Last updated: June 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
haleo
c/o Startup and Innovation Center HTW Berlin
Hönower Str. 35
10318 Berlin
Email: info@haleo.ai
Protecting your personal data matters to us. We process personal data only within the limits of the law (in particular the GDPR and the BDSG). In this policy we inform you about the nature, scope and purpose of the processing of personal data on this website (haleo.ai).
The legal bases for processing are in particular: your consent (Art. 6(1)(a) GDPR), the performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR).
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, technically necessary data (e.g. your IP address) is processed in order to deliver the page. The legal basis is our legitimate interest in secure and efficient operation (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with Vercel. Any transfer to the USA is safeguarded on the basis of appropriate guarantees (e.g. EU standard contractual clauses).
When you visit the website, information transmitted by your browser is automatically recorded in what are known as server log files. This includes in particular:
This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technically error-free and secure operation).
We use cookies and comparable technologies. Technically necessary cookies are required for the operation of the site. Optional cookies (in particular for statistics/analytics) are only set after you have given your consent via our cookie banner.
We use Google Consent Mode v2: by default, analytics and marketing functions are disabled (“denied”). They are only activated once you actively agree. Your choice is stored locally in your browser. You can withdraw your consent at any time with effect for the future by deleting the stored choice in your browser and reloading the page. The legal basis for optional cookies is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDG).
We use Google Tag Manager (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The Tag Manager itself does not process personal data for analytics purposes; it serves to manage other tags. Tags that process personal data (see Google Analytics) are only triggered after you have given consent.
If you have given your consent, we use Google Analytics (provider: Google Ireland Limited) to analyse how the website is used. Usage data (e.g. truncated IP address, pages visited, approximate location, device/browser information) is processed in order to evaluate the reach and use of our website. This may involve a transfer of data to Google LLC in the USA, safeguarded by appropriate guarantees (e.g. EU standard contractual clauses, EU-US Data Privacy Framework). The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDG). You can withdraw your consent at any time with effect for the future.
If you sign up for early access / the beta via our form, we process your email address in order to contact you and keep you informed about haleo. We use HubSpot (provider: HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA) to process and manage these requests.
The legal basis is your consent (Art. 6(1)(a) GDPR) or the performance of pre-contractual measures (Art. 6(1)(b) GDPR). Any transfer to the USA is safeguarded by appropriate guarantees (e.g. EU standard contractual clauses); a data processing agreement is in place with HubSpot. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link or an informal message to info@haleo.ai. Your data will be deleted as soon as it is no longer required for the purpose and no statutory retention obligations prevent deletion.
You have the following rights regarding your personal data:
You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR).
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser’s address bar.
This privacy policy is currently valid. As our website develops or legal or regulatory requirements change, it may become necessary to amend this policy.