data
Personal Data means any personal information relating to a living individual who can be identified from that information (or from that and other information either in our possession or likely to come into our possession).
In Australia, personal information also includes an opinion about an identifiable individual, and applies to such opinion whether or not the information is true or recorded in a material form.
Note that in this policy the terms "personal data" and "personal information" have the same meaning and are interchangeable.

Usage Data
Usage Data is data collected automatically either generated using certain Services or from the Services infrastructure itself (for example, the duration of a webpage visit or your use of our EQUINET app).

Cookies
Cookies are text files with small pieces of data including unique identifiers created by the web browser and stored on the computer or mobile device used to access a website.

Data Controller
Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any Personal Data is to be processed. With the exception of certain data that you may choose to process using our EQUINET app (see below), we are the Data Controller for the processing of your Personal Data in relation to our Services.

Data Processors (or Service Providers)
Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

Processing
Processing means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction The terms "disclosing" and "sharing" are used interchangeably in this policy.

TYPES OF DATA COLLECTED

Personal Data
While using our Services, we may ask you to provide us with certain Personal Data that can be used to contact or identify you.

Personal Data that we may require includes:
● Email address
● First name and last name
● Phone number
● Address, State, Province, ZIP/Postal code, City, Country
● Business name and title
● Optional: further information regarding your business, such as if you work alone or in a team, job role (farrier/vet/admin etc.), location of work (own workshop, stud farms, etc.);
● Optional: the EQUINET features you expect to use

Means by which Personal Data is collected
Mustad may collect your Personal Data through various online means. For instance, information may be collected directly from you when you enter that information on purchase of products or services through our website or the EQUINET App.

Mustad may also collect your Personal Data indirectly through its partners, affiliates or other third parties such as suppliers or accounting software providers that you link to your EQUINET account or from other users that enter your Personal Data into their EQUINET account.

Mustad requires that you obtain the prior consent of any Australia or New Zealand person whose Personal Data you enter into the EQUINET App or our website equinetapp.com.

Other Personal Data that you may choose to process by using our EQUINET App
You may choose to process certain Personal Data by using our EQUINET App, such as Personal Data concerning your customers and their horses, services that you perform for your customers, appointments scheduled with customers or other third parties, etc. For this purpose, the EQUINET App allows you, amongst others, to import your contacts directly from your device's phone book to the EQUINET App. This service can be used at your sole discretion. You are in control of and are responsible for the Personal Data of your customers and other third parties that you choose to process in the EQUINET App. For this category of Personal Data, you are the Data Controller and Mustad is the Data Processor (as defined in the GDPR). The Terms of Use for our EQUINET App include data processing terms ('standard clauses on data processing') that apply to our processing of Personal Data as a Data Processor.

Other submitted content and Information
We may collect any content or information you provide through use of the Service or otherwise, such as through input into the EQUINET App or related webapp, social media pages, email, text, chat, or to us in person including photos, videos, or reviews, or when you respond to surveys, subscribe to a service, or fill out any forms. This information may include: information, other than Personal Data, collected in the manner described in the preceding paragraph; information related to your pricing, inventory, scheduling, suppliers, customers, invoicing and accounting systems; and other information you provide.If you use the Service from a mobile device, you may choose to use features that require our processing of your location.

Usage Data
We may also collect information about how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your device and software used to access the Service, computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, information shared through device settings, like GPS location, camera access and related metadata, information about your network and other diagnostic data. If you use the Service from a mobile device, that device may send us data about location. If you call, email, text, or chat with our customer service agents, we may keep records of those conversations.

Other Data
In Australia and New Zealand, we may collect Personal Information when permitted or required by law, that is in addition to the types of Personal Information identified above.


Cookies
We may also collect your Personal Data through our websites and apps when you "enable" Cookies. We use cookies and similar technologies to collect, identify, associate and store your Personal Data online, as well as to analyse your online activity and use of our Services. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are tags and scripts to collect and track information to improve and analyse (the use of) our Services. This is done to make your customer experience better when using our Services.

Most web browsers automatically accept cookies, however you may choose to partially enable, manage or disable and delete Cookies by referring to your browser's help menu or instructions. Please note that if you disable or opt out of enabling Cookies, some features and functions on our platforms and products may not function as intended and you may not be able to access all or parts of our websites.

