Updated 4 February 2025

Hopoti Software Oy (hereinafter referred to as "Hopoti," “we,” “us,” or “our”) agrees to protect the privacy of the users of its Services and to comply with data protection legislation and other legislation, as well as good data protection practices. This privacy statement specifies Hopoti's practices concerning collecting and processing personal data collected through our websites and applications and any services we provide to you through such websites and applications (collectively, the “Services”).

"Personal data" refers to data that can be associated with an individual person. This privacy statement is applied insofar as Hopoti fulfils the role of controller (regardless of the term for that role in relevant law) and whenever the applicability of this privacy statement is referred to when using Hopoti's Services. We may also provide additional information regarding data protection within a separate service, website or application.

“You” and “your” throughout this Privacy Policy refer to users of our Services who are above the age of majority in their jurisdiction, generally meaning users older than 16 years of age. If you are a “child” or “minor” as defined by the laws of your jurisdiction, you must have the consent of your parent or guardian to use our Services. If you reside outside of the EU, for more information about our handling of children’s data, see “Children’s’ Privacy” below.

This Privacy Policy does not govern services or websites that we do not own or control and to which we do not link this Privacy Policy. Hopoti's Services may be provided on various device platforms, including links or access to websites and services hosted and provided by other parties. Hopoti's Services can be used, for example, on mobile devices and third-party applications with their own independent privacy policies and terms of use. Applications downloaded from application stores, such as Apple App Store, Google Play or Microsoft Store, are also subject to the terms of use of the service provider in question. We recommend that you carefully read through the privacy policies and terms of use of such third parties. Hopoti is not responsible for the content of the privacy policies or terms of use of third parties.

By using our Services, including visiting our websites, you agree that we may handle your information as set forth in this Privacy Policy and give your consent regarding the foregoing. If you are unwilling to accept the practices described in this privacy statement, we recommend that you do not use our Services or otherwise provide your personal data to Hopoti.

Hopoti may collect user data necessary for the purposes defined in this privacy statement. The purpose of use defines the type of user data collected in different scenarios.

Your personal data may be collected when you register as a user of Hopoti's Services, when you use the Services, within various competitions, campaigns or surveys or whenever you contact us. Personal data from the following categories, among others, are collected by Hopoti.

1.1. Data submitted to Hopoti

We collect information that you provide directly to us:

We collect data by various means, such as when you enter your data when registering to the service, when you use the service or when you participate in Hopoti's contests, prize draws or studies.

1.2. Data we collect automatically

We may collect certain data automatically concerning you and your use of Hopoti's Services, including through the use of cookies and similar technologies (for more information see our Cookies notice). The information we collect automatically includes, without limitation:

Some of Hopoti's Services and functionalities are based on location data use satellite-based geographic data, IP addresses or other online-based location data. The use of assisted location services, such as assisted GPS, may include transferring your location data and unique device or network service provider-specific identifiers to our location server. For example, when you use our location-based servers to search for the nearest stable, your location data is sent to Hopoti with your consent, where legally required, to provide accurate content.

If you make a payment on the Services, our third-party payment processors, and not Hopoti, collect your full payment information.

We may process your personal data for various purposes depending on how you use the Services, including to:

We may combine data collected using different Services and applications insofar as the data has been collected for the same purpose. To the extent permitted by appliable law, we may aggregate and/or de-identify any data collected through our Services so that such data can no longer be linked to you or your device. We may use such data for any purpose, including without limitation for research and marketing purposes and to create statistics, and we may disclose such information to any third parties.

Please note that all the Sellers with which you are registered may also communicate with you about their services and for marketing purposes.

For purposes of jurisdictions that require us to state the “legal basis” for our processing of your data, we shall process your data to provide the Hopoti booking service, i.e. the legal basis for processing personal data is the implementation of the agreement between us. We shall also process your data based on the legitimate interest created by the client relationship or possible client relationship.

