Data Privacy

This privacy policy applies to the SolaVieve website (https://solavieve.com/) and SolaVieve app (“App” includes: mobile Apps for iOS/Android devices), hereinafter collectively: “Online Services“, as provided by SolaVieve Technologies GmbH (hereinafter: “SolaVieve”).

With this privacy policy, we would like to inform you in accordance with Art. 13 of the General Data Protection Regulation (“GDPR”) and §§ 32 of the German Federal Data Protection Act (“BDSG”) about how our company and third parties process personal data in the context of our Online Services, and inform you about your rights in this regard.

The privacy policy uses the GDPR terminology. Terms used, such as “visitor” or “user”, are chosen in the generic masculine for the sake of comprehensibility and are to be understood as gender-neutral.

Controller and Data Protection Officer

Controller of the data processing described below:

SolaVieve Technologies GmbH
Tech Tower, Forum 7

69126 Heidelberg, Germany

mail: info@solavieve.com

Contact details of the company’s own data protection contact, in particular for data subject requests: legal@solavieve.com.

Data protection officer:

Privalex SL

Calle Felipe II, 293 Pta. 3 2 – 08016 Barcelona

mail: legal@privalex.es.

Definitions and principles of data processing

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, gender, address, telephone number, e-mail address, date and place of birth, IP address or user behaviour. Information for which we cannot establish a link to your person (or only with a disproportionate effort), e.g. by anonymising the information, is not subject to the GDPR in accordance with recital 26 of the GDPR and is therefore not personal data.

Personal data (e.g. collection, retrieval, use, storage or transmission) may only be processed if the processing is based on a legal basis. Personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally prescribed retention obligations or, if applicable, limitation periods to be observed.

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

If we process your personal data, we will inform you below about the specific procedures, the data processed in each case, the origin of the data, the scope and purpose of the data processing, the legal basis, the respective storage period, your rights as a data subject, any data transfers and whether the respective data must be provided by you or not.

Overview purposes and legal bases of data processing

We process personal data of users of our Online Services (visitors and users hereinafter referred to collectively as “users” for ease of reading) if this data is technically necessary for the functionality, security and display of our Online Services or if this data is provided to us by our users. The extent to which the following explanations apply to you depends on how you interact with us.

We process personal data for one or more of the following purposes:

for the functionality, security and display of our Online Services,
to comply with legal requirements relating to your consent,
for the creation and provision of customer accounts,
for contacting us and processing your request,
for the statistical analysis, evaluation and further development of our Online Services
for advertising and optimisation purposes,
for the processing of applications submitted by you, and/or
for the initiation and/or performance of contracts with you.

Our processing of personal data is based on the following legal grounds:

Your consent according to Art. 6 para. 1 lit. a GDPR or, if applicable, Art. 9 para. 2 lit. a GDPR, §§ 13 and 25 German Telecommunications-Telemedia-Data Protection-Act (“TTDSG”) or if applicable Art. 88 GDPR in conjunction with Section 26 (2) BDSG;
for the initiation and/or performance of a contract with you according to Art. 6 para. 1 lit. b or, if applicable, Art. 9 para. 2 lit. b GDPR or if applicable Art. 88 GDPR in conjunction with Section 26 (1) and (3) BDSG;
for the fulfilment of legal obligations according to Art. 6 para. 1 lit. c GDPR or, if applicable, Art. 9 (2) lit. b GDPR or if applicable Art. 88 GDPR in conjunction with Art. 26 (1) and (3) BDSG; or
based on a legitimate interest according to Art. 6 para. 1 lit. f or, if applicable, Art. 9 para. 2 lit. f GDPR.

Specific processing activities: Categories of data processed, scope, purpose and legal basis of the respective data processing

In the following, we will inform you about the specific processing procedures, the data processed in each case, the scope and purpose of the respective data processing as well as the relevant legal basis. The data processing procedures that apply to both Online Services are described first, before the specific processing procedures within the framework of the website and the app are described subsequently.

4.1. Data processing within the scope of both Online Services

4.1.1. Hosting, Storage, Content Delivery Networks and Data Management

4.1.1.1. Hosting & Storage of our Online Services

Our Online Services are hosted by external service providers (website and mobile app for Android devices: Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, “Google”; mobile app for iOS devices: Apple Inc, One Apple Park Way, Cupertino, CA 95014, USA, “Apple”). The personal data collected in the context of our Online Services are stored on the servers of our hosters in Europe (Frankfurt (Firestore-DB “Europe-west3”) for website and mobile app for Android devices ) or in the United States of America (mobile app for iOS devices). This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, accesses and other data generated via a website or app.

The hosters are used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our Online Services by a professional provider (Art. 6 para. 1 lit. f GDPR).

In order to ensure data protection-compliant processing and protection of your data, we have concluded a data processing agreement within the meaning of Art. 28 GDPR with the respective hoster. In this contract, our hosters guarantee in particular that they will only process personal data if and to the extent that this is necessary for the fulfilment of their service obligations.

With regard to Google, the processing should primarily take place within the EU according to the assurance of our processor. In individual cases (e.g. in support and maintenance cases), however, access to personal data from or data transfer to the USA cannot be ruled out. Nevertheless, as Google LLC is certified under the transatlantic Privacy Framework, the access from or transfer of data to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed in accordance with Article 45 of the GDPR.

In the case of our hoster Apple, the processing takes place in the US. We have therefore concluded standard contractual clauses with Apple to ensure an adequate level of data protection when transferring your data to the USA.

Please note: Apple is currently not certified under the transatlantic Privacy Framework (“EU-US-DPF”), so the European Commission’s adequacy decision does not apply. For iOS devices and with the transfer of your data to Apple servers in the US, US authorities could therefore gain access to your data and process your data without any notice or notification to you (during and after the processing is completed) or comparable legal remedies and data subject rights. Unfortunately, we have no influence on the processing by US authorities.

For more information about Google’s and Apple’s privacy policies and terms of use, please see the links below:

4.1.1.2. Development and data management

We use the BigQuery (website and app) and Firebase (app) services of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, United States; “Google”), which are operated in Europe by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) and Google Cloud EMEA Ltd. (70 Sir John Rogerson’s Quay, Dublin 2, Ireland), to store, develop and manage our data infrastructure, e.g. in order to be able to use analytics code more effectively and quickly and to create intelligent queries.

As we use these services for our data infrastructure and therefore all our data comes into contact with these services, the personal data we have about you may also be recorded and processed accordingly.

The legal basis for the processing of data is our legitimate interest in an integer, secure, effectively manageable and efficient data infrastructure, Art. 6 para. 1 lit. f GDPR. Since you use our services and provide us with your data, we assume that there are no overriding interests that conflict with our processing. If the processing takes place in the context of the initiation or fulfillment of a contract with you, the legal basis for the processing is this (pre-)contractual relationship, Art. 6 para. 1 lit. b GDPR. If we have your consent, the legal basis for processing is your consent, Art. 6 para. 1 lit. a GDPR or, if applicable, Art. 9 para. 2 lit. a GDPR. Once you have given your consent, you can revoke it at any time with effect for the future by simply sending an email to legal@solavieve.com. This does not affect the lawfulness of any processing carried out on the basis of your consent prior to revocation.

To ensure data protection-compliant processing and protection of your data, we have concluded a data processing agreement with Google within the meaning of Art. 28 GDPR.

The personal data collected on our Online Services when using the tool is stored on the servers of Google Ireland Ltd. and Google Google Cloud EMEA in Europe. However, despite primary processing in Europe, Google may process your personal data in any country where Google maintains facilities or sub-processors, including the United States. Since Google LLC. is certified under the transatlantic Privacy Framework, the related access from or, as the case may be, data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR. For data access from or data transfer to other third countries, we have also concluded standard contractual clauses of the European Commission with Google LLC in order to ensure an adequate level of protection in these cases as well.

