Legal

Privacy Policy

Last updated · The English version is the binding one

This policy explains what personal data Humallis processes when you visit humallis.com or write to us, why we do it and what rights you have. It is short because we collect very little.

At a glance

  • No accounts, no forms, no tracking and no advertising.
  • The site sets no cookies. Your browser keeps two small preferences on your device: your language and your cookie choice.
  • All fonts, scripts and images load from our own domain. Visiting the site does not contact Google, content networks or social media.
  • If you email us, we use your message only to reply and to deal with what you wrote about.
  • We never sell personal data.

01Who is responsible

The controller of your personal data is Humallis Inc. (“Humallis”, “we”, “us”).

For anything about privacy, write to privacy@humallis.com. We have not appointed a data protection officer; this address reaches the person responsible for data protection.

02What we process and why

When you visit the site

Like every website, our hosting provider receives the technical data your browser sends with each request: IP address, date and time, the page or file requested, the referring page, and browser and device type. It is used to deliver the site, keep it secure and investigate abuse.

Legal basis
Our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
Retention
Server logs are kept by our hosting provider, Vercel, only for a short period, unless needed to investigate a specific security incident.

Preferences stored on your device

The site stores the language you choose (humallis-lang) and your cookie choice (humallis-consent) in your browser’s local storage. This stays on your device and is not sent to us. Details are in our Cookie Policy.

When you email us

The site lists addresses for general questions, partnerships, investors and careers. If you write to us, we process your name, email address, the content of your message and any attachments, for example a CV. We use them to reply and to handle your request: a partnership discussion, an investor conversation or a job application.

Legal basis
Steps you ask us to take before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering messages (Article 6(1)(f) GDPR).
Retention
As long as the conversation is active, then up to 24 months, unless the law requires longer or we continue working together. Job applications are deleted within 12 months after the hiring process ends, unless you agree that we keep them longer.

Analytics

We do not currently use analytics. If we add them, they will run only after you opt in through the cookie banner (Article 6(1)(a) GDPR), and we will update this policy and the Cookie Policy before we switch them on.

What we do not do

We do not sell or rent personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing, including profiling.

03Who receives data

We use a small number of service providers who process data on our behalf, under contract and only to provide their service to us:

  • Vercel Inc.: hosting and delivery of the site;
  • Our email provider: sending and receiving our email.

We may also disclose data where the law requires it, or where it is necessary to protect our rights or the safety of others, for example in a case of fraud or abuse. If Humallis is reorganised, merged or sold, data may pass to the successor, which must continue to respect this policy.

04International transfers

Some providers may process data outside the European Economic Area. When that happens, we rely on an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework for certified companies, or on the Commission’s Standard Contractual Clauses with additional safeguards where needed. You can ask us for a copy of the safeguards that apply.

05Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict how we use it;
  • receive it in a portable format (portability);
  • object to processing based on our legitimate interests;
  • withdraw consent at any time, without affecting processing that happened before.

To exercise these rights, write to privacy@humallis.com. We reply within one month and may ask you to confirm your identity first.

You can also complain to a data protection authority, in particular in the EU country where you live or work. In Spain this is the Agencia Española de Protección de Datos (aepd.es). If you live outside the EU, local law may give you similar rights; we honour reasonable requests from anyone, wherever they live.

06Security

We take appropriate technical and organisational measures to protect personal data. The site is served only over HTTPS with modern security headers, it does not collect passwords or payment details, and access to our mailboxes is limited to the people who need it.

07Children

The site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

08Changes to this policy

We update this policy when our practices change, for example if we add analytics or a contact form. The date at the top shows the current version. If a change is significant, we will also show a notice on the site.

09Contact

privacy@humallis.com
Humallis Inc.

Terms of Use Cookie Policy