Privacy Policy

Last updated: 18 March 2026

1. Who We Are

This website is operated by Holosun ApS ("Sunholo", "we", "us", "our"), a company registered in Denmark. For privacy-related enquiries, contact us at multivac@sunholo.com.

2. Information We Collect

2.1 Information You Provide

  • Contact form submissions — name, email address, company name (optional), subject, and message. These are stored in Google Cloud Firestore.
  • Workshop registrations — name, email address, and any additional information you submit when registering for a workshop.
  • Email correspondence — when you contact us directly.

2.2 Information Collected Automatically

  • Analytics data — we use Google Tag Manager and Google Analytics to collect aggregated usage data such as pages visited, referral source, browser type, and approximate location. This data is used to understand how visitors use our site.
  • Cookies — we use essential cookies and analytics cookies. You can control cookie preferences in your browser settings.
  • Server logs — our hosting provider (Google Cloud) may collect standard server access logs including IP addresses.

2.3 Information from OAuth2 Authentication

Some of our services use OAuth2-based authentication (e.g., Google Sign-In). When you authenticate via OAuth2, we may receive:

  • Your name and email address from your identity provider
  • A unique user identifier
  • Any additional data within the scopes you explicitly consent to during the authorisation flow

We only request the minimum scopes necessary to provide the service. We do not access your data beyond the scopes you have approved. You can revoke access at any time through your identity provider's account settings (e.g., Google Account Permissions).

3. How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and contact form submissions
  • Provide and improve our services, including AI consulting, the Multivac platform, and workshops
  • Authenticate you when using our products and services
  • Analyse website usage to improve content and user experience
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

  • Consent — when you submit a contact form, register for a workshop, or authorise OAuth2 access
  • Legitimate interest — for analytics and improving our services
  • Contractual necessity — when processing is required to deliver services you have requested

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Google Cloud Platform — our infrastructure provider (hosting, Firestore, analytics)
  • Service providers — who assist us in operating our business, bound by data processing agreements
  • Legal requirements — if required by law, regulation, or legal process

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy. Contact form submissions are retained for up to 24 months unless you request earlier deletion. Analytics data is retained according to Google Analytics default settings.

7. Your Rights

Under GDPR, you have the right to:

  • Access — request a copy of your personal data
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data
  • Restriction — request limited processing of your data
  • Portability — request your data in a portable format
  • Object — object to processing based on legitimate interest
  • Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at multivac@sunholo.com.

8. International Transfers

Your data may be processed on servers located outside the European Economic Area (EEA), including in the United States (Google Cloud). Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and secure cloud infrastructure on Google Cloud Platform.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact

For questions about this privacy policy or your personal data, contact us at:

Holosun ApS
Email: multivac@sunholo.com