# Privacy Policy > Source: https://ahumanguidetoai.com/privacy-policy/ > Last updated: 2026-10-10 > Publisher: Martin Brugg Legal # Privacy Policy *Last updated: October 14, 2026* Protecting your data matters to us. This website is deliberately built to collect as little as possible: no cookies, no tracking, no ads, and no third-party services that receive data when you simply visit. This page explains exactly which data is processed and when. ## 1. Controller Martin Brugg Lavaterstraße 8/1/3 1220 Vienna Austria Email: hello ahumanguidetoai com No data protection officer has been appointed, as none is required by law. If you have any questions about privacy, simply write to the address above. ## 2. Hosting and server logs This website is hosted by Kinsta Inc. The servers are located in Germany (Frankfurt data centre); that is where the website and its data are stored. For protection against attacks and fast loading, requests pass through the network of Cloudflare, Inc. (USA), which briefly processes the IP address for this purpose. Every time a page is requested, the server processes technical data needed to deliver the page and protect it from attacks: IP address, date and time, the page requested, browser and operating system, and the referring page. These server logs are processed by the host as our processor under a data processing agreement and deleted automatically after a short period. Legal basis: our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Where the host, the network or their sub-processors process data outside the EU (for example because the provider is based in the USA), this is based on an adequacy decision (such as the EU–US Data Privacy Framework) or the EU standard contractual clauses. ## 3. Cookies and storage on your device This website sets no cookies for visitors and uses no tracking or advertising services. Only if you choose a language with the EN / DE switch is that choice saved in your browser (localStorage) so the site opens in your language next time. Likewise, after a click on “Yes, please publish it in German” your browser remembers that you have voted. Neither ever leaves your device, and you can delete both in your browser settings. The vote itself is only counted on the server, without personal data; to avoid counting anyone twice on the same day, the same daily-changing value as in the visitor statistics is used. Fonts are loaded from this server, not from Google or other third parties. ## 4. Visitor statistics We count page views and a few actions (for example a finished readiness check) on our own server, without cookies. IP addresses are not stored; to count visitors, a value is formed from technical data with a key that changes every day, so nobody can be recognised across days. Raw data is deleted after 365 days. Legal basis: our legitimate interest in improving the website (Art. 6(1)(f) GDPR). ## 5. Readiness check and survey Your answers are stored anonymously — without name, email or IP address. Answers given through a team link appear only in the team’s combined results and are deleted together with the team survey. ## 6. Emails from “A Human Guide to AI” If you request the downloads or your tool result by email, or sign up for occasional notes, we store your email address, the time and wording of your consent, the result you asked for (if any) and whether you want occasional notes on AI adoption. We use double opt-in: nothing is sent before you confirm your address, and unconfirmed addresses are deleted after 30 days. If you agreed to occasional notes, these may include a one-time request to review the book. Legal basis is your consent (Art. 6(1)(a) GDPR). The data is stored on the server of this website; emails are sent through our own mailbox provider, without a newsletter service. Our emails contain no tracking pixels and no click tracking — we do not see whether or when you open an email or click a link. You can withdraw your consent at any time with the unsubscribe link in every news email or with the form at the end of this page, and ask us to delete all your data. ## 7. Team surveys The email address of an organizer is used to send the two links. It is not stored in readable form — only a keyed fingerprint (hash), so the same address can request its links again and, if needed, create a new dashboard link; the address entered for that is only compared with the fingerprint and not stored. If the organizer asks for a reminder before deletion, the address is additionally stored encrypted — only for this reminder and for important notices about this survey (for example technical changes to the dashboard or maintenance), never for advertising. Legal basis: providing the service requested (Art. 6(1)(b) GDPR). Both are deleted together with the team survey at the end of the period the organizer chose. Only if the organizer separately ticks “occasional notes” and confirms it by email is the address added to our mailing list (see above). Participants answer anonymously. Notices, news and labelled ads on the dashboard come directly from us; images are loaded from this server, there are no ad networks and no tracking — views and clicks are only counted as totals. ## 8. Contact form Messages from the contact form (name, email, organisation, topic, message, consent) are stored on this website’s server and sent to us by email, only to answer your request (Art. 6(1)(a) and (b) GDPR). They are deleted after 365 days at the latest, or earlier on request. ## 9. German edition notification On the German pages, after voting for a German edition, you can leave your email address to be told once when it is published. For this we store your email address, language and the time and wording of your consent (Art. 6(1)(a) GDPR) and first send a confirmation email (double opt-in); unconfirmed addresses are deleted after 30 days. The address is used for that one email only, not for news. After it has been sent, the address is deleted — unless you have also signed up for news or the downloads; then the section on emails applies. You can withdraw your consent at any time through the unsubscribe link or the form on this page. ## 10. Spam protection So that the forms (contact, downloads, result by email, team survey, German edition notification) cannot be misused for spam, your browser quietly solves a small computing task set by this website when you send them. No cookies are set, no third-party services are involved and no data about you is stored; each task is used only once and expires after two hours. Contact messages with an unusual number of links are marked as possible spam. To limit mass requests, a non-reversible check value of your IP address is also kept for one hour at most. Legal basis: our legitimate interest in the security of this website (Art. 6(1)(f) GDPR). ## 11. Backups So that no data is lost through a technical fault or an error, the data described above is backed up regularly: every hour (only when something changed) and every day, encrypted (AES-256), in this website’s database, and by our hosting provider. This website’s backups are deleted automatically after 14 days at the latest; the hosting provider’s backups follow its own retention periods. Backups are only used to restore an earlier state. If you asked us to delete your data or unsubscribed, this is applied again on every restore, so your data does not come back; from the backups themselves it disappears when they expire at the latest. Legal basis: our legitimate interest in the security and availability of the data (Art. 6(1)(f) in conjunction with Art. 32 GDPR). ## 12. Links to Amazon Links to the book lead to Amazon. So that you arrive at the Amazon store of your country (e.g. amazon.co.uk in the UK), the click only uses the country our network provider Cloudflare derives from the IP address, or otherwise your browser’s language setting. We store neither the country nor the IP address; for the statistics we only count which Amazon store a click led to. The legal basis is our legitimate interest in a working link (Art. 6(1)(f) GDPR). Amazon only receives data once you click such a link; from then on Amazon’s privacy policy applies. ## 13. Email delivery and security Emails from this website are sent via ALL-INKL.COM - Neue Medien Münnich. The connection to this website is always encrypted with TLS. Organizers’ email addresses are stored only as a fingerprint or in encrypted form, as described above. ## 14. Your rights You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). Just write to hello ahumanguidetoai com. If you believe that the processing of your data violates data protection law, you can lodge a complaint with a supervisory authority. In Austria this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, [www.dsb.gv.at](https://www.dsb.gv.at). ## 15. No automated decisions The results of the readiness check and the survey are for your own orientation only. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. ## 16. Changes We update this privacy policy when the website or the legal situation changes. The version published here applies. ## 17. Unsubscribe and delete your data Enter your email address to unsubscribe at once. If you like, you also receive a link to delete all your data. Unsubscribe Enter your email address and you will receive no further emails from A Human Guide to AI. Also delete all data stored for this address (you get an email with a confirmation link). Unsubscribe