Data Privacy

Last updated: October 6, 2026

1. Overview

This Privacy Policy explains how Israel Lopez Odicio, operating as an independent professional under the brand TheDigitalHumans (“we”, “us”, “our” or “TheDigitalHumans”), processes personal data when you visit https://thedigitalhumans.ai, use our contact form, request a call or video call, or otherwise get in touch with us.

We process personal data in accordance with the General Data Protection Regulation (“GDPR”), the German Federal Data Protection Act (“BDSG”), the German Telecommunications Digital Services Data Protection Act (“TDDDG”), and other applicable data protection laws.

2. Controller

The controller responsible for the processing of personal data is:

Israel Lopez Odicio
Freiberufler / Independent Professional
Operating under the brand TheDigitalHumans

Blücherstraße 31
24944 Flensburg
Germany

Email: hi@thedigitalhumans.ai
Website: https://thedigitalhumans.ai

3. Data Protection Officer

We are not legally required to appoint a data protection officer and have not appointed one.

For privacy-related questions or requests, please contact:

hi@thedigitalhumans.ai

4. Personal Data We Process

Depending on how you use our website or contact us, we may process the following categories of personal data:

• Contact details, such as your name, email address, phone number and other information you voluntarily provide in the contact form or when requesting a call or video call.
• Communication data, such as the content of your enquiry, your message and any follow-up correspondence.
• Technical data, such as IP address, browser type, operating system, device information, access date and time, pages visited, referring URL and server log data.
• Consent preferences, such as your cookie settings and consent choices.
• Project-related information that you voluntarily provide when discussing a possible creative project or requesting our services.

Please do not send us special categories of personal data, such as health information, biometric data, political opinions, religious beliefs or other sensitive personal data, unless this has been specifically agreed in advance and is necessary for a defined project.

5. Purposes and Legal Bases for Processing

We process personal data for the following purposes and on the following legal bases:

• 5.1 Contact form, call requests and email enquiries
  When you submit the contact form or request a phone call or video call, we process the data you provide (name, email address, phone number, preferred contact method and message) in order to:
• Handle your enquiry and respond to you.
• Arrange and conduct the requested phone call or video call.
• Take steps at your request prior to entering into a possible contract or project.
  
  

The legal basis is Article 6(1)(b) GDPR where your request relates to a possible contract or service, and Article 6(1)(f) GDPR where we have a legitimate interest in responding to general business enquiries and maintaining communication.

• 5.2 Occasional service-related updates and news
  Where you have indicated your consent by checking the relevant box in the contact form, we may also use your email address to send you occasional, non-frequent updates about TheDigitalHumans services, such as new offerings, case studies or service-related news.
  
  

The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time by using the unsubscribe link included in such emails or by contacting us at hi@thedigitalhumans.ai. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5.3 Website access and server log files

When you visit our website, our hosting provider may automatically process technical information necessary to display the website, ensure its security and maintain stable operation.

This may include your IP address, browser information, device and operating system data, date and time of access, requested pages, referring URL and server log information.

The processing is based on our legitimate interest in operating a secure, technically reliable and functional website pursuant to Article 6(1)(f) GDPR.

Server log data is retained only for as long as necessary for security, troubleshooting and technical administration, and is then deleted or anonymised where possible.

6. Hosting

This website is hosted by:

BanaHosting
United States of America

Privacy Policy:
https://banahosting.com/privacy-policy

As BanaHosting is located in the United States, the processing of personal data may involve a transfer of personal data outside the European Economic Area (“EEA”).

We take appropriate measures to ensure that international data transfers are carried out in accordance with applicable data protection law. Further information about the safeguards applicable to data transfers may be requested by contacting us at hi@thedigitalhumans.ai.

7. Recipients of Personal Data

We do not sell, rent or otherwise commercialise your personal data.

We may share personal data with service providers that support our operations where necessary. This currently includes our hosting provider, BanaHosting.

We may also disclose data where required by law, necessary to establish, exercise or defend legal claims, or necessary to meet legal, tax or accounting obligations.

8. International Data Transfers

Personal data may be transferred to countries outside the EEA where our service providers process data in those countries, including the United States in connection with hosting services.

Where international transfers occur, we use or seek to implement appropriate safeguards in accordance with Articles 44 et seq. GDPR. Depending on the circumstances, these may include an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

9. Retention Periods

We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

In particular:

• Contact enquiries and call or video call requests are retained until the enquiry has been resolved and any agreed follow-up has been completed, unless further retention is necessary.
• Where you have consented to receive occasional service-related updates, we retain your contact data until you withdraw your consent or unsubscribe.
• Client and project data are retained for the duration of the contractual relationship and applicable statutory retention periods.
• Invoice and accounting data are retained for the period required by German tax and commercial law.
• Server log data is retained only for the limited period necessary for security and technical administration.
• Consent records are retained for as long as necessary to document and manage consent preferences.
  
  

10. Your Rights

Under the GDPR, you have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data, subject to statutory retention requirements.
• Request restriction of processing.
• Object to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Receive personal data that you have provided in a structured, commonly used and machine-readable format, where applicable.
• Lodge a complaint with a data protection supervisory authority.
  
  

To exercise your rights, please contact:

hi@thedigitalhumans.ai

We may ask for information necessary to verify your identity before responding to your request.

11. Right to Object

Where we process personal data on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation.

If personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing.

12. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our place of business is generally:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany

Telephone: +49 (0)431 988 1200
Email: mail@datenschutzzentrum.de
Website: https://www.datenschutzzentrum.de/

13. Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

14. Security

We use appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access. However, no transmission or storage method can be guaranteed to be completely secure.

15. Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to our website, services, technologies, service providers or legal obligations. The latest version will always be available on this website.

Last updated: October 6, 2026