Privacy & GDPR

Last updated: 29 September 2026.

Your data, handled properly

It stays in Europe. Your documents and answers are stored on servers of Infomaniak in Switzerland, and the AI that drafts your answers is Mistral AI, a European provider. Switzerland is recognised by the European Commission as offering an adequate level of data protection.
It’s yours, and it’s private to you. We keep each client’s information separate. We don’t share your data with other clients, and we don’t sell it.
You can get it back or have it deleted. Ask us and we’ll export or delete your data.
Questions or requests: privacy@humboldt.eco

Who we are

Humboldt (“we”, “us”) operates this website and provides sustainability services. For privacy questions or to exercise your rights, contact us at privacy@humboldt.eco.

What we collect

Call requests and contact details. When you request a call through our form, we process your name, organisation, email, preferred time and any message you add, in order to respond and prepare for the call.
Client service data. For clients, we process the company data, documents and prior answers needed to complete your certifications, questionnaires and surveys. This is kept separate per client and used only for your own work.
Privacy-friendly analytics. We use cookieless, aggregate analytics that do not track you across sites and do not build advertising profiles. We do not use advertising trackers or third-party marketing cookies.

We process call requests and contact data on the basis of your consent and our legitimate interest in responding to enquiries. Client service data is processed to perform our contract with you. Analytics rely on our legitimate interest in operating and improving the site, using privacy-preserving, aggregate measurement only.

Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data, request a copy (export), and object to processing. Email privacy@humboldt.eco to exercise any of these rights. You also have the right to lodge a complaint with your local data protection authority.

Data retention

We keep enquiries only as long as needed to respond and maintain a record of our correspondence, then delete them. Client service data is retained for the duration of the engagement and deleted on request.

Hosting & sub-processors

We use a small number of sub-processors under data processing agreements:

Infomaniak (Switzerland): storage of client service data and our email. Call requests from the website form are delivered to our inbox through Infomaniak.
Mistral AI (France): the AI model that drafts answers from client service data.
Vercel (United States): hosting of this public website, the website form and the cookieless analytics. The form is processed in Vercel’s Frankfurt region (EU) before it is emailed to us. Vercel is certified under the EU-US Data Privacy Framework.

A complete, current list of sub-processors is available on request.