Horizon Analytics

Privacy policy

Updated: 30 October 2026

This notice explains how we process data about visitors to www.horizon-analytics.eu and people requesting information or a demo. Employee data within Horizon and JD Atlas is governed by separate agreements and notices.

Who is responsible

Horizon analytics d.o.o.
Božidara Magovca 89A, Zagreb
OIB: 18274493006

Privacy questions and rights requests: privacy@horizon-analytics.eu.

What data we use

The form asks for your name, company, business email and product of interest. The message is optional; your selected language is also sent. You cannot submit the form without the required fields. Please do not include individual employees’ data or sensitive information.

Form protection processes the IP address, technical request data and security check result. IP and email addresses also limit submission attempts.

We use Cloudflare Web Analytics for visit statistics. It counts visits and page views without cookies and without tracking you across websites; it processes technical browser data such as the page address, referrer, device type and country.

If you allow it, we also use Google Analytics 4. It stores cookies with a random identifier in your browser, so we can see which pages you open, for how long, on what kind of device, from which country and whether you return. Google Analytics 4 does not store your IP address. Without consent, Google Analytics does not load.

Why, and on what basis

• Replies and demos: legitimate interests in responding to requested business enquiries, Article 6(1)(f) GDPR, subject to assessment of the impact on your rights. Article 6(1)(b) applies where you, as an individual, request steps before a contract with you and its conditions are met.
• Spam and abuse prevention: legitimate interests in website security under Article 6(1)(f).
• Visit statistics: legitimate interests in understanding and improving use of the website under Article 6(1)(f).
• Analytics with cookies (Google Analytics): your consent under Article 6(1)(a). You can withdraw it at any time through the Cookie settings link in the footer.
• Rights requests: GDPR obligations under Article 6(1)(c); we use your request, contact details and information necessary to verify identity where needed.

An enquiry does not subscribe you to a newsletter. Business domains and request security are checked automatically; the website does not make solely automated decisions with legal or similarly significant effects on you.

Who else processes data

People responsible for replying can access enquiries. We do not sell data or provide it for third parties’ direct marketing. Service providers process data on our behalf under data processing agreements:

• Cloudflare, Inc. (USA): website hosting, Cloudflare Turnstile form protection and Cloudflare Web Analytics visit statistics.
• Resend (Plus Five Five, Inc., USA): delivery of form enquiries to our mailbox. Emails are sent from Resend’s EU region (Ireland); account data and sending logs are stored in the USA.
• Microsoft Ireland Operations Limited (Ireland): business email (Microsoft 365), where we receive enquiries and arrange demos.
• Google Ireland Limited (Ireland): Google Analytics 4, only with your consent. Google LLC (USA) may also access the data.

We arrange demo appointments manually by email; we do not use an automated booking tool.

Transfers outside the EEA

Cloudflare, Resend and Google LLC are US companies, and Microsoft may also process data outside the EEA. These transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, for providers certified under it, and on the Commission’s standard contractual clauses in the data processing agreements.

How long we keep data

• Enquiries: 12 months after our last communication with you.
• Submission rate-limit counters: a few minutes at most. Cloudflare and Resend keep security and sending logs for their own, generally short, periods.
• Visit statistics: in aggregate form, without data that directly identifies you.
• Google Analytics: visit data for 14 months; browser cookies for up to 2 years or until you withdraw consent.
• Rights requests: as long as needed to demonstrate how we handled them, at most 3 years after resolution.

We delete or anonymise data when its purpose and the periods above end. If a business relationship follows, separate retention rules apply to contractual records.

Security and cookies

The website uses encrypted transmission (HTTPS), restricted enquiry access and form protection. It sets no cookies of its own and no marketing cookies; Google Analytics cookies are used only with your consent. See Cookies.

Your rights and complaints

You may request access, correction, erasure or restriction, object to processing and request portability where GDPR conditions are met. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Write to the contact above. We normally respond within one month and notify you within that period of any justified extension. You may complain to AZOP, the Croatian data protection authority.

Changes

We publish the current notice and revision date here. We will provide the required information before new or changed processing takes place.