For more information about privacy with regards to Firebase and BigQuery, please see the following links:

For more information about the concrete Firebase services used by us as well as the respective data processing taking place, please refer to items 4.3.6. and 4.3.9. of this privacy policy.

4.1.2. Contact / Contact request

If you contact us (e.g. by email, chat or contact form), we process your data to process your enquiry and in the event that follow-up questions arise. The data processed in this way includes at least the contact details you provided (e.g. in the case of an email enquiry, your email address), as well as the information you provided when contacting us or in the course of follow-up communication. In order to comply with the data minimisation principle as best as possible, we therefore kindly ask you to limit your information to what is necessary as far as possible.

If and insofar as you wish to contact us, for example because you send us an e-mail or chat message or write to us via a contact form, the legal basis for the processing is Art. 6 (1) lit. f GDPR. We have a legitimate interest in processing your request quickly, efficiently and completely. Since you are contacting us, we assume that there are no interests on your part that conflict with our processing of your request. If the contact request is aimed at the conclusion or fulfilment of a contract, the legal basis for the processing is Art. 6 (1) lit. b GDPR. You are neither contractually nor legally obliged to provide your data. However, if you do not provide your data, we may not be able to process your request. If we have your consent, the legal basis for the processing is your consent, Art. 6 para. 1 lit. a GDPR or, if applicable, Art. 9 para. 2 lit. a GDPR. You can revoke your consent at any time by sending an email to legal@solavieve.com with effect for the future. The revocation of consent does not affect the lawfulness of the processing already carried out on the basis of the consent until the revocation.

In order to ensure data protection-compliant processing and the protection of your data, we have concluded data processing contracts within the meaning of Art. 28 GDPR with our service providers Google (E-Mail, Contact form – Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google Cloud EMEA Ltd., 70 Sir John Rogerson’s Quay, Dublin 2, Ireland), Hubspot (Mailing – HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA; “HubSpot”) and Sendgrid (Chat in mobile apps – Twilio Inc., 101 Spear Street, 5th Floor, San Francisco, California, 94105, USA; “Sendgrid”). In particular, this guarantees that personal data will only be processed if and to the extent necessary to fulfill any performance obligations.

Please note: Despite the fact that Google Cloud EMEA Ltd. is processing your data in Europe, your personal data may be transferred to Google LLC servers in the USA and other third countries if you choose this registration route. The processing within the frame of our service provider Hubspot (e.g. newsletter) takes place in the USA. Since Google LLC, Hubspot Inc. and Twilio Inc. are however certified under the transatlantic Privacy Framework, the relevant access from or data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed with regard to the USA in accordance with Art. 45 GDPR.

For more information on how Google, Hubspot and Sendgrid may process your data, please see the links below:

4.1.3. Promotion of our social media presence via external text or graphic link

In our Online Services, we also promote our presences on the social networks presented below:

Facebook – Social network of Meta Platforms Inc. (1601 Willow Road, Menlo Park, CA 94025, USA “Facebook”), which is operated in Europe by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland).
Instagram – Social network of Meta Platforms Inc. (1601 Willow Road, Menlo Park, CA 94025, USA “Meta”)”), which is operated in Europe by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland).
LinkedIn – Social network of LinkedIn Corporation Inc. (1000 West Maude Avenue, Sunnyvale, CA 94085, USA; “LinkedIn”), which is operated in Europe by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland).
Twitter/X – microblogging service of X Corp. (Market Square, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; “Twitter”).
YouTube – Video platform of YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA; „Youtube“), a subsidiary of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; „Google“). European operator of the platform is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irland).

The integration takes place via a text or graphic link of the network. The use of these links prevents the automatic establishment of a connection to the respective server of the social network when our online service is called up. Only by clicking on the corresponding link, the user is forwarded to the service of the social network.

After the user has been forwarded, information about the user is collected by the social network. The subsequent processing of the data collected in this way takes place in the USA.

Please note: The online service operator has no influence on the processing that takes place under the responsibility of the respective social network.

The data processed in this context is initially personal data such as IP address, date, time and page visited. If the user is also logged into their user account of the respective network during this time, the network operator may be able to assign the collected information of the specific visit of the user to the personal account of the user. If the user interacts via a “Share” button of the respective network, this information can be stored in the user’s personal user account and may be published. If the user wants to prevent the collected information from being directly assigned to their user account, they must log out of their respective social media account before clicking on the text/graphic link provided. In addition, it is possible to configure the user account accordingly in advance.

The legal basis for the integration of the links in our Online Services is our legitimate interest in the promotion and visibility of our social media presences, Art. 6 (1) lit. f GDPR. A conflicting interest is not apparent.

Please note: If you click on the respective link, you will be redirected to the website of the relevant social network. As a result of this redirection, your personal data may be transferred to servers in the United States or accessed from the United States, despite the fact that some network subsidiaries are located in Europe. While Meta Platform Inc. (Facebook, Instagram) and Google (Youtube) are certified under the transatlantic Privacy Framework, the related access from or data transfer to America is subject to the adequacy decision of the European Commission and in these cases an adequate level of protection is ensured in accordance with Art. 45 GDPR, Twitter/X and LinkedIn are currently not certified under the transatlantic Privacy Framework (“EU-US-DPF”). This means that with regard to Twitter/X and LinkedIn, the adequacy decision of the European Commission does not apply. With transmission to servers of the latter networks in the USA, US authorities could therefore gain access to your transmitted data and process your data without any notice or notification having to be given to you (during and also after completion of the processing) or without you being entitled to comparable legal remedies and data subject rights. Unfortunately, we have no influence on the processing by US authorities.

You can find more information about the respective privacy policies of the social networks under the following links:

4.2. Data processing in the specific context of our solavieve.com website

4.2.1. Functionality, security and display of our website and consent request (cookie banner)

When you access our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded in a server log file during an ongoing connection for communication between your internet browser and our web server:

Used web browser and browser version
Operating system used
IP address of the requesting end device (if applicable, also Internet provider)
Host name of the accessing end device
Date and time of the server request
Referrer URL
Access status (file transferred, file not found, etc.)
Amount of data transferred.

For the purpose of displaying an appealing and complete website, including related fonts, we also use the Google Fonts service in purely local integration. The service is provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”) and operated in Europe by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). No data transfer, including to Google, takes place in the context of our website. However, the following personal data is processed by us:

IP address
Language settings
Browser screen resolution, browser version, and browser name.

Note: For more information about Google Fonts and Google’s privacy policy, see the following links:

In addition, the following data may be stored by us as part of the required consent request (cookie banner):

Opt-in and opt-out data
Referrer URL
user agent
User preferences
Consent ID
Time of consent
Consent type
Template version
Banner language
IP address
Geographic location.

The log file data records are stored for 14 days and evaluated if necessary in order to protect our website against attacks, to find and correct errors and to control the utilisation of servers. This is based on our legitimate interest in confidential, available and secure data processing (Art. 6 para. 1 lit. f GDPR). We reserve the right to check the log files if there is a justified suspicion of unlawful use based on concrete indications. If the suspicion of unlawful use is confirmed in an individual case, we will retain the log file data records concerned for as long as is necessary for the purpose of criminal prosecution or assertion of our legal claims (Art. 6 para. 1 lit. f GDPR).

Technically necessary cookies and other technologies are also required for the complete and correct display of our website and for obtaining and storing your consent. Unless otherwise specified, the complete and correct display of our website is a legitimate interest according to Art. 6 para. 1 lit. f GDPR. The processing of personal data for the purpose of obtaining and storing your consent is carried out via Usercentrics-Cookies and for the purpose of fulfilling the legal obligation to ensure that technically non-essential cookies and technologies are not used without prior consent, Art. 6 (1) lit. f GDPR in conjunction with. §§ 13, 25 TTDSG. The documentation of your consent, if you give us such consent, is based on Art. 6 (1) lit. c and Art. 7 (1) GDPR (legal obligation). If you wish to revoke a consent granted, you can do so at any time via our Privacy Icon on our website with effect for the future or by sending an email to legal@solavieve.com. However, you can also delete the relevant cookie from your browser. When you call up our website again or reload it, you will then be asked again for your consent. (For more information about our cookies and technologies, you can also see our cookie banner or use the Privacy Icon on our website).

