Privacy Policy

1. Who is responsible

The controller for the processing of your personal data on this site is:

Dumke Ventures UG (haftungsbeschränkt), Ebersprung 2, 16321 Bernau, Germany. Managing Director: Tom Dumke. HRB 17796, Amtsgericht Frankfurt (Oder).

For any privacy question, write to tom@humansrunit.com.

2. What data we process and why

Visiting the website. Each time you open a page, your browser sends technical data to our hosting provider Cloudflare: your IP address, the date and time, the page requested, the referring page and your browser's user-agent. Cloudflare needs this to deliver the page and to protect the site against attacks. This is technically necessary to show you the website (Art. 6 (1)(f) GDPR, our legitimate interest in a secure, working website). We do not combine this data with your waitlist entry or other data, and we do not use it to identify you.

Waitlist signups (double opt-in). When you submit the waitlist form, we store: your email (required), your name or business name (optional), your industry or specialty (optional), the problem you described in free text (optional), whether you signed up as an operator or a company, your language (English or German), your marketing choice, and the timestamps of your submission and confirmation. Your entry stays in a pending state until you click the confirmation link in the email we send you; only then is it added to the actual waitlist. Pending entries that are not confirmed within 7 days are deleted automatically. If our confirmation email service is not configured, the form stores your entry directly as confirmed, without a confirmation email. Legal basis: Art. 6 (1)(b) GDPR, to deliver the early-access notice you requested. If you tick the optional marketing checkbox, we additionally process your data to send occasional updates beyond the launch announcement (Art. 6 (1)(a) GDPR, your consent, which you can withdraw at any time by emailing us).

Technical data when you submit the form. When you submit the waitlist form, our form handler, which runs on Cloudflare, stores your IP address, your browser's user-agent string and the country derived from your IP address together with your waitlist entry. We use these to detect abuse and fake signups, to debug delivery problems and to document your double opt-in confirmation (Art. 6 (1)(f) GDPR, our legitimate interest in a waitlist free of abuse and in proving consent). When you sign up and when you confirm, the form handler also writes your email address to Cloudflare's technical function logs, which we use only to fix errors.

Confirmation and admin notification emails. Outbound emails (your confirmation message and an internal notification to tom@humansrunit.com when you confirm) are sent through Cloudflare Email Sending, the same processor as the rest of the site.

Web analytics (only if you consent). If you allow analytics in the cookie banner, we load Cloudflare Web Analytics, which is cookieless and aggregates pageviews, referrers, and approximate location at country level. We do not run Google Analytics, Meta Pixel, or any third-party tracking pixel. Legal basis: Art. 6 (1)(a) GDPR, your consent.

We do not sell your data, do not share it with advertising networks, and do not engage in profiling or automated decision-making (Art. 22 GDPR).

3. How long we keep it

Pending (unconfirmed) waitlist entries: 7 days, then deleted automatically.

Confirmed waitlist entries (email, name, industry or specialty, free text, operator or company choice, language, marketing choice and timestamps): deleted automatically 365 days after you confirmed. Entries stored without a confirmation email are deleted automatically 365 days after signup. If you ask to be removed earlier, we delete your entry within 14 days. If you withdraw your marketing consent, we stop sending you updates.

IP address, user-agent and country: stored with your waitlist entry and deleted together with it.

Function logs: kept by Cloudflare only for a short period under its standard log settings.

Cookie consent record: stored on your device for 365 days so we don't show the banner repeatedly. You can clear it any time in your browser's cookie settings, or reopen the banner with the "Cookie settings" link in the footer of our main pages.

4. Who we share data with

We use one main processor:

Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) provides our website hosting (Cloudflare Pages), the database that stores waitlist entries (Cloudflare Workers KV), DNS, email forwarding (Cloudflare Email Routing), outbound transactional email (Cloudflare Email Sending, used to send your waitlist confirmation message and our internal admin notification), and, if you consent, web analytics (Cloudflare Web Analytics). Cloudflare processes this data on our behalf under its Data Processing Addendum.

