Privacy Policy

Scope and principle

This policy applies to 7humanpro.com and all of its pages, including the English ones. It describes what data is collected when you visit these pages, what we use it for, who receives it and how long it stays.

We collect only what the purpose requires. We do not sell data and we do not pass it on for advertising. The controller is the entity named above.

Hosting, server logs and transfer to the USA

This website is operated and delivered by Squarespace, Inc. When a page is requested, Squarespace processes the technically necessary access data: IP address, date and time, page requested, amount of data transferred, browser type, operating system and referring page. A page cannot be delivered without this data; it also serves to detect and block attacks. The legal basis is our legitimate interest in a secure and functioning service, Art. 6(1)(f) GDPR.

Squarespace is based in the United States, and the delivery network and error logging run there as well. Data is therefore transferred to a third country. The transfer is based on the European Commission’s standard contractual clauses and, where applicable, on the EU-US Data Privacy Framework. A level of protection fully equivalent to European requirements cannot be guaranteed in every case; in particular, US authorities may demand access under certain conditions.

Cookies and consent

One cookie is technically necessary: crumb, which protects forms against misuse. Your choice in the cookie notice is stored in ss_performanceCookiesAllowed and ss_marketingCookiesAllowed. Squarespace also writes an entry called test to your browser’s local storage to check whether storage is available at all.

Here we say something openly that most policies leave out: the cookie notice records your choice, but it does not technically block any service. Fonts, error logging and the spam check in the analysis form load as soon as the page opens, regardless of what you select. We measured this before and after consent; the results were identical. On this platform it cannot be fully changed, so it is stated here instead of a promise we could not keep.

You can change or withdraw your choice at any time via “Cookie settings” in the footer. Withdrawal takes effect for the future.

Audience measurement

Squarespace collects aggregated visit figures for us: how often a page was opened, where visitors came from, which devices and languages are used. We use this to see which content is actually needed. The legal basis is your consent, Art. 6(1)(a) GDPR.

We do not use Google Analytics, the Meta pixel, Hotjar or any advertising networks.

Error logging

Squarespace uses the Sentry service to record technical errors in the browser. This may transmit your IP address, the page requested and details about your browser to a server in the USA. The sole purpose is to find and fix faults. The legal basis is our legitimate interest in error-free operation, Art. 6(1)(f) GDPR.

Fonts

The typefaces on this website are loaded through Adobe Fonts. Your browser therefore connects to Adobe servers and transmits your IP address in the process. Adobe is based in the USA. The legal basis is our legitimate interest in a consistent presentation, Art. 6(1)(f) GDPR. We do not use Google Fonts.

Contact form and email

The contact form asks for your name, email address, subject and message. We process these details in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where an offer or contract is involved, otherwise our legitimate interest in replying, Art. 6(1)(f) GDPR.

Messages are stored at Squarespace and delivered to our mailbox. The same applies if you write to us directly by email.

Customer account

You can create an account for protected areas. First name, last name, email address and a password are stored; the password is kept in encrypted form only. The purpose is to provide access, the legal basis is Art. 6(1)(b) GDPR. You can have your account deleted at any time.

Photographs for the analysis

When you book an analysis, you upload photographs of your face through a separate form. We use these photographs solely to produce the analysis. The legal basis is your consent, Art. 6(1)(a) GDPR, which also covers Art. 9(2)(a) GDPR where required.

After the analysis the photographs are not kept. If no analysis is made, they are not kept either. We do not pass them to third parties, do not use them for advertising and do not use them to train software.

The analysis itself is not produced by artificial intelligence. It is done by people, on the basis of human morphology.

Spam protection in the analysis form

On the page for preparing an analysis we use Google reCAPTCHA so that the form cannot be abused by machines. This transmits your IP address and details about your behaviour in the browser to Google, including to the USA. The legal basis is our legitimate interest in protection against misuse, Art. 6(1)(f) GDPR.

reCAPTCHA runs on that one page only, not on the rest of the site.

Embedded videos

Some blog articles contain videos embedded from YouTube in extended privacy mode, via youtube-nocookie.com. No advertising cookies are set before a video is started; opening the article does, however, establish a connection to Google and transmits your IP address. The legal basis is our legitimate interest in including supplementary content, Art. 6(1)(f) GDPR.

The video on the home page is our own file and is delivered without any third party involved.

Links to social networks

Instagram, Facebook, LinkedIn, YouTube and Spotify are reached through ordinary links only. No buttons or embedded areas from these providers are included, and no data is transmitted unless you click yourself. The provider’s own privacy policy applies from that point on.

Retention

Access data and error logs are deleted automatically after a short period. Contact form enquiries are kept for as long as handling them and any follow-up questions require. Account data remains for as long as the account exists. Photographs for an analysis are not kept once it has been produced. Where statutory retention periods apply, for example under tax law, those periods take precedence over deletion.

Your rights

You have the right to information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20).

You may object under Art. 21 GDPR to processing we base on a legitimate interest. Any consent you have given can be withdrawn at any time with effect for the future (Art. 7(3) GDPR). A message to the address above is enough.

Right to complain

If you believe we are not processing your data lawfully, you can complain to the data protection supervisory authority where you live or work. We would rather you wrote to us first – but this right exists regardless.

Changes to this policy

If the service changes or a new provider is added, we update this policy. The version published here is always the one that applies; the date is at the end of the page.