This website uses cookies

We and selected third parties use cookies or similar technologies for technical purposes and, with your consent, also for other purposes, as it is stated in the cookie policy. With regard to advertising, we and selected third parties may use precise geolocation data and actively scan the characteristics of the device for identification purposes, in order to store and/or access information on a device and process personal data such as your usage data, for the following advertising purposes: personalized ads and content. You can freely grant, refuse or withdraw your consent:

• by clicking on the "Save and accept" button you consent to the use of all selected cookies.

• by clicking on "Cookie management" you can manage your preferences and withdraw consents.

Consent Selection
Details
  • Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
    • Learn more about this provideropens in a new window
      CookieConsentStores the user's cookie consent state for the current domain
      Maximum Storage Duration: 1 yearType: HTTP Cookie
    • Learn more about this provideropens in a new window

      Some of the data collected by this provider is for the purposes of personalization and measuring advertising effectiveness. The provider may use the IP Addresses for ads measurement and ads personalization.

      test_cookieUsed to check if the user's browser supports cookies.
      Maximum Storage Duration: 1 dayType: HTTP Cookie
    • Learn more about this provideropens in a new window
      __paypal_sdk_storage__This cookie is necessary for the PayPal login-function on the website.
      Maximum Storage Duration: PersistentType: HTML Local Storage
      __paypal_storage__Used in context with the PayPal payment-function on the website. The cookie is necessary for making a safe transaction through PayPal.
      Maximum Storage Duration: PersistentType: HTML Local Storage
    • Learn more about this provideropens in a new window
      __cf_bmThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.
      Maximum Storage Duration: 1 dayType: HTTP Cookie
    • JSESSIONIDPreserves users states across page requests.
      Maximum Storage Duration: SessionType: HTTP Cookie
    • cf_clearance [x2]This cookie is used to distinguish between humans and bots.
      Maximum Storage Duration: 1 yearType: HTTP Cookie
  • Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
    • Learn more about this provideropens in a new window
      playerSaves the user's preferences when playing embedded videos from Vimeo.
      Maximum Storage Duration: 1 yearType: HTTP Cookie
      sync_activeContains data on visitor's video-content preferences - This allows the website to remember parameters such as preferred volume or video quality. The service is provided by Vimeo.com.
      Maximum Storage Duration: PersistentType: HTML Local Storage
  • Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
    • Learn more about this provideropens in a new window

      Some of the data collected by this provider is for the purposes of personalization and measuring advertising effectiveness. The provider may use the IP Addresses for ads measurement and ads personalization.

      _gaRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.
      Maximum Storage Duration: 2 yearsType: HTTP Cookie
      _ga_#Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.
      Maximum Storage Duration: 2 yearsType: HTTP Cookie
    • Learn more about this provideropens in a new window
      vuidCollects data on the user's visits to the website, such as which pages have been read.
      Maximum Storage Duration: 2 yearsType: HTTP Cookie
  • Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
    • Learn more about this provideropens in a new window
      _fbpUsed by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.
      Maximum Storage Duration: 3 monthsType: HTTP Cookie
      lastExternalReferrerDetects how the user reached the website by registering their last URL-address.
      Maximum Storage Duration: PersistentType: HTML Local Storage
      lastExternalReferrerTimeDetects how the user reached the website by registering their last URL-address.
      Maximum Storage Duration: PersistentType: HTML Local Storage
    • Learn more about this provideropens in a new window

      Some of the data collected by this provider is for the purposes of personalization and measuring advertising effectiveness. The provider may use the IP Addresses for ads measurement and ads personalization.

