Controller and contact
The controller responsible for the processing described in this policy is Ahmad Alafar, Wacholderweg 8, 53757 Sankt Augustin, Germany. Privacy requests can be sent to Info@holonexa.com. Complete operator information is available in the Impressum.
Technical delivery and security
When you request a page, the hosting infrastructure necessarily processes technical data such as IP address, request time, requested URL, browser or device information, response status and security signals. This is used to deliver the site, maintain availability, detect abuse and investigate errors. The legal basis is the legitimate interest in providing a secure and reliable website, Article 6(1)(f) GDPR. Hosting-controlled logs are retained according to operational and security requirements and are not used by HoloNexa to create advertising profiles.
Contact form
If you contact HoloNexa through the form, we store your name, email address, selected subject, message, consent time and submission time so we can review and answer the enquiry, document corrections and protect the form from abuse. Depending on the enquiry, processing is based on steps requested before a possible agreement, Article 6(1)(b) GDPR, or the legitimate interest in handling correspondence, Article 6(1)(f) GDPR. Messages are normally deleted within 12 months after the matter is closed unless a longer period is required for legal claims or obligations.
Newsletter
When you subscribe, we store your email address, consent time, subscription status and subscription source. Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw consent at any time by emailing Info@holonexa.com. Withdrawal does not affect processing that occurred before withdrawal. The email address is retained while the subscription is active; after withdrawal, it is deleted or placed on a minimal suppression record when necessary to ensure no further messages are sent.
Recipients and processors
Personal data is available only to people and service providers who need it to operate the site, host its database, maintain security or deliver an activated newsletter service. Service providers act under applicable data-protection obligations. Data is not sold. If a future newsletter provider or analytics service is introduced, this policy will be updated before that processing begins.
International transfers
Some infrastructure providers may process data outside the European Economic Area. Where required, transfers must rely on an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Details relevant to any newly activated external service will be added to this policy.
Your rights
Subject to the GDPR’s conditions and exceptions, you may request access, correction, deletion, restriction, data portability or object to processing based on legitimate interests. You may also withdraw consent and lodge a complaint with a competent data-protection supervisory authority. To exercise a right, contact Info@holonexa.com; we may need enough information to verify the request securely.
Automated decisions, children and required fields
HoloNexa does not use submitted form or newsletter data for automated decisions that produce legal or similarly significant effects. The forms are not directed to children. Required fields are marked in the interface; without them, the requested message or subscription cannot be processed.
Security and policy changes
Reasonable technical and organizational measures are used to limit unauthorized access, alteration and loss. No internet service can guarantee absolute security. This policy will be updated when processing activities, providers or legal requirements materially change.