Privacy Policy

At Riding Brazil, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and safeguard your personal information in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018) and the General Data Protection Regulation (GDPR) of the European Union.

1. Data Controller

The entity responsible for processing your personal data is:

Riding Brazil / Southern Cross Tours
Data Protection Officer / Contact: Peter Rohmer
Email: peter@ridingbrazil.com

2. Personal Data We Collect

We collect only the essential personal data required to plan and organize your horseback riding vacation safely:

Identification Data: Full name, nationality, date of birth, passport number.
Contact Details: Email address, phone/WhatsApp number, home address.
Rider Information: Riding experience level, height/weight (to match you with the appropriate horse), dietary requirements, and accommodation preferences.
Emergency Information: Emergency contact details and relevant medical information necessary for outdoor riding activities.
Payment Data: Information required for booking processing and invoicing.

3. Purpose of Processing

Your data is strictly processed for legitimate business purposes:

Your data is strictly processed for legitimate business purposes:
Handling inquiries, customized quotes, and direct bookings.
Planning riding itineraries and ensuring safety protocols across farms and trails.
Organizing accommodations, meals, and local transportation.
Complying with legal, tax, and regulatory requirements in Brazil.
Communicating essential travel updates directly with you.

4. Third-Party Data Sharing

To deliver your vacation seamlessly, we may share relevant data with:

Local Partners: Trusted ranch owners, local guides, and transport providers involved in your trip.
Insurers: When arranging adventure travel insurance coverage.
Legal Authorities: When required by law.

We do not sell, rent, or trade your personal data with third parties for marketing purposes.

5. Data Security & Retention

We implement technical and organizational measures to safeguard your data against unauthorized access, loss, or misuse. Data is retained only for as long as necessary to fulfill the operational purpose or legal requirements.

6. Your Rights

Under LGPD and GDPR, you have the right to:

Access your personal data held by us.
Request corrections to inaccurate or incomplete information.
Request deletion or anonymization of your personal data.
Revoke your consent at any time.

To exercise any of these rights, please contact Peter Rohmer at: peter@ridingbrazil.com.

7. Cookies and Analytics

Essential storage: Our website stores your cookie choice in your browser so that we do not ask you again on every page. This is technically necessary and does not require consent.

Google Analytics (only with your consent): If you click "Accept" in the cookie banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors use our website (for example, which pages are visited and for how long). Google Analytics sets cookies (_ga, _ga_*) that are stored for up to two years. Google Analytics 4 does not store full IP addresses, and we have disabled advertising features and Google Signals. The data is kept for 14 months. Data may be transferred to Google LLC in the United States. The legal basis is your consent (Art. 6(1)(a) GDPR, Art. 7, I LGPD and, for the ridingbrazil.de website, § 25(1) TDDDG). You can withdraw your consent at any time via "Cookie Settings" at the bottom of every page. More information: Google Privacy Policy.

8. Contact Form and Spam Protection (Cloudflare Turnstile)

When you send us a message through the contact form, we process the data you enter (name, email address, phone number, tour of interest, number of riders and your message), together with your IP address and the date and time of submission. We use this data only to answer your inquiry and, if requested, to prepare a quote. The legal basis is Art. 6(1)(b) GDPR and Art. 7, V LGPD (steps prior to entering into a contract).

To protect the form against spam and automated abuse, we use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When the contact page is loaded, Turnstile processes technical information such as your IP address, browser (User-Agent) and connection characteristics in order to tell human visitors apart from bots. According to Cloudflare, this information is not used to identify, profile or target individuals. In addition, our server temporarily stores an encrypted reference to your IP address for up to one hour to limit the number of messages sent from the same connection. The legal basis is our legitimate interest in protecting our website from abuse (Art. 6(1)(f) GDPR and Art. 7, IX LGPD).

Data may be transferred to the United States. More information is available in the Turnstile Privacy Addendum and the Cloudflare Privacy Policy.

Last updated: November 2026