Privacy policy

1. Controller

Sorthold
Company in formation
Kosovo
Email: kontakt@sorthold.com

2. The essentials

This website sets no cookies, uses no analytics or tracking services and loads no content such as fonts or videos from third parties. We only process personal data as far as necessary to deliver the website and to handle your request.

3. Hosting and delivery

The website is delivered via Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data: IP address, date and time, requested address, referrer and browser identifier. This serves to deliver the website and to protect it against attacks and abuse. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

A data processing agreement with Cloudflare is in place (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by an adequacy decision of the European Commission (Art. 45 GDPR). EU standard contractual clauses apply in addition. More information: cloudflare.com/privacypolicy.

4. Request form and email

If you contact us via the request form or by email, we process your details (name, business email, company, optionally phone and your message, plus your selections in the form) to answer your request and prepare a possible proposal. The legal basis is pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).

The form is forwarded via Cloudflare to our mailbox at Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. Switzerland is covered by an adequacy decision of the European Commission. We delete your details once the request has been dealt with, unless statutory retention obligations apply – for example if the request leads to an engagement.

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21). An informal email is sufficient.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work. In Kosovo, the Information and Privacy Agency (Agjencia për Informim dhe Privatësi) is responsible.

6. Last updated

October 2026