Privacy Policy.

2. Personal data we collect.

2.1 Data you voluntarily provide.

When you contact us through forms or email, we may collect:

• Name
• Email address
• Company name
• Project details/messages
• Optional contact information you include.

2.2 Automatically collected data.

When you visit the Site, we automatically collect:

• IP address
• Browser and device type
• Pages visited
• Date/time of access
• Referring/exit pages
• General location (region-level only).

This data is used only for analytics and Site optimisation.

2.3 Cookies & tracking.

We may use cookies for:

• Website functionality
• Analytics (e.g., privacy-focused analytics such as Google Analytics)
• Remembering user preferences.

You can disable or control cookies via your browser settings at any time.

3. Purpose and legal basis for processing.

We process personal data based on the following legal grounds:

3.1 To respond to inquiries (Art. 6(1)(b) GDPR).

When you contact us, providing your data is necessary to respond to your request or initiate a potential working relationship.

3.2 To improve website performance (Art. 6(1)(f) GDPR).

We have a legitimate interest in ensuring our Site functions well and is secure.

3.3 With your consent (Art. 6(1)(a) GDPR).

If any cookies or tools require consent, we will request it through a cookie notice or banner.

4. Sharing your data.

We only share personal data with:

• Service providers (e.g., hosting providers, analytics services)
• Legal authorities, only if required by law.

We do not sell, rent, or trade your data.

Any service providers we use are GDPR-compliant and located within the EU or subject to appropriate safeguards (such as the EU-US Data Privacy Framework or Standard Contractual Clauses).

5. Data retention.

We retain personal data only for as long as necessary for the purposes described:

• Contact requests: Up to 24 months
• Analytics data: According to the retention settings of the analytics tool (usually 6–24 months)
• Legal obligations: As required under German/EU law.

You may request deletion at any time (see Section 7).

6. Your rights under GDPR.

You have the right to:

• Access your personal data
• Rectify incorrect or incomplete data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Object to processing (especially analytics)
• Withdraw consent at any time
• Data portability where applicable.

To exercise any of these rights, contact us at hello(at)holmes.design.

You also have the right to file a complaint with your local Data Protection Authority.

7. International transfers.

If data is transferred outside the EU (e.g., through hosting or analytics), we ensure:

• Adequacy decisions, or
• Standard Contractual Clauses (SCCs), or
• Other GDPR-compliant safeguards.

8. Data security.

We implement technical and organizational measures to protect your data from:

• Unauthorized access
• Loss
• Destruction
• Alteration.

However, no internet transmission is ever 100% secure.

9. Third-party links.

The Site may include external links. We are not responsible for the privacy practices or content of external websites.

10. Children’s privacy.

Our Site is not intended for individuals under 16. We do not knowingly collect data from children.

11. Updates to this policy.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page will reflect the latest version.

12. Contact.

For privacy-related questions:

Holmes.design
85276 Pfaffenhofen an der Ilm,
Bavaria, Germany
Email: hello(at)holmes.design