We do not combine the aforementioned data with other data or data sources in any other way.

4.2.1.1. Usercentrics

Our website uses the consent management service Usercentrics of Usercentrics GmbH (Sendlinger Str. 7, 80331 Munich, Germany; “Usercentrics”). This enables us to obtain and manage the consent of website users for data processing. For this purpose, the following data is processed:

Opt-in and opt-out data
Referrer URL
user agent
User preferences
Consent ID
Time of consent
Consent type
Template version
Banner language
IP address
Geographic location.

The processing of personal data for the purpose of obtaining and storing your consent is carried out via Usercentrics-Cookies and for the purpose of fulfilling the legal obligation to ensure that technically non-essential cookies and technologies are not used without prior consent, Art. 6 (1) lit. f GDPR in conjunction with. §§ 13, 25 TTDSG. The documentation of your consent, if you give us such consent, is based on Art. 6 (1) lit. c and Art. 7 (1) GDPR (legal obligation).

To protect your data, we have concluded a data processing agreement with Usercentrics within the meaning of Art. 28 GDPR to ensure data protection-compliant processing and protection of your data.

You can find more information about objection and deletion options vis-à-vis Usercentrics at: https://usercentrics.com/privacy-policy/.

Please also note our general information on deleting and deactivating cookies in the following chapter.

4.2.2. Cookies and similar technologies

Our website uses cookies and similar technologies. Similar technologies are technical aids that, for example, enable the identification of users without being a cookie, such as tracking pixels or LocalStorage. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s system. If a user calls up our website, a cookie can thus be stored on the user’s operating system or a tracking pixel can be triggered, for example.

Cookies and similar technologies from third-party companies may also be stored or triggered on your device when you visit our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies to store information about the source from which a user has come to our website).

Cookies contain a characteristic string of characters that can uniquely identify the browser when the website is called up again, and are stored either temporarily for the duration of a session (session cookies), for a certain period of time (temporary cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Temporary cookies are deleted when they expire. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

Technically necessary cookies and technologies are those without which our website cannot function and be securely used. This category only contains cookies and technologies that ensure basic functions and security features of the website. Technically necessary cookies and technologies can be set without the consent of the user.

Non-essential cookies are all cookies and technologies that are not necessary for the mere functioning and security of the website and are used specifically for the purpose of collecting personal data of the user, e.g. through tracking, ads and other embedded content. Cookies and technologies that are not necessary (for example, cookies for marketing, advertising, evaluation or analysis purposes) require your prior consent.

You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Depending on the browser you use, you may also be able to set your browser so that you are informed about the setting of cookies, that cookies are only permitted in individual cases, that the acceptance of cookies is excluded for certain cases or in general and/or that cookies are automatically deleted when the browser is closed. Cookies that have already been stored can also be deleted at any time via the browser settings. If cookies are deactivated for the website, however, it may no longer be possible to use all the functions of the website to their full extent.

If cookies and similar technologies are used by third-party companies or for purposes requiring consent, you will be informed separately about this and about the respective processing activities, purposes and legal bases within the scope of this privacy policy.

For more information about the cookies used on our website, please also see our cookie banner and the Privacy Icon provided on our website.

4.2.3. Automattic

On our website, we use WordPress services provided by Automattic Inc (60 29th St, San Francisco, CA 94110, USA; “Automattic”) to manage and update our website and its content.

The following personal data is processed by means of technically necessary cookies when you load our website:

IP address
Unique device identifier
Browser information
Browser language
Device operating system
Referrer URL
Date and time of visit
Usage data.

The processing is necessary for the initiation and performance of contracts with potential and existing customers (Art. 6 para. 1 lit. b GDPR) and serves our legitimate interest in a professional, fast and efficient management and provision of our website (Art. 6 para. 1 lit. f GDPR).

In order to ensure the privacy-compliant processing and protection of your data, we have concluded a data processing agreement with Automattic in the sense of Art. 28 GDPR.

Automattics processing takes place in the USA. Since Automattic Inc. is however certified under the transatlantic Privacy Framework, the data transfer to the US for processing purposes is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR.

You can find more information about Automattic’s privacy and data protection measures in Automattic’s privacy policy at the following link: https://automattic.com/privacy/.

4.2.4. Google Tag Manager

On our website we use the Google Tag Manager, a tag management system of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, United States; “Google”), which is operated in Europe by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). Through the Tag Manager, we can easily, quickly and centrally incorporate and manage sections of code from various tools that we use on our website. If Google Tag Manager is used, your IP address, among other things, will be collected by Tag Manager and forwarded to services integrated via Tag Manager, including the integrated tracking and analysis tools. Likewise, the data query of the tools integrated via the Tag Manager is enabled.

The legal basis for the described processing of your personal data via the Tag Manager is your consent granted to us in accordance with Section 25 (1) TTDSG and Article 6 (1) a GDPR. Once you have given your consent, you can revoke it at any time using the opt-out function Privacy Icon on our website or by sending an email to legal@solavieve.com with effect for the future. The lawfulness of processing already carried out up to the time of the revocation remains unaffected by your revocation.

Since Google only provides data processing terms, we have concluded a data processing agreement with Google within the meaning of Art. 28 GDPR to ensure data protection-compliant processing and protection of your data.

The personal data collected on our website when using the tool is stored on the servers of Google Ireland Ltd. in Europe. However, despite primary processing in Europe, Google may process your personal data in any country where Google maintains facilities or sub-processors, including the United States. Since Google LLC. is certified under the transatlantic Privacy Framework, the related access from or, as the case may be, data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR. For data access from or data transfer to other third countries, we have also concluded standard contractual clauses of the European Commission with Google LLC in order to ensure an adequate level of protection in these cases as well.

For more information about Google’s data protection measures and Google’s Tag Manager, see the following links:

4.2.5 Statistical evaluation, analysis and further development of our website services

4.2.5.1. Google Analytics

For the purpose of statistical evaluation, analysis and further development of our website, we use Google Analytics, a web analysis service of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”), which is operated in Europe by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland).

Google Analytics uses so-called “cookies”. These are text files that are stored on your terminal device as a result of your consent. By setting the cookie, Google is enabled to analyze the use of our website. Each time one of the individual pages of the website on which a Google Analytics component has been integrated is called up, the Internet browser on the IT system of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of web analysis.

In the context of the use of the tool, the data obtained is:

(a) converted into a neutral user ID that prevents tracing by us (not by Google!), but for the purpose of evaluation in a non-assignable manner allows for the identification of data, such as e.g. date and time of the visit and usage data,

b) subsequently used for the purpose of statistical evaluation, analysis and further development of our website services, and
c) finally used in anonymized form for statistical evaluation of the key figures of our economic activity.

By means of the cookie, the personal data listed below is collected and processed by Google on our behalf:

IP address (partially anonymized; “anonymiseIP”)
User (pseudo) ID
StreamID
Date and time of the visit
Event name and parameters
Traffic and usage data (incl. scroll depth)
Click path
App updates
DeviceID
Browser information
Browser language
Hostname
Browser type
Screen resolution
Device operating system
JavaScript support
Visited pages
Referring URL
Downloaded files / interaction data
Cookie ID
Location information
Consent settings / User properties
Lifetime Value information
eCommerce data.

The legal basis for the described processing of your personal data is your consent given to us in accordance with Art. 6 Para. 1 lit. a GDPR, §§ 13, 25 TTDSG. Once you have given your consent, you can revoke it at any time with future effect via the Privacy Icon on our website or by sending an e-mail to legal@solavieve.com. Processing that has already taken place up to the time of the revocation remains unaffected by this.