We shall process your personal data with your consent, for example, when we process your location data or (to the extent required by applicable law) ask you for your authorisation to perform direct marketing or send you our newsletter. You have the right to withdraw your consent at any time by emailing support@hopoti.com.

As described above, Hopoti's Services may store information related to the use of Hopoti's Services to enable certain functionalities. Hopoti shall retain the data described in the section “Data we collect automatically” separately from the actual personal data file, so it cannot reasonably identify individual users.

Hopoti may disclose your data to the following types of entities and under the following circumstances:

5.1. Your consent

Your personal data may be disclosed with your explicit consent, where legally required.

5.2. Communities

In general, your personal data will not be displayed to other users of Hopoti's Services, apart from your name, profile and cover picture, your profile's URL address and the pictures, comments and similar data added to the service by you. Some Hopoti Services allow you to make your data visible other users at your discretion. We advise you to carefully consider whether you should provide your personal data or other information to other users. The visibility of your data can be defined in your privacy settings.

5.3. Sellers

Companies that sell their products and services via Hopoti, such as stables, have access to your personal data to the extent necessary for providing the service sold. The data can only be accessed by the Sellers you are or have been a client of and the Sellers you have added as favourites.

5.4. Subcontractors and advisors

We have outsourced certain processing operations to subcontractors who process the personal data on our behalf. For example, Hopoti may use subcontractors for the technical maintenance of its Services, customer services, payment processing, data management and analysis, research, client communications, and various campaigns, and we may consult with legal or consulting professionals. Your personal data may be disclosed to Hopoti's subcontractors only to the extent necessary to provide Hopoti with their services and perform the purposes defined in this privacy statement.

5.5. Advertising and related analytics providers

To the extent permitted by applicable law, we may allow third-party advertising technologies (e.g., ad networks and ad servers) and related analytics providers to use cookies and similar technologies on the Services to deliver relevant, tailored content and advertising to you on other websites you visit and applications you use, as explained further in “Online analytics and advertising” section below.

5.6. International data transfer

In general, Hopoti aims to provide its Services and process your personal data by using operators and services located within the EU or EEA. However, under certain circumstances, Hopoti's Services may be provided by using operators, services and servers located elsewhere, which means that your personal data may be transferred to another country. Such transfers may include the disclosure of personal data outside the EU or EEA to countries with different legislations concerning the processing of personal data than defined by the Finnish law, for example, to the United States. Even in such cases, Hopoti shall ensure the appropriate level of data protection regarding your personal data by agreeing on matters related to the confidentiality and processing of personal data following the law, for example, by using the standard contractual clauses adopted by the EU Commission and other measures to ensure that the processing of personal data is performed under this privacy statement, legislation and good practices.

5.7. Research

Under certain circumstances, we may disclose data for scientific or other research purposes, provided that the data have first been converted to a format that does not enable identifying individual persons.

5.8. Disclosures for legal purposes

We may disclose personal data to third parties as required by law or if we believe in good faith that the disclosure is necessary to (i) comply with the law and legal process such as subpoenas, warrants, or court orders; (ii) exercise or defend our legal rights and enforce our agreements, including terms applicable to the Services; or (iii) protect the rights, property, or personal safety of Hopoti or our agents, affiliates, Services, employees, customers, and others.

5.9. Third parties in connection with a business transaction

We may disclose personal data to third parties in connection with a business transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business or a Seller’s businesses, including for the purpose of determining whether to proceed or continue with such transaction or business relationship.

To the extent permitted by applicable law, we may use and disclose personal data for purposes of online analytics and advertising. You have certain choices regarding these activities as set forth below.

6.1. Online analytics

We may use third-party web analytics services on our Services for various purposes, including to collect and analyze usage information through cookies and other similar technologies, assist with fraud prevention, provide certain features to you, and engage in auditing, research, or reporting. One such service we may use is Google Analytics. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here. If you receive emails from us, we may use certain analytics tools, such as clear GIFs, in those emails to collect data that helps us analyze the effectiveness of our communications and marketing campaigns, such as data about when you open the email or whether you click on any links in the email.

