Privacy and cookies
Text pending legal review.
Last updated: September 2026.
This English translation is provided for convenience. In case of any discrepancy, the Spanish version prevails.
1. Data controller
- Controller: Global Horizon Partners S.L.
- CIF (tax ID): B27551753
- Address: Calle Convento 13, 16230 Villanueva de la Jara, Cuenca, Spain
- Contact: [email protected] or the contact form
- Data protection: we have not appointed a data protection officer because it is not mandatory in our case (Art. 37 of the GDPR (RGPD) and Art. 34 of the Spanish Data Protection and Digital Rights Act, LOPDGDD). For any privacy matter, write to [email protected].
2. What data we process, why and for how long
This site has no shop or checkout of its own: purchases are made on Amazon, which processes your order, payment and delivery data under its own privacy policy. From this site we process data for these three purposes:
| Enquiries by email or contact form |
Data: name, email address, reason and content of the message. Purpose: answering the queries you send us by email or through the contact form, when they do not relate to an order, a complaint or a return. Legal basis: Art. 6(1)(b) GDPR when your query relates to a purchase or a product; Art. 6(1)(f) GDPR (legitimate interest in dealing with the people who write to us) in all other cases. Retention: while we handle your query and up to one year afterwards. After that, the data is kept blocked for the limitation periods of possible liabilities and then deleted. |
|---|---|
| Orders, complaints and after-sales service for products sold on Amazon |
Data: what you give us when you make a complaint or ask for help: identification and contact details, order number and a description of the issue. Purpose: handling orders, complaints, guarantee claims and returns for the products we sell on Amazon, whether you write to us by email or choose “Amazon order, complaint or return” in the contact form. If a query turns out to be a complaint, it is handled under this purpose from then on. Legal basis: Art. 6(1)(c) GDPR (compliance with the legal obligations on the guarantee of consumer goods and the handling of complaints). Retention: for the 3 years of the legal guarantee and, after that, blocked for the limitation periods of any actions that may arise. |
| Technical server access logs |
Data: IP address, date and time, the address of the page requested and technical details of the browser, which the server records when it handles each request. Purpose: the security and technical operation of the site, such as detecting errors and abusive use. We do not use them to produce statistics or to identify you. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring network and information security, recital 49 GDPR). Retention: for the limited period set by our hosting provider for these logs, unless they are needed to investigate a security incident. |
3. Is providing your data compulsory?
Providing your data is voluntary, but without it we cannot deal with your enquiry or reply to you. We do not take automated decisions or build profiles with your data.
4. Recipients and data processors
We do not pass your data on to third parties for commercial purposes. Except where required by law, only the providers who supply us with services and the third parties listed below have access to it:
- Odoo S.A., data processor: provider of the platform and of the site hosting (Odoo.sh, Europe region). Hosted data stays within the European Union.
- Google Ireland Limited, as provider of Google Workspace, data processor: the email service we use to receive and answer your messages.
- Amazon: only if you buy on Amazon, which processes your purchase data (order, payment, delivery and returns) independently and under its own privacy policy. This site does not send Amazon any of your personal data: the buy buttons are links to a web address (URL) to which we add none of your data.
5. International transfers
Data hosted on Odoo.sh stays within the European Union. Google, as provider of Google Workspace, may process data in the United States. Those transfers are covered by the EU-US Data Privacy Framework, to which Google LLC has signed up, and by the European Commission's standard contractual clauses included in the Google Workspace data processing terms. You can request a copy of these safeguards by writing to [email protected].
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected] or use the contact form. Where any processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of the processing carried out before its withdrawal.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD; www.aepd.es; C/ Jorge Juan, 6, 28001 Madrid) if you consider that the processing does not comply with the regulations.
7. Cookies and technical storage
This site uses no third-party analytics or advertising tools and does not create visitor records. Fonts are served from our own server, and when pages load your browser does not request fonts, scripts or images from third-party servers. The cookies the site uses are the following:
| Session | Own cookie (session_id), technical and strictly necessary: the platform this site runs on uses it to keep your browsing session. The server sets it, it cannot be read from JavaScript (HttpOnly) and it lasts seven days. It does not require consent. |
|---|---|
| Language | Own cookie (frontend_lang), a personalisation cookie: it stores the language in which you see the site. The server sets it from the first visit with the language in which we show you the site, which depends on the address you visit (addresses starting with “/en” are in English) or, if you have no earlier preference, on the language set in your browser, and it is updated when you change language with the selector. It lasts one year, it does not identify or track your activity and it is only used to keep the language you asked for as you move from one page to another. We therefore treat it as an interface personalisation chosen by you, exempt from the duty to obtain prior consent under Article 22(2) of the Spanish Information Society Services Act (LSSI), according to the interpretation in the AEPD's guide on the use of cookies. |
| Theme preference (light/dark) | Own cookie (pr-tema), a personalisation cookie: it is only set if you choose light or dark mode with the button in the header, it remembers that choice for one year and it does not identify or track your activity. It is an interface personalisation you have expressly requested, so it is exempt from the duty to obtain prior consent under Article 22(2) of the Spanish Information Society Services Act (LSSI), according to the interpretation in the AEPD's guide on the use of cookies. |
We do not use third-party analytics, advertising or tracking cookies on this site. If we add any in the future, we will update this policy and ask for your consent where the regulations require it.
8. Changes to this policy
We may update this policy to reflect changes in legislation or in the site itself. The date of the last update appears at the top of this page.