Privacy Policy

Harrimont respects your privacy. This policy explains what personal data we collect, why we collect it, how we protect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and comparable laws.

1. Who we are

Harrimont (“we”, “us”, “our”) is a partner-led advisory and business systems firm for multi-site groups, based in Kosovo and working internationally. For the purposes of applicable data-protection law, Harrimont is the data controller for personal data processed through this website.

Our work is advisory, business systems and AI. Clients keep the systems they already run, and our software reads those systems under a written engagement. Where it does, data-processing terms are agreed before any production access, client data stays in the client’s own infrastructure, our access is scoped by role and logged, and client data is not used to train models. This policy covers only the personal data processed through this website; personal data held inside a client’s own systems is governed by the agreement with that client.

Note: The full registered postal address and any data-protection officer details will be published here once finalised. For any privacy request in the meantime, please email office@harrimont.com.

2. Data we collect

We collect only what we need to respond to you and to operate this website:

• Information you give us — when you complete the contact form, we receive the name, email address, optional company name and message you submit. If you email or call us, we receive whatever you choose to share.
• Technical data — like most websites, our hosting provider may automatically log standard request data (such as IP address, browser type, pages requested and timestamps) to deliver the site securely and reliably.
• Local preferences — your cookie-consent choice is stored in your browser’s local storage (see section 4). We do not run advertising or cross-site tracking.

3. How & why we use your data

We process personal data on the following legal bases under GDPR Article 6:

• To respond to enquiries and provide our services — on the basis of taking steps at your request prior to, or in performance of, a contract, and our legitimate interest in communicating with prospective and existing clients.
• To operate and secure the website — on the basis of our legitimate interest in a functioning, secure service.
• For optional analytics, if and when enabled — only on the basis of your consent, which you can give or withdraw at any time (see section 4).

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.

4. Cookies & local storage

This website uses only strictly necessary storage by default. We do not set advertising or tracking cookies. When you first visit, a consent banner lets you accept or decline any optional (analytics) cookies; your choice is saved locally so we don’t ask again. You can change your choice any time via “Cookie Settings” in the footer. Full details are in our Cookie Policy.

5. Sharing & service providers

We share personal data only with trusted providers who help us run the site, and only as needed:

• Hosting — our website host stores and serves the site and processes server logs on our behalf.
• Fonts — typography is self-hosted and served directly from this website; no font data (including your IP address) is sent to third-party font services such as Google Fonts.

We may also disclose data where required by law or to protect our rights. We do not share your data with advertisers or data brokers.

6. How long we keep it

We keep enquiry data for as long as needed to handle your request and for a reasonable period afterwards for our legitimate business and record-keeping purposes, after which it is deleted or anonymised. Server logs are retained only for a short period for security and diagnostics.

7. International transfers

We are based in Kosovo and work with clients internationally, and some providers may process data outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) as required by GDPR.

8. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data;
• restrict or object to certain processing;
• request portability of data you provided to us;
• withdraw consent at any time, without affecting prior processing; and
• lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, email office@harrimont.com. We will respond within the timeframes required by law.

9. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including serving this site over HTTPS. No method of transmission over the internet is completely secure, but we work to safeguard your information.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the latest version. Material changes will be highlighted on this page.