6.2. Tailored online advertising

When you use the Services, we may allow certain third-party advertising technology partners (e.g., ad networks and ad servers such as Google) to place cookies or other tracking technologies on your browser or device to collect information about you as discussed above. These third-party partners may use this information to serve relevant content and advertising to you across the Internet, and they may access their own cookies or other tracking technologies on your browser or device to assist in this activity. We may also allow third parties to tailor the ads you see within the Services using third-party advertising technology partners. To learn more about these online advertising activities and how you can generally control cookies from being put on your browser or device to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s Consumer Opt-Out link, or Your Online Choices. These websites also allow you to opt out of receiving tailored advertising from companies that participate in these programs. We do not control and make no representations about these websites, their opt-out mechanisms, or whether any of our advertising partners participate in these opt-out mechanisms. We are not responsible for and make no representations about the accuracy or continued availability of these opt-out mechanisms.

Please note that if you opt out of tailored advertising, you may still see advertising on our Services or across the Internet, but it will not be tailored to you based on your online behavior over time.

We shall make all reasonable efforts to maintain the accuracy of your personal data by deleting unrequired data and updating obsolete data.

Some Hopoti Services allow users to control the personal data collected by us and the users' selections and consents. We urge you to inspect the timeliness of your data periodically with these tools. Please note that you are responsible for updating the personal data you have provided if any changes occur.

We pay special attention to data protection and privacy in the design, provision and maintenance of our Services. We apply appropriate physical, technological and organisational measures to protect your personal data from being misused. Specifically designated persons are in charge of data protection and privacy matters. Access to systems and databases containing personal data is restricted to specifically designated persons for whom it is absolutely necessary to have the right to process the personal data in question to perform their work.

We also use pre-emptive risk management, paying attention to data protection and privacy when designing our Services, training our personnel and regularly inspecting the compliance of our Services. We manage risks related to the misuse of the data by considering the probability of such risks and the nature of the protected data.

We will retain your data following the current legislation and only for the duration necessary for the purposes defined in this privacy statement. Your personal data will be deleted if the legal basis for the processing is no longer valid.

A user is deemed to have deleted their registered account, such as the Hopoti user ID, if they remove their registration to the service. In such cases, Hopoti will delete your remaining data or appropriately de-identify it such that it can no longer reasonably identify you

Please note that some Hopoti Services may include public, interactive and communicational functionalities, such as comment sections and discussion forums, and some content created by you may remain visible even if you delete the user ID registered by you or the user-service provider relationship is terminated.

10.1. Marketing communications

Subject to applicable law and any preferences you have expressed to us, we may send you marketing communications regarding our Services or third-party services that we believe will be of interest to you. You can opt out of receiving future communications using the opt-out instructions provided in such communications or by contacting us at support@hopoti.com. Please note that even if you opt out of marketing communications, we may still send you non-marketing communications, such as emails about updates to this Privacy Policy, confirming your requests, or notifying you of security issues with your account. We may also use and disclose certain information as required by applicable law.

10.2. Rights regarding your data

Depending on the country or state where you reside, you may have certain rights regarding your “personal information” or “personal data” (as such terms are defined under applicable law; collectively referred to in this section as “personal data”), including the right to ask us to:

Please note that certain data may be exempt from such requests under applicable law. For example, we need certain data to provide the Services to you, fulfill your requests, or comply with applicable law, and if you ask us to delete such information, we may deny your request. We may take reasonable steps to verify your identity before responding to a request. For us to verify your identity, you must send your request from the email address specified in the user account the request is about. If we cannot verify your identity, we may be unable to respond to your requests. As provided in applicable law, you have the right to not be discriminated against for exercising your rights regarding your personal data.

