Privacy Policy

1. Controller

Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. Purpose of this website

The website be-hui.com serves to provide public information about HUI — Human United Intelligence. It informs about the idea, origins, how it works, and the vision of HUI.

The HUI app is currently still under development and is not yet available for public release. Registration, login, or use of app features is therefore not possible on the public website at this time.

3. Hosting

This website is hosted by Vercel Inc. Vercel provides the technical infrastructure for operating the website.

Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA

Data processed: For technical reasons, access data is processed in server log files with every access to the website (IP address, date and time of access, requested URL, browser type and version, referrer URL). This processing is carried out by Vercel as a data processor.

Purpose: Provision of the website, ensuring the security and stability of the infrastructure, error diagnosis.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the website).

Retention period: Server log files are stored for a limited period and then deleted. The exact retention period follows Vercel’s guidelines.

Data transfer to third countries: Vercel Inc. is a US-based company. A transfer of personal data to the USA cannot be excluded. Vercel offers a Data Processing Addendum (DPA) and uses Standard Contractual Clauses (SCCs) for data transfers. Further information at vercel.com/legal/dpa.

4. Technical access data / Server log files

When you access the website, the hosting provider (Vercel) automatically processes the following data:

• IP address of the accessing device
• Date and time of access
• Requested URL
• Browser type and version
• Referrer URL (if available)

This data is not combined with other data sources and serves exclusively the technical operation of the website.

5. Cookies and local storage

The public HUI website does not use cookies. No tracking cookies, marketing cookies, or analytics cookies are set.

Technically necessary cookies are not required for the public website. The hosting provider (Vercel) processes access data in server log files (see Section 3), but not via cookies in the browser.

Regarding local storage in your browser:

• Language choice (localStorage “hui-language”): stores whether you view the website in German or English. This storage is functionally necessary so that your chosen language is preserved. Legal basis: Section 25 (2) no. 2 of the German TDDDG (technically necessary). You can delete it at any time via your browser settings.
• Consent decision (localStorage “hui-consent”): stores your privacy settings selection (version, analytics, external content, timestamp). This storage is necessary so that your consent decision is honoured and you are not asked again on every visit. Legal basis: Section 25 (2) TDDDG (storing consent). No personal data other than the time of your decision is stored.

6. Contact

No contact form is currently available on the public website. Contact is made via the published email addresses of the supporting associations.

If you contact us by email, your details (name, email address, subject, and message) will be processed for the purpose of handling your enquiry.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Retention period: The data is stored for the duration of the correspondence and then deleted, unless statutory retention obligations apply.

7. External services

The following external services are used on the public HUI website:

• Fonts: The Inter font family is loaded locally from the server. No data is transmitted to external font providers (such as Google Fonts).
• Images: All images are hosted locally. No external image CDNs are used.

External scripts and external content are only embedded with your consent. Without consent, no connections to these services are made.

• YouTube video embeds (external content): On the Discover page (/entdecken), videos from YouTube (Google Ireland Limited) can be embedded and played. Embedding and playback only take place after your consent to “External content”. Before consent, only local preview images are shown; upon consent, a connection to YouTube is established (youtube-nocookie.com, i.ytimg.com). Details on YouTube's data processing: policies.google.com/privacy. Legal basis: Art. 6 (1) (a) GDPR / Section 25 (1) TDDDG (consent, revocable at any time via “Cookie settings” in the footer).

Payment providers are not embedded on the public information pages. Only when you actively initiate a project support are you redirected to a checkout page operated by Stripe (Stripe Payments Europe Ltd.). This purpose-bound processing serves contract performance, Art. 6 (1) (b) GDPR.

8. Analytics / Tracking (Plausible Analytics)

For anonymous reach measurement we use Plausible Analytics (Plausible Analytics, Ireland) — a privacy-friendly analytics tool without cookies and without local storage. Plausible records page views and events strictly anonymously: IP addresses are not stored, no cross-device or cross-browser profiles are created, and no cross-site tracking takes place.

Consent control: The analytics script is only loaded after you have consented to “Analytics”. Without your consent, no analytics take place. Consent is voluntary and can be revoked at any time via “Cookie settings” in the footer.

Legal basis: Art. 6 (1) (a) GDPR / Section 25 (1) TDDDG (consent).

Further information: plausible.io/data-policy

9. Links to external websites

The HUI website contains links to the websites of the supporting associations:

• 4visionglobal.com
• ligaderkreativen.at

When accessing these external links, the user leaves the HUI website. The respective provider is responsible for data processing on the linked pages.

10. Rights of the data subject

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about whether and which personal data concerning you is being processed.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data ("right to be forgotten").
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): You can request the transfer of your data in a common format.
• Right to object (Art. 21 GDPR): You can object to the processing of your data.
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You can lodge a complaint with a data protection supervisory authority.

11. Right to lodge a complaint

You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

Responsible authority in Austria: Data Protection Authority (dsb.gv.at)

Responsible authority in Germany: Federal Commissioner for Data Protection (bfdi.bund.de)

12. Data security

The website is served over HTTPS. Communication between your browser and the server is encrypted. Appropriate technical and organisational measures are taken to ensure the security of data processing.

13. Retention periods

Personal data is stored only for as long as is necessary for the respective processing purposes or as long as statutory retention obligations exist. Once the purpose no longer applies, the data is deleted.

14. Contact for data protection questions

A Data Protection Officer within the meaning of Art. 37 GDPR has not been appointed, as the requirements for doing so are not met.