1. Controller
- Name
- Huba Lee
- Trade name
- hubA
- Address
- Anschrift vor Produktivbetrieb ergänzen — Straße Nr., PLZ Ort, Deutschland
- privacy@huba.info
- Phone
- Telefonnummer vor Produktivbetrieb ergänzen
The controller is the natural person Huba Lee, operating under the trade name hubA.
2. Data protection officer
We have not appointed a data protection officer as this is not legally required in our case.
Privacy inquiries: use the contact details in section 1 or email privacy@huba.info
3. What this platform operates and processes
huba.info is the public marketplace gallery for gastronomy templates. studio.huba.info is the operator Studio (accounts, projects, content).
We only process personal data where needed for each purpose.
- Marketplace: page delivery, server logs, language path (URL), optional storage-notice acknowledgment (localStorage)
- Marketplace → Studio: template/locale parameters in the URL when you choose a template or open Studio
- Contact: email or phone when you reach out to us
- Studio (separate notice): accounts, projects, menus, media, domains — see https://studio.huba.info/policy
- The marketplace does not collect payment data and does not store venue menus or uploaded media
4. Website delivery and log files
When you visit huba.info, your browser automatically sends information stored in server logs (e.g. IP address, date/time, requested URL, referrer, user agent).
The marketplace gallery itself runs on standard hosting infrastructure; we do not list the platform’s own product-hosting vendor names here.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable delivery).
Retention: typically up to 30 days unless longer retention is required for evidence.
5. Language, cookies, and local storage
Marketplace language follows the URL path (English unprefixed, German under /de). No cookie is required for that.
Essential storage: if you acknowledge the storage notice, we only store that acknowledgment in your browser (localStorage) so the notice does not reappear. We currently do not use marketing, tracking, or analytics cookies on huba.info.
Legal basis: Art. 6(1)(f) GDPR and § 25(2) TDDDG for strictly necessary storage.
6. Transition to hubA Studio
When you choose a template or open the Studio, you leave huba.info and go to studio.huba.info. Template and language parameters may be passed in the URL so onboarding can start smoothly.
The Studio publishes its own privacy notice for accounts, project data, and your venue content: https://studio.huba.info/policy
Legal basis: Art. 6(1)(b) GDPR (pre-contract steps) and/or (f) GDPR (user-friendly platform operation).
7. Contact
If you contact us by email or phone, we process your details to handle the request.
Legal basis: Art. 6(1)(b) GDPR (pre-contract/contract communication) or (f) GDPR (general inquiries).
Retention: until the request is completed, then per statutory retention periods.
8. Hosting and processors
For storage and delivery of customer websites published from templates, we use infrastructure providers. Where required, we conclude data processing agreements under Art. 28 GDPR.
For customer websites published from templates: Cloudflare, Inc. (CDN) und Cloudflare R2 — Auslieferung und Speicherung veröffentlichter Websites aus Vorlagen; Studio-App-Hosting über Vercel, Inc.; relationale Datenbank (PostgreSQL) beim jeweiligen Datenbank-Anbieter.
Further subprocessors and locations are documented internally and available on request.
9. Transfers outside the EEA
If providers outside the EU/EEA are used (e.g. US providers with EU regions or adequacy/SCCs), transfers occur only with appropriate safeguards under Art. 44 ff. GDPR.
10. SSL/TLS encryption
This site uses SSL/TLS encryption. You can recognize a secure connection by “https://” in your browser address bar.
11. No automated decision-making
We do not use automated decision-making including profiling within the meaning of Art. 22 GDPR.
12. Your rights
You have the following rights regarding your personal data:
Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation.
You may lodge a complaint with a supervisory authority (Art. 77 GDPR). Competent supervisory authority: the state authority for the controller’s place of residence/business (to be named once the address is finalized).
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdraw consent (Art. 7(3) GDPR)
13. Updates to this privacy policy
We update this privacy policy when law, platform features, or service providers change. The version published on this page applies.
Further provider details: https://huba.info/imprint