You may exercise these rights by contacting us at support@hopoti.com. Please specify the right you want to exercise and the data with respect to which you want to exercise this right. You may be able to designate an authorized agent to make requests on your behalf. So we can verify an authorized agent, you must provide the authorized agent with a power of attorney or a signed, written permission to make such requests. We may follow up with you to verify your identity before responding to the authorized agent’s request, as permitted by applicable law.

Under certain laws, such as the laws of the European Economic Area and United Kingdom, you have the right to prohibit Hopoti from using data concerning you for the purposes of direct marketing and conducting customer satisfaction and other studies. Nevertheless, we may continue sending you notifications regarding our Services, such as information about changes, faults and issues in our Services.

You may be able to exercise certain rights and choices through your account settings or using the functionalities available on your device or in our Services. For example, you can update and correct your account information and delete certain information through your account.

You also have the right to lodge a complaint with the data protection authority in your jurisdiction if you feel that the processing of personal data violates your rights defined in applicable privacy laws. However, we encourage you to contact us first with any concerns or complaints so we can do our best to resolve them.

If you are the parent or guardian of a minor under the age of 18 who wants to use Hopoti, you may create an account for the minor either as a standalone account or as a “child account” within a Family Account. A “child account” can later be unlinked from a Family Account and function as a standalone account.

We are required to provide users in the United States with certain information under the Children’s Online Privacy Protection Act (“COPPA”). As we describe throughout this Privacy Policy, we may collect “personal information,” as defined in COPPA, from children under 13 years old who use the Services.

To the extent provided in applicable law, if you are a parent or guardian of a Hopoti user under the age of 13, you may exercise on behalf of your child the rights in the “Your rights and choices” section above, in the manner set forth in that section.

Our Services may contain links to third party websites, features, and other services. We do not control and are not responsible for the practices of such third parties. If you click a link to a third-party website, feature, or service, the third party’s privacy policy and terms apply, and we encourage you to read these materials before providing your information to a third party.

If you are a California resident, California law requires us to provide you with some additional information about how we collect, use, and disclose your “personal information,” as defined in the California Consumer Privacy Act (“CCPA”).

13.1. Personal information we collect, use, disclose, “sell,” and “share”

This Privacy Policy discusses in detail the categories of personal information we collect and how we use, disclose, and retain such information. We provide additional information required by the CCPA in the chart below.

13.2. Opt out of sale/sharing of personal information. The CCPA sets forth certain obligations for businesses that “sell” personal information or “share” personal information for “cross-context behavioral advertising” purposes. Under the CCPA, “sale” and “sharing” are defined such that they may include allowing third parties to receive certain information for advertising and related analytics purposes. To opt out of these activities, please use the “Cookies Settings” link on our website footer, and opt out of “Preferences” and “Marketing” cookies. Please note that you must complete this opt-out on each browser or device you use to access the Services. We do not knowingly sell the personal information of minors under 16 years of age.

13.3. Additional California privacy rights. California residents may make certain requests about their personal information under the CCPA as set forth in “Your rights and choices” section above. In addition:

13.4. “Shine the Light” disclosure. California law permits customers who are California residents to request certain information once per year regarding our disclosure of “personal information” (as that term is defined under applicable California law) to third parties for such third parties’ direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

13.5. Do Not Track. Do Not Track (“DNT”) is a signal that you can set on certain browsers. Because there currently isn’t an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

Hopoti Software Oy reserves the right to make amendments to this Privacy Policy without advance notice unless legally required. Hopoti will publish information about amendments to this Privacy Policy at the beginning of the Privacy Policy and on its website. We recommend that you review this Privacy Policy periodically to become aware of any amendments made.

The controller of your personal data is Hopoti Software Oy, Merikatu 6, FI-26200 Rauma, Finland.

Please contact our customer service via email at support@hopoti.com in matters concerning privacy.

Person in charge of Hopoti Software Oy's registers:
Veli-Pekka Ahonen, Hopoti Software Oy
Email: vellu@hopoti.com