Privacy Policy

1. Introduction

In the following, we provide information about the collection of personal data when using:

• our website https://weareholo.com/
• our profiles in social media.

Personal data is any data that can be related to a specific natural person, such as their name or IP address.

1.1. Contact details

The controller within the meaning of Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is holo Technologies GmbH, Rosenthaler Straße 36, 10178 Berlin, Germany, email: hi@weareholo.com. We are legally represented by Oskar Ziegler and Franz Purucker.

Our data protection officer is Waqar Hussain, E-Mail: privacy@weareholo.com.

1.2. Scope of data processing, processing purposes and legal bases

Below, we detail the scope of data processing, purposes, and legal bases. Generally:

• Art. 6 para. 1 s. 1 lit. a GDPR is our legal basis for processing operations requiring consent.
• Art. 6 para. 1 s. 1 lit. b GDPR is the legal basis if processing is necessary for contract performance (e.g., if a site visitor purchases a product or we perform a service). Pre-contractual measures are also covered.
• Art. 6 para. 1 s. 1 lit. c GDPR applies if we fulfill a legal obligation (e.g., under tax law).
• Art. 6 para. 1 s. 1 lit. f GDPR is used if processing is based on legitimate interests (e.g., cookies needed for the website’s technical operation).

1.3. Data processing outside the EEA

If we transfer data to service providers or third parties outside the EEA, data security during transfer is ensured by adequacy decisions of the EU Commission (Art. 45 para. 3 GDPR), if available. If no decision exists (e.g., for the USA), the legal basis is typically standard contractual clauses (Art. 46 para. 2 lit. c GDPR). Many providers also offer additional contractual guarantees (e.g., encryption commitments or notification obligations) to protect data further.

1.4. Storage duration

Unless expressly stated here, data stored by us is deleted as soon as it is no longer required for its intended purpose and no legal retention obligations prevent deletion. If data must be kept for legal reasons, we restrict processing (e.g., blocking).

1.5. Rights of data subjects

Data subjects have the following rights regarding personal data:

• Right of access
• Right to correction or deletion
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to revoke consent at any time

You also have the right to complain to a data protection supervisory authority if you believe the processing of your personal data is unlawful.

1.6. Obligation to provide data

In the context of our business or other relationships, customers, prospects, or third parties must provide personal data necessary for establishing, executing, and concluding a contract or other relationship. Without this data, we cannot perform or continue a contract or service. Required data is marked as such.

1.7. No automatic decision making in individual cases

We generally do not use fully automated decision-making per Art. 22 GDPR to establish and implement a business or other relationship. If we do so in isolated cases, we will inform data subjects accordingly if required by law.

1.8. Making contact

When contacting us (e.g., via email or phone), we store the information provided (e.g., names, email addresses) to answer inquiries. The legal basis is our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR). We delete this data once storage is no longer necessary or restrict processing if legal retention obligations exist.

1.9. Customer surveys

Occasionally, we conduct customer surveys to better understand our clients’ needs. The data collected is processed under our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR) to improve our services. Data is deleted after evaluating the surveys.

2. Newsletter

Interested parties can subscribe to a free newsletter. We only process the data provided during registration to send the newsletter. Subscription occurs by selecting the relevant field on our website or by another clear action, indicating consent (Art. 6 para. 1 s. 1 lit. a GDPR). Consent can be revoked any time via the unsubscribe link or notifying us by email. The data processed up to the point of revocation remains lawful.

We also measure opening and click-through rates based on recipient consent (Art. 6 para. 1 s. 1 lit. a GDPR) to understand content relevance.

We send newsletters using Mailchimp (The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). More info: Mailchimp Privacy Policy.

3. Data processing on our website

3.1. Informative use of our website

During purely informative use (no input submitted), we collect personal data that your browser transmits to our server, ensuring site stability and security (Art. 6 para. 1 s. 1 lit. f GDPR). This includes IP address, date/time of request, accessed pages, browser details, etc., stored in log files for a maximum of 14 days.

3.2. Web hosting and provision of the website

Our website is hosted by Webflow, Inc., 208 Utah, Suite 210, San Francisco, CA 94103, USA (Privacy Policy). Data is processed in the EU for content, usage, and communication. The legal basis is our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR).

3.3. Contact form

When you contact us through our on-site form, we collect the data requested there plus the message content. The legal basis is our legitimate interest in addressing inquiries (Art. 6 para. 1 s. 1 lit. f GDPR). Data is deleted once no longer needed, unless subject to legal retention.

3.4. Vacant positions

We post open positions on our website or third-party sites. We process applicant data for application purposes (Art. 88 GDPR in conjunction with Section 26 (1) BDSG). Required data is marked as such, and additional info is voluntary (Art. 6 para. 1 lit. a GDPR). Sensitive data (e.g., political, religious) is not necessary. After final decisions, data is stored for up to 6 months unless consent for longer retention is given.

3.5. Technically necessary cookies

Our website sets cookies essential for functionality (Art. 6 para. 1 s. 1 lit. f GDPR). These may remember search terms or preferences. Cookies that are not technically required (e.g., analytics cookies) are subject to user consent where applicable.

3.6. Third parties

We integrate services from third-party providers such as Hotjar, LinkedIn Insight Tag, HubSpot, Matomo, Axeptio, Google Webfonts, Calendly, Google Tag Manager, Zapier, Facebook Pixel, Google Conversion Tag, Typeform, and Google Analytics to enhance functionality and analyze usage data. The legal bases are typically legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR) or consent (Art. 6 para. 1 s. 1 lit. a GDPR). Where data is transferred outside the EEA, standard contractual clauses or other legal mechanisms ensure data protection.

4. Data processing on social media platforms

We maintain social media profiles (e.g., Facebook, Instagram, LinkedIn) to communicate with customers and showcase our services. Operators of these platforms often process user data for advertising. If you contact us via these profiles, we process your data under our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR) to respond to inquiries. Refer to each platform’s privacy policy for details.

5. Changes to this privacy policy

We reserve the right to amend this privacy policy with future effect. A current version is always available here.

6. Questions and comments

If you have any questions or comments about this privacy policy, please contact us using the information provided above.