Privacy Policy

Last updated: August 2026

This is a translation for your convenience. In case of any discrepancy, the German version prevails.

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

II. Contact details of the data protection officer

The controller's data protection officer is:

III. General information on data processing

This privacy policy applies to your visit to our website at humanizing.com and to the functions offered there. The website is provided by Humanizing Technologies GmbH, In der Trift 1, 57462 Olpe, Germany.

Where customers deploy our avatar solutions at their own sites or in their own applications, the respective customer is the controller for the personal data processed in that context; we act as a processor in that case. The respective customer's privacy notices then apply.

No automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR takes place on this website.

1. Scope of the processing of personal data

As a matter of principle, we process personal data only to the extent necessary to provide a functioning website as well as our content and services, or where you have given us your consent. When you visit this website, this concerns:

• connection data automatically transmitted by your browser (section V)
• information on cookies and comparable storage technologies as well as your cookie choice (section VI)
• usage data from audience measurement (section VII)
• your name and e-mail address if you request the marketing kit (section VII — Resend)
• the information you provide when contacting us by e-mail (section VIII)

2. Legal basis for the processing of personal data

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) sentence 1 lit. a GDPR serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 (1) sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

3. Data erasure and storage period

The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond that point if provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject.

4. Recipients of personal data

To operate this website we use service providers that process personal data on our behalf and in accordance with our instructions (Art. 28 GDPR). Recipients are in particular:

• our hosting provider (Vercel, section V.6)
• the provider of our audience measurement (PostHog, section VII)
• the provider of our e-mail delivery for the marketing kit (Resend, section VII)
• IT service providers for maintenance and support purposes

Should recipients of personal data be located outside the EU or the EEA, we actively put in place appropriate safeguards for a lawful transfer of data to third countries, for example by concluding standard data protection clauses pursuant to Art. 46 (2) lit. c GDPR.

If you express interest in our products and services, your personal data will be transferred to our customer relationship management system. In this context, data may be transferred to servers of sub-processors outside the EU or the EEA, always on the basis of appropriate safeguards for the protection of personal data.

5. Right to object and to have data removed

You may object to the processing of your personal data at any time in writing or by informal e-mail to contact@humanizing.com. All other rights you hold as a data subject may likewise be addressed to this e-mail address.

An objection may result in services under contractual relationships no longer being able to be provided, where the processing of personal data is necessary for the provision of those services.

IV. Rights of the data subject

If your personal data is processed, you have the right to obtain information from the controller about the data stored about you (Art. 15 GDPR).

Should inaccurate personal data be processed, you have the right to rectification (Art. 16 GDPR).

Where the legal requirements are met, you may request the erasure or restriction of processing (Art. 17 and 18 GDPR).

If you have consented to the data processing, or a contract for data processing exists, and the processing is carried out using automated means, you may be entitled to data portability (Art. 20 GDPR).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) lit. e GDPR (processing in the public interest) and Art. 6 (1) lit. f GDPR (processing on the basis of a balancing of interests) (Art. 21 (1) GDPR). This also applies to profiling based on this provision within the meaning of Art. 4 (4) GDPR.

V. Provision of the website and creation of log files

1. Description and scope of the data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

• the user's IP address
• the date and time of access

This data is stored in our system's log files. This data is not stored together with other personal data of the user.

2. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's device. For this purpose, the user's IP address must remain stored for the duration of the session. Storage in log files takes place in order to ensure the functionality of the website. The data also helps us optimise the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. These purposes also constitute our legitimate interest in the data processing pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

3. Legal basis for the data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) sentence 1 lit. f GDPR.

4. Duration of storage

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. Where the data is collected in order to provide the website, this is the case when the respective session has ended. Where the data is stored in log files, this is the case after seven days at the latest. Storage beyond that period is possible; in that case the users' IP addresses are erased or obfuscated so that the accessing client can no longer be identified.

5. Right to object and to have data removed

The collection of data for the provision of the website and the storage of the data in log files is strictly necessary for the operation of the website. Consequently, the user has no possibility to object.

6. Hosting with Vercel

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Frankfurt am Main (region "fra1") is configured as the server and processing region; processing therefore takes place within the European Union. In doing so, Vercel processes the connection data named in section V (in particular IP address, time of the request, resource accessed, referrer and user agent) in order to deliver the page and safeguard operations.

The legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest lies in the secure, performant and reliable provision of this website. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. Access from the USA cannot be entirely ruled out in the course of operations and support; it is safeguarded by the European Commission's standard contractual clauses. Further information can be found in Vercel's privacy policy.

VI. Cookies and consent

1. Principle

No analytics cookies are set when you access this website without your consent. Initially, only what is necessary for the operation of the site is stored on your device; in that case audience measurement runs cookie-free (see section VII — PostHog). Cookies are small text files stored by your browser; technically equivalent are your browser's local storage and session storage, which we also list in the overview below.

2. Consent banner

On your first visit we display a consent banner through which you can agree to or decline analytics using cookies. Technically we use the open-source tool "vanilla-cookieconsent" for this, which runs entirely in your browser; no data is transferred to third parties in the process. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer of every page (Art. 7 (3) GDPR). The withdrawal takes effect for the future; analytics cookies already set are deleted in the process.

