Privacy policy · Humanframe

This policy explains which personal data humanframe.ai processes, why, and what your rights are under the EU General Data Protection Regulation (GDPR). We collect as little as we can: the site has no cookies, no analytics, no tracking and no forms.

Controller

Company: Orange Hill GmbH
Address: Otto-Bauer-Gasse 4/4, 1060 Wien, Austria
Company register number: FN 633590a
Email: [email protected]

No cookies, no analytics

This site sets no cookies, uses no analytics or tracking, and loads no fonts, scripts or other resources from third-party servers while you browse it.

Hosting and server logs

The site runs on a server of Hetzner Online GmbH in a data centre in Finland, set up and managed with Laravel Forge. Cloudflare sits in front of the server as content delivery network and proxy, so every request passes through Cloudflare first.

When you open a page, the server and Cloudflare process technical access data: your IP address, date and time, the requested page, status code, amount of data transferred, referrer and browser user agent. We use this data only to deliver the site, keep it secure and investigate errors. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

Our server does not keep an access log for the pages of this site. It logs only requests that cause an error and requests that are merely redirected to https://humanframe.ai (for example from http:// or www.), including the IP address. These log files are rotated daily and deleted automatically after at most 15 days. We do not receive or store access logs from Cloudflare.

Cloudflare, Inc. (San Francisco, USA) processes this data as our processor under its Data Processing Addendum, which is part of Cloudflare's Self-Serve Subscription Agreement. Because Cloudflare is based in the United States, the data may also be processed outside the EU. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (Art. 45 GDPR); if that certification lapses, the EU Standard Contractual Clauses in the Data Processing Addendum apply (Art. 46 GDPR).

Cloudflare Data Processing Addendum: cloudflare.com/cloudflare-customer-dpa
Cloudflare and the GDPR: cloudflare.com/trust-hub/gdpr
Data Privacy Framework list: dataprivacyframework.gov/list

Contact by email

The site has no contact form. If you write to us by email, we process your email address, name and the content of your message to answer your enquiry and, where it leads to a project, to prepare and carry out a contract. The legal basis is the steps you ask us to take before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).

We keep the correspondence as long as it is needed for that purpose and as long as Austrian commercial and tax law requires us to keep business records.

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15);
have inaccurate data corrected (Art. 16);
have your data deleted (Art. 17) or its processing restricted (Art. 18);
receive your data in a portable format (Art. 20);
object to processing based on our legitimate interest (Art. 21).

Contact and complaints

To exercise your rights or ask about your data, write to [email protected]. You can also lodge a complaint with a supervisory authority; in Austria this is the Datenschutzbehörde.

Austrian Data Protection Authority: Datenschutzbehörde, Barichgasse 40–42, 1030 Wien
Website: www.dsb.gv.at

Last updated: 18 October 2026.