      _gcl_auUsed by Google AdSense for experimenting with advertisement efficiency across websites using their services.
      Maximum Storage Duration: 3 monthsType: HTTP Cookie
      IDEUsed by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.
      Maximum Storage Duration: 400 daysType: HTTP Cookie
      pagead/1p-user-list/#Tracks if the user has shown interest in specific products or events across multiple websites and detects how the user navigates between sites. This is used for measurement of advertisement efforts and facilitates payment of referral-fees between websites.
      Maximum Storage Duration: SessionType: Pixel Tracker
      _gcl_lsTracks the conversion rate between the user and the advertisement banners on the website - This serves to optimise the relevance of the advertisements on the website.
      Maximum Storage Duration: PersistentType: HTML Local Storage
    • Learn more about this provideropens in a new window
      __cf_obPending
      Maximum Storage Duration: SessionType: HTTP Cookie
      _cfPre_tabIdPending
      Maximum Storage Duration: SessionType: HTML Local Storage
      COOKIE_ID_PICOX_IDPending
      Maximum Storage Duration: 1 yearType: HTTP Cookie
      orionV3#identityUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: PersistentType: IndexedDB
      picox#eventsUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: PersistentType: IndexedDB
      LOCAL_STORAGE_ID_PICOX_IDUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: PersistentType: HTML Local Storage
      LOCAL_STORAGE_ID_VIMEO_PLAYERUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: PersistentType: HTML Local Storage
      PLAYER_PICOX_SAMPLING_SEEDUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: PersistentType: HTML Local Storage
      SESSION_STORAGE_ID_PICOX_IDPending
      Maximum Storage Duration: SessionType: HTML Local Storage
      SESSION_STORAGE_ID_PICOX_SESSION_IDUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: SessionType: HTML Local Storage
    • ceeRegisters a unique ID that identifies the user's device during return visits. Used for conversion tracking and to measure the efficacy of online ads.
      Maximum Storage Duration: 3 monthsType: HTTP Cookie
  • Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.
    • Learn more about this provideropens in a new window
      tb_wall_cache:148066:::Pending
      Maximum Storage Duration: SessionType: HTML Local Storage
    • ACA_clientDataPending
      Maximum Storage Duration: PersistentType: HTML Local Storage
      ACA_sessionDataPending
      Maximum Storage Duration: SessionType: HTML Local Storage
      ACA_sessionTokenPending
      Maximum Storage Duration: PersistentType: HTML Local Storage
      ACA_shippingCountryPending
      Maximum Storage Duration: PersistentType: HTML Local Storage
Cookie declaration last updated on 11/3/26 by Cookiebot
[#IABV2_TITLE#]
[#IABV2_BODY_INTRO#]
[#IABV2_BODY_LEGITIMATE_INTEREST_INTRO#]
[#IABV2_BODY_PREFERENCE_INTRO#]
[#IABV2_BODY_PURPOSES_INTRO#]
[#IABV2_BODY_PURPOSES#]
[#IABV2_BODY_FEATURES_INTRO#]
[#IABV2_BODY_FEATURES#]
[#IABV2_BODY_PARTNERS_INTRO#]
[#IABV2_BODY_PARTNERS#]
About
Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

Please state your consent ID and date when you contact us regarding your consent.
loading...

Terms and conditions

Privacy policy

PRIVACY NOTICE
Customers and registered users of the website www.acavallo.com
pursuant to Articles 13 and 21 of Regulation (EU) 2016/679 (“GDPR”) and Articles 122 and 130 of Italian Legislative Decree No. 196 of 30 June 2003 (“Privacy Code”)
 
1. Data controller
The data controller is Amahorse Group S.p.A., with registered office at Via Citernese 112, 06016 San Giustino (PG), Italy, VAT No. 02129200545 (“Amahorse” or “Controller”), which operates the website www.acavallo.com under the Acavallo brand. The Controller can be contacted at marketing@amahorse.com and by certified email (PEC) at umbriaequitazione@pec.it.
 
2. Data processed
The Controller processes the following categories of data:
  • identification and contact data: first name, last name, email address, telephone number, shipping and billing addresses, tax code or VAT number where required for invoicing;
  • account data: login credentials (the password is stored in encrypted form), communication preferences and their history, managed through the MailUp platform;
  • purchase data: orders, products purchased, amounts, returns, products added to the cart and not purchased;
  • email data: date sent and, within the limits set out in section 4, opening of emails and clicks on the links they contain;
  • browsing data and data collected through cookies and similar tools on the Site, for which please refer to the Cookie Policy;
  • payment data: these are handled directly by payment service providers; the Controller does not acquire full card details.
 