The personal data collected on our website when using the tool is stored on servers of Google Ireland Ltd. in Europe. However, despite primary processing in Europe, Google may process your personal data in any country where Google maintains facilities or sub-processors, including the United States. Since Google LLC. is certified under the transatlantic Privacy Framework, the related access from or, as the case may be, data transfer to the US is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR. For data access from or data transfer to other third countries, we have also concluded standard contractual clauses of the European Commission with Google in order to ensure an adequate level of protection in these cases as well.

We use Google Analytics in accordance with the minimum requirements for the use of Google Analytics formulated in the resolution of the Independent German Federal and State Data Protection Supervisory Authorities (Datenschutzkonferenz; “DSK”) of May 12, 2020. To ensure an anonymized collection of IP addresses (so-called IP masking), Google Analytics is extended by the code “anonymizeIp”. By means of this addition, the IP address of the Internet connection of the person concerned is shortened and anonymized by Google. Furthermore, the service is only used with and on the basis of your informed consent. Your consent to the use of Google Analytics will be requested by us before use. Once you have given your consent, you can revoke it at any time with future effect using the Privacy Icon on our website or by sending an e-mail to legal@solavieve.com. Any processing that has already taken place up to the time of your revocation remains unaffected by this.

Further information on Google’s data protection measures and terms of use, or the terms of use of Google Analytics can be found at the following links:

4.2.5.2. Facebook Tracking Pixel

This website uses the visitor action pixel from Facebook for conversion measurement. The provider of this service, which is operated in Europe by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland; “Facebook”), is Meta Platforms Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). Via this pixel, the behaviour of website visitors can be tracked after they have been redirected to the operator’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes, and the insights gained can be used to optimize future advertising measures.

The data collected is anonymous for us as the operator of this website. We cannot draw any conclusions about the identity of the users. However, the personal data is processed by Facebook. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as website operator.

In detail, the following data is processed by Facebook:

IP address
User Agent
Facebook User ID
Browser type
HTTP header
Device information (device ID, device operating system)
Geographic location
Browser information
Usage/click behaviour, including content viewed and items clicked on
Facebook cookie information
Pixel ID
Pages visited
Referrer URL
Marketing information, including ads viewed and interactions with ads, services, and products.

The use of the Facebook tracking pixel takes place exclusively with and on the basis of your prior consent, Art. 6 para. 1 lit. a GDPR and §§ 13, 25 TTDSG. Once you have given your consent, you can revoke it at any time with future effect via the Privacy Icon on our website or by sending an e-mail to legal@solavieve.com. Processing that has already taken place up to the time of the revocation remains unaffected by this.

Insofar as personal data is collected on our website with the help of the pixel described and forwarded to Facebook, Meta Platforms Ireland Ltd (Merrion Road, Dublin 4, D04 X2K5, Ireland, “Facebook”) and we are joint controllers of this data processing (Art. 26 GDPR). The joint controllership is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that takes place after the forwarding is not part of the joint controllership and is the sole responsibility of Facebook. Our joint obligations have been set forth in a Joint Processing Agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook tracking pixel and for the privacy-compliant implementation of the pixel on our website. Facebook is responsible for the compliance of Facebook products and processings. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert the data subject rights against us, we are obliged to forward your request to Facebook.

According to Facebook, the collected data is transferred to the USA and possibly to other third countries and processed there. Since Meta Platforms Inc. is certified under the transatlantic Privacy Framework (“EU-US-DPF”), the related access from or data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed for the EU-US data transfer in accordance with Article 45 of the GDPR. The data transfer to other third countries is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum.

Please note: Third countries to which Facebook transfers data may currently be classified as unsafe third countries, i.e. as a third country with respect to which neither an adequacy decision pursuant to Art. 45 GDPR exists nor a comparable level of protection can be assumed. With the transfer of your data to Facebook, third country authorities can gain access and process your data without having to notify you (during and after the completion of the processing) or grant you comparable legal remedies and data subject rights. Unfortunately, we have no influence on the processing by third country authorities in these cases.

If you wish to do so, you can disable the Custom Audiences remarketing feature in the Ads Settings section at the following link if you are logged into Facebook: https://www.facebook.com/adpreferences/ad_settings.

If you do not have a Facebook account, you can also opt out of Facebook’s usage-based advertising on the European Interactive Digital Advertising Alliance website: https://www.youronlinechoices.com/de/praferenzmanagement/.

For more information about Facebook’s data protection measures, please see Facebook’s privacy policy at the following link: https://de-de.facebook.com/about/privacy/.

4.2.5.3. Rank Math Plugin

A Rank Math SEO plugin is integrated on this website. The provider of this plugin is ONE.COM India Private Limited (Office No. 2, Floor 5, Tower A, Building. 9 DLF Cyber City Complex, Phase III, Haryana, Gurgaon, India; “Rank Math”).

This plugin does not store or receive any personal data, it simply fetches the data via the API to display it in the WordPress admin area and store it in SolaVieve’s website’s database. Rank Math neither has information regarding how people interact with the plugin nor identifies common situations in which issues may arise when using Rank Math. Rank Math does not store or process any of Google Analytics, Google Search Console or Google AdSense data on its servers.

The Rank Math SEO Plugin is used on the basis of our legitimate interest in the widest possible visibility on the internet.

For more information on the plugin and Rank Math’s data processing please see: https://rankmath.com/usage-tracking/ and https://rankmath.com/privacy-policy/.

4.2.6. Customer Relationship & Marketing Measures

We also process your personal data as part of our customer relationship management and marketing measures for management, analysis, advertising and optimization purposes. The respective data processing is described in detail below.

4.2.6.1. Newsletter

Within the scope of registering for our newsletter on our website as well as when receiving and cancelling our newsletter, personal data is processed by us if you decide to subscribe, provide us with the relevant data and subscribe to our newsletter by means of our double opt-in procedure.

When you register for our newsletter, we need and process your email address. Further data is not collected or only on a voluntary basis. The legal basis for the processing of your personal data during registration is our legitimate interest in carrying out the verification procedure as part of the double opt-in process in accordance with Art. 6 (1) lit. f GDPR. Since you initiate this procedure through your registration, we assume that our processing is not opposed by any important interests on your part.

To verify your email address, you will then receive a registration email, which you must confirm via a link (double opt-in). When you confirm the registration for the newsletter, we store the IP address and the date and time of your confirmation. The documenting processing of this data is necessary to prove that you have given your consent. The legal basis results from our legal obligation to prove your consent (Art. 6 (1) lit. c in conjunction with Art. 7 para. 1 GDPR).

The aforementioned personal data will also be stored by our mailing provider Hubspot (HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA; “HubSpot”) within the scope of and used for the purpose of mailing. The legal basis for the processing of your personal data within the scope of the subscription is your consent pursuant to Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future via the link (“Unsubscribe”) provided for this purpose in the newsletter. The legal basis for the processing of your data in the context of the evaluation and performance measurement of the newsletter is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. A conflicting interest on your part is not apparent.

In a few cases, the processing of your personal data may also take place on the basis of our legitimate interest in advertising our products (Art. 6 (1) lit. f GDPR), for example if you are an existing customer of our company [see also recital 47 GDPR and Section 7 German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb; “UWG”)].

When you unsubscribe from our newsletter, your aforementioned personal data will be deleted from the distribution list. Data that has been stored by us for other purposes remains unaffected.

In order to ensure data protection-compliant processing and protection of your data, we have concluded a data processing agreement with HubSpot within the meaning of Art. 28 GDPR. In this contract, HubSpot assures in particular that it will only process personal data if and to the extent necessary to fulfill its service obligations.

Please note: Since Hubspot is certified under the transatlantic Privacy Framework, the related access from or data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed for the EU-US data transfer in accordance with Art. 45 GDPR. HubSpot bases the data transfer to other third countries on the standard contractual clauses of the EU Commission.

For more information on HubSpot’s data protection measures, see HubSpot’s privacy policy at: https://legal.hubspot.com/privacy-policy.

