Privacy Policy

About this policy and responsibility for data

HUMAS System records, verifies and preserves human contribution. This policy describes data processing on the public website and general principles for participant data.

Visiting the website or reading this policy does not by itself constitute consent to optional processing. Where a feature requires consent, it is requested separately and can be withdrawn.

Privacy enquiries: info@humassystem.com. The project is based in Tallinn, Estonia.

Data used

When contacting the team

Your email address, name and message. The corporate enquiry form also requests your organization, website, employee range and industry. When delivery is enabled, enquiries are sent to admin@humassystem.com.

When visiting the website

The server receives your IP address and technical HTTP request information needed to deliver the page. Technical logs may be used for website security and diagnostics.

When using the platform

Depending on the features used: name or alias, email, country, HUID, settings, participation and verification records, HUNIT, four-energy context and glyphs. Reading the public website does not create a personal profile or collect biometrics.

Purposes and legal bases

Data must be proportionate to a specific purpose. The basis depends on the interaction:

• Answering questions and business correspondence: legitimate interests in handling incoming enquiries; steps towards a contract at the person’s request: pre-contractual measures.
• Providing agreed participant services: performance of a contract to the extent necessary.
• Website protection, abuse prevention and diagnostics: legitimate interests in service security, taking individual rights into account.
• Meeting statutory duties: the relevant legal obligation.
• Optional analytics and other features requiring consent: separate voluntary consent.

If a feature involves special categories of data, a separate applicable condition and advance information are required.

Cookies and analytics

The website uses a necessary session cookie to protect forms. It helps prevent forged requests and repeated submissions and is not used for advertising.

After your consent, the main website uses Google Analytics 4 for visitor statistics: pages, technical device and browser information, interactions and approximate location derived by the service. Data is processed by Google; see the Google Privacy Policy. Ad personalization and Google Signals are disabled in the website tag.

Analytics does not load before consent, and declining does not restrict access. Change or withdraw your choice through “Cookie settings” in the footer. Analytics cookies are kept for up to 12 months and the consent choice for up to 180 days.

Google Analytics may process data outside the EEA. Google provides information about its international transfer mechanisms. Retention within Analytics is determined by the property setting.

Access, external services and transfers

Enquiries are accessible to those responsible for responding. Hosting and email providers process data as needed to operate their services. Data may be disclosed in response to a lawful request from a competent authority.

Links to Telegram, social networks and other external resources open services with their own data processing policies. Messages sent through them are also subject to the chosen service’s rules.

Transfers of personal data outside the European Economic Area require an applicable transfer basis and safeguards under the GDPR. Information about specific recipients and safeguards is provided for the relevant service.

Retention and protection

Enquiries are retained as needed to respond, continue the related discussion and resolve justified claims. Where correspondence becomes part of a contract, contractual document retention and statutory periods apply.

Participation data is retained for the period necessary to provide the service and any subsequent period justified by legal duties or the protection of rights. Ending participation does not remove these duties, nor does it justify retaining all data indefinitely.

Access is limited by role and purpose. Personal identity and participant-owned history remain independent of corporate access. Specific retention periods for technical logs and backups depend on the approved infrastructure configuration.

Your rights

Where the law provides, you can:

• receive information about processing and a copy of your data;
• correct inaccurate data;
• request erasure or restriction;
• object to processing based on legitimate interests;
• receive data in a portable format where portability applies;
• withdraw consent without affecting processing lawfully performed before withdrawal;
• complain to a supervisory authority, including Estonia’s Andmekaitse Inspektsioon.

Write to info@humassystem.com. Proportionate identity checks may be needed to protect your data. Requests are normally answered within one month; any permitted extension and its reasons are communicated within that period.

The public website does not make solely automated decisions about people that have legal or similarly significant effects.

Policy updates

The policy is updated when data processing changes. Participants are informed of significant changes through an appropriate channel. If a new purpose requires consent, it is requested separately: continued website use does not replace that choice.