Privacy Policy

Last updated on: 06.05.2024

Transparent handling of personal data is very important to us. This data protection statement provides information on what personal data we collect, for what purpose and to whom we pass it on. We regularly review and update this privacy policy to ensure the highest level of transparency.

1. What services we use

HubSpot, MailChimp, Google Analytics, Calendly, Google Customer Reviews, Google My Business, WhatsApp Business Chat, Cloudflare CDN, Font Awesome, Google Cloud Storage, Google Fonts API, Google Maps, YouTube, Google Forms, HubSpot CMS Hub, WordPress, Cloudflare Turnstile, DocuSign, Google Sign-in and Google Cloud.

2. Contact Information

If you have any questions or concerns about our protection of your data, you can always reach us by email at contact@thehuman.space. Responsible for data processing done through this website is:

The Human Space AG
Zugerstrasse 40
8810 Horgen
Switzerland

Data Protection Officer
contact@thehuman.space
+41 79 89 777 44

3. General principles

3.1 What data we collect from you and from whom we receive this data

First and foremost, we process personal data that you provide to us or that we collect when operating our website or from you directly. We may also receive personal data about you from third parties. These may be the following categories:

• Personal master data (name, address, etc.);
• Contact information (cell phone number, email address, Linkedin Profile, etc.);
• Financial data of the organization (e.g. account details);
• Online identifiers (e.g. cookie identifier, IP addresses);
• Location and traffic data;
• Sound and image recording;
• particularly sensitive data for example through the coaching survey (e.g. biometric data or information about your health).

3.2 Under what conditions do we process your data?

We process your data in good faith and for the purposes set out in this privacy policy and in your individualized agreement. In doing so, we ensure transparent and proportionate processing.

If, in exceptional cases, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. A justification reason may be in particular:

• Your consent;
• the execution of a contract or pre-contractual measures;
• our legitimate interests, unless your interests are overridden.

3.3 How can you withdraw your consent?

We will process your data within the scope of this privacy policy or your individualized agreement unless we have another justification.

You can revoke your consent at any time by sending an e-mail to the address given in the imprint. Data processing that has already taken place is not affected by this.

3.4 In which cases can we share your data with third parties?

Principle

We may need to rely on the services of third parties or affiliates and engage them to process your data (known as processors). Categories of recipients are namely:

• Accounting, fiduciary and auditing firm;
• Consulting firms (legal, tax, etc.);
• IT service provider (web hosting, support, cloud services, website design, etc.);
• Payment service provider;
• Provider of tracking, conversion and advertising services.

We ensure that these third parties and our affiliates comply with the requirements of data protection and treat your personal data confidentially. We may also be required to disclose your personal information to government authorities.

Visiting our social media channels

We may have embedded links to our social media channels on our website. This is apparent to you in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels. In this case, the social media providers learn that you are accessing their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the operators.

Transfer abroad

Under certain circumstances, your personal data may be transferred to companies abroad in the course of order processing. These companies are obligated to data protection to the same extent as we are. The transfer may take place worldwide. If the level of data protection does not correspond to that in Switzerland, we carry out a prior risk assessment and ensure contractually that the same level of protection is guaranteed as in Switzerland (for example, by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the EU Commission’s standard contractual clauses at the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

3.5 How long do we keep your data?

We store personal data only for as long as is necessary to fulfill the individual purposes for which the data was collected. Data that we store when you visit our website is kept for twelve months. An exception is made for analysis and tracking data, which may be kept longer. We store contract data for longer, as we are obliged to do so by legal regulations. In particular, we must retain business communications, concluded contracts and accounting records for up to 10 years. As far as we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.

3.6 How do we protect your data?

We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse or alteration. Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your requests to companies affiliated with us. In these cases, too, your data will be treated confidentially. Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.

3.7 What rights do you have?

Right to information

You can request information about the data we have stored about you at any time. We ask you to send your request for information together with proof of identity to contact@thehuman.space. You also have the right to receive your data in a common file format if we process your data automatically and if you have given your consent for the processing of this data; or you have disclosed data in connection with the conclusion or performance of a contract. We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party. The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons, or because we need more detailed information from you. You will be informed of the extension of the deadline in good time, at least in text form.

Deletion and correction

You have the option of requesting the deletion or correction of your data at any time. We may reject the request if statutory provisions oblige us to store the data for a longer period or to retain it unchanged or if your request conflicts with a legal requirement. Please note that exercising your rights may be in conflict with contractual agreements and may have corresponding effects on the performance of the contract (e.g. premature termination of the contract or cost consequences).

Legal process

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch. 

3.8 Changes to the privacy policy

We may change this privacy policy at any time. The changes will be published on https://www.thehuman.space/, you will not be informed separately.

4. Individual data processing operations

4.1 Providing the website and creating log files

What information do we receive and how do we use it?

By visiting https://www.thehuman.space/, certain data is automatically stored on our servers or on servers of services and products that we obtain and / or have installed, for purposes of system administration, for statistical or backup purposes or for tracking purposes. These are:

• the name of your Internet service provider;
• Your IP address (in some circumstances);
• the version of your browser software;
• the operating system of the computer with which the URL is accessed;
• the date and time of access;
• the web page from which you are visiting URL;
• the search words you used to find the URL.

