Privacy Policy

At Horizon, managed by Four Horizons Experience Group, S.L., we treat your personal data with transparency and responsibility in accordance with the GDPR and the LOPDGDD.

1. Data Controller

Four Horizons Experience Group, S.L.
NIF: B75295782
Address: Paseo de la Castellana 163, 28046, Madrid
Email: privacy@fourhorizons.es

2. Data We Collect

Provided Data:

  • Name and surname
  • Email
  • Phone
  • Information sent in contact or reservation forms

Automatically Obtained Data:

  • IP Address
  • Device and browser information
  • Pages visited, clicks, and session duration
  • Analytics identifiers (only with consent)

3. Purposes of Processing

  • Reservation management
  • Customer service
  • Sending commercial communications (only with consent)
  • Website improvement via analytics tools (only if you accept)
  • Compliance with legal obligations

4. Legal Bases

  • Contract execution: reservations
  • Consent: forms, marketing, analytics/marketing cookies
  • Legitimate interest: security, abuse prevention, service improvement
  • Legal obligation: fiscal or administrative regulations

5. Data Processors

Analytics (activated only if you give consent):

  • PostHog (EU/US hosting)
  • Google Analytics 4, with Google Consent Mode to respect your decisions

Other Providers:

  • Hosting, security (including Cloudflare Turnstile)
  • Email platforms and operational services

All providers act under a data processor agreement in accordance with the GDPR.

6. International Transfers

PostHog and Google may perform international transfers under Standard Contractual Clauses (SCC) and additional security measures.

7. Data Retention

  • Forms/reservations: during the commercial relationship and legal deadlines
  • Marketing: until consent is withdrawn
  • Analytics: according to configuration and always revocable

8. User Rights

You can exercise:

  • Access
  • Rectification
  • Deletion
  • Limitation
  • Opposition
  • Portability
  • Withdrawal of consent
  • Claim before the AEPD (Spanish Data Protection Agency)

9. Exercise of Rights

Email: privacy@fourhorizons.es
Include identification and the right you wish to exercise.
Response time: maximum 30 days.

10. Security

We apply technical and organizational measures (encryption, access control, anti-abuse systems) to protect your personal data.