Privacy policy
Last updated: October 2026
Data controller
The data controller for personal data collected on horizonrando.fr is:
| Name | François Limousin |
|---|---|
| Contact | francois@horizonrando.fr |
Data collected and purposes
Contact form
When you use the contact form, the following data is collected: first name, last name, email address, subject and message. This data is used solely to respond to your enquiry. It is neither shared with third parties nor used for commercial purposes.
Legal basis: consent (Article 6.1.a GDPR).
Retention period: messages are kept for 12 months, then deleted.
Account and hiking logbook
If you create an account, the site keeps: your email address; your password, in an irreversibly encrypted form that nobody can read, not even me; your first name if you give it; your logbook (favorites and completed hikes, with the date, rating and comment you enter) and your trips (their name and their hikes); the dates the account was created and last used. If you sign in with Google, Google only sends me your email address and an account identifier: not your name, not your contacts, nothing else.
Your address is only used to sign you in, to confirm your account and to let you choose a new password: no newsletter, no advertising, no transfer to third parties.
Legal basis: performance of the service you request (Article 6.1.b GDPR).
Retention period: as long as the account exists. An account unused for 3 years is deleted, after a warning email. An unconfirmed sign-up is erased after 7 days.
Deletion and copy: from "My account", you can download all your data and delete your account at any time. Deletion is immediate and permanent; technical backups are erased after 14 days.
Audience measurement
This site uses Google Analytics (Google Ireland Limited) to analyse traffic and improve content. This tool places cookies on your device and collects data such as pages visited, session duration, device type and approximate location.
Legal basis: consent (Article 6.1.a GDPR). Audience measurement cookies are only placed after you give explicit consent via the cookie banner.
Retention period: data is retained for 14 months by Google Analytics, in line with the default configuration.
Remembering your choice
Without an account, this site sets no other cookie. Your choice regarding audience measurement (accept or refuse) is kept for six months in your browser's local storage ("hr-consentement"), after which you are asked again. It stays on your device and is not sent to anyone.
Maps
When a page displays a map, your browser downloads the map tiles directly from the service that provides them, depending on the base map shown: OpenStreetMap, OpenTopoMap, CARTO, MapTiler, Esri, Thunderforest, IGN (Géoplateforme) or Kartverket. As with any resource loaded on the web, this service receives your IP address and technical information about your browser. Some of these services are based outside the European Union (for example Esri in the United States, Thunderforest in the United Kingdom).
Legal basis: legitimate interest (Article 6.1.f GDPR): displaying the hiking maps.
Server logs
The hosting provider (o2switch) automatically records connection logs including your IP address, the date and time of the request, and the page viewed. This data is collected for security and technical maintenance purposes.
Legal basis: legitimate interest (Article 6.1.f GDPR).
Retention period: in accordance with the hosting provider's policy, up to 12 months.
Cookies used
| Cookie | Origin | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Audience measurement | 13 months |
| hr-consentement (local storage, not a cookie) | Horizonrando | Remember your choice on audience measurement | 6 months |
| hrcompte | Horizonrando | Keep you signed in to your account (strictly necessary, set only if you sign in) | 1 year, extended at each visit |
| hrc | Horizonrando | Tell the site that a session is open, with no personal data | 1 year, like hrcompte |
| hrgoogle | Horizonrando | Secure the sign-in with Google while you choose your account | 10 minutes |
The hrcompte, hrc and hrgoogle cookies are strictly necessary for the service you request: they require no consent and are not used for any measurement.
You can change your choice at any time with the "Cookie settings" link at the bottom of every page, which reopens the consent banner: refusing deletes any Google Analytics cookies already set. You can also configure your browser to block cookies.
Data transfers outside the European Union
The use of Google Analytics involves data transfers to Google servers, including in the United States. This transfer is governed by the EU-US Data Privacy Framework (DPF), to which Google LLC has certified, in accordance with the European Commission's adequacy decision of 10 July 2023.
Signing in with Google, if you choose it, goes through Google Ireland Limited: the site only receives your email address and an account identifier.
Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right of access: obtain confirmation of whether your data is being processed and receive a copy.
- Right to rectification: have inaccurate or incomplete data corrected.
- Right to erasure: request the deletion of your data, subject to legal retention obligations.
- Right to data portability: receive your data in a structured, commonly used format.
- Right to object: object to the processing of your data on legitimate grounds.
- Right to withdraw consent: withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
If you have an account, the rights of access, portability and erasure can also be exercised directly from "My account".
To exercise these rights, write to me at francois@horizonrando.fr. I will reply within one month.
If you have concerns, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.
Protection of minors
This site does not knowingly collect personal data from children under 16. If a minor has submitted data via the contact form, their legal guardian may request its deletion at the address above.
Changes to this policy
This privacy policy may be updated to reflect legal or technical developments. The date of the last update is shown at the top of this page.