Privacy Policy
Last updated: 28 February 2026
1. Data controller
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), we inform you that the data controller responsible for processing your personal data is:
- Data controller: GC ECUESTRE, S. C.
- Tax ID (CIF): J05343314
- Address: (to be confirmed)
- Email: info@jerezciudadelcaballo.com
2. Personal data we collect
This website collects personal data through the following channels:
2.1. Contact form
When you submit the contact form, we collect the following data:
- Full name
- Email address
- Telephone number (optional)
- Reason for enquiry (selected from: Participation, Sponsorship/Partnerships, Press/Media, General information)
- Message
2.2. Entry form
When you submit an entry for the event's competitions, we collect:
- Participant's full name
- National ID (DNI) / Passport
- Email address
- Telephone number
- Stud farm / Stud name (optional)
- Horse details: name, DIE/microchip number, breed, sex and year of birth
- Selected competition/discipline and category
2.3. Cookies and browsing data
You can find full information about cookies in our Cookie Policy. In summary, we use:
- Functional cookies: to remember your cookie choice (no consent required).
- Analytics cookies (Google Analytics): only activated if you expressly authorise them; they collect anonymised browsing data (pages visited, duration, device type, etc.).
3. Purpose of processing
| Processing | Purpose | Legal basis |
|---|---|---|
| Contact form | To manage and respond to enquiries and requests for information, partnership or participation submitted by the user. | Consent of the data subject (Art. 6(1)(a) GDPR) |
| Entry form | To manage the entry of the participant and their horse in the event's classes and competitions. | Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) |
| Analytics cookies | To analyse the use of the website in aggregate form in order to improve the service and the browsing experience. | Consent of the data subject (Art. 6(1)(a) GDPR) |
4. Retention period
- Contact data: retained for as long as necessary to deal with your enquiry and, once resolved, for the applicable statutory limitation periods (maximum 3 years).
- Entry data: retained for the duration of the event edition and until the obligations arising from participation have been fulfilled. Thereafter, the data will be kept blocked for the applicable statutory limitation periods.
- Analytics cookie data: in accordance with the periods indicated in the Cookie Policy (maximum 2 years for Google Analytics).
5. Recipients of the data
Your personal data will not be disclosed to third parties, except in the following cases:
- Google LLC (Google Analytics): only if you have accepted analytics cookies. Google acts as a data processor and complies with the EU-U.S. Data Privacy Framework. More information at policies.google.com/privacy.
- Equestrian associations and federations: the data of entrants may be communicated to the associations and federations organising the competitions (ANCCE, AECCA, etc.) to the extent necessary for the management of the competitions.
- Legal obligation: where required by a statutory provision or a court order.
6. International transfers
The use of Google Analytics may involve transfers of data to Google LLC servers in the United States. Such transfers are covered by the EU-U.S. Data Privacy Framework, to which Google adheres. You may consult the European Commission's adequacy decision of 10 July 2023.
No other international data transfers are carried out.
7. Your rights
Under the GDPR and the LOPDGDD, you may exercise the following rights at any time:
- Access: to request confirmation as to whether your personal data is being processed and, if so, to obtain a copy.
- Rectification: to request the correction of inaccurate or incomplete data.
- Erasure: to request the deletion of your data when, among other reasons, it is no longer necessary for the purpose for which it was collected.
- Objection: to object to the processing of your data in certain circumstances.
- Restriction of processing: to request that the processing of your data be restricted where any of the conditions set out in the GDPR are met.
- Portability: to receive the personal data you have provided in a structured, commonly used and machine-readable format, and to transmit it to another controller.
- Withdrawal of consent: for processing based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, you may contact us by email at info@jerezciudadelcaballo.com, stating your full name, the right you wish to exercise and a copy of your national ID card or other identity document.
We also inform you of your right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es — if you consider that the processing of your personal data infringes the applicable legislation.
8. Security measures
The data controller has implemented the technical and organisational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed.
The measures adopted include:
- Encrypted communications via HTTPS protocol (TLS/SSL).
- Access to personal data restricted to authorised personnel only.
- Strong password policy with regular updates.
9. Changes to this policy
GC ECUESTRE, S. C. reserves the right to amend this Privacy Policy to adapt it to new legislation, case law or industry practice. Any substantial change will be communicated by publishing the updated version on this page with the corresponding revision date.
We recommend that you review this policy periodically to stay informed.
