DATA PROTECTION

We are pleased that you visit our website. We respect your privacy. Data protection and data security when using our website are very important to us. With this data protection declaration, we would like to inform you about the extent to which data is collected when you use our website and for what purposes we use this data. We would also like to inform you about your rights in this regard.

The personal data of every individual who has a contractual, pre-contractual or other relationship with our company deserves special protection. We aim to keep our level of data protection at a high standard. That is why we rely on the continuous further development of our data protection and data security concepts. We are therefore committed to protecting your privacy and treating your personal data confidentially. In order to avoid manipulation, loss or misuse of your data stored by us, we take extensive technical and organizational security precautions, which are regularly checked and adapted to technological progress. This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures are not observed by other persons or institutions that are not within our area of responsibility. In particular, unencrypted data - e.g. B. if this is done by e-mail - read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data they have provided against misuse by encryption or in some other way.

Name and address of the person responsible

Solufi Ltd

Lisa Dellermann (Management)

Front grinding path 1

91481 Muenchsteinach

Germany

info@solufi.de

General data processing by server log files

a. Type and purpose of processing

If you access our website, ie if you do not register or otherwise submit information, information of a general nature is automatically recorded. This information (server log files) includes the type of browser, the operating system used, the domain name of your Internet service provider, your IP address and similar. This is exclusively information that does not allow any conclusions to be drawn about your person. In particular, they are processed for the following purposes:

- Ensuring a smooth connection to the website,

- Ensuring smooth use of our website,

- Evaluation of system security and stability as well

- for further administrative purposes

We do not use your data to draw conclusions about your person. Information of this type may be statistically evaluated by us in order to optimize our website and the technology behind it.

b. Legal basis of processing

The processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

c. data categories

IP address (anonymized)

i.e. Recipient

Recipients of the data are internal administration employees and, if applicable, processors (1&1 Ionos SE) who work as processors for the operation and maintenance of our website.

e. retention periods

The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.

f. Legal/Contractual Requirement

The provision of the aforementioned personal data is neither required by law nor by contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

G. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

H. revocation of consent

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

Newsletter

a. Type and purpose of processing

Your data will only be used to send you the subscribed newsletter by e-mail. Your name is given in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject. To receive the newsletter, it is sufficient to provide your e-mail address. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by e-mail about circumstances that are relevant to the service or the registration (e.g. changes to the newsletter offer or technical circumstances). For an effective registration we need a valid e-mail address. In order to check that the owner of an e-mail address is actually registering, we use the "double opt-in" procedure. To do this, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the response requested here. Further data is not collected. The data will only be used to send the newsletter and will not be passed on to third parties.

b. Legal basis of processing

On the basis of your expressly given consent (Art. 6 Para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with Section 107 Para. 2 TKG), we will regularly send you our newsletter or comparable information by e-mail to the e- Mail address.

c. data categories

E-mail address, first name

i.e. Recipient

Recipients of the data are internal employees of the marketing department and, if applicable, processors 1&1 Ionos SE.

e. retention periods

The data will only be processed in this context as long as the corresponding consent has been given. After that they will be deleted.

f. Legal/Contractual Requirement

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

G. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

H. withdrawal of consent

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation via the contact option given at the end of this data protection notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

Registration

a. Type and purpose of processing

When registering to use our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.

b. Legal basis of processing

The data entered during registration is processed on the basis of the user’s consent (Article 6 (1) (a) GDPR).

c. data categories

E-mail address, first/last name, address, e-mail address, telephone number if applicable, products purchased from us

i.e. Recipient

Recipients of the data are internal employees of the marketing and sales department and, if applicable, processors 1&1 Ionos SE who work as processors for the operation and maintenance of our website.

e. retention periods

Data will only be processed in this context as long as the corresponding consent has been given. They will then be deleted, provided there are no legal storage requirements to the contrary. To contact us in this context, please use the contact details given at the beginning of this data protection declaration.

f. Legal/Contractual Requirement

The provision of your personal data is voluntary, based solely on your consent. Without providing your personal data, we cannot grant you access to the content and services we offer.

G. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

H. withdrawal of consent

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

contact form

a. Type and purpose of processing

The data you enter will be stored for the purpose of individual communication with you. This requires you to provide a valid email address and your name. This is used to allocate the request and then to answer it. Providing further data is optional.

b. Legal basis of processing

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR). By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. If you contact us to request an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Article 6 (1) (b) GDPR).

c. data categories

E-mail address, first name

i.e. Recipient

Recipients of the data are internal employees of the marketing department and, if applicable, responsible employees of the specialist department and, if applicable, processors 1&1 Ionos SE.

e. retention periods

Data will be deleted no later than 6 months after processing the request. If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code and delete your data after these periods have expired.

f. Legal/Contractual Requirement

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.

G. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

H. withdrawal of consent

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

Use of Matomo (web analysis)

a. Type and purpose of processing

This website uses Matomo (formerly Piwik), an open source software for the statistical analysis of visitor access. The Matomo software is provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Matomo uses so-called cookies, i.e. text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website is stored on a server in Germany. The IP address is anonymized immediately after processing and before it is stored. You have the option of preventing the installation of cookies by changing the settings in your browser software. We would like to point out that with the appropriate setting, not all functions of this website may be available. You can decide whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyze various statistical data. You can find more information about the privacy settings of the Matomo software under the following link: https://matomo.org/docs/privacy/.

b. Legal basis of processing

The data is processed on the basis of the user’s consent (Article 6 (1) (a) GDPR).

c. data categories

all anonymous: IP address, movement data, device information

i.e. Recipient

Recipients of the data are internal employees of the marketing department and Matomo as the processor. For this we have concluded the corresponding order processing contract with Matomo.

e. retention periods

The data will be deleted as soon as they are no longer required for our recording purposes. In our case, this happens after the following period: 12 month(s).

f. Legal/Contractual Requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

G. Third country transfer

Although Matomo is based in New Zealand, all data is hosted by Matomo on our own servers located in Germany and transferred to our own databases. The processing therefore does not take place outside the European Union (EU) or the European Economic Area (EEA).

H. withdrawal of consent

You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full.

i. Automated decision making and profiling

With the help of the Matomo tracking tool, the behavior of visitors to the website can be evaluated and their interests analyzed. For this purpose we create a pseudonymous user profile.

j. Disable Matomo

Use of Google Web Fonts

a. Type and purpose of processing

In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA) to display fonts on this website. The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/. Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - although it is currently unclear whether and, if so, for what purposes - that the operator collects Google data in this case. You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

b. Legal basis of processing

The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).

c. data categories

IP address

i.e. Recipient

Besides Google, there are no other recipients of the data through the use of Google Webfonts.

e. retention periods

f. Legal/Contractual Requirement

The provision of personal data is neither required by law nor by contract. However, without the correct representation of the content of standard fonts, it cannot be made possible.

G. Third country transfer

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

H. withdrawal of consent

The programming language JavaScript is regularly used to display the content. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this can lead to functional restrictions on the website. You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time via the contact option given at the beginning of this data protection notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

application with us

a. Type and purpose of processing

We process the applicant data only for the purpose and as part of the application process in accordance with the legal requirements. Applicant data is processed to fulfill our (pre)contractual obligations as part of the application process, insofar as data processing becomes necessary for us, for example as part of legal processes.

The application process requires that applicants provide us with the applicant data. If we offer an online form, the necessary applicant data is marked, otherwise it results from the job descriptions and basically includes personal information, postal and contact addresses and the documents belonging to the application, such as cover letter, curriculum vitae and certificates. In addition, applicants can voluntarily provide us with additional information. By submitting the application to us, the applicants agree to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this data protection declaration. If made available, applicants can send us their applications using an online form on our website. The data is transmitted to us in encrypted form using state-of-the-art technology. Applicants can also send us their applications via email. However, we ask you to note that e-mails are generally not sent in encrypted form and that the applicants themselves must ensure that they are encrypted. We can therefore not assume any responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend using an online form or sending it by post. In the event of a successful application, the data provided by the applicants can be processed by us for the purposes of the employment relationship.

b. Legal basis of processing

The processing of the data required for the conclusion of the contract is based on Article 6 (1) (b) GDPR. The processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in the personal development of our company.

c. data categories

Full name, contact details as provided by you, your CV details

Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are voluntarily communicated as part of the application process, they are also processed in accordance with Art. 9 Para. 2 lit. b GDPR (e.g. health data, such as severe disability or ethnic origin) .

i.e. Recipient

Recipients of the data are internal employees of the human resources department, if necessary management and division management and if necessary processors 1&1 Ionos SE for the operation of an online form.

e. retention periods

The deletion takes place, subject to a justified revocation by the applicant, after a period of 12 month(s) so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax regulations.

f. Legal/Contractual Requirement

The provision of your personal data is voluntary, based solely on your consent. Without providing your personal data, we cannot grant you access to the content and services we offer.

G. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

H. withdrawal of consent

If the application for a job offer is not successful, the applicant's data will be deleted. The applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time via the contact option given at the beginning of this data protection notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

Processors used

If, as part of our processing, we disclose data to other people and companies (processors, joint controllers or third parties), transmit it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, is required to fulfill the contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we disclose or transmit data to other companies in our group of companies or otherwise grant them access, this is done in particular for administrative purposes as a legitimate interest and, moreover, on a basis that corresponds to the legal requirements.

The operator of this website has commissioned the following organisations, companies or persons to process data:

Processors within the EU / EEA:

- 1&1 Ionos SE, united-domains AG

Processors outside the EU / EEA:

- Microsoft Corporation

Solufi GmbH and social networks

a. Type and purpose of processing

Our presence on social networks and platforms serves to improve, active communication with our customers and prospects. We provide information there about our products and current special offers. When you visit our online presence in social media, your data can be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. Cookies are usually used on your end device for this purpose. Visitor behavior and user interests are stored in these cookies. This serves to protect our overriding legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for your consent (consent) to the data processing, e.g. with the help of a checkbox, the legal basis for the data processing is Article 6 Paragraph 1 lit. The detailed information on the processing and use of the data by the providers on their pages as well as a contact option.

Google / Youtube: https://policies.google.com/privacy

Facebook: https://www.facebook.com/about/privacy/

LinkedIn: https://www.linkedin.com/legal/optout-policy

Instagram: http://instagram.com/about/legal/privacy/

Xing: https://optout.xing.com/de/datenschutzerklaerung

b. Legal basis of processing

The processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in the functionality of our website and the contact options to our customers, as well as in accordance with Article 6 Paragraph 1 Letter a GDPR on the basis of the consent of the user in the respective social media platform.

c. data categories

Please refer to the information on the social media platform for the types of data processed. We do not process any data collected by social networks.

i.e. Recipient

The recipients of the data are exclusively the respective operator of the social media platform.

e. retention periods

After the end of our use of the social media platform, the data collected in this context will be deleted.

f. Legal/Contractual Requirement

The provision of your personal data is voluntary, based solely on your consent.

G. Third country transfer

Insofar as the aforementioned social media platform(s) are headquartered in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed under the following link (https://www.privacyshield.gov/list).

H. withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time via the contact option given at the beginning of this data protection notice. Please refer to the data protection notices of the providers linked below for your rights and setting options to protect your privacy, in particular objection options (opt-out). If you still need help in this regard, you can contact us.

Possibility of objection:

Google / Youtube: https://adssettings.google.com/authenticated

Facebook: https://www.facebook.com/settings?tab=ads

LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Instagram: http://instagram.com/about/legal/privacy/

Xing: https://optout.xing.com/de/datenschutzerklaerung/which-rights-can-sie-apply-make/contradiction

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling in this data processing.

We and our partners use cookies to provide the relevant services. This also applies when you visit our website or access our services.

A "cookie" is a small piece of data that is assigned to your device when you visit a website from that website. Cookies are useful and can be used for different purposes. These include e.g. B. easier navigation between different pages, the automatic activation of certain functions, saving your settings and optimized access to our services. The use of cookies also enables us to show you relevant advertising tailored to your interests and to collect statistical information on your use of our services.

This website uses the following types of cookies:

a. "Session cookies" that ensure normal system use. Session cookies are only stored for a limited time during a session and are deleted from your device as soon as you close your browser.

b. "Permanent cookies", which are only read from the website and are not deleted when you close the browser window, but are stored on your computer for a certain period of time. This type of cookie allows us to identify you on your next visit and, for example, to save your settings.

c. "Third-party cookies" set by other online services that have their own content on the page you are visiting. This can e.g. B. external web analytics companies that record and analyze access to our website.

Cookies do not contain any personally identifiable information that identifies you, but we may link the personal information we store to the information contained in the cookies. You can remove cookies via the device settings of your device. Follow the relevant instructions. Please note that disabling cookies can restrict certain functions when using our website.