4.2.6.2. Google Ads – Conversion Tracking and Remarketing

If you agree to our marketing cookies, we use Google Ads, an advertising system of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”), including the services Google Ads Conversion Tracking and Google Ads Remarketing, which is operated in Europe by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), for advertising and optimization purposes.

By means of Google Ads, advertisers can place advertisements in Google’s networks – matching the content of the respective website – which are primarily oriented to the search results that arise in the context of the use of any Google services (e.g. Google Search, Google Shopping, Google Maps).

Google Ads uses so-called “cookies”. These are text files that are stored on your device as a result of your consent. By setting the cookies, Google is enabled to read and store your IP address and your interactions on our website if you have been redirected to our website via an advertisement. Personal data processed includes in detail:

IP address
Browser type, browser software version and browser language
Operating system
Date and time of access
Usage data.

This data is transferred to Google, stored on Google servers and processed by Google, e.g. in order to be able to measure and invoice the costs for any conversions.

With the help of Google Ads Conversion Tracking, Google and we can recognize which actions you have performed on our website. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently – without receiving information that would allow us to identify the user personally. This information is used to create conversion statistics and to further develop our approach and products.

Google Ads Remarketing analyzes your user behavior on our website (e.g. clicks on certain products) in order to classify you into certain advertising target groups and then send you suitable advertising messages when you visit other online offers (“remarketing” or “retargeting”). Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google’s cross-device functions, so that interest-based, personalized advertising messages that have been adapted to you based on your previous usage and surfing behavior on a specific device can also be displayed on another of your devices (e.g. tablet or PC).

The legal basis for the respective data processing is your consent given to us in accordance with Art. 6 para. 1 lit. a GDPR and §§ 13, 25 para. 1 TTDSG. You can revoke your consent at any time with effect for the future via our Privacy Icon on our website or by sending an email to legal@solavieve.com. The legality of processing based on your consent until revocation remains unaffected.

The personal data collected on our website when using the tool is stored on servers of Google Ireland Ltd. in Europe. However, despite primary processing in Europe, Google may process your personal data in any country where Google maintains facilities or sub-processors, including the United States. Since Google LLC. is certified under the transatlantic Privacy Framework, the related access from or, as the case may be, data transfer to the US is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR. For data access from or data transfer to other third countries, we have also concluded standard contractual clauses of the European Commission with Google LLC in order to ensure an adequate level of protection in these cases as well.

Please note: We have no influence whatsoever on the area of the affiliated network (e.g. the website of the third-party provider that contains the advertisement) that is upstream of our website. We can therefore neither guarantee compliance with the GDPR requirements nor accept liability for any information deficits or other deficits that may exist in the context of a consent request over which we have no control.

If you have a Google account, you can object to personalized advertising at the following link: https://adssettings.google.com/authenticated?hl=de.

You can find more information about the privacy policy and terms of use of Google Ads and the respective technologies here:

4.2.6.3. Google Maps / Reviews on Google Maps

Moreover, we use external graphic links in order to present you Google reviews regarding our company and allow you to rate our company on Google Maps. You can recognize the link by the Google logo on this website.

Provider of the online map service, which is operated in Europe by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), is Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”).

If you click on the Google logo (e.g. at the end of our posts on our website (“Our reviews”)), we take the Google Maps URL of our company profile. In this case, there is no redirection via our site, but an independent and separate new tab is opened with the created URL, through which you can rate our company – now on Google Maps itself. When the new tab is opened, a connection is established between your browser and the Google server. However, this solution only allows users who are logged in to Google to rate our company. If you are not logged in to your Google account, you will only be shown a Google login page when you open the new tab.

We would like to point out that we, as the provider of this website, do not have or receive any knowledge of the personal data processed and possibly transmitted by Google or of its use by Google and are not liable for the processing carried out by Google.

If you do not wish to rate our company via Google, please do not click on the graphic link provided on our website or log out of your Google account before clicking on the link.

The use of the external Google graphics link by us is based on our legitimate interest in the widest possible visibility and our legitimate interest in complying with your request expressed by clicking on the link, Art. 6 para. 1 lit. f GDPR. Until you click on the link, neither script nor personal data will be loaded. After clicking on the link, Google is solely responsible for the processing.

Please note: According to Google, data collected by Google is transferred to the USA and possibly to other third countries and processed there. Since Google LLC. is certified under the transatlantic privacy framework, the relevant access from or data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed for the EU-US data transfer in accordance with Art. 45 GDPR. The data transfer to other third countries is based by Google on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks?hl=en.

Please note: Third countries to which Google transfers data may currently be classified as unsafe third countries, i.e. third countries with respect to which neither an adequacy decision pursuant to Art. 45 GDPR exists nor a comparable level of protection can be assumed. In the context of the transfer of your data to Google, third country authorities may therefore gain access to or process your data without having to notify you (during and after the completion of the processing) or grant you comparable legal remedies and data subject rights. We have neither influence on the processing by Google nor third country authorities.

For more information about Google’s data protection measures, please see Google’s privacy policy at the following link: https://policies.google.com/privacy?hl=en.

4.2.6.4. Youtube

Our website embeds videos from YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA; “YouTube”), which is a subsidiary of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). The European operator of the YouTube video portal is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

We use YouTube in extended privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch a video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may store various cookies on your terminal device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts. If applicable, further data processing operations may also be triggered after the start of a YouTube video. We have no influence on the respective data processing by YouTube or Google.

The legal basis for the described processing of your personal data is your consent given to us according to Art. 6 para. 1 lit. a GDPR and §§ 13, 25 TTDSG. Once you have given your consent, you can revoke it at any time with effect for the future by sending an email to legal@solavieve.com. The legality of any processing already carried out up to the time of the revocation remains unaffected by this.

Please note: Google may process your personal data in any country where Google maintains facilities or sub-processors, including the United States. Since Google LLC. is certified under the transatlantic Privacy Framework, the related access from or, as the case may be, data transfer to the US is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR.

For more information about YouTube’s data protection measures, please see YouTube’s privacy policy at the following link: https://policies.google.com/privacy?hl=en.

4.2.7. Application and recruitment process

If you apply to us (e.g. by e-mail or contact form), we will process your details and the documents you send us, including the personal data contained therein, for the purpose of processing your application. Your data will be processed by our service provider JOIN Solutions GmbH (Schönhauser Allee 36, 10435 Berlin; “JOIN”), which we use as a processor. The data processed here includes at least the mandatory information on first and last name, address, e-mail address and telephone number, and, in the event you provide it, the voluntary information on place and date of birth, citizenship and your application photo, as well as any other information provided by you and / or documents submitted by you.

If and insofar as you apply to us by e-mail or contact form, the legal basis for the processing is our legitimate interest according to Art. 6 (1) lit. f GDPR. We have a legitimate interest in the complete processing of your application. Since you are submitting your application to us, we assume that there are no conflicting interests on your part with regard to our processing. If we have your consent, the legal basis for the processing is this consent, Art. 6 para. 1 lit. a GDPR or, if applicable, Art. 9 para. 2 lit. a GDPR. If an employment relationship is established, personal applicant data is processed for the purpose of establishing and implementing the employment relationship on the basis of Section 26 (1) and (3) BDSG. In the case of applications that do not lead to a contractual relationship, we also have a legitimate interest pursuant to Art. 6 (1) f GDPR to keep track of the application documents for a limited period of time (see Section 8 of this Privacy Policy) in order to enforce our legal claims or defend ourselves against lawsuits.

For more information about Join’s data protection measures, please visit: JOIN Privacy Policy and in JOIN’s Terms of Services.

4.3. Data processing in the specific context of SolaVieve’s mobile apps

4.3.1. Downloading the SolaVieve mobile app from the respective App-Store

When you download our mobile app, you transmit personal data to the operator of the respective app store (for iOS devices: Apple App-Store – Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA; “Apple”; for Android devices: Google Play-Store – Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). This includes your email address, the time of the download and your individual device identification number. We have no influence on this data processing and are not responsible for it. Personal data is not transmitted to us.

