Privacy policy

1. Data controller

Next Horizon Logistics Solutions, a company being set up within the European Union, is the controller of personal data collected through horizonlogistics.eu and through the platform at app.horizonlogistics.eu. For any question, write to contact@horizonlogistics.eu.

2. Data we collect

We collect only the data needed for what you ask us to do. In practice:

• Prospect contact data: first name, last name, work email, company, monthly volumes and the context you describe. Collected through site forms.
• Technical data: truncated IP address, browser type, pages visited. Used only for security and aggregated audience measurement. No advertising cookie.
• Direct exchanges: content of the emails you send us and notes taken during a scoping call.

3. Purposes and legal basis

Purpose	Legal basis	Retention
Reply to your contact or evaluation request	Pre-contractual steps at your request (art. 6.1.b GDPR)	24 months if no follow-up, then deletion
Prepare a scoping call and a proposal	Pre-contractual steps at your request	24 months after the last exchange
Security audit and logging	Legitimate interest (service security)	12 months max
Aggregated audience measurement	Legitimate interest, non-identifying data	13 months

4. Processors

We work with a small number of processors, all bound by GDPR-aligned data processing agreements:

• Netlify (United States, with CDN edge nodes in the European Union): static hosting for horizonlogistics.eu and form delivery (Netlify Forms). The visitor IP and form submissions are processed for technical delivery and onward routing to internal recipients. Signed Standard Contractual Clauses.
• Google Fonts (Google Ireland Ltd, Ireland): delivery of the Inter and JetBrains Mono webfonts. The visitor IP is exposed to the font server on first load.
• Cloudflare CDN (cdnjs.cloudflare.com): delivery of the Font Awesome icon set. The visitor IP is exposed to the CDN on first load.
• Open Products Facts and Open Beauty Facts (non-profit associations, France): product-name autocomplete on the ESPR readiness tool. Only the typed query is transmitted. No personal data.
• LinkedIn Marketing Solutions (LinkedIn Ireland Unlimited Company, Ireland, with onward transfers to LinkedIn Corporation in the United States): measurement of our LinkedIn ad campaign performance via the LinkedIn Insight Tag. Activated only after your explicit consent via the cookie banner. Contractual safeguards through Standard Contractual Clauses and Data Privacy Framework certification.
• Professional email service hosted in the European Union (delivery of correspondence sent to contact@horizonlogistics.eu).

An up-to-date detailed list is available on request to contact@horizonlogistics.eu.

5. Transfers outside the EU

Transfers of data outside the European Union are limited to the processors named above (Netlify, Cloudflare, LinkedIn). They are governed by the European Commission's Standard Contractual Clauses (decision 2021/914) and, where applicable, by the EU-US Data Privacy Framework. No transfer takes place without prior impact assessment.

6. Your rights

Under the GDPR, you have a right of access, rectification, erasure, restriction, portability and objection regarding your data. You can withdraw your consent at any time where processing relies on it.

To exercise these rights, write to contact@horizonlogistics.eu. We respond within a maximum of one month.

You can also lodge a complaint with your local supervisory authority, for example the CNIL in France (cnil.fr).

7. Cookies

The site uses two categories of cookies, managed through a consent banner shown on your first visit:

• Technical cookies (always active, legal basis: legitimate interest): store your language preference (fr or en) and your cookie consent choice locally in your browser.
• LinkedIn Insight Tag advertising measurement cookies (enabled only after acceptance, legal basis: consent): used to measure performance of our LinkedIn ad campaigns (conversions, retargeting). The tag does not load before your explicit consent. Lifespan: up to 6 months from your last interaction.

You can change your choice at any time via the Manage cookies link at the bottom of every page.

8. Security

Data is stored on servers hosted in the European Union, encrypted at rest and in transit. Internal access is restricted and logged. Backups are encrypted. In case of a data breach likely to result in a risk to your rights, we notify the competent authority within 72 hours and inform you without undue delay.

9. Minors

The service is intended for professionals only. We do not knowingly collect data concerning minors.

10. Changes

This policy may evolve to reflect new features or regulatory requirements. The date at the top of the page indicates the latest update. For any substantial change, we will inform you by email when you are in direct contact with us.