Why may we process this data?

This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

How can you prevent data collection?

The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is mandatory for the operation of the website, you therefore have no possibility to object.

4.2 HubSpot

Our website uses HubSpot, a service of HubSpot Inc. for various marketing and sales activities. HubSpot is an integrated software solution that we use for our inbound marketing activities, lead generation, email marketing, CRM (customer relationship management), and contact form management. When you visit our website or interact with us through the forms provided on our website, certain information about your visit is collected and stored. This includes your IP address, the date and duration of your visit, the pages you visit, and information about the browser and operating system you use. In addition, if you contact us via a form, the data you provide (e.g. name, e-mail address) will be stored. HubSpot uses cookies to analyze the behavior of visitors to our website. This helps us improve the user experience on our website and make our marketing activities more effective. The information HubSpot collects helps us better tailor our marketing and sales activities to the needs of our visitors and customers, maintain and optimize our customer relationships, and measure the effectiveness of our marketing campaigns. Data processing is secure and in compliance with applicable data protection regulations. HubSpot is certified under the EU-US Data Protection Regulations and is committed to complying with all data protection requirements applicable by the European Union (EU).

4.3 MailChimp

For sending newsletters and email notifications, we use the service MailChimp, offered by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. When you sign up for our newsletter, the data you provide and your email address are transferred to MailChimp, stored and processed. This enables us to send you regular updates, offers and information. By subscribing to the newsletter, your IP address and the date of subscription are stored. This storage serves solely as evidence in the event that a third party misuses an e-mail address and registers to receive the newsletter without the knowledge of the authorized person. MailChimp offers extensive analytics about how the sent newsletters are opened and used. These analyses are group-related and are not used by us for individual evaluation. The data stored by MailChimp will be deleted as soon as you unsubscribe from our newsletter. This does not affect data that is stored with us for other purposes. MailChimp has its own privacy policies and practices, which may differ from those on our website. For more information about MailChimp’s privacy practices, please visit: https://mailchimp.com/legal/privacy/. If you have any questions about the data collected by MailChimp or would like to exercise your rights regarding that data, you should contact The Rocket Science Group, LLC directly.

4.4 Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

4.5 Calendly

Our service integrates functions of the online appointment scheduling service Calendly, offered by Calendly LLC, 271 17th Street NW, Atlanta, GA 30363, USA. With Calendly, visitors to our website or clients who receive the link to our Calendly booking system can make appointments with us directly online. When you book an appointment through Calendly, you will be asked to provide certain personal data such as your name, email address and, if applicable, your phone number. This data is needed to coordinate the appointment, to inform you about the appointment status and to send reminders if necessary. Calendly has its own privacy policies and practices, which may differ from those of our website. For more information about privacy in relation to Calendly, please see Calendly’s privacy policy: https://calendly.com/pages/privacy. If you have any questions about the data collected by Calendly or wish to exercise your rights with respect to that data, you should contact Calendly LLC directly.

4.6 WhatsApp Business Chat

For direct communication, we offer you the possibility to contact us via “WhatsApp Business Chat”. This service is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you contact us via WhatsApp Business Chat, your cell phone number and the content of your message, as well as any other data you may have provided, will be transmitted to WhatsApp and processed there. We receive this data and use it to respond to your request. WhatsApp uses cookies and other technologies to provide the service and enable communication. In the process, your IP address may also be collected and stored. Please note that the use of WhatsApp Business Chat and communication via this service is subject to WhatsApp’s privacy policy. We recommend that you read this policy before using the service.

4.7 Cloudflare CDN

Our website uses the Content Delivery Network (CDN) service provided by Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). A CDN helps deliver content from our website faster by distributing copies of the content to a network of fast loading servers. When you visit our website, your IP address is transmitted to Cloudflare and cookies may be set in your browser, which are necessary for the optimization and security of the service. Cloudflare uses this data to speed up traffic between our web server and your end device and to protect our website from attacks.

4.8 Font Awesome

Font Awesome is operated by Fonticons, Inc, located at 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA. Font Awesome is a collection of scalable vector icons that allows website developers to integrate various icons and social logos on their websites. We use Font Awesome to integrate visual icons on our website. For example, this may include icons for user interfaces, social media links, or other graphical representations that enhance the design and user experience of our website. Font Awesome may load web fonts from the servers of Fonticons, Inc. when a user visits our website. In doing so, the user’s IP address is sent to Fonticons, Inc. This is necessary so that the user’s web browser can display the Font Awesome icons correctly. Fonticons, Inc. stores users’ IP addresses only briefly and solely for the purpose of providing the Font Awesome icons. No further storage or analysis takes place.

