Datenschutz

This website processes personal data for a single purpose. If you enter your email address in the field on the home page, RHISU will notify you when the site goes live and may thereafter send occasional updates about RHISU. You may unsubscribe at any time, and your address is deleted when you do. This notice sets out that processing in the detail the law requires.

Who is responsible

Controller: RHISU
Flughafenstraße 21
12053 Berlin, Germany
Contact: hello@rhisu.com

"Controller" is the term used in data protection law for the party that determines the purposes and means of processing personal data. Full operator details are set out in the Impressum.

No data protection officer is appointed, and none is required

German law requires the designation of a data protection officer only where at least 20 persons are regularly engaged in the processing of personal data. RHISU falls well below that threshold, and no other statutory trigger applies, so no officer has been appointed. Any question concerning your data may be directed to the contact stated above.

The email address you enter, and nothing else

What is collected

Your email address, together with the date and time of submission. Nothing further. There is no name field, no company field, and no record of how you reached the site.

Purpose

To notify you when this website goes live and, thereafter, to send occasional updates about RHISU. That is the sole purpose. Your address is not used to send offers on behalf of others, is not disclosed to any advertiser, and is not tied to any fixed sending schedule; in periods with nothing of note, nothing is sent.

Every message carries a working unsubscribe link. A single click, with no reason required, deletes the address rather than merely marking it inactive.

Legal basis

Your consent, under Article 6(1)(a) of the GDPR (the General Data Protection Regulation), given by the deliberate act of entering your address and submitting the form beneath a statement of what happens to it. Consent is not a condition of access to this site, and nothing is withheld if you decline. There is nothing behind the form other than the announcement itself.

How long it is kept

Until you leave the list, at which point the address is deleted within 7 days. No suppression list of former subscribers is maintained, because retaining an address in order to record that its owner had opted out would itself be a reason to hold the data.

If the list has been dormant for two years, meaning no message has been sent in that period, it is deleted rather than retained.

Who else has access

Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify hosts this site and receives form submissions on RHISU's behalf as a processor, meaning that it handles the data solely on RHISU's instructions and for no purpose of its own. That relationship is governed by a data processing agreement, the contract required by Article 28 of the GDPR between a controller and any external service that processes personal data on its behalf, which forms part of Netlify's standard terms. No other party has access to the address. It is not sold, rented, shared, or traded, and it is not used to build any profile of you.

The address is stored in the United States, and this is the basis on which that is lawful

Netlify stores form submissions on servers in the United States and offers no European storage option for this feature. Personal data may be transferred outside the EU only on a recognised legal basis. The basis relied upon here is the EU-US Data Privacy Framework, which the European Commission determined in July 2023 to offer protection equivalent to European law and in which Netlify is a self-certified participant. Netlify's data processing agreement additionally designates the European Commission's Standard Contractual Clauses as a fallback should that framework be set aside.

RHISU would prefer that this data be held within Europe, and states so rather than presenting a transfer to the United States as ideal. The transfer is lawful at present, and is disclosed here so that you can decide for yourself whether to enter an address at all.

What cannot be guaranteed

This form has no confirmation-click step. Most mailing lists send an email containing a link that must be clicked before an address is added, which confirms that the address belongs to the person who entered it. This form does not yet do so, which means RHISU cannot confirm that the person who entered an address is its owner. If your address was entered without your knowledge, write to hello@rhisu.com and it will be removed the same day; in addition, the first message you receive from RHISU will carry an unsubscribe link that achieves the same in a single click.

This site sets no cookies

Nothing is stored on your device and nothing already stored on it is read. There is no analytics, no advertising pixel, and no tracking of any kind. For that reason you are not asked to accept anything: German law requires such a request only where a site stores or reads information on a user's device, which this site does not.

The typefaces are served from this site's own server rather than from a font network, so loading this page does not transmit your IP address to any third party.

What the server records

This site is hosted by Netlify, Inc. As with any web server, Netlify's servers record the technical details of each request, including your IP address, the time, the page requested, and your browser and device type. RHISU does not read these records, does not connect them to any other data, and does not use them to build any profile. They exist so that the servers can be operated and defended against attack, which is the legitimate interest relied upon under Article 6(1)(f) of the GDPR.

Netlify does not publish a fixed retention period for these records. Its privacy statement states that the period is set case by case according to the nature of the data and its legal obligations, so RHISU cannot quote a specific number of days and states this rather than provide an invented figure.

Your rights

You may require RHISU to do any of the following at any time, and RHISU will respond within one month:

provide the data held about you, together with a copy (Articles 15 and 20);
correct it if it is inaccurate (Article 16);
erase it (Article 17);
restrict its use while a question about it is resolved (Article 18);
object to its use (Article 21).

You may withdraw your consent at any time, by using the unsubscribe link in any message from RHISU or by writing to hello@rhisu.com. Withdrawal does not affect the lawfulness of processing carried out before it. A single message suffices, and no reason need be given.

If you consider that your data has been handled improperly

You may lodge a complaint with a supervisory authority, and you do not require RHISU's permission or agreement to do so. The authority competent for RHISU is:

Authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit
Address: Alt-Moabit 59 to 61, 10555 Berlin, Germany
Website: datenschutz-berlin.de

You may also complain to the supervisory authority where you live or where you believe the problem arose. It need not be the authority competent for RHISU.

No automated decisions

No decision concerning you is taken automatically, and no profiling is carried out.

If this changes

When the full site launches it will do more than this page does, and this notice will be revised before that happens rather than after. The date below indicates the version you are reading.

Last updated 2 September 2026.

Back