Privacy policy

We have not appointed a data protection officer as this is not legally required in our case.

Privacy inquiries: use the contact details in section 1 or email privacy@huba.info

This site is an information and template gallery for hospitality businesses. We only process personal data where needed to operate the site, remember language, hand off to the Studio, or respond to your contact request.

• Technically necessary storage (server logs, security)
• Language preference and session for Studio handoff
• Contact by email or phone when you reach out to us
• Processing in hubA Studio after sign-up (separate notice at studio.huba.info)

When you visit huba.info, your browser automatically sends information stored in server logs (e.g. IP address, date/time, requested URL, referrer, user agent).

Hosting provider: Cloudflare, Inc..

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable delivery).

Retention: typically up to 30 days unless longer retention is required for evidence.

Your chosen language (de / en) may be stored via an essential cookie or comparable storage. We do not use marketing or analytics cookies on the marketplace homepage without consent.

Legal basis: Art. 6(1)(f) GDPR and § 25(2) TTDSG for strictly necessary storage.

When you choose a template or open the Studio, you leave huba.info and go to studio.huba.info. Template and language parameters may be passed so onboarding can start smoothly.

The Studio publishes its own privacy notice for accounts, project data, and your venue content.

Legal basis: Art. 6(1)(b) GDPR (pre-contract steps) and/or (f) GDPR (user-friendly platform operation).

If you contact us by email or phone, we process your details to handle the request.

Legal basis: Art. 6(1)(b) GDPR (pre-contract/contract communication) or (f) GDPR (general inquiries).

Retention: until the request is completed, then per statutory retention periods.

We use infrastructure providers for hosting and delivery. We conclude data processing agreements under Art. 28 GDPR with them.

Specific subprocessors and locations are documented internally and will be provided before production go-live or on request.

If providers outside the EU/EEA are used, transfers occur only with appropriate safeguards (e.g. EU Standard Contractual Clauses) under Art. 44 ff. GDPR.

This site uses SSL/TLS encryption. You can recognize a secure connection by “https://” in your browser address bar.

We do not use automated decision-making including profiling within the meaning of Art. 22 GDPR.

You have the following rights regarding your personal data:

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation.

You may lodge a complaint with a supervisory authority (Art. 77 GDPR). Berliner Beauftragte für Datenschutz und Informationsfreiheit

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdraw consent (Art. 7(3) GDPR)

We update this privacy policy when law, platform features, or service providers change. The version published on this page applies.

Further provider details: https://huba.info/imprint