3. Purposes and legal bases
  • a) Management of the account and of purchase contracts. Registration, purchases with or without registration, delivery, payment, returns, withdrawal, warranties and customer support. Legal basis: performance of a contract and of pre-contractual measures (Article 6(1)(b) GDPR).
  • b) Service communications. Emails confirming registration, setting and changing your password, order confirmation and status, shipping, returns, and changes to the terms and conditions and to this notice. Legal basis: performance of a contract and, where applicable, compliance with legal obligations (Article 6(1)(b) and (c) GDPR). These emails are sent regardless of your marketing choices and contain no offers or promotions.
  • c) Compliance with legal obligations, in particular tax and accounting obligations. Legal basis: Article 6(1)(c) GDPR.
  • d) Newsletter and promotional communications, subject to consent. Sending by email of the newsletter and of communications about Acavallo products, offers and initiatives, including reminders of incomplete carts and expiring discount codes, even if you have not yet made a purchase. Reminders of incomplete carts are sent exclusively to users subscribed to the newsletter who have given, and not withdrawn, their consent to promotional communications. Legal basis: consent (Article 130(1) and (2) of the Privacy Code and Article 6(1)(a) GDPR). For those subscribed to the newsletter as of 28/10/2026, the provisions of section 4 apply.
  • e) Individual tracking of opens and clicks, subject to consent. Recording, in the emails referred to in letter d), of the opening of the message and of clicks on links, attributed to you, as described in section 4. Legal basis: consent (Article 122(1) of the Privacy Code and Article 6(1)(a) GDPR), requested together with the consent referred to in letter d) and revocable separately. For those subscribed to the newsletter as of 28/10/2026, the arrangements described in section 4 apply.
  • f) Aggregate and anonymous measurement of promotional emails. Overall count of opens and clicks of promotional emails, without reference to individual recipients, to verify correct delivery and combat spam, as described in section 4. Legal basis: Article 122(1), second sentence, of the Privacy Code, as interpreted by decision No. 284 of 17 April 2026 of the Italian Data Protection Authority (“Garante”) (web doc. No. 10241943), and the Controller’s legitimate interest (Article 6(1)(f) GDPR).
  • g) Security, fraud prevention and protection of rights, including in legal proceedings. Legal basis: the Controller’s legitimate interest (Article 6(1)(f) GDPR).
No decisions based solely on automated processing which produce legal effects concerning you or similarly significantly affect you are taken within the meaning of Article 22 GDPR.
 
4. Tracking pixels and links in emails
Newsletters and promotional communications sent by the Controller may contain a tiny, generally invisible image (“pixel”), which your email program downloads, when you open the message, from the servers of the Controller or of the provider it uses for sending, as well as links that pass through the same servers before leading to the requested page. This makes it possible to detect when a message is opened and when a link is clicked.
 
The Controller uses these tools in two ways.
  • Aggregate and anonymous count, in newsletters and promotional communications: the pixel and links are identical for all recipients of the same communication (except for personal links needed for the message to work, such as the link to resume a cart, which are not used for measurement), the IP address is anonymised on receipt, before any recording, and the Controller obtains only the total number of opens and clicks, without being able to know who opened the message or clicked. No consent is required.
  • Individual tracking, only in promotional communications and only if you have consented: the pixel and links contain a random, non-sequential code linked to your email address in a separate archive, so that your address is not transmitted in the request. The Controller records whether and when you open the message, which links you click and the type of device and email program used, in order to assess the effectiveness of its communications, adapt their content and frequency, and stop sending messages that do not appear to interest you.
Newsletter subscribers as of 28/10/2026. The newsletter contains promotional content about Acavallo products: the consent given when subscribing also covers the promotional communications referred to in section 3, letter d). For these subscribers, individual email tracking was already active before the publication of the Garante’s Guidelines of 17 April 2026: it continues, for the newsletter and promotional communications, on the basis of the consent given when subscribing to the newsletter (Article 122(1) of the Privacy Code and Article 6(1)(a) GDPR), without the need for new consent, in accordance with the arrangements laid down in § 6 of those Guidelines for processing already in progress. Subscribers may at any time disable tracking alone, while continuing to receive emails, or withdraw their consent to promotional communications, via the “Manage preferences” link at the bottom of every email, without needing to log in to their account.
 
