Legal
Privacy policy
As of: June 2026
Controller
The controller for the data processing under revFADP and GDPR is Holenweg Architekten GmbH, Rütistrasse 9, 9658 Wildhaus, Switzerland. For questions about data protection you can reach us at info@holenweg.ch.
We have not appointed a data protection officer; a studio of our size is not required to. [If an EU representative is appointed, add it here - placeholder]
What data we process
When you use our contact form, we collect only the data you actively provide:
- Contact form: name, email address, optional phone number, type of project and your message.
- Technical: when the website is accessed, the hosting provider records standard server logs (e.g. truncated IP address, time, page requested).
- Locally in your browser: your preferred language, your appearance (light or dark) and your cookie choices. These never leave your device.
Purpose & legal basis
We process your data solely to answer your enquiry and to initiate a possible collaboration.
Under the GDPR we rely on the following legal bases: your consent (Art. 6(1)(a)), the initiation or performance of a contract (Art. 6(1)(b), e.g. for a project enquiry) and our legitimate interest in a secure, functioning website (Art. 6(1)(f)). Under the revFADP, processing is based on your consent and our overriding interest in communication and security. You can withdraw any consent given at any time with effect for the future.
Processors & hosting
To operate the website and process form submissions we use carefully selected service providers who process data solely on our behalf and according to our instructions. A data processing agreement is in place with each of them.
- Website hosting: [specify provider and server location before publication - placeholder]
- Form backend (contact form): Convex, a backend service that stores the submitted form data and forwards it to us.
International transfers
Where a service provider processes data outside Switzerland or the EEA (e.g. in the USA), we ensure an adequate level of protection - for example through the EU Standard Contractual Clauses, the Swiss addendum and supplementary safeguards. [Specify the destination country and transfer mechanism before publication - placeholder]
No sharing, no selling
We do not sell your data and do not pass it on to third parties for advertising purposes. Data is only shared where necessary to process your enquiry (for example with specialist planners we bring in) or where we are legally obliged to do so.
Retention
We keep your data only for as long as necessary for the respective purpose or required by statutory retention obligations.
- Contact enquiries that do not lead to a commission: deleted after a reasonable period (usually up to twelve months).
- Local browser storage (language, appearance, cookie choices): until you clear or reset it.
Your rights (GDPR & revFADP)
Within the scope of applicable law you have the following rights:
- Access to the data processed about you
- Rectification of inaccurate data
- Deletion of your data, where no retention obligation applies
- Restriction of processing
- Data portability in a common, machine-readable format
- Objection to processing based on a legitimate interest
- Withdrawal of a given consent, at any time and with effect for the future
- Complaint to a supervisory authority - in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority responsible for you
Notice for California residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA. In the last twelve months we have collected the following categories of personal information: identifiers (name, email, optional phone) and content you submit (your message), as well as technical internet activity data (server logs). These come directly from you or your device.
You have the right to know what data we collect (Right to Know), to request its deletion (Right to Delete) and to have inaccurate data corrected (Right to Correct). We will not discriminate against you for exercising these rights (Non-Discrimination).
- Do Not Sell or Share My Personal Information: we do not sell your personal information and do not share it for cross-context behavioural advertising - neither within the meaning of the CCPA/CPRA nor otherwise.
- Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a valid opt-out; the statistics and marketing categories then remain off by default.
- We do not process sensitive personal information for the purposes restricted by the CPRA.
Cookies & tracking
This website sets no advertising or tracking cookies and embeds no external analytics services. We use only technically necessary local storage (language, appearance and your cookie choices). Which categories our consent manager governs and how to change your choices at any time is described in our cookie policy.
Privacy contact
For access, rectification, deletion, a "Do Not Sell or Share" request or any other data protection matter, please write to us at info@holenweg.ch. To process a requested right we may verify your identity to a reasonable extent. We will handle your request as quickly as possible, usually within the statutory time limits.