Privacy Policy

Effective date: 17 April 2026
Updated on: 17 April 2026

This Privacy Policy explains the policies of https://hsinitiative.org on the collection, use, disclosure and protection of personal data we collect when you access the Service. This Privacy Policy defines and describes your privacy rights and how you are protected under applicable privacy laws.

By using our Service, you are consenting to the collection and use of your personal data in accordance with this Privacy Policy. Please do not access or use our Service if you do not consent to the collection and use of your information as outlined in this Privacy Policy.

What Information Do We Collect, For What Purposes, and On What Legal Basis

The definitions of legal basis used below are understood as follows:

  • Legitimate interest: Interest of the Company or of a third party, provided that your interests or fundamental rights and freedoms are not overriding.
  • Contract performance: Processing your personal data where it is necessary for the performance of a contract to which you are a party.
  • Legal Obligations: Processing your personal data where it is necessary for compliance with a legal or regulatory obligation.
  • Consent: Any freely given, specific, informed, and unambiguous indication of your wishes signifying agreement to the processing of your personal data.

Usage Data

What We Collect: Information on how users interact with our website, including pages visited, time spent on pages, click paths, and browser details.
Purpose: To analyze user behavior, optimize performance, and enhance the user experience.
Retention Period: 426 days
Legal Basis: Consent

Personal Identification Information

What We Collect: Full Name, Email Address
Purpose: To manage user accounts, support secure access, and provide personalized content.
Retention Period: For as long as the account remains active
Legal Basis: Contractual Necessity

Online Identifiers & Device Information

What We Collect: IP Address, Browser Type and Version
Purpose: To secure our platform, optimize performance, and understand technical usage.
Retention Period: 426 days
Legal Basis: Consent

How Do We Obtain Your Personal Data

We collect information you provide directly to us when you:

  • Fill in any forms
  • Use our Services

Requirements to Provide Personal Data

In certain cases, the provision of personal data is a contractual requirement necessary to enter into a contract.

Contractual requirement: Full name and email address are required to register a membership account and provide login credentials.
If you do not provide the requested data: You will not be able to register or access the membership site.

How Do We Share Your Information

Destination Services Europe GmbH may disclose your personal data in the following cases:

  • With your consent. We will share your information for any purpose with your explicit consent.

We transfer personal data to the following third countries: United States. Such transfers are governed by the Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring that appropriate safeguards are in place to protect your data.

Data Subject Rights

You have the following rights regarding your personal data:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
  • Right to Erasure (Right to be Forgotten): Under certain conditions, you may request the deletion of your personal data.
  • Right to Restrict Processing: You can request the limitation of processing of your personal data under specific circumstances.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: In some cases, you may object to the processing of your personal data.
  • Right to be Informed: You have the right to clear, transparent and easily understandable information about how we process your personal data.

Withdrawal of Consent

You have the right to withdraw your consent to the processing of your personal data at any time. You can adjust or withdraw your consent directly via the consent banner on the site, or by contacting us using the details below. Withdrawing your consent does not affect the lawfulness of any processing carried out before your withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request, after verifying your identity.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a competent supervisory authority if you believe your personal data is being processed in violation of your rights. You may contact the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) of the Federal Republic of Germany: https://www.bfdi.bund.de/anschriften

Security

Although no system of technology is completely secure, we implement appropriate security measures to minimize the risks of unauthorized access to or improper use of your personal information. These include:

  • Contractual obligations on third-party processors to respect the confidentiality of personal data.
  • Reasonable physical, technical, and administrative security measures, including limiting access to employees with a need to know.

Changes to This Policy

We regularly review this Privacy Policy and reserve the right to modify it at any time in accordance with applicable laws and regulations. Any changes will take effect immediately upon publication on our website. Please review this Privacy Policy periodically to stay informed of any updates.

Contact Us

For any questions regarding this Privacy Policy, please contact us: