This notice explains how personal data are handled in connection with the public Strategic Horizon website and direct institutional correspondence. The website is currently a primarily static information service: it has no public user accounts, payment checkout or public contact form.
1. Data we may process
- Direct email enquiries: name, professional contact details, organisation, message content and subsequent correspondence that you choose to send.
- Technical delivery and security data: IP address, request metadata, device/browser information and security events that may be processed by infrastructure providers to deliver and protect the website.
- Client-screening data: only where a prospective paid engagement progresses to formal screening under the applicable engagement process.
2. Purposes and legal bases
Personal data may be processed to respond to enquiries, assess potential institutional or commercial engagement, maintain security, administer correspondence, comply with legal obligations and establish or defend legal claims. Depending on context, the legal basis may be steps requested before entering into a contract, legitimate interests in operating and protecting the Institute and its communications, or compliance with a legal obligation.
3. Service providers
Strategic Horizon currently uses Cloudflare for website delivery, DNS and security infrastructure and Google Workspace for institutional email. These providers may process technical or communications data under their own service and data-protection frameworks. Where processing involves international transfers, applicable transfer safeguards are relied upon as required by law.
4. AI-supported workflows
Strategic Horizon may use AI-assisted tools in internal research, administrative and analytical workflows. Do not send unnecessary sensitive, privileged or highly confidential information in an unsolicited first email. Where a prospective engagement requires enhanced handling, confidentiality, personal-data processing or restrictions on AI-supported processing, those requirements must be agreed before substantive work begins.
5. Retention
Personal data are retained only for as long as reasonably necessary for the purpose for which they were collected, including correspondence, prospective engagement management, legal/administrative recordkeeping, security and dispute handling. Retention periods may differ according to the nature of the relationship and applicable legal obligations.
6. Your rights
Subject to the conditions of the GDPR, you may have rights of access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with a supervisory authority. Requests may be sent to contact@globalstrategichorizon.com. GDPR Article 13 requires the controller to identify itself, state purposes and legal bases, and explain relevant data-subject rights.
7. Supervisory authority
Where Hungarian supervisory jurisdiction applies, complaints may be made to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9–11; postal address 1363 Budapest, Pf. 9. Further information is available at naih.hu.
8. Changes
This notice will be updated if the website introduces forms, analytics, payment processing, additional service providers or materially different processing activities.