Privacy Policy

1. Data Controller

The controller responsible for data processing on this website is:

David Rieger (sølt)
c/o Regus Step Stuttgart
Curiestraße 2
70563 Stuttgart, Germany

Email: info@soelt.de
Tel: +49 711 410 38774

2. Purpose of Data Processing

Personal data that you provide to us via forms on this website will be processed exclusively for the purpose indicated in each case – usually for establishing contact and for acquiring potential customers or partners.

With your inquiry we note how you found us, for example via a search engine, an advertisement, Instagram or a recommendation, in order to assess the effectiveness of our advertising. The legal basis is our legitimate interest (Art. 6 Para. 1 lit. f GDPR); where this information comes from our website analytics, your consent (Section 7).

After a rental we ask you once by e-mail for a review and inform you about similar offers. You may object at any time to info@soelt.de or via the unsubscribe link, free of charge except for transmission costs at basic rates.

When you fill out our contact form, your details (e.g., name, email address, telephone number, message) are transmitted to us and stored on our server (hosted by IONOS SE) for processing your inquiry.

3. Disclosure to Service Providers

A transfer of your personal data to third parties does not take place as a matter of principle. Excluded from this are service providers whom we have commissioned with the provision and technical implementation of our website. These include in particular:

• IONOS SE, the hosting provider of our website, through whose infrastructure forms may be provided (Privacy Policy: https://www.ionos.de/terms-gtc/datenschutzerklaerung)
• Microsoft Ireland Operations Limited (Microsoft 365) — our email and office services, e.g. for your enquiry, confirmations, contract documents and invoices. Data may be transferred to Microsoft Corporation in the USA, which is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); EU Standard Contractual Clauses are additionally in place (Art. 46(2)(c) GDPR).
• Google (Gemini, Google Ireland Limited) and Anthropic PBC (Claude) — AI services that process your inputs when you use our AI chat in order to answer your inquiry. Data may be transferred to servers in the USA. Please do not enter sensitive data in the chat. Legal basis: your consent by using the chat (Art. 6 Para. 1 lit. a GDPR) and, where applicable, pre-contractual measures (lit. b).
• Stripe (Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland) — payment service provider through which we collect membership fees by SEPA direct debit or card; the card you store there is also used to pay for bookings, such as the rental in an offer that includes a membership. You enter your bank or card details directly with Stripe; we do not store them. We transmit your name, email address, contract number and the amounts and dates of the payments to Stripe; from Stripe we receive your billing address, the type of payment method with its last four digits and the payment status. Legal basis: performance of the membership and rental contract (Art. 6(1)(b) GDPR). Where we handle your membership through Stripe, storing a card or direct debit is required to conclude it. Stripe processes payments on our behalf (Art. 28 GDPR); where Stripe processes data for its own purposes, in particular fraud and money-laundering prevention and its own legal obligations, Stripe acts as an independent controller. Stripe may transfer data to Stripe, LLC (formerly Stripe, Inc.) in the USA, which is certified under the EU-U.S. Data Privacy Framework (Commission adequacy decision of 10 July 2023, Art. 45 GDPR); EU Standard Contractual Clauses are additionally in place (Art. 46(2)(c) GDPR). Stripe privacy notice: https://stripe.com/privacy
• Gift vouchers: if you buy a voucher, we process your name, email address and billing address (for an invoice to a company, also its name and address), the vouchers ordered and the payment, in order to issue the voucher, send it to you by email, redeem it and handle a withdrawal. If you pay by card, you enter your card details directly with Stripe; we transmit your email address, the order number and the items ordered with their amounts, and receive the payment status. Legal basis: performance of the purchase contract (Art. 6(1)(b) GDPR); receipts are retained for the statutory periods (Art. 6(1)(c) GDPR, Section 5). If you withdraw from a voucher purchase online, we store the time and IP address of receipt as evidence (Art. 6(1)(c) and (f) GDPR).