4.9 Google Cloud Storage

For data storage, we use Google Cloud Storage, a cloud storage service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Cloud Storage allows us to store data securely in the cloud and retrieve it when needed. Through the use of Google Cloud Storage, data and information generated by the use of our services or uploaded by us are transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. Google uses this information to ensure the secure storage and fast availability of our data in the cloud. In the process, the data is encrypted and stored in a dedicated area for us. You can find more information about Google’s data collection and privacy practices with respect to Google Cloud Storage in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/ and in the information specific to Google Cloud Storage at https://cloud.google.com/storage/docs/.

4.10 Google Fonts API

On our website, we use the Google Fonts API, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), to embed fonts. By integrating these fonts, your browser will establish a connection to Google’s servers when you visit our website in order to download the fonts and display them correctly. Through this connection, data, in particular your IP address and information about the browser you are using, may be transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. If you want to prevent the transfer of data within the Google Fonts API, you can block access to the domain fonts.googleapis.com in your browser settings. Please note that in this case our website may not be displayed correctly.

4.11 YouTube

Videos from YouTube, a platform of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), are embedded on our website. When viewing the videos or clicking on the play button, data, including your IP address and information about the browser you are using, is transmitted to Google servers and stored there. This data is used to provide the video, monitor performance and improve the user experience. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

4.12 Google Forms

For surveys and online forms, we use Google Forms, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Forms allows us to create individual forms for surveys and data collection that you can fill out via links or directly on our website. When you fill out a Google form provided by us, the data you enter and your IP address are transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. Please note that the data you enter in Google Forms will be processed and stored by Google. If you have concerns about data storage by Google or would like to prevent the transfer of your data to Google, you should not complete the form.

4.13 HubSpot CMS Hub

Our website is powered by HubSpot CMS Hub, a content management system (CMS) from HubSpot Inc. This system allows us to efficiently manage content and provide our visitors with a streamlined and user-friendly experience. When you interact with our website, HubSpot CMS Hub may collect various data, including your IP address, geographic location data, browser type, operating system, referrer URL, date and time of your visit, and the pages you visit. This data is mainly used for technical and statistical purposes to ensure the performance and security of our website. HubSpot CMS Hub may use cookies to optimize the user experience and enable certain features, such as user logins or language settings. Cookies are small text files that are stored on your terminal device and enable an analysis of your use of the website. The data collected by HubSpot CMS Hub helps us to continuously improve the structure and content of our website based on the needs and interests of our visitors. In addition, the system ensures high availability and security of our website.

4.14 WordPress

Our website is based on the WordPress platform, a content management system developed by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage and publish content. When using our website, which is based on WordPress, various data, including your IP address, date and time of access, as well as information about the browser you are using, may be collected and stored. This data is mainly used for administrative purposes and to ensure trouble-free operation of the website. Some WordPress features, such as comments or contact forms, may collect additional personal data when you use them.

4.15 Cloudflare Turnstile

Our website uses “Cloudflare Turnstile”, a service provided by Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare Turnstile is a security service that helps us distinguish human traffic from automated traffic and thus protect our website from misuse. When you attempt to access content protected by Cloudflare Turnstile, you will be asked to provide certain information, usually your email address. This information is transmitted to and stored by Cloudflare to enable access to the protected content and to provide us with an overview of the requests. When you fill out forms on our website or perform certain actions that require verification, Cloudflare Turnstile may be used to ensure that you are a human and not a bot. In doing so, various data, including your IP address and information about your interaction with the Cloudflare Turnstile widget, is transmitted to and processed by Cloudflare.

4.16 DocuSign

Through our services, we offer the option to digitally sign documents using the DocuSign service. This service is provided by DocuSign, Inc, 221 Main St., Suite 1000, San Francisco, CA 94105, USA. DocuSign makes it possible to sign, send and manage contracts and other documents online, simplifying the document signing and management process. When you use DocuSign via our services, various personal data, such as your name, e-mail address and, if applicable, other information relevant to the signing of the document, is collected and transmitted to DocuSign. This data is used by DocuSign to enable the digital signing process, to ensure the authenticity of the signature and to document the signing process.

4.17 Google Sign-in

For some of our services, we offer the option to log in via Google Sign-in to collaborate directly with us on relevant documents (e.g. your personal coaching journey learning diary), a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Sign-in allows you to log in to our website using your Google account without having to create a separate username and password for our website. When you sign in using Google Sign-in, Google asks you to grant certain permissions that allow us to access selected information in your Google Account. This may include your name, email address, and profile picture. This information is used to create or update your user profile on our website. By using Google Sign-in, data, including the permissions you have granted and your IP address, are transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. If you do not want Google to associate the data collected through our web service directly with your Google account, you will not be able to sign in to our website using Google Sign-in.

4.18 Google Cloud

For storage, hosting and data processing services, we use Google Cloud, a cloud platform service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Cloud allows us to store, process and retrieve data securely in the cloud. By using Google Cloud, data and information generated by the use of our services, including your IP address and other relevant data, will be transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. Google uses this information to ensure the operation and availability of our data and applications in the cloud and to provide us with reporting and analytics. You can find more information about Google’s data collection and privacy practices with respect to the Google Cloud in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/ and in the information specific to the Google Cloud at https://cloud.google.com/terms/data-processing-terms.