Trust centre
Membership, analytics and service-contact consent remain separate choices.
Essential processing, optional analytics, communications and managed introductions are separate purposes. Refusing optional analytics does not restrict access to public intelligence or the registered product.
Horizon Strategies, operated by Claudio Pedretti, is the controller for the processing described here. Privacy, access, correction, portability, objection and deletion requests can be sent to claudio@horizonstrategies.org. Identity and company authority are verified before private records are changed.
Account identity, company profile, selected markets and sectors, saved items, readiness answers, private pipeline records, service requests, consent records and security audit events. Optional analytics never include CRM data, email addresses, free text or a raw IP address.
Account and workspace administration is necessary to provide the requested product and take pre-contractual steps. Security, fraud prevention and service integrity rely on Horizon’s legitimate interests and legal obligations. Optional analytics and marketing communication each require a separate consent. A requested managed introduction is processed only for that stated purpose.
Before account registration opens, Horizon records only the company context, requested product interests and business email supplied through the launch-list form. The email is encrypted, a keyed digest prevents duplicate requests, and the request does not create an account, Community membership or unrelated marketing subscription. Launch-list records are reviewed for invitation, corrected or deleted on request, and removed after 12 months if they are neither converted nor still operationally necessary.
Every private read and write is authorised on the server against both the signed-in identity and the company tenant. Members of one company cannot browse another company’s profile, watchlist, pipeline, requests or activity.
Sponsors and service partners receive aggregate campaign measurements only. A member’s identity or contact details are shared for a managed introduction only after a separate, purpose-specific request and Horizon approval. No member directory is exposed.
Website hosting, content delivery and security, managed identity, encrypted storage, support delivery and consented analytics may be provided by contracted technology processors. Cloudflare currently provides the public edge and security layer. A provider receives only the data required for its function. Where processing occurs outside the EEA, Horizon uses an adequacy decision, approved contractual safeguards or another lawful transfer mechanism and records the provider, purpose and safeguard.
Launch-list and unused invitation records are removed after 12 months. Support enquiries are normally retained for up to 24 months after the last substantive contact. Company-workspace records remain while the account is active and are removed after a verified closure request, subject to legal holds and time-limited backup rotation. Security and consent receipts are retained only for the period required to demonstrate integrity, investigate incidents or meet legal obligations. Horizon confirms completion of a deletion request; it is never described as automatic before execution.
Managed authentication, encrypted sensitive fields, tenant-scoped authorisation, rate limits, append-only audit records, controlled backups and least-privilege administration protect private data. Suspected incidents follow an assessment, containment, evidence-preservation and notification procedure.
Recommendations use the countries, sectors, objectives and readiness answers deliberately supplied by the company. Horizon does not use this processing to make decisions that produce legal or similarly significant effects, and does not infer sensitive personal characteristics from browsing behaviour.
This operational notice does not replace any information required for a specific processing activity. The European Commission explains the EU data-protection framework, while complaints and supervisory guidance are available from the Italian Data Protection Authority.
Operational privacy notice · version 1.1 · reviewed 28 October 2026. Material changes require a new version and, where required, renewed consent.