Privacy Policy

Codification

HCM.PRIVACY.2026.v1

Controller

Ahekian Holding B.V.

Effective

6 April 2026

I.Data Controller & Contact

The data controller is Ahekian Holding B.V., Gorontalostraat 35 C, 1095 TM Amsterdam, Netherlands. For all data protection enquiries, contact: info@humancraftmark.net.

II.Data We Collect

2.1 — Identification Data

Full legal name, professional name, and government-issued identification for identity verification purposes.

2.2 — Contact Data

Email address used for application processing and certificate delivery.

2.3 — Technical Evidence

Creative work files and process documentation submitted for human-authorship assessment.

2.4 — Transactional Data

Payment confirmation via Stripe. We do not store full credit card numbers on our servers.

III.Processing Architecture

To execute the certification, data is processed through the following sub-processors:

3.1 — Airtable & Make.com

Used for internal application management and workflow automation.

3.2 — Supabase

Hosts the public verification registry. Only Professional Name, Work Title, and Certificate ID are made public.

3.3 — Google Cloud / Gmail

Used for the transmission of digital credentials.

IV.Legal Basis

We process data under GDPR Article 6(1)(b) — Performance of a Contract (to issue the certificate you requested) and Article 6(1)(c) — Legal Obligation (for tax and record-keeping purposes).

V.Retention

Identity data and evidence files are retained for 7 years following the expiry or revocation of a certificate to maintain the integrity of the registry and satisfy Dutch fiscal obligations.

VI.User Rights

Under the GDPR, you have the right to access, rectify, or erase your data, and the right to restrict or object to processing. Requests should be sent to privacy@humancraftmark.net. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

AHEKIAN HOLDING B.V.