DRAFT — needs review before publishing. Placeholders marked [LIKE THIS] must be filled in by the site owner. This describes what the site actually does, verified against the live site on 2026-08-23.
This website is operated by The New Horizons [LEGAL NAME / ADDRESS, if the band is a registered entity]. For any question about this statement or about your personal data, write to tnhpostrock@gmail.com.
Our hosting provider records standard access logs — IP address, time, requested page, browser and referring page. This happens for every visit and cannot be switched off; it is necessary to operate and secure the site. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). Hosting is provided by Active24 in the Czech Republic.
We use Wordfence to protect the site against attacks. It records IP addresses and request details of blocked or suspicious requests. Legal basis: legitimate interest.
When you make a choice in the cookie banner, we store that choice in a cookie so we do not ask again on every page. This cookie contains only your preference — no identifier that tells us who you are.
If — and only if — you consent to statistics, we use Google Analytics 4, delivered through Google Tag Manager, to understand how the site is used: which pages are visited, which links to Spotify, Bandcamp or ticket sellers are clicked, and roughly where visitors come from. Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time through the cookie settings link, with effect for the future.
Google Analytics is provided by Google Ireland Limited. Data may be transferred to Google servers outside the EU under the EU–US Data Privacy Framework and Google’s standard contractual clauses. We have IP anonymisation in effect and we do not use Google Signals, advertising features, or cross-device tracking.
Some pages embed videos from YouTube and players from Spotify. These load only after you consent — until then you see a placeholder. Once loaded, YouTube and Spotify receive your IP address and can set their own cookies, exactly as if you had visited their site directly. What they do with that is governed by their own privacy policies, not ours.
The site displays our Instagram feed. [VERIFY: whether images are served from Instagram’s servers or cached locally — this determines whether Instagram sees visitor IPs.]
Most fonts on this site are served from our own server. However, four font families used by the homepage slider are still loaded from Google Fonts, which means Google receives your IP address when the page loads. No cookie is set by this request. [SEE NOTE: the site owner is aware of this and it is under review.]
Server and security logs: [FILL IN — ask Active24; typically 30 days]. Analytics data: 14 months. Consent preference: up to 6 months, then you are asked again.
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing rests on consent, you may withdraw that consent at any time without affecting what was lawful before.
To exercise any of these, write to tnhpostrock@gmail.com. You also have the right to complain to the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobnÃch údajů, uoou.cz).
A full list of the cookies this site uses, what each one does and how long it lasts, is in our Cookie Policy.
If we change how this site handles personal data, we will update this statement. Last updated: [DATE ON PUBLISHING].