We process your Personal Data for one or more of the following purposes (depending on our relationship with you):

• To provide and maintain our Services
• To notify you about changes to our Services
• To allow you to participate in interactive features of our Services when you choose to do so
• To provide customer support
• To gather statistical information so that we can improve our Services
• To monitor the usage of our Services
• To detect, prevent and address technical issues
• To contact you and process information that you have provided to us in relation to your job or internship application with Mustad
• To communicate with you in relation to our Services
• To send out newsletters, invitations to our events and other marketing communications that may be relevant to you, as well as in the context of a (registration for) one of our events. When you have attended one of our events, we may also contact you for feedback
• For safety purposes, through the use of camera surveillance to protect the possessions and safety of us, our employees and visitors
• If you are an Australia or New Zealand or United States person, to tell you about our own or third parties products, services, news and events that we believe might interest you. Please refer to the "Direct Marketing" section in this policy for further information.

Mustad's legal basis for collecting and processing the Personal Data as described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

In Australia and New Zealand, Mustad will only use and/or disclose your personal information for the primary purpose(s) for which we collected it or for secondary purposes directly related to the functions or activities which would be reasonably expected by you.

Mustad may process your Personal Data on the basis of one or multiple of the following legal grounds:

• The performance of an agreement with you or to take measures before the conclusion of an agreement
• Your informed consent
• A legitimate interest
• To comply with applicable law and legal obligations (including valid requests by public authorities for the disclosure of Personal Data)

Direct marketing
We may on occasion disclose your Personal Data to third parties including marketing agencies, retailers or other service providers for them to provide you with information about events, products or services that we believe might be of interest to you.

You can unsubscribe from this communication or change your contact preferences at any time through the Mustad online service you are using.

If we are required by law to provide you with certain information about our products and services like product recalls, we will continue to provide that information even if you have asked not to receive general information about our products and services.

Sharing your Personal Data
We may disclose your Personal Data to other companies within the Mustad group for purposes stated in this policy.

In some cases, we may share your Personal Data with third parties. We will only do this when we consider this necessary. We only share your data with trustworthy parties and ensure that a transfer of your Personal Data is subject to appropriate safeguards.

We may share your personal data with:

• Government institutions such as the tax authorities and supervisory authorities.
• Mustad affiliates, distributors, suppliers and subcontractors (such as accounting services providers);
• Chain partners and other service providers such as banks, insurers, bailiffs, accountants, tax advisers and other advisers;
• External suppliers such as IT service providers, hosting and cloud service providers or other suppliers to which we outsource IT and support services; and
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

If the third party with which your Personal Data governed by the GDPR is shared is designated a Data Processor in the sense of the GDPR, we will also conclude a data processing agreement with this third party.

Overseas disclosure of Personal Data
Mustad will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other Personal Data.

If you are located outside the Netherlands and choose to provide information to us, please note that we transfer the data, including Personal Data, to the Netherlands and process it there.

We may disclose the Personal Data of Australia or New Zealand persons to parties located outside Australia or New Zealand for purposes described in this Privacy Policy. These parties may include related companies, or service providers who store data in locations outside Australia and New Zealand, including Europe, USA and similar other jurisdictions.

Where your data leaves Australia or New Zealand, we will ensure that your Personal Data is adequately protected and that the contractual arrangements with the third-party data hosting services providers and Mustad comply with applicable privacy laws, including the GDPR, the Swiss Federal Data Protection Act and the Australian and New Zealand privacy laws.

Different data protection laws may be applicable in overseas jurisdictions where the recipients of data may be located. We will take reasonable steps to ensure that such overseas recipients do not breach the APPs and IPPs in relation to such information.

Mustad will retain your Personal Data for only as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Mustad will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a relatively short period of time, except when this data is used for security purposes or to improve the functionality of our Services, or if we are legally obligated to retain this data for longer time periods.

We take appropriate security measures to limit abuse of and unauthorized access to Personal Data. For example, we ensure that only authorised persons have access to Personal Data, that access to and transfer of the Personal Data is protected by appropriate safeguards such as secured connections and firewalls and that our security measures are evaluated and updated regularly.

If you do not provide us with access to your Personal Data or do not consent to its use (to the extent applicable privacy laws require such consent), your ability to access our products and services may be limited. For instance, you may not be able to access the EQUINET App and make use of its full range of features. We may also be limited in our ability to fully resolve any access issues or address your queries or concerns.

Under the GDPR, you have the following rights:

You have the right to request us to access, rectify, erase, restrict and transfer your Personal Data. You also have the right to object to the processing of your Personal Data. We are committed to providing the same level of rights to users in Australia and New Zealand.

To the extent that our processing of your Personal Data is based on consent, you have the right to revoke this consent at any time. Any withdrawal of your consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
To exercise these rights or your rights under other applicable data protection laws, e.g. in the USA, Australia or New Zealand, please use the contact information referred to at the end of this privacy policy.

Please note that we may ask you to verify your identity before responding to such requests.