Please note: Within the scope of the download via the app stores, your personal data may be transferred to servers in the USA and processed there. Since Google LLC is certified under the transatlantic Privacy Framework, the access from or data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed in accordance with Article 45 of the GDPR. Apple, on the other hand, is not certified under the transatlantic Privacy Framework (“EU-US-DPF”), so that neither the European Commission’s adequacy decision applies nor an adequate level of protection can be assumed. In the case of iOS devices and with transmission to Apple servers in the USA, US authorities can therefore gain access to your transmitted data and process your data without you having to be notified or informed (during and also after completion of the processing) or being entitled to comparable legal remedies and data subject rights.

4.3.2. App permissions

The SolaVieve mobile app use the following permissions:

Permission	Purpose
Internet access	Connection establishment and communication with the hosting service
Geolocation data (only with prior consent)	Availability and provision of specific feature(s) that is/are available only in (a) specific area(s).

4.3.3. Content Delivery Network

For our app, we also use a so-called Content Delivery Network (“CDN”), i.e. a service provider that optimizes the transmission of content via the Internet. For this purpose, we use Google Cloud CDN, a global edge network of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, United States; “Google”), which is operated in Europe by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). Technically, the transfer of information between your browser and our Online Services is routed through the Google network. This enables us to increase the global accessibility and performance of our Online Services.

When visiting our Online Services, personal data is processed; this applies in particular to technical connection data of the server access (IP address, date, time, requested page, device information (brand, model, operating system, browser type and version).

The CDN is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our Online Services by a professional provider (Art. 6 para. 1 lit. f GDPR).

To ensure data protection-compliant processing and protection of your data, we have concluded a data processing agreement with Google within the meaning of Art. 28 GDPR.

The personal data collected through our app when using the tool is stored on the servers of Google Cloud EMEA Ltd. in Europe. However, despite primary processing in Europe, Google may process your personal data in any country where Google maintains facilities or sub-processors, including the United States. Since Google LLC. is certified under the transatlantic Privacy Framework, the related access from or, as the case may be, data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR. For data access from or data transfer to other third countries, we have also concluded standard contractual clauses of the European Commission with Google LLC in order to ensure an adequate level of protection in these cases as well.

For more information about Google’s data protection measures and Google Cloud CDN, see the following links:

4.3.4. Technically required data collection and consent request

When accessing our app, your end device automatically transmits data to us that is required for technical reasons.

The following data will be processed by us:

IP address
Date and time of the request
Unique number of the terminal device (IMEI = International Mobile Equipment Identity),
Unique number of the network subscriber (IMSI = International Mobile Subscriber Identity),
Mobile network number (MSISDN)
MAC address for WLAN use
Name of your mobile device.

We do not merge the aforementioned data with other data sources.

The collection of the aforementioned data is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in the functioning and technically error-free display of our app. For this purpose, this data must be collected. Since you are using our app, we assume that our data processing is not opposed by any more important interests on your part.

4.3.5. Registration/User Account

Within the scope of the registration processes described below, we process personal data for the purpose of creating your user account and/or for the provision of the respective offer or service for which you have registered. For this reason, we inform you below about the data processing that takes place in each case.

4.3.5.1 Direct registration

You must register on our mobile app to use our services and features (such as managing your subscription).

The data requested during the respective registration (mobile app: mandatory – name, email address and password;) are mandatory data in purely practical terms and must be provided in full, as otherwise the user account cannot be created or the offer or service not be provided. However, you are neither contractually nor legally obliged to provide this information. If you do not provide this information, we will not be able to create the user account for you or provide the services and functions.

The legal basis for the processing of your personal data is the existing contractual relationship with you, in the context of which we create your user account or provide you with the services and functions, Art. 6 para. 1 lit. b GDPR.

4.3.5.2. Registration with Google account

For using our mobile app, you can also register with your Google account. The provider of this service is Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, United States; “Google”), which is operated in Europe by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland).

If you decide to register with your Google account and click on the “Google” button on the account creation page, you will be automatically redirected to the Google platform. There you can log in with your account data. This will link your Google profile with our mobile app. This link gives us access to your data stored on Google. These are above all

Google email address (mandatory field)
Google username.

This data is used to set up, provide and personalize your account.

Registration with Google Login and the associated data processing operations are based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time with effect for the future by simply sending us an e-mail at legal@solavieve.com. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The legal basis for the processing of your personal data by us is the contractual relationship that is being established or exists with you, in the context of which we create your user account or provide you with the services and functions, Art. 6 para. 1 lit. b GDPR.

You are neither contractually nor legally obliged to register with your Google account or to provide Google or us with your data. However, your registration data is required in order to set up a user account for you and to provide you with all the services and functions of our online offers, so that we can neither create the user account nor provide you with our online offers in full without it.

To protect your data, including in transfer, we have concluded an order processing contract with Google within the meaning of Art. 28 GDPR.

Please note: Despite the fact that Google Ireland Ltd. is based in Ireland, your personal data may be transferred to Google LLC servers in the USA and other third countries if you choose this registration route. Since Google LLC is certified under the Transatlantic Privacy Framework, the relevant access from or data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed with regard to the USA in accordance with Art. 45 GDPR.

Further information on Google’s privacy policy and terms of service can be found at:

4.3.5.3. Registration with Facebook Login

For using our mobile app, you can also register with Facebook. The provider of this service is Meta Platforms Inc (1601 Willow Road, Menlo Park, CA 94025, USA), which is operated in Europe by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland; “Facebook”).

If you decide to register with Facebook Login and click on the “Facebook” button on the account creation page, you will be automatically redirected to the Facebook platform. There you can log in with your account data. This will link your Facebook profile with our mobile app. This link gives us access to your data stored on Facebook. These are above all

Facebook name (mandatory field)
e-mail address stored on Facebook (optional).

This data is used to set up, provide and personalize your account.

Registration with Facebook Login and the associated data processing operations are based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time with effect for the future by simply sending us an e-mail (legal@solavieve.com). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Insofar as personal data is collected on our Online Services with the help of the tool described here and forwarded to Facebook, Meta Platforms Ireland Ltd (Merrion Road, Dublin 4, D04 X2K5, Ireland) and we are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility.

The obligations to which we are jointly subject have been set out in a joint processing agreement. You can find the wording of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the secure implementation of the tool in our Online Services in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you wish to assert data subject rights with us, we are obliged to forward your request to Facebook.

The data transfer by Meta Platforms Ireland Ltd. to the USA and other third countries is carried out by Meta Platforms Ireland Ltd. itself. We have no influence over this. Facebook bases the transfer on the standard contractual clauses of the EU Commission. Further details can be viewed here: https://www.facebook.com/legal/EU_data_transfer_addendum.

Please note: Despite the fact that Meta Platforms Ireland Ltd. is based in Ireland, your personal data may be transferred to Meta Platform servers in the USA and other third countries if you choose this registration route. Since Meta Platforms Inc. is certified under the Transatlantic Privacy Framework, the relevant access from or data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed with regard to the USA in accordance with Art. 45 GDPR.

Further information on Facebook’s privacy policy and terms of use can be found at:

4.3.5.4. Registration with Apple-Account (Mobile App – iOS devices)

Alternatively and only in case of iOS devices, you can also sign in with your Apple account. In this case, we receive the following personal data from Apple Inc (One Apple Park Way, Cupertino, CA 95014, USA; “Apple”) in order to create a user account for you and provide it to you:

Name
e-mail address
Authentication token.

You are neither contractually nor legally obliged to register with your Apple account or to provide Apple or us with your data. However, your registration data is required in order to set up a user account for you and to provide you with all the services and functions of our online offers, so that we can neither create the user account nor provide you with our online offers in full without it.

To protect your data, including in transfer, we have concluded an order processing contract with Apple within the meaning of Art. 28 GDPR and standard contractual clauses to ensure that processing is limited to the fulfillment of performance obligations and, in the case of transfer to the USA, an adequate level of data protection.

