1. Identity of the Data Controller
Humanos Tech OÜ (Registry code: 17179670, VAT No.: EE102831229), with its registered office at Harju maakond, Tallinn, Mustamäe linnaosa, Meistri tn 6, 13517, Republic of Estonia, is the controller of your personal data within the meaning of Art. 4(7) of Regulation (EU) 2016/679 (GDPR).
Data protection contact
For any question relating to the protection of your data, you can contact us at:
Humanos Tech OÜ has not appointed a Data Protection Officer (DPO), as it is not legally required to do so under Art. 37 GDPR, given the volume and nature of the data processed.
2. Data We Collect and How We Collect It
We collect only the data necessary to provide our services (data minimisation principle, Art. 5(1)(c) GDPR):
Identification and contact data
Your name, email address and any other data you choose to provide (for example, company, country or the content of your message) through the forms on the site: contact, partner programme, savings simulator and “Find your service”. Forms are sent via the Web3Forms service. If you have accepted preference cookies, together with the form a summary of the current visit is sent (stage, topic and entry page, referring site and number of pages viewed), which helps us understand what you are interested in.
Technical connection data
When you visit the site, the hosting server automatically logs the technical data needed to serve the pages and keep them secure (such as IP address, browser type and date and time of access). We do not use any analytics, advertising or profiling tools.
“Find your service” responses
If you use this tool, we process the answers you select, the result obtained and your contact details in order to prepare a recommendation and get in touch with you. This data is sent to our team by email via Web3Forms.
Anti-bot verification data
The contact, partner programme and “Find your service” forms are protected by hCaptcha, which collects technical data about the device and the interaction (such as IP address and browser characteristics) for the sole purpose of distinguishing humans from automated programs.
Newsletter subscription
If you subscribe to the blog newsletter or expressly request it in the contact form, we process your email address and language in order to send you our publications. The subscription reaches us by email via Web3Forms.
No automated decision-making
Humanos Tech OÜ does not use automated decision-making or profiling that produces legal effects concerning users, in compliance with Art. 22 GDPR. Every relevant decision involves direct human intervention.
3. Processing of Children's Data
The platform is not directed at children under 13. In accordance with the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus, §8.2) and Art. 8 GDPR, we do not process the data of children under 13 without the verifiable consent of their legal guardian.
If we discover that a child's data has been collected without such consent, we will erase it completely and irreversibly within a maximum of 72 hours of discovery. To report any such case, contact:
4. Lawful Bases for Processing
All processing of data carried out by Humanos Tech OÜ has a clear lawful basis under Art. 6 GDPR:
Steps prior to entering into a contract (Art. 6(1)(b) GDPR)
Data provided through the forms on the site (contact, partner programme, savings simulator and “Find your service”) is processed to respond to your request and, where applicable, to establish a business relationship.
Consent (Art. 6(1)(a) GDPR)
Sending the newsletter and commercial communications by email is based on your consent, which you give expressly when you subscribe to the blog newsletter or tick the corresponding box in the contact form.
Legitimate interest (Art. 6(1)(f) GDPR)
The security of the site and its forms, including protection against bots through hCaptcha.
Withdrawal of consent
You can withdraw your consent at any time, free of charge and without detriment, by any of the following means:
- Using the unsubscribe link included in our email communications.
- Sending an email to stating "Withdrawal of consent".
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal (Art. 7(3) GDPR).
5. Cookies
The site uses the cookies necessary for it to work securely and, only if you accept them in the cookie notice, our own preference cookies (to remember which blog articles you have read and suggest next steps). We do not use analytics, advertising or profiling cookies.
ht_cookie_consent
Stores your cookie choices (12 months).
Necessary
ht_read
Marks the blog articles you have already read (30 days). Only with your consent.
Preferences
hCaptcha
Cookies and technical storage of the anti-bot service, only when you start filling in a protected form.
Necessary
You can accept, reject or change your preferences at any time via “Cookie settings” in the footer. Full details are in our Cookie Policy.
6. Processors and International Data Transfers
To provide our services, we use the following providers, which process data on our behalf as processors under the corresponding data processing agreements or terms (Art. 28 GDPR):
Hostinger
Web hosting and infrastructure
EU / International
Web3Forms
Sending the site's forms and newsletter subscriptions by email
International
hCaptcha (Intuition Machines, Inc.)
Protection of forms against bots
USA
Where a provider processes data outside the European Economic Area (in particular, in the USA), the transfer is based on the adequacy decision for the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795), for entities certified under that framework, or, failing that, on the Standard Contractual Clauses adopted by the European Commission, in accordance with the judgment of the CJEU in Case C-311/18 (Schrems II).
All fonts on the site, including the commercial proposal published at /it/propuestafoodtech/, are hosted on our own server: your browser does not connect to Google or any other font provider.
The links to our LinkedIn profile are plain links: the site does not embed social media plugins or buttons, so LinkedIn receives no data until you click on them.
7. Data Retention Period
Your personal data will be retained for a maximum period of 12 (twelve) months from your last activity or interaction with us, or until you request its erasure. Newsletter subscription data is retained for as long as you remain subscribed.
Once this period has elapsed, the data will be securely deleted, unless a legal obligation requires a different retention period (Art. 5(1)(e) GDPR).
8. Your Rights as a Data Subject
You may exercise the following rights at any time (Arts. 15–22 GDPR) by sending a request to :
Art. 15
Access
Find out what data we hold about you and obtain a copy.
Art. 16
Rectification
Correct inaccurate or incomplete data.
Art. 17
Erasure
Request the deletion of your data (“right to be forgotten”).
Art. 18
Restriction
Restrict the use of your data in certain circumstances.
Art. 20
Portability
Receive your data in a structured and readable format.
Art. 21
Objection
Object to processing based on legitimate interest.
Response time
Humanos Tech OÜ will respond to your request within a maximum of 30 days of receipt, extendable to 90 days in particularly complex cases, always informing you of the extension and the reasons for it (Art. 12(3) GDPR).
9. Compliance with the Digital Services Act (DSA)
As a provider of intermediary services, Humanos Tech OÜ applies Regulation (EU) 2022/2065 (DSA):
Statement of Reasons (Art. 17 DSA)
Any restriction or removal of content published by a user will be notified with a detailed legal justification.
Complaint-Handling System (Art. 20 DSA)
An internal review mechanism supervised by people is available for 6 months after each moderation decision.
Misuse policy (Art. 23 DSA)
Users who repeatedly provide manifestly illegal content may have their access suspended, after a reasoned warning.
10. Supervisory Authority and Complaints
If you consider that the processing of your data does not comply with the applicable legislation, you have the right to lodge a complaint with the competent supervisory authority:
Supervisory authority
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Tatari 39, 10134 Tallinn, Estonia · www.aki.ee
This right is without prejudice to the possibility of bringing legal proceedings in the Member State of your habitual residence, in accordance with Art. 79(2) GDPR.