Privacy policy
Last updated: 29 September 2026
1. DATA CONTROLLER
huminder OÜ
Address: Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia.
Registry code: 17334610
EU VAT number: EE102906989
Website: https://huminder.com
Contact us with this contact form
2. OVERVIEW
This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).
3. INFORMATION WE COLLECT
3.1 Website Analytics and Business Visitor Identification
We operate a proprietary B2B tracking system that does not use cookies. This system collects limited technical connection data to understand website usage and identify potential business organisations visiting our site. It is not designed or intended to track individual visitors.
Data collected may include:
- Browser type and operating system
- Pages visited on our website
- Date and time of visits
- Approximate geographic location (country and city)
- IP address (processed only in pseudonymised form)
Pseudonymisation
All IP addresses are automatically pseudonymised by our system before any analytics or business visitor identification takes place. This ensures that individual persons cannot be identified or tracked, while still allowing us to recognise companies or organisations.
Legal Basis
We rely on our legitimate interest under Article 6(1)(f) GDPR to process pseudonymised connection data for business analytics.
Purpose
To understand website usage, identify business prospects, and improve our services.
3.2 Google Analytics
With your consent, we use Google Analytics 4, provided by Google Ireland Limited, to understand how visitors use huminder.com and move between our website and our Atlassian Marketplace listing. We use Google Analytics measurement ID G-FE4QKYHQGC.
Data collected may include:
- Pages viewed and interactions with the website
- Browser, device, and operating system information
- Approximate geographic location
- Referral information, including journeys involving Atlassian Marketplace
- Pseudonymous online identifiers stored in analytics cookies
Legal Basis
Your consent under Article 6(1)(a) GDPR. Google Analytics remains disabled where consent is required unless you accept Analytics in our cookie settings.
Purpose
To measure website use and understand the combined website and Atlassian Marketplace funnel so that we can improve our content and product experience.
3.3 Website Performance and Security
For security and performance reasons, our systems process technical request data such as:
- Pseudonymised IP addresses
- Request logs and timestamps
- Security-related information (to prevent attacks)
- Performance metrics
Legal Basis
Legitimate interest for ensuring website functionality, security, and performance optimisation.
Purpose
To provide fast, secure, and reliable website delivery.
3.4 Contact Forms and Communications
When you contact us through forms or email, we collect:
- Name and email address
- Company information (if provided)
- Message content
- Any other information you voluntarily provide
Legal Basis
Consent and legitimate interest for responding to inquiries.
Purpose
To respond to your inquiries and provide requested information.
4. COOKIES AND TRACKING TECHNOLOGIES
We use essential cookies for site functions and, where you consent, analytics cookies. Our proprietary business visitor tracking system does not rely on cookies.
4.1 Essential Cookies
We use strictly necessary cookies for:
- Remembering language preferences
- Remembering theme preferences
Legal Basis
Legitimate interest (essential for website functionality).
4.2 Language Preference Cookie
A single cookie is used solely to remember your language preference (English, French, or German).
This cookie is not used for tracking or profiling.
Legal Basis
Legitimate interest (essential for multilingual functionality – no consent required).
5. DATA SHARING AND THIRD PARTIES
5.1 Service Providers
We work with carefully selected service providers to operate our website and analytics system, including:
- Geolocation services (for identifying approximate visitor organisation)
- Data storage providers (for secure storage of analytics data)
- Hosting and infrastructure providers (for website performance and security)
- Google Ireland Limited, as the provider of Google Analytics
All service providers are required to maintain appropriate data protection standards. For more information about how Google handles data, see the Google Privacy Policy.
5.2 No Data Sales
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
6. INTERNATIONAL DATA TRANSFERS
If personal data is transferred outside the European Economic Area (EEA), such transfers are protected by appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Technical safeguards including encryption and access controls
- Contractual commitments requiring adequate protection of personal data
Google Analytics data may be processed by Google group companies and service providers outside the EEA. Google relies on applicable transfer safeguards, including adequacy decisions where available and the European Commission Standard Contractual Clauses where required.
7. DATA RETENTION
- Pseudonymised connection and analytics data: Retained for up to 2 years for business development purposes.
- Google Analytics event data: Retained for 2 months.
- Google Analytics user data: Retained for 14 months. The retention period resets when new activity is recorded for the user.
- Contact form submissions: Retained for up to 3 years to handle follow-up inquiries and comply with commercial and legal obligations, or until you request deletion.
8. YOUR RIGHTS UNDER GDPR
You have the following rights regarding your personal data:
- Right of Access
- Right to Rectification
- Right to Erasure (“Right to be Forgotten”)
- Right to Restrict Processing
- Right to Data Portability
- Right to Object (including to processing based on legitimate interests)
- Right to Withdraw Consent (for processing that requires consent)
- Right to Lodge a Complaint with your local data protection authority
9. OPT-OUT OPTIONS
- Google Analytics Consent: You can accept, reject, change, or withdraw analytics consent at any time using the Cookie preferences link in the footer. When you withdraw consent, Google Analytics remains disabled on subsequent page loads unless you consent again.
- Business Visitor Tracking Opt-Out: You can contact us directly to opt out of business visitor identification.
- Marketing Communications: You can unsubscribe from marketing emails using the unsubscribe link in any email we send.
10. DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure hosting infrastructure
- Access controls and security measures
- Regular security monitoring
11. CHILDREN’S PRIVACY
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when the policy was last revised. We encourage you to review this policy periodically.
13. CONTACT US
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.
© 2026 huminder OÜ. All rights reserved.