Please note: Apple is currently not certified under the Transatlantic Privacy Framework (“EU-US-DPF”), so the adequacy decision of the European Commission does not apply. For iOS devices and with transmission to Apple servers in the USA, US authorities could therefore gain access to your transmitted data and process your data without having to provide you with any notice or notification (during and even after the processing has been completed) or without you being entitled to comparable legal remedies and data subject rights. Unfortunately, we have no influence on the processing by US authorities.

You can find more information on Apple’s privacy policy in this regard in Apple’s Privacy Policy under https://www.apple.com/legal/privacy/en-ww/.

4.3.6. Firebase Authentication

In the context of our mobile app, we use the authentication service of Firebase, a development tool of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”), which is operated in Europe by Google Cloud EMEA Ltd. (70 Sir John Rogerson’s Quay, Dublin 2, Ireland).

As part of our use of the Firebase authentication service, the following personal data is processed

Password
e-mail address
User ID
IP address.

The legal basis for the processing is the contract that is in the process of being concluded or has been concluded with you, Art. 6 (1) lit. b GDPR.

To protect your data, we have concluded an order processing contract with Google Cloud EMEA Ltd. within the meaning of Art. 28 GDPR, in which Google guarantees that it will only process the data for the purpose of providing the service.

The personal data that is collected as part of our platform/app when using the authentication service is stored on Google servers in Europe, according to the assurance of our processor. However, despite primary processing in Europe, Google may process your personal data in any country in which Google has facilities or sub-processors, including the USA. Since Google LLC. is certified under the Transatlantic Privacy Framework, the relevant access from or, if applicable, data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed in accordance with Art. 45 GDPR. For data access from or data transfer to other third countries, we have also concluded standard contractual clauses of the European Commission with Google LLC. in order to ensure an adequate level of protection in these cases as well.

Further information on Google’s privacy policy and terms of use, Firebase’s terms of use, and the data processed when using the Firebase authentication service can be found at the following links:

4.3.7. eCommerce and payment providers

4.3.7.1. Subscriptions to chargeable services of our Online Services

You can subscribe to our services for a fee within the mobile app. In addition to the data required for registration (see above section 4.3.4. of this privacy policy), we collect the data required for the performance of the subscription, namely: date of purchase, start date, end date of the subscription, whether it is automatically renewed and a transaction ID.

The legal basis for the processing is the contract that is in the process of being concluded or has been concluded with you, Art. 6 (1) lit. b GDPR.

4.3.7.2. Processing of customer and contract data

We collect, process and use personal data of our customers insofar as it is necessary for the establishment, content or amendment of the legal relationship (inventory data). We also collect, process and use personal data about the use of our Online Services (usage data) insofar as this is necessary to enable the user to use the offer or to bill the user.

This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. You are neither contractually nor legally obliged to provide the corresponding data. However, if you do not provide it, you may not be able to conclude a contract with us for the use of our Online Services.

4.3.7.3. Payment

Depending on the order, you have the payment options presented in subsequent sub-chapters. Depending on the payment method you have chosen, the data required per method will be processed. We transmit your personal data to third parties if this is necessary in the context of the contract, such as to the credit institution entrusted with the payment processing. A further transmission of data does not take place or only if you have expressly consented to the transmission (Art. 6 para. 1 lit. a GDPR). Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or for the execution of pre-contractual measures. You are neither contractually nor legally obligated to provide the corresponding data. However, if you do not provide required data, you may not be able to conclude a contract with us or use our Online Services.

4.3.7.3.1. Stripe

Certain orders (concerns: existing customers in automatic subscription renewal) are processed via our service provider Stripe (Stripe Inc., 354 Oyster Point Blvd, South San Francisco, USA “Stripe”). Stripe is solely responsible for the collection and processing of your contract and payment data. Your data will be kept by Stripe after a subscription cancellation for tax reasons.

To ensure that your data is processed and protected in accordance with data protection laws, we have concluded a mixed data processing agreement with Stripe, in which Stripe functions as processor as well as an independent data controller.

In the course of processing your order via Stripe, your personal data is transferred to Stripe servers in the USA and processed there. Since Stripe Inc. is certified under the transatlantic Privacy Framework, the data transfer to America in this regard is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed in accordance with Article 45 of the GDPR.

For more information on how Stripe processes your data, please see Stripe’s privacy policy: https://stripe.com/en-gb/privacy.

4.3.7.3.2. Glassfy

Certain orders (concerns: existing customers in automatic subscription renewal) are processed via our payment provider Glassfy (Briseide Ltd, 37 Warren Street, London, United Kingdom, W1T 6AD “Glassfy “).

To ensure that your data is processed and protected in accordance with data protection laws, we have concluded a data processing agreement with Glassfy, in which Glassfy functions as processor.

For more information on how Glassfy processes personal data, please see Glassfy’s privacy policy: https://glassfy.io/privacy_policy/.

4.3.7.3.3. Payment processing via the respective app store

Payment processing is also possible via the Apple App Store (Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA; “Apple”) and the Google Play Store (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). In the context of processing via the app stores, SolaVieve receives and processes your email address for billing purposes. Beyond that, SolaVieve does not process any other personal data, including any payment information. The app store providers themselves are responsible (controller) for the processing.

Please note: In the context of payment processing via the app stores, your personal data may be transferred to servers in the US and processed there. Since Google LLC is certified under the transatlantic Privacy Framework, access from or data transfer to America is subject to the adequacy decision of the European Commission, so that an adequate level of protection is guaranteed in accordance with Article 45 of the GDPR. Apple, on the other hand, is not certified under the transatlantic Privacy Framework (“EU-US-DPF”), so that neither the European Commission’s adequacy decision applies nor an adequate level of protection can be assumed. To protect your data, we have therefore concluded standard contractual clauses with Apple to ensure an adequate level of data protection in the event of transfer to the US. In the case of iOS devices and with transmission to Apple servers in the US, US authorities can nevertheless gain access to your transmitted data and process your data without you having to be notified or informed (during and also after completion of the processing) or being entitled to comparable legal remedies and data subject rights. Unfortunately, we have no influence on the processing by US authorities.

For more information about Google’s and Apple’s privacy policies and terms of use, please see the links below:

Google Privacy & Terms

Apple Privacy Policy.

4.3.8. Push notifications

If you wish, we will send you information about the contents and functions of the app via push notification. You can choose and define which notifications you receive from us yourself in your app settings.

If you wish to receive push notifications from us, the following personal data will be processed by us in this context and for the purpose of sending the notification to you:

APNs
FCM Push Tokens.

Please note: For the purpose of the technical implementation of the push notification, Apple and Google may process further personal data stored by them, such as your IP address or device information. However, Solavieve, as the operator of the app, has neither influence on this nor is Solavieve responsible for this processing.

For the purpose of sending push notifications we use the service provider Firebase (please also see section below), a tool provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”), which is operated in Europe by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland).

If and insofar as the data processing takes place in order to provide you with information on functions that we make available to you within the scope of your user contract with us, the legal basis for the data processing is the initiated or existing user contract with you (Art. 6 para. 1 lit. b GDPR). In all other cases, your consent is the legal basis for processing in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time by unsubscribing from push notifications in the app via “profile options” >> “notifications” or by sending a simple email to legal@solavieve.com with effect for the future. In addition, you can also generally deactivate push notifications via the settings of your smartphone. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

The personal data collected on our app when using the tool is stored on servers of Google Ireland Ltd. in Europe. However, despite primary processing in Europe, Google may process your personal data in any country where Google maintains facilities or sub-processors, including the United States. Since Google LLC. is certified under the transatlantic Privacy Framework, the related access from or, as the case may be, data transfer to the US is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR. For data access from or data transfer to other third countries, we have also concluded standard contractual clauses of the European Commission with Google LLC in order to ensure an adequate level of protection.