Unless stated otherwise above, these service providers process your data on our behalf and only insofar as this is necessary for the purposes stated. We do not use your data for marketing or profiling without your express consent, and we do not use automated decision-making within the meaning of Art. 22 GDPR. With your consent, we also use Google services for statistics and advertising (Section 8).

4. Legal Basis

Processing takes place on the basis of your consent (Art. 6 Para. 1 lit. a GDPR) or for the implementation of pre-contractual measures (Art. 6 Para. 1 lit. b GDPR). Review request and offers to existing customers: legitimate interest (Art. 6 Para. 1 lit. f GDPR) within Section 7 (3) UWG.

5. Storage Duration

Your data will be stored as long as it is necessary for contacting you or processing your request. Contract data is stored until the end of the contract and thereafter until the statutory limitation period expires; invoices are kept for eight years (Section 14b UStG, Section 147(3) AO).

6. Hosting of the Website

Our website is hosted at IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When visiting our website, various data are automatically recorded by IONOS in so-called server log files, e.g.: IP address of the visitor, date and time of access, visited pages, referrer URL, browser and operating system used.

This data is technically necessary to provide the website in a stable and secure manner. The legal basis for this data processing is Art. 6 Para. 1 lit. f GDPR (legitimate interest). Further information can be found in the privacy policy of IONOS: https://www.ionos.de/terms-gtc/datenschutzerklaerung

7. Cookies and First-Party Analytics

Our website uses technically necessary cookies and comparable storage technologies where required for operating the website. Optional analytics functions are only activated after you have expressly consented via the cookie banner.

If consent is given, we use self-hosted first-party analytics to understand website usage. We process pseudonymous visitor and session IDs, visited pages, referrer and campaign parameters, device and viewport data, scroll depth, clicks on navigation and call-to-action elements, form interactions without storing entered field values, active time per visible page section, exit section and successful request submissions. IP addresses are not stored in clear text in analytics, but are hashed or pseudonymised server-side.

The legal basis for optional analytics is your consent under § 25 Para. 1 TDDDG and Art. 6 Para. 1 lit. a GDPR. You can withdraw or change your consent at any time with effect for the future via Cookie settings at the bottom of every page. Raw analytics data is stored for a maximum of 365 days and then purged.

8. Google Analytics and Google Ads

With your consent, we use Google Analytics 4 (statistics) and Google Ads (advertising). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without your consent, these services are not loaded and no data is transmitted to Google.

Google Analytics shows us how our website is used: pages visited, time spent, where a visit comes from (such as a search engine or an ad), clicks on phone, WhatsApp and email, and enquiries submitted – without their content. For this purpose, a pseudonymous identifier, device and browser information, approximate location and the IP address are processed; Google uses the IP address only to determine the location and does not store it. Google sets the cookies “_ga” and “_ga_*” with a lifetime of up to two years. Google processes this data as our processor (Art. 28 GDPR). Data on individual visits and users is deleted after two months; aggregated statistics are retained.

With Google Ads, we measure whether a click on one of our ads is followed by an enquiry or a call, and we show visitors to our website ads from sølt on other websites and in Google services (remarketing). For this purpose, a pseudonymous identifier, the ad click identifier, pages visited, device and browser information and the IP address are transmitted to Google; Google sets cookies such as “_gcl_au” (90 days) and advertising cookies such as “IDE” (up to 13 months). If you are signed in to Google, Google may associate this data with your Google account. We are responsible for the collection on our website and the transmission to Google; Google is independently responsible for any further processing and also determines the retention period. More information: https://policies.google.com/technologies/partner-sites

The legal basis is your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR; you can choose statistics and advertising separately. Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); EU Standard Contractual Clauses additionally apply (Art. 46(2)(c) GDPR).

You can withdraw or change your consent at any time with effect for the future via Cookie settings at the bottom of every page; this does not affect the lawfulness of processing carried out before the withdrawal. Google privacy policy: https://policies.google.com/privacy

9. Your Rights

You have the right to information, correction, deletion, restriction of processing, data portability, and objection. You also have the right to complain to a data protection supervisory authority.

We are not obliged and not willing to participate in a dispute resolution procedure before a consumer arbitration board.