Last updated: 27.08.2025

1. Controller

The responsible party within the meaning of the General Data Protection Regulation (GDPR) is:

HumAi – Lucas Langlois

Maxstrasse 1

82335 Berg

Germany

Email: lucas@humai.one

Website: www.humai.one

2. Collection and Use of Personal Data

a) Visiting the Website

When you access our website, certain technical information is automatically collected by our hosting provider. This may include:

• IP address of the requesting device
  
  
• Date and time of access
  
  
• Browser type and version
  
  
• Operating system used
  
  
• Referrer URL
  
  

This information is necessary to ensure the proper functioning of the website, for security purposes, and to improve stability.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

b) Contact Form

When you contact us via the contact form, we collect the following data:

• First and last name
  
  
• Phone number
  
  
• Email address
  
  
• Company name
  
  
• Company size
  
  
• Message
  
  

This data is used exclusively to process and respond to your inquiry.

Legal basis: Art. 6(1)(a) GDPR (consent). By submitting the form, you consent to the processing of your data.

Retention: We retain inquiries for a maximum of 12 months unless a contractual relationship arises or legal obligations require longer storage.

c) Newsletter via Kit.com

If you subscribe to our newsletter, we collect your first name and email address.

This data is used exclusively for sending you the newsletter.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the unsubscribe link in every newsletter or by contacting us at lucas@humai.one.

The newsletter is sent via Kit.com (provider: Kit, Inc. f/k/a ConvertKit, Inc.), which acts as our processor. Data may be stored on servers outside the EU. Safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses apply.

Kit Privacy Policy: https://kit.com/privacy

3. Processors and Third-Party Services

a) Webflow (Hosting and Forms)

Our website is hosted on Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. Webflow temporarily stores form submissions before forwarding them to us.

Data transfer to the USA is safeguarded via the EU–US Data Privacy Framework and Standard Contractual Clauses.

Webflow Privacy Policy: https://webflow.com/legal/privacy

b) Google Workspace (Email)

We use Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for email communication. Contact form submissions are forwarded to our Google Workspace email inbox.

Data may be transferred to the USA. Google complies with GDPR via the EU–US Data Privacy Framework and Standard Contractual Clauses.

Google Privacy Policy: https://policies.google.com/privacy

c) Langdock (Message & Note Processing)

We use Langdock GmbH to process messages and meeting notes. Contact form data and related communication may be stored and processed by Langdock for internal communication and documentation purposes.

Langdock acts as our processor under Art. 28 GDPR.

Langdock Privacy Policy: https://www.langdock.com/privacy

d) Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to analyze and improve the use of our website.

Google Analytics uses cookies and similar technologies to collect information such as:

• Browser type/version
  
  
• Operating system
  
  
• Referrer URL
  
  
• IP address (truncated/anonymized in the EU)
  
  
• Time of server request
  
  

The information generated is usually transferred to a Google server in the USA and stored there.

We use IP anonymization so that your IP address is shortened within the EU/EEA before transmission.

Legal basis: Art. 6(1)(a) GDPR (consent). Google Analytics is only activated if you give your consent via our cookie banner. You may withdraw your consent at any time with effect for the future.

Google Privacy Policy: https://policies.google.com/privacy

Google Analytics Terms: https://marketingplatform.google.com/about/analytics/terms/

e) Other Tools

If we integrate additional services (e.g., tracking, social media pixels, or cookie tools), we will update this policy accordingly.

4. Cookies and Tracking

We use cookies to enable essential website functions and, with your consent, for analytics.

• Essential cookies ensure the proper functioning of the site and cannot be deactivated.
  
  
• Analytics cookies (Google Analytics 4) help us analyze website usage. These are only set if you give your consent via the cookie banner.
  
  

You can manage or withdraw your consent at any time via the cookie settings on our website.

5. Data Sharing

We do not transfer your personal data to third parties for purposes other than those stated in this policy, unless:

• you have given explicit consent (Art. 6(1)(a) GDPR),
  
  
• the transfer is necessary for legal claims (Art. 6(1)(f) GDPR),
  
  
• there is a legal obligation (Art. 6(1)(c) GDPR),
  
  
• it is necessary for contract performance (Art. 6(1)(b) GDPR).
  
  

6. Data Subject Rights

Under GDPR, you have the right to:

• Access (Art. 15) – obtain information about your stored data.
  
  
• Rectification (Art. 16) – correct inaccurate data.
  
  
• Erasure (Art. 17) – request deletion of your data.
  
  
• Restriction (Art. 18) – limit processing of your data.
  
  
• Data portability (Art. 20) – receive your data in a structured format.
  
  
• Withdrawal of consent (Art. 7(3)) – revoke consent at any time with effect for the future.
  
  
• Objection (Art. 21) – object to processing based on legitimate interests.
  
  

Please contact lucas@humai.one to exercise your rights.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, if you believe that the processing of your personal data violates the GDPR.

8. Data Security

We apply appropriate technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

9. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The latest version will always be available on our website.