You may withdraw your consent to individual tracking alone at any time, while continuing to receive promotional communications without tracking pixels and links, via the “Manage preferences” link at the bottom of every promotional email, without needing to log in to your account. Withdrawal does not limit the Site’s services in any way. You can also prevent the pixel from being downloaded by disabling the automatic display of images in your email program.
 
5. Provision of data
Providing the data referred to in section 3, letters a), b) and c), is necessary for registration, purchases and compliance with legal obligations: without it, it is not possible to register or make purchases. The consents referred to in section 3, letters d) and e), are collected through a single “Marketing communications” checkbox in the Site registration and newsletter subscription forms. They are optional and can be withdrawn separately: not giving or withdrawing them has no consequences for registration or purchases.
 
6. Processing methods and recipients
The data are processed electronically by the Controller’s staff, authorised and instructed pursuant to Article 29 GDPR and Article 2-quaterdecies of the Privacy Code, with appropriate security measures pursuant to Article 32 GDPR. Newsletters and promotional communications are sent through the MailUp platform, which is operated directly by the Controller. Service communications are sent through the systems of the Site’s e-commerce platform.
 
The data may be disclosed, to the extent necessary, to:
  • couriers and shipping companies, for delivery;
  • payment service providers, acting as independent controllers;
  • providers of IT, hosting and maintenance services for the Site and the Controller’s systems, appointed as processors pursuant to Article 28 GDPR: the operator of the MailUp platform (TeamSystem Group), for sending newsletters and promotional communications; the providers of the Site’s e-commerce platform, of hosting services and of IT support;
  • tax, accounting and legal advisers, as independent controllers or as processors;
  • public authorities, where required by law.
An up-to-date list of processors may be requested from the Controller. The data are not disseminated.
 
7. Transfer of data outside the European Economic Area
The data, including those processed through the MailUp platform, are stored and processed within the European Economic Area.
 
8. Retention period
Data and purposesRetention period
AccountUntil the account is deleted at the user’s request or after 24 months of inactivity, subject to prior notice
Purchase contracts and invoicing (section 3, letters a) and c))Ten years from the conclusion of the contract (Article 2220 of the Italian Civil Code)
Incomplete cart (section 3, letter d))30 days from cart abandonment
Contact data for promotional communications (section 3, letter d))Twenty-four months from the last purchase or the last interaction with communications, unless consent is withdrawn or an objection is made earlier
Individual tracking data and related results (section 3, letter e))Twelve months from recording
Aggregate results (section 3, letter f))Indefinitely, after deletion of individual sending and tracking data, once they can no longer be linked to recipients
Proof of consents, withdrawals and objectionsFor the duration of the processing to which they relate and, thereafter, for as long as necessary to protect the Controller’s rights
List of persons who have objected to or withdrawn their consent to promotional communicationsIndefinitely, for the sole purpose of not sending further communications, limited to the email address, stored in pseudonymised form by means of a keyed cryptographic function, and to the date and scope of the objection
Browsing data and cookiesAs set out in the Cookie Policy
 
After these periods, the data are deleted or anonymised.
 
9. Data subject rights
You have the right to request from the Controller access to your data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and portability of the data you have provided (Article 20), and to object to processing based on legitimate interest on grounds relating to your particular situation (Article 21(1)).
 
You have the right to object at any time, without giving reasons, to the processing of your data for direct marketing purposes (Article 21(2) and (3) GDPR).
 
You may withdraw any consent you have given at any time, including separately, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3) GDPR).
 
Objections and withdrawals can be made via the “Manage preferences” link at the bottom of every promotional email or by writing to marketing@amahorse.com; other requests can be sent to the same address. The Controller will respond without undue delay and in any event within one month of receipt of the request (Article 12(3) GDPR).
 
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, Italy (www.garanteprivacy.it).
 
10. Minors
Registration and purchases on the Site are reserved for persons aged sixteen or over, as provided for in the General Terms and Conditions of Sale. The Controller does not knowingly process data of persons under that age and deletes such data if it becomes aware of them.
 
11. Updates
This notice was last updated on 28/10/2026. Changes are published on the Site and, if significant, communicated to registered users by email.
Login

If registered, enter your email and password

create your account

Creating an account is quick and easy. Sign up now and take advantage of exclusive member benefits, such as free shipping on your first order!

My cart

Empty cart
Search