Legal
Privacy policy
This policy covers humaniwork.com, the marketing site. Client data processed inside the platform is governed by the Data Processing Agreement signed before any ingestion, not by this page.
Last reviewed
The short version
This site asks before it sets anything. If you decline the analytics cookie, or simply do not answer, nothing is written to your browser and no third party is told you were here. If you accept it, Google Analytics counts the pages you read. Either way there is no advertising, no cross-site tracking, and no profile of you. If you send us a message, we hold that message and reply to it.
Who the controller is
Humaniwork (HumaniWork-SOCIEXA), Barcelona, Spain. Data protection enquiries go to dpo@humaniwork.com. Registered company details are on the legal notice.
What we collect, and why
When you read the site
Nothing, until you say yes. On a first visit no analytics script is loaded and no request is made to any third party. You are asked, at the bottom of the page, whether we may count the visit.
If you accept, Google Analytics 4 collects the pages you view, the referring page, your browser and device type, and an approximate location derived from your IP address. It writes a cookie that gives this site a visitor number, so that four pages read by one person are not counted as four people. The lawful basis is your consent, under article 6(1)(a) GDPR and article 22.2 of the Spanish LSSI-CE, and you withdraw it by clearing this site’s data in your browser.
If you decline, the script is never fetched, and your refusal is recorded in your browser’s local storage so that we stop asking.
Our hosting provider processes your IP address transiently in order to serve the page, as any web server must. It is not stored by us.
When you send us a message
The contact form collects your name, your email address, your note, and optionally your organisation type. There is no phone field, no marketing consent box, and no qualification questionnaire.
We use it to reply to you and, if a conversation follows, to keep track of that conversation. The lawful basis is taking steps at your request prior to entering a contract, or our legitimate interest in responding to a professional enquiry.
Where it is processed
The site is hosted in Frankfurt, and a contact message is delivered to us as email through a provider sending from Ireland. The founders read it in Barcelona. Everything the platform itself processes stays in the EU, under the Data Processing Agreement signed before any ingestion.
Analytics are the exception, and we would rather say so than bury it. Google Analytics is provided to us by Google Ireland Limited, and Google may transfer what it collects to the United States under the EU-US Data Privacy Framework and the standard contractual clauses. That is the one sub-processor outside the EU, it is the reason the tag sits behind a question rather than being switched on by default, and declining it costs you nothing on this site.
The current sub-processor list is published on the trust page.
How long we keep it
- Analytics. Aggregate counts only. There is no individual record to retain or delete.
- Contact messages. Twenty-four months from the last exchange, then deleted. If a commercial relationship begins, the relationship record is governed by its own agreement.
Who we share it with
Nobody. We do not sell, rent, or pass on anything from this site. There is no advertising network, no data broker, and no lead-enrichment service in the path.
Your rights
Under the GDPR you can ask for access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interest. Write to dpo@humaniwork.com and we will respond within one month.
If you are not satisfied with our response, you can complain to the Agencia Española de Protección de Datos (AEPD) or to the Autoritat Catalana de Protecció de Dades (APDCAT).
Automated decision-making
This site performs none. Nothing on humaniwork.com scores, ranks, or makes a decision about you.
Inside the platform, the position is set out per module on the trust page, and the rule is the same everywhere: the platform ranks, explains, and projects; a qualified human decides.
Changes
If this policy changes materially, the last-reviewed date at the top changes and the change is described here rather than applied silently.