The short version
A minimal-data website by design.
Helix Anthropis Institute does not use analytics cookies, advertising pixels, fingerprinting, embedded social feeds or automated profiling on this website. Fonts and website scripts are served from the same website rather than fetched from third parties when a page opens.
There is no “accept all” button because there is nothing optional to accept. The public site uses only storage needed for features you request. You can inspect or clear it through .
Controller
Who is responsible for your data.
The controller for the processing described in this notice is:
Helix Anthropis Institute
40 Bd Pierre Dupong
1430 Hollerich, Luxembourg
helixanthropisinstitute@gmail.com
Use the subject line “Data protection request” if you want to exercise a right or ask a privacy question.
Processing
What we process and why.
| Activity and data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Page requests: IP address, request time, browser/device and security log data received by the host | Deliver the site, maintain availability, prevent abuse and investigate security incidents | Legitimate interests in operating a secure, reliable website (GDPR Art. 6(1)(f)) | Under the host’s documented retention and security practices; Helix does not receive a visitor-level analytics dashboard |
| General enquiries you choose to email: name, address, message and related correspondence | Read, route and answer your request | Legitimate interests in correspondence, or steps at your request before an agreement (Art. 6(1)(f) or 6(1)(b)) | Until resolved, then deleted from the working mailbox within 24 months unless needed for an ongoing relationship, legal obligation or claim |
| Volunteer application details you choose to email | Assess the application, communicate with you and arrange participation | Steps at your request before a volunteer relationship and legitimate interests in programme administration (Art. 6(1)(b) and 6(1)(f)) | Unsuccessful applications: up to 12 months after the decision. Accepted applications: for the relationship and any applicable legal retention period |
| Email address and subscription request you choose to send | Send the requested newsletter and administer subscriptions | Your consent (Art. 6(1)(a)) | Until you unsubscribe or withdraw consent; a minimal suppression record may be kept where necessary to honour that choice |
We do not use the website for automated decision-making or profiling. Please do not include health, political, religious or other sensitive information in a free-text message unless it is necessary and Helix has asked you to provide it securely.
Cookies & storage
What this browser remembers.
The public site sets no analytics or advertising cookies. It uses localStorage, a browser feature that keeps small values on your device. These values are not transmitted to Helix and cannot follow you across other websites.
| Name | Purpose | When created | Duration |
|---|---|---|---|
helix-privacy | Records that this version of the privacy notice was acknowledged | When you select “Understood” | Notice shown again after 12 months or a material change |
helix-theme | Remembers light or dark display mode | When you change the theme | Until cleared |
helix-cart | Keeps items and membership tier selected for the prototype shop | When you use the cart | Until checkout or clearing the cart/preferences |
This storage is used only when necessary to provide a feature you request or remember the privacy choice itself. You can remove it using or your browser controls. Blocking it may prevent the theme or cart from being remembered, but the rest of the site remains available.
Email and forms
Forms do not send data from the page.
Contact, volunteer and newsletter forms on this version of the website prepare a draft in your own email application. Nothing is uploaded when you type into the form. Data reaches Helix only if you choose to send that email.
Once sent, the message is processed in Helix’s email account to deal with the purpose shown above. You may withdraw newsletter consent at any time by replying or emailing us. Withdrawal does not affect processing that was lawful before withdrawal.
Shop prototype
No live order or payment processing yet.
The current checkout is a design prototype. Information typed there stays in the page for the current browser session and is not transmitted to Helix, a payment service or a delivery company. The page does not request card details and no payment or binding order is created.
Before live commerce is enabled, this notice must be updated with the actual payment, fulfilment, tax and accounting providers, lawful bases, retention periods and any international transfers. A live checkout must not be launched under this prototype notice.
Recipients and transfers
Who may handle data.
Website hosting
The public site is hosted with GitHub Pages, a service of GitHub, Inc. (part of Microsoft). GitHub receives the technical request data needed to deliver and protect the service. Read the GitHub Privacy Statement and subprocessor list.
Messages sent to the published Helix address are handled through Google’s email infrastructure. Google may act as a service provider for account operation, security and storage. Read Google’s Privacy Policy.
External websites
Social networks and other external sites are not embedded. They receive data from your browser only after you choose to follow a link, and their own privacy terms then apply.
Outside the EEA
GitHub/Microsoft and Google may process data outside the European Economic Area. Where this happens, the provider and Helix must rely on a lawful transfer mechanism such as an adequacy decision or approved contractual safeguards. Provider notices describe their current locations and mechanisms. You can ask Helix for information relevant to your data.
Helix does not sell personal data. Data may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.
Your GDPR rights
You remain in control.
Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time.
Send a request to helixanthropisinstitute@gmail.com. Helix may ask for information needed to verify identity and will normally respond within one month. Exercising a right is generally free of charge.
If you are not satisfied, you may complain to Luxembourg’s supervisory authority, the National Commission for Data Protection (CNPD). You may also contact the authority where you live or work.
Security, changes and contact
Questions are welcome.
Helix uses data minimisation, limited access and appropriate technical and organisational measures proportionate to the information handled. No online system can be guaranteed completely secure.
This notice will be reviewed when the website, providers or activities change. Material changes will reset the privacy acknowledgement so the notice appears again.
Privacy contact
helixanthropisinstitute@gmail.com
Helix Anthropis Institute, 40 Bd Pierre Dupong, 1430 Hollerich, Luxembourg