Cloudflare is a US company and may process data in the USA and other countries; waitlist entries in Workers KV are stored on Cloudflare's global network. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so transfers to it are covered by the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, the EU Standard Contractual Clauses in Cloudflare's Data Processing Addendum apply (Art. 46 (2)(c) GDPR): cloudflare.com/cloudflare-customer-dpa. You can ask us for a copy of these safeguards.

Our mailbox. Emails to tom@humansrunit.com, including our internal notification about your confirmed signup (your email, name, industry or specialty, free text, operator or company choice, language, marketing choice and country), are forwarded by Cloudflare Email Routing to our iCloud Mail mailbox, provided by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple may store this data in the USA; Apple Inc. is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The emails stay in that mailbox until we delete them. When you ask us to delete your data, we also delete these emails.

5. Cookies and storage on your device

We use the smallest set of cookies we can:

__cf_bm (Cloudflare bot protection): Cloudflare may set this cookie when it checks whether a request comes from a human or a bot, to protect the site against automated abuse. Strictly necessary for the service under § 25 (2) no. 2 TDDDG, so it does not need consent and cannot be switched off. Lifetime: 30 minutes.

humansrunit_consent stores your cookie banner choice as a JSON value (which categories you allowed). Set after you make a choice. Strictly necessary for the service under § 25 (2) no. 2 TDDDG; cannot be disabled. Lifetime: 365 days.

Cloudflare Web Analytics beacon: only loaded if you consent to analytics. Cookieless: it does not write anything to your device.

We do not use marketing cookies, ad tracking pixels, or session-replay tools. The "Marketing" switch in the cookie settings has no effect, because we run no marketing tools.

6. Fonts, scripts and other assets

Web fonts on this site are served from our own domain.

On the waitlist, sign-up, sign-in, account and inbox pages, your browser loads the JavaScript libraries React, ReactDOM and Babel from unpkg.com, a public content delivery network for open-source code. To deliver these files, the operator of unpkg.com receives your IP address, the time of the request and your browser's user-agent. Its servers may be located outside the EU, including in the USA. Legal basis: Art. 6 (1)(f) GDPR, our legitimate interest in displaying these pages. All other pages load no scripts from third-party servers, apart from Cloudflare Web Analytics if you consent.

7. Businesses we contact

If we contacted your company by email about HumansRunIt, we took the company name, its contact details and, where given, the name of the contact person from public job postings on the job board of the Bundesagentur für Arbeit and from your company website. We use this data to send you our message and to handle your reply. Legal basis: Art. 6 (1)(f) GDPR, our legitimate interest in contacting businesses about our services. These emails are sent through Strato GmbH, Germany. We keep the data for as long as we need it for this contact and any business relationship that follows. You can object at any time by replying to the email; we then delete your data and do not contact you again.

8. Other information

Required data. Only your email address is required to join the waitlist. Without it we cannot send you the launch notice. All other fields are optional.

Free text. Please do not enter health data or other sensitive information in the free-text field.

Security. All pages are served over encrypted connections (HTTPS with HSTS). Only our managing director has access to waitlist data.

Age. This site and the waitlist are meant for businesses and professionals aged 18 or over. We do not knowingly collect data from anyone under 18.

Visitors from the United States. We do not sell or share personal information, do not use it for targeted advertising, and do not use sensitive personal information. You can ask us to access, correct or delete your data by emailing tom@humansrunit.com, wherever you live, and we will not treat you differently for doing so.

9. Your rights under GDPR

You have the right, at any time, to:

– Access the personal data we hold about you (Art. 15);

– Rectify inaccurate data (Art. 16);

– Erasure: ask us to delete your data (Art. 17);

– Restrict processing (Art. 18);

– Receive your data in a portable format (Art. 20);

– Object to processing based on legitimate interest (Art. 21);

– Withdraw consent at any time, with future effect, where processing is based on consent (Art. 7 (3)).

To exercise any of these, email tom@humansrunit.com. We respond within one month (Art. 12 (3)).

Right to object (Art. 21 GDPR). Where we process your data on the basis of our legitimate interests (Art. 6 (1)(f) GDPR), you can object at any time for reasons arising from your particular situation. We will then stop the processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. To object, email tom@humansrunit.com.

10. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (LDA Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany. Find them at lda.brandenburg.de.

11. Changes to this policy

We update this page when our processing changes. The effective date at the top reflects the last revision.