1. Identification of the Data Controller
The data controller responsible for processing personal data collected through this website is:
- Name/Owner: Sierra Trails / Dallas Love
- Commercial Address: 18412 Bubion, Granada, Spain
- NIF/NIE: ESX0740667K
- Contact Email: dallas@spainhorseriding.com
2. Applicable Legal Framework
Given that our economic activity is carried out physically and is registered in Andalusia, Spain, our data practices comply strictly with the European General Data Protection Regulation (EU GDPR) and the Spanish Ley Orgánica 3/2018 de Protección de Datos Personales y Garantía de Derechos Digitales (LOPDGDD).
Furthermore, because many of our clients reside in the United Kingdom, we recognize and guarantee the rights established under the UK GDPR as well.
3. Data We Collect and Purpose (Lawful Basis)
We process personal data exclusively to offer a safe and personalized experience on our horse riding trails:
- Bookings and Inquiries: We process your name, contact details (phone and email), and payment details for the purpose of managing your excursion booking and executing the service contract. (Lawful basis: Performance of a contract).
- Safety and Physical Fitness Data: With the sole purpose of ensuring the welfare of the animal, the rider’s safety, and the appropriate assignment of the horse, we may request data such as approximate weight or relevant medical conditions. (Lawful basis: Explicit consent and vital interest of the user).
- Marketing and Communications: If you grant us your consent, we will use your email address to send you trail updates or news. You can unsubscribe at any time with immediate effect. (Lawful basis: Consent of the data subject).
4. Storage and International Data Transfers
Your personal data is securely stored within the European Economic Area (EEA) and Spain.
- We do not use third-party cloud tools or software that process or transfer your information outside the EU/UK zone.
- Although the United Kingdom operates independently of the EU, data exchanges between our business and our British clients are carried out under the reciprocal framework of the adequacy decisions currently in force between the EU and the UK.
5. Data Retention Period
We will retain your physical or digital booking data for the time strictly necessary to complete the horse riding trail, and subsequently, during the mandatory legal periods required to comply with tax, accounting, and active tourism registration regulations in Spain (generally up to 5 years).
6. Image Rights and Social Networks (Instagram)
During the course of the trails, we may take photographs or videos of the participants. We will never publish your image on our website or on our social media channels (such as Instagram) without having previously obtained your explicit written consent at our facilities.
Given that Instagram is a platform owned by Meta Platforms, Inc. (USA), by accepting the publication of your photo, you assume that your data may be processed in the United States under the independent privacy frameworks of that platform. You can revoke this image consent at any time by sending us an email, and we will remove the publication immediately.
7. Your Legal Rights
Regardless of whether you reside in Spain or the United Kingdom, you hold full control over your data. You have the right to request access, rectification, restriction, portability, or permanent erasure of your data from our systems.
To exercise any of these rights, please contact us at [Insert your contact email]. If you consider that your data has not been processed correctly, you have the right to lodge a formal complaint with the Spanish Agencia Española de Protección de Datos (AEPD) or with the UK Information Commissioner’s Office (ICO).