Privacy policy

This privacy policy describes how HOLMI.CH processes personal data in connection with the website, pre-launch, CRM and later platform functions.

1. Controller

HOLMI.CH
Inhaber: Tolga Ulukardaslar
Im Stadtwald 1, 9400 Rorschach, Schweiz
Telefon: +41 79 716 00 12
Privacy contact: privacy@holmi.ch

2. Personal data we process

Depending on how HOLMI is used, the following data may in particular be processed:

• master data such as name, email address, telephone number, postcode and city;
• for businesses, additionally company/business name, business address, role of the contact person, business type, website, Instagram and voluntary notes;
• consent and communication data;
• CRM data such as status, responsibility, follow-ups, notes and activity history;
• technical data such as timestamps, browser/device information and security-related metadata;
• later, during live operation: account, order, payment, refund, voucher, support and billing data.

3. Purposes of processing

• conducting and organizing the pre-launch;
• contacting customers and prospective partners;
• handling inquiries and support cases;
• partner onboarding and contract preparation;
• CRM, sales, follow-ups and internal administration;
• abuse prevention, security, error analysis and technical stability;
• later: providing customer accounts, orders, payments, refunds, promotions and billing;
• fulfilling statutory, tax and accounting obligations.

4. Legal basis and consent

We process personal data under Swiss data protection law. Where consent is required or appropriate, it is obtained explicitly. Consent that has been given may be withdrawn for the future. Other processing may be permitted or required independently of consent, for example for contract performance, security or compliance with legal obligations.

5. Pre-registration

For customer and partner pre-registration, we store the submitted information, time, source of registration and documented contact preference. Pre-registration is non-binding and does not yet create a purchase or partner contract.

6. CRM and internal administration

Pre-registrations and later customer/partner relationships are managed in a protected CRM. This may include status, internal notes, tasks, appointments, conversation records and change histories. Access is limited to authorized admin users and additionally protected by authentication and MFA.

7. Service providers and processors

We currently use Vercel and Supabase in particular for hosting, database and technical delivery. Additional service providers may be used for business email, transactional mail, monitoring, payment processing or other platform functions. This privacy policy will be updated when such services are activated in production.

8. Disclosure of data abroad

Service providers may also process data outside Switzerland. In such cases, where required, we ensure appropriate safeguards under Swiss data protection law. These may include contractual safeguards and suitable technical/organizational measures.

9. Retention

Personal data is retained only for as long as necessary for the relevant purposes or as required by statutory retention, evidence or limitation periods. Data that is no longer required is deleted or anonymized unless conflicting obligations apply.

10. Security

HOLMI uses risk-appropriate technical and organizational measures. These include HTTPS/HSTS, restricted database permissions, Row Level Security, server-side validation, rate limiting, MFA for admin access, security headers, logging and role-based access. Absolute security cannot nevertheless be guaranteed.

11. Cookies, local storage and analytics

During pre-launch, only technically necessary functions are used. Non-essential analytics, marketing or tracking services are intended to be activated only after separate review and appropriate information and/or consent. This policy will be updated if that changes.

12. Communication by email and telephone

With appropriate consent or another permissible basis, we may provide information by email or telephone about the local launch, partner onboarding or other requested topics. Marketing communications can be unsubscribed from at any time.

13. Rights of data subjects

Within applicable data protection law, data subjects may in particular request information about personal data being processed and ask for its correction or deletion. Additional rights may apply depending on the situation. Requests may be sent to privacy@holmi.ch .

14. Changes to this privacy policy

We may amend this privacy policy if the law, technology or our services change. The version published on holmi.ch at the relevant time is authoritative.

Last updated: 16 September 2026

← Back to HOLMI