3. Overview of the cookies and storage technologies used

a) Strictly necessary — no consent required (§ 25 (2) no. 2 TTDSG in conjunction with Art. 6 (1) lit. f GDPR)

• cc_cookie (cookie, lifetime 6 months) — records your cookie choice so that the banner does not reappear on every page view.
• lang (cookie, lifetime 12 months) — remembers the language version you selected (German or English).
• theme (local storage, unlimited) — remembers whether you selected the light or the dark appearance.
• __ph_opt_in_out_<project ID> (local storage, unlimited) — records whether analytics runs cookie-free or you have given consent. This entry prevents analytics cookies from being set without your consent.

b) Analytics — only with your consent (Art. 6 (1) lit. a GDPR, § 25 (1) TTDSG)

• ph_<project ID>_posthog(cookie and local storage, lifetime 12 months) — recognises returning visits and groups several page views into one session. In addition, PostHog stores technical session details in your browser's session storage, which are deleted when the browser tab is closed.

If you do not give consent, or withdraw it, the cookies listed under b) are not set or are deleted; measurement then continues cookie-free (section VII).

4. Controlling cookies in your browser

Cookies are stored on the user's computer and transmitted from it to our website. As a user, you therefore also have full control over the use of cookies. By changing the settings in your internet browser you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also happen automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

If you use a Safari browser from version 12.1 onwards, cookies are deleted automatically after seven days. This also affects opt-out cookies set to prevent tracking measures.

VII. Use of external service providers

HubSpot (appointment booking)

On individual pages we link to appointment booking pages at meetings-eu1.hubspot.com. The provider is HubSpot Ireland Limited, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. No HubSpot scripts are embedded on this website itself and no HubSpot cookies are set. Only when you click such a link and the booking page opens does HubSpot process your data (in particular IP address, device and browser details as well as the information you enter in the booking form). The legal basis for the link is Art. 6 (1) lit. f GDPR — our legitimate interest lies in offering you a simple way to arrange an appointment. Further information can be found in HubSpot's privacy policy.

PostHog (web analytics)

This website uses PostHog for audience and usage analysis. The provider is PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. We use exclusively PostHog's EU cloud; the data is processed and stored on servers within the European Union (Frankfurt am Main). A data processing agreement pursuant to Art. 28 GDPR is in place with PostHog.

PostHog runs on this website in two modes of operation:

• Without your consent — cookie-free. No cookies are set and neither local nor session storage on your device is used for measurement. No storing of information in your terminal equipment, and no access to it, within the meaning of § 25 (1) TTDSG takes place for the measurement. Several page views are attributed to one visit by means of a server-side hash value that changes daily and allows neither identification of your person nor combination across several days or across other websites. The legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest lies in the statistical evaluation of the use of our website.
• With your consent — with cookies. If you agree to analytics in the consent banner, PostHog sets the cookies named in section VI b) and stores the information described there in your browser. This allows returning visits to be recognised over a longer period. The legal basis is Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG.

In both modes of operation, the following is recorded in particular: pages accessed and the time of access, referring page (referrer), campaign parameters of the URL accessed, browser type and version, operating system, language as well as screen and window size. In addition, we record individual interactions with the page, such as expanding FAQ entries, switching the language version, clicks on our social media links and requests for the marketing kit download. If an unhandled technical error occurs in the browser, an error report is also recorded for troubleshooting purposes: error message, technical call sequence (stack trace) and the address of the affected page. Browser console output is not transmitted. For technical reasons your IP address is transmitted to PostHog; in cookie-free operation it is used only transiently to form the aforementioned hash value and is not stored. An approximate location (country and region) is also derived from the IP address; the IP address itself is not evaluated by us.

You can withdraw consent you have given at any time with effect for the future via the "Cookie settings" link in the footer of every page. You may object to cookie-free measurement based on our legitimate interest at any time pursuant to Art. 21 GDPR; to do so, send a message to the contact details named in section I. Using a script or tracking blocker in your browser is also effective.

Further information can be found in PostHog's privacy policy.

Vercel Web Analytics

We additionally measure audience figures using Vercel Web Analytics; the provider is Vercel Inc., named in section V.6. The service works without cookies and without storing data on your device. Aggregated information such as the page accessed, the referring page, device type, browser and the approximate region of origin at country level is recorded. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in designing our online offering in line with demand); as there is no access to your terminal equipment, no consent is required for this (§ 25 (2) TTDSG). You may object to the processing at any time pursuant to Art. 21 GDPR. For details, please see Vercel's privacy policy.

Resend (e-mail delivery of the marketing kit)

If you request the download via the form on the "Marketing Kit" page, we transmit your name and e-mail address to Resend (Plus Five Five, Inc., 2261 Market Street, San Francisco, CA 94114, USA), which sends the e-mail containing the download link on our behalf. The European Union is configured as the processing region. Where you have given consent in the form, we additionally store your details in a contact list maintained at Resend in order to be able to contact you about the marketing kit.

The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR, which you may withdraw at any time with effect for the future — informally by e-mail to the contact details named in section I. A data processing agreement pursuant to Art. 28 GDPR is in place with Resend. Insofar as access from the USA is possible in the course of operations and support, this is safeguarded by the European Commission's standard contractual clauses. Further information can be found in Resend's privacy policy.

VIII. Contact by e-mail

You can contact us via the e-mail address provided on our website. In this case, the personal data of the user transmitted with the e-mail is stored and used exclusively for processing the conversation. The legal basis is Art. 6 (1) lit. a or lit. f GDPR; where the contact is aimed at concluding a contract, additionally Art. 6 (1) lit. b GDPR. The data is erased as soon as the respective conversation has ended and the matter has been conclusively clarified. You may object to the storage at any time by e-mail to contact@humanizing.com.