Personal Data Processing Policy

1. Data controller

Cabalgatas San Pablo, based in Salento, Quindío, Colombia, is responsible for processing personal information collected in connection with enquiries, reservations and horseback rides. NIT: . Address and contact details are available on the Contact page.

2. Information we may collect

Depending on the interaction, we may process identification and contact details, booking and payment-related information, participant and emergency-contact details, and relevant health information voluntarily provided or required to assess safety.

3. Purposes

• Respond to enquiries and manage reservations.
• Verify participation requirements and identify participants.
• Organize rides and contact emergency contacts.
• Manage incidents, assistance and insurance procedures.
• Meet legal, contractual, accounting and administrative duties.
• Send promotional information only where the required authorization or other legal basis exists.

4. Sensitive information

Health information is sensitive personal data. Where it is requested, we will explain its purpose and obtain the authorization required by law, subject to applicable legal exceptions. Providing sensitive data is generally optional; however, we may determine that participation cannot safely proceed without information needed to assess a relevant risk.

5. Sharing information

Only where necessary for a legitimate purpose and supported by an applicable legal basis, information may be shared with insurers, medical or emergency personnel, competent authorities and service providers supporting our operations. We do not sell personal data.

6. Data subject rights

Subject to applicable law, individuals may access, update and correct their information, request proof of authorization and details about its use, submit enquiries or complaints, and request deletion or withdrawal of authorization where legally available.

7. Requests

Send requests to the email address shown on our Contact page with the subject “Personal Data Protection – Cabalgatas San Pablo”. Identify the data subject and clearly describe the request. We will respond within applicable legal deadlines.

8. Retention and security

Information is retained for as long as reasonably necessary for the stated purposes, legal and contractual duties and potential claims. Reasonable measures are used to protect it against loss, alteration, unauthorized access or disclosure.

9. Updates

This policy applies from publication and may be updated. The current version will be available on our website.