Privacy Policy
At Horizon, managed by Four Horizons Experience Group, S.L., we treat your personal data with transparency and responsibility in accordance with the GDPR and the LOPDGDD.
1. Data Controller
Four Horizons Experience Group, S.L.
NIF: B75295782
Address: Paseo de la Castellana 163, 28046, Madrid
Email: privacy@fourhorizons.es
2. Data We Collect
Provided Data:
- Name and surname
- Phone
- Information sent in contact or reservation forms
Automatically Obtained Data:
- IP Address
- Device and browser information
- Pages visited, clicks, and session duration
- Analytics identifiers (only with consent)
3. Purposes of Processing
- Reservation management
- Customer service
- Sending commercial communications (only with consent)
- Website improvement via analytics tools (only if you accept)
- Compliance with legal obligations
4. Legal Bases
- Contract execution: reservations
- Consent: forms, marketing, analytics/marketing cookies
- Legitimate interest: security, abuse prevention, service improvement
- Legal obligation: fiscal or administrative regulations
5. Data Processors
Analytics (activated only if you give consent):
- PostHog (EU/US hosting)
- Google Analytics 4, with Google Consent Mode to respect your decisions
Other Providers:
- Hosting, security (including Cloudflare Turnstile)
- Email platforms and operational services
All providers act under a data processor agreement in accordance with the GDPR.
6. International Transfers
PostHog and Google may perform international transfers under Standard Contractual Clauses (SCC) and additional security measures.
7. Data Retention
- Forms/reservations: during the commercial relationship and legal deadlines
- Marketing: until consent is withdrawn
- Analytics: according to configuration and always revocable
8. User Rights
You can exercise:
- Access
- Rectification
- Deletion
- Limitation
- Opposition
- Portability
- Withdrawal of consent
- Claim before the AEPD (Spanish Data Protection Agency)
9. Exercise of Rights
Email: privacy@fourhorizons.es
Include identification and the right you wish to exercise.
Response time: maximum 30 days.
10. Security
We apply technical and organizational measures (encryption, access control, anti-abuse systems) to protect your personal data.