More information about Google’s Privacy Policy and Terms of Service, Firebase’s Terms of Service, and the data processed in the course of using the respective Firebase tools can be found at the following links:

4.3.9. Firebase & Google Analytics for Firebase

We use Firebase for our mobile app (Android/iOS), an analytics, monitoring, and development tool provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”), which – depending on the respective service (see listing here) – is operated in Europe by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland) or Google Cloud EMEA Ltd (70 Sir John Rogerson’s Quay, Dublin 2, Ireland).

This service provides tools and infrastructure via a software development kit that allow us to provide app functionality more easily and efficiently. In particular, the tools used allow us to communicate with your device, to statistically evaluate and analyze our app services and your user behaviour, and to further develop our app functions.

We use the following Firebase tools for this purpose: Firebase Hosting, Firebase Cloud Messaging, Firebase Authentication, Firebase Realtime Database and Google Analytics for Firebase.

As part of our use of the Firebase tools Firebase Hosting, Firebase Cloud Messaging, Firebase Authentication and Firebase Realtime Database, the following personal data is processed:

IP address
Firebase installation ID
User agent
Email address
Password.

As part of our use of Google Analytics for Firebase, the following personal data are processed:

Mobile Ad ID
IDFV / Android ID
Firebase installation ID
Analytics app instance ID
IP address (partially anonymized “anonymiseIP”)
Browser information
Operating system information
Date and time of visit
Usage data (incl. scroll depth)
Click path
App updates
Device information
JavaScript support
Visited pages
Referring URL
Downloaded files
Flash version
Location information
Purchase activity
Ad ID, if applicable (if user-approved).

If and insofar as the processing of the aforementioned personal data takes place in the context of the use of the Firebase tools Firebase Hosting, Firebase Cloud Messaging, Firebase Authentication and Firebase Realtime Database for the purpose of initiating or fulfilling a contract between you and us, the legal basis for the data processing that takes place is the contractual relationship that is being initiated or is to be fulfilled pursuant to Art. 6 (1) lit. b GDPR. If and insofar as this does not apply, the data processing is based on our overriding legitimate interest in a simple and efficient provision of the functions of our app, Art. 6 (1) lit. f GDPR. Since you are using our app functions, we assume that our data processing on your part is not opposed by any interests that are to be weighted higher.

If and insofar as the processing of the aforementioned personal data takes place in the context of our use of Google Analytics for Firebase, the legal basis for the processing of your personal data is your consent pursuant to Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by sending a simple email to legal@solavieve.com. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of your consent until the revocation.

In the absence of possible agreements between responsible parties and to protect your data, we have concluded data processing agreements within the meaning of Art. 28 GDPR with Google, specifying the respective tool’s own data processing conditions (Google Ads for Google Analytics, Firebase).

The personal data collected on our app is stored on servers of Google Ireland Ltd. or Google Cloud EMEA Ltd. in Europe. However, despite primary processing in Europe, Google may process your personal data in any country where Google maintains facilities or sub-processors, including the United States. Since Google LLC. is certified under the transatlantic Privacy Framework, the related access from or, as the case may be, data transfer to the US is subject to the adequacy decision of the European Commission, so that an adequate level of protection is ensured in accordance with Article 45 of the GDPR. For data access from or data transfer to other third countries, we have also concluded standard contractual clauses of the European Commission with Google LLC in order to ensure an adequate level of protection.

4.3.7 Wearable Services

If you choose to use our Wearable Services, it will be necessary for us to process your health data to ensure we can provide the services effectively.

We use the following provider to collect your Wearable information: Terra Enabling Developers Ltd.

We collect the following personal data:

Steps
Physical activity
Sleep
Heart rate

The legal basis for the processing of your personal data is your consent pursuant to Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by sending a simple email to legal@solavieve.com. or by amending the configuration of your APP. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of your consent until the revocation.

More information about how Terra process personal data can be found at the following link Terra Privacy Policy.

Legitimate interests

Unless otherwise stated in this privacy policy and if we base the processing of your personal data on legitimate interests pursuant to Art. 6 (1) lit. f GDPR, such interests are the provision, security and presentation of our Online Services, protection against misuse, the identification and correction of errors, the request for consent for the purpose of legally compliant cookie use, the enforcement or defence against legal claims and the processing of enquiries that arise.

Other recipients and disclosure of data

In addition to the cases mentioned in this data protection declaration, your personal data will only be passed on without your express prior consent in the following cases:

In order to provide and continuously improve our services, we rely on some third-party services that have been carefully selected in accordance with the provisions of the GDPR:

Tools to enable the use of the services of the software (legitimate interest according to Art. 6 (1) lit. f GDPR).
Tools to support the use of the app for the user (fulfilment of the contract according to Art. 6 (1) lit. b GDPR.

If it is necessary to clarify unlawful use of our services or for legal prosecution, personal data will be forwarded to law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behaviour. A transfer may also take place if this serves the enforcement of terms of use or other agreements. We are also legally obligated to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offences subject to fines and the tax authorities.

The disclosure of this data is based on our legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing claims, set in the event that your rights and interests in the protection of your personal data do not prevail, Art. 6 (1) lit. f GDPR, or due to a legal obligation under Art. 6 (1) lit. c GDPR.

We also disclose personal data to auditors, accounting service providers, lawyers, banks, tax advisors and similar entities to the extent that this is necessary for the provision of our services (Art. 6 (1) lit. b GDPR) or the proper operation of our business, including the enforcement of or defence against legal claims and legal proceedings (Art. 6 (1) lit. f GDPR) or we are obliged to do so (Art. 6 (1) lit. c GDPR).

Transfer to third countries

As explained in detail in item 4 of this privacy policy, the processing of personal data happening within the scope of our Online Services takes place exclusively in the European Economic Area and in the United States of America, a third country with an adequacy decision by the European Commission (Art. 45 GDPR), so that an appropriate level of protection is ensured.

However, in the event that international data transfers to third countries would take place in the future and not fall under an adequacy decision, our processors and we would ensure an adequate level of protection, including by means of any necessary supplementary security measures, and rely on the guarantees pursuant to Article 46 of the GDPR or, if applicable, on the provisions of Article 49 of the GDPR.

Note: If you would like more information about this, please contact us at any time at legal@solavieve.com.

Storage period

General:

Unless a more specific retention period is stated within this privacy policy, we will only retain your personal data for as long as is necessary to achieve the relevant processing purpose. We store your data (i) if you have consented to the processing, at most until you revoke your consent; (ii) if we need the data to initiate or perform a contract, at most for as long as the contractual relationship with you is in progress, exists or is settled (including the defence and enforcement of claims within the limitation periods); (iii) if we process the data on the basis of a legitimate interest, at most for as long as your interest in the deletion or anonymisation of the data does not outweigh this.

In addition, data may be stored if this has been provided for by the European or national legislator in ordinances, laws or other regulations to which the responsible party is subject (including tax law, commercial law, combating money laundering, etc.) or if this is necessary to secure, assert or enforce legal claims (Art. 6 para. 1 lit. f GDPR). In order not to violate legal regulations or to lose the possibility of enforcing a claim or defending ourselves against such a claim, we reserve the right to delete the data only upon expiry of the last expiring retention period that legitimises the data storage.

Applicant data and documents:

In the event of a negative decision, we store applicant data and documents for the duration of the recruitment process and for a period of two months from receipt of the rejection if (i) the application does not lead to an employment relationship, (ii) no further storage has been agreed and (iii) no claims have been asserted against us by an applicant within the preclusion period provided for in Section 15 (4) of the German General Act on Equal Treatment (Allgemeinen Gleichbehandlungsgesetz; “AGG”). If claims are asserted within the aforementioned preclusion period, the retention period shall be extended by at least the 3-month period stipulated in Section 61 b (1) of the German Labor Courts Act (Arbeitsgerichtsgesetz, “ArbGG”). If no action is brought within this period, we will destroy the applicant documents; otherwise we will retain the documents until a court decision has become final.

In the event of a successful application, we store the applicant’s documents in the employee’s personnel file, if necessary, for the duration of the employment relationship and the statute of limitations under employment law. In the event of a lawsuit based on the employment