The tool we use is based on Snowplow Analytics technology. The data we collect about the use of our website includes, for example, how often users visit the website or which areas are accessed. The tool we use does not collect any personal data and is only used by our web hosting provider and service provider to improve their own offering.

rights of the data subject

Every data subject has a right to information about the personal data concerning him/her. The right to information extends to all data processed by us. The right can be exercised easily and at regular intervals, so that all data subjects are always aware of the processing of their personal data and can check its legality (see recital 63 GDPR). The right to information includes in particular the following information:

- The purpose of the processing

- The data categories

- The recipients / categories of recipients, in particular recipients from international organizations or third countries; if a third country is involved, the person concerned has the right to receive information about the appropriate guarantees in connection with the transmission.

- If possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration

- All available information about the origin of the data if the personal data are not collected from the data subject

- All available information about the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR

If a data subject wishes to make use of this right to information, they can contact us at any time using the contact option given at the beginning of this data protection notice.

Every data subject has the right to demand that our company correct any incorrect personal data concerning them without delay. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary declaration.

If a data subject wishes to make use of this right to information, they can contact us at any time using the contact option given at the beginning of this data protection notice.

Every data subject has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them, which is based on Article 6 Paragraph 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

In the event of an objection, the person responsible will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend against legal claims. If the person responsible processes personal data in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If the person concerned objects to the person responsible for processing for direct marketing purposes, the person responsible will no longer process the personal data for these purposes.

In addition, the data subject has the right, for reasons arising from their particular situation, against the processing of personal data relating to them, which is carried out by the person responsible for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, to object, unless such processing is necessary to fulfill a task in the public interest. In order to exercise the right to object, the person concerned can contact us at any time using the contact option given at the beginning of this data protection notice.

Every data subject has the right to deletion and to be forgotten and can demand that the personal data concerning them be deleted immediately if one of the following reasons applies and if the processing is not necessary:

- The personal data were collected for purposes or otherwise processed for which they are no longer necessary.

- The data subject revokes their consent on which the processing was based pursuant to Art. 6 Para. 1 Letter a GDPR or Art. 9 Para. 2 Letter a GDPR and there is no other legal basis for the processing.

- The data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 (2) GDPR.

- The personal data have been processed unlawfully.

- The erasure of the personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject.

- The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

- If one of the above reasons applies and a person concerned wishes to have personal data deleted, they can contact us at any time using the contact option given at the beginning of this data protection notice. The person responsible will arrange for the request for deletion to be complied with immediately.

Every data subject has the right to demand that the person responsible restrict the processing if one of the following conditions is met:

- The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.

- The processing is unlawful, the data subject refuses the deletion of the personal data and instead requests the restriction of the use of the personal data.

- The person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.

- The data subject has lodged an objection to the processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

If one of the above conditions is met and a person concerned wishes to request the restriction of personal data stored by the person responsible, they can contact us at any time using the contact option given at the beginning of this data protection notice. The person responsible will restrict the initiate processing.

Every data subject has the right to receive the personal data concerning them, which the data subject has provided to a person responsible, in a structured, common and machine-readable format. You also have the right to transmit this data to another person in charge without hindrance from the current person in charge to whom the personal data was provided, provided that the processing is based on the consent pursuant to Art. 6 Para. 1 Letter a DSGVO or Art. 9 Para. 2 lit. a GDPR or on a contract in accordance with Art. 6 Para. 1 Letter b GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority , which has been transferred to the person responsible.

Furthermore, when exercising their right to data portability in accordance with Art. 20 Para. 1 GDPR, the data subject has the right to obtain that the personal data be transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible and insofar as this is not the case the rights and freedoms of other people are impaired. In order to assert the right to data transferability, the person concerned can contact us at any time using the contact option given at the beginning of this data protection notice.

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of the alleged infringement, if the data subject believes that the processing of personal data concerning them data violates the GDPR. The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

Updates or changes to this Privacy Policy

Since changes in the law or changes to our internal company processes may make it necessary to adapt this data protection declaration, we ask that you read this data protection declaration regularly. The data protection declaration can be accessed at any time at solufi.de/privacy. We therefore reserve the right to change these guidelines at any time in compliance with data protection regulations.