Datenschutz

This site does one thing with personal data. If you type your email address into the field on the front page, we write to you when the site is live, and occasionally after that with news about RHISU. You can leave the list at any time, and we delete the address when you do. This page explains that in the detail the law requires.

Who is responsible

Controller: Timu Tasdoğan
Wiener Straße 46
10999 Berlin, Germany
Contact: hello@rhisu.com

"Controller" is the term the law uses for whoever decides why and how personal data is handled. Full operator details are in the Impressum.

We have no data protection officer, and are not required to have one

German law requires a designated data protection officer once at least 20 people are regularly involved in processing personal data. RHISU is far below that, and none of the other triggers apply, so no officer is appointed. Write to the address above with any question about your data.

The email address you enter, and nothing else

What we collect

Your email address, and the date and time you submitted it. Nothing else. There is no name field, no company field, and no tracking of how you arrived.

Why

To tell you when this website goes live, and after that to send occasional news about what RHISU is doing. That is the whole purpose. We do not send offers on behalf of anyone else, we do not pass the address to any advertiser, and there is no schedule you are being signed up to: some months there is nothing worth sending, and we send nothing.

Every email we send carries a working unsubscribe link. One click, no reason needed, and the address is deleted rather than merely marked inactive.

On what legal basis

Your consent, under Article 6(1)(a) of the GDPR, given by the deliberate act of typing your address and submitting the form beneath a sentence saying what happens to it. You are free not to give it, and nothing on this site is withheld if you do not. There is nothing behind the form except the announcement itself.

How long we keep it

Until you leave the list, at which point it is deleted within 7 days. We do not keep a suppression list of people who unsubscribed, because keeping your address in order to remember that you did not want it would be its own reason to hold your data.

If the list has been dormant for two years, meaning we have sent nothing in that time, we delete it rather than sit on addresses whose owners have forgotten giving them.

Who else sees it

Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify hosts this site and receives the form submission on our behalf as a processor, meaning it handles the data only on our instructions and for no purpose of its own. That relationship is governed by a data processing agreement, the written contract Article 28 of the GDPR requires between a company and any outside service handling personal data for it, which forms part of Netlify's standard terms. No one else sees the address. We do not sell, rent, share or trade it, and it is not used to build any profile of you.

The address is stored in the United States, and this is why that is lawful

Netlify stores form submissions on servers in the United States, and offers no European storage option for this feature. Personal data may only leave the EU on a recognised legal footing. The one relied on here is the EU-US Data Privacy Framework, an arrangement the European Commission formally decided in July 2023 offers protection equivalent to European law, and in which Netlify is a self-certified participant. Netlify's data processing agreement additionally names the European Commission's Standard Contractual Clauses as a fallback if that framework is ever set aside.

We would rather this data sat in Europe, and we say so plainly rather than presenting a US transfer as ideal. It is lawful today and it is disclosed here so you can decide for yourself whether to enter an address at all.

What we cannot promise you

There is no confirmation-click step on this form. Most email lists send you an email with a link you have to click before you are actually added, which proves the address belongs to the person who typed it. This one does not do that yet. It means we cannot prove that whoever typed your address was you. If somebody entered yours without your knowledge, write to hello@rhisu.com and it is removed the same day, and the first email you receive from us will carry an unsubscribe link that does the same in one click.

This site sets no cookies

Nothing is stored on your device and nothing already on it is read. There is no analytics, no advertising pixel, and no tracking of any kind. That is also why you are not being asked to accept anything: German law requires that request only when a site actually stores or reads something on your device, and this one does not.

The typefaces are served from this site's own server rather than from a font network, so loading this page does not send your IP address to any third party.

What the server records

This site is hosted by Netlify, Inc. Like any web server, theirs records the technical details of every request, which include your IP address, the time, the page requested, and your browser and device type. We do not read these records, we do not connect them to anything else, and nothing on this site turns them into a profile. They exist so that the servers can be operated and defended against attack, which is the legitimate interest we rely on under Article 6(1)(f) of the GDPR.

Netlify does not publish a fixed retention period for these records. Its privacy statement says the period is set case by case against the nature of the data and its legal obligations, so we cannot honestly quote you a number of days here, and we would rather say that than invent one.

Your rights

You can ask us at any time to do any of the following, and we answer within one month:

Tell you what data of yours we hold, and give you a copy (Articles 15 and 20).
Correct it if it is wrong (Article 16).
Delete it (Article 17).
Stop using it while a question about it is resolved (Article 18).
Object to us using it (Article 21).

You can withdraw your consent at any time, by clicking the unsubscribe link in any email we send or by writing to hello@rhisu.com. Withdrawing does not make anything we did before it unlawful. One message is enough, and you do not have to give a reason.

If you think we have handled your data badly

You can complain to a supervisory authority, and you do not need our permission or agreement to do it. The competent one for us is:

Authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit
Address: Alt-Moabit 59 to 61, 10555 Berlin, Germany
Website: datenschutz-berlin.de

You may also complain to the authority where you live or where you believe the problem happened. It does not have to be ours.

No automated decisions

Nothing here is decided about you automatically, and no profiling happens.

If this changes

When the full site launches it will do more than this page does, and this notice will be rewritten before that happens rather than after. The date below always says which version you are reading.

Last updated 2 September 2026.

Back