Mustad will respond to your request within 28 calendar days. Depending on the number of requests we receive and the complexity of the requests, this period may be extended by 2 months, in which case we will notify you of such extension.

Please note that individuals' rights under the GDPR are subject to certain restrictions and may not always be granted. A request may be denied in part or in full following these restrictions, such as legal obligations, the rights of third parties and the legitimate interests of Mustad.

If we are unable to grant a particular request, we will inform you of this, with statement of reasons.

Within the EU, EU citizens have the right to lodge a complaint with a supervisory data protection authority. A list of all EU supervisory authorities is available on the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en. In the Netherlands this is the 'Autoriteit Persoonsgegevens' ('AP'). More information can be found on the website of the AP (https://autoriteitpersoonsgegevens.nl/). We would appreciate it if you would contact us first so that we can try to reach an amicable solution.

In Australia, if your concerns are not satisfactorily resolved by us, you can lodge a complaint with Office of the Australian Information Commissioner by visiting oaic.gov.au, calling 1300 363 992 in Australia or by emailing enquiries@oaic.gov.au.

In New Zealand, if your concerns are not satisfactorily resolved by us, you can lodge a complaint with Office of the New Zealand Information Commissioner by visiting privacy.org.nz, lodging a complaint, calling 0800 803 909 in New Zealand or by emailing enquiries@privacy.org.nz.

Our Service does not address anyone under the age of 18 ("Children").
We do not knowingly collect Personal Data from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent (to the extent necessary under applicable law), we take steps to remove that information from our servers.

We may update our Privacy Policy from time to time. Changes will be published on our websites and the EQUINET App. It is therefore advisable to consult our websites regularly to keep up to date with any changes.

This section of our Privacy Policy (the "US Supplement") applies to people living in the United States. The US Supplement explains how we collect, use, and disclose your Personal Information. For the US Supplement, "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with you, directly or indirectly. Personal Information does not include information that cannot be reasonably linked to you.

Personal information we collect

We may collect and use the following categories of Personal Information:

· Identifiers,such as:

• First name and last name;
• E-mail address;
• Phone number,
• Address, State, Province, ZIP/Postal code, City, Country.

· Commercial information, including your purchasing habits.
· Audio or video information, including photos you may provide.
· Professional or employment-related information, such as:

• your business name and title;
• Optional: further information regarding your business, such as if you work alone or in a team, job role (farrier/vet/admin etc.), location of work (own workshop, stud farms, etc.).

· Internet or other similar network activity such as:

• Usage Data described above
• Optional: the EQUINET features you expect to use. We collect this Personal Information from: you, directly in person, by telephone, text, and email, and through the Services (including our live chat in the EQUINET App); your devices and cookies on our website; and through our affiliates and partners;, or through social networks, data analytics platforms and other publicly available sources.

· The following categories of sensitive personal information: your precise geolocation data.

We retain this Personal Information as described with respect to Personal Data under the heading "Retention of data."

Use of personal information

We use your Personal Information to provide and improve the Service and for the reasons described with respect to Personal Data under the heading "Purposes for the processing of Personal Data". For categories of Sensitive Personal Information that we collect, we will only use or disclose it either with your specific consent when required, or as otherwise permitted by law, including the CCPA.

Disclosures of personal information

We do not sell or "share" (as that term is used in the CCPA) your Personal Information. We have shared Personal Information in all or most categories described in this US Supplement with our affiliates and related parties, vendors who provide services to us, and as otherwise described with respect to Personal Data under the heading "Sharing your Personal Data."

Your Rights Under the CCPA/CPRA.

Depending on where you live, you may have the following rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), or other privacy and data protection laws, as applicable:

· Right to Know: The right to request that we disclose to you the Personal Information we collect, use, disclose, share, or sell, and information about our data practices.

· Right to Request Correction: The right to request that we correct inaccurate Personal Information that we maintain about you.

· Right to Request Deletion: The right to request that we delete your Personal Information that we have collected from or about you.

· [Right to Opt Out: [placeholder].

· Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your privacy rights.

To exercise these rights, please contact us by e-mail at privacy@mustad.com or through the contact details referred to below.

Please note that you may only make a CCPA/CPRA-related data access or data portability disclosure request twice within a 12-month period.

We may need to verify your identity before processing such requests in which case you will need to provide us with enough information to identify you (e.g., your full name, address and customer or matter reference number); proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and a description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.

Any Personal Information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.

Mustad welcomes your comments regarding this Privacy Policy. For any questions or requests regarding the processing of your Personal Data or to exercise your rights under this policy, please contact us at privacy@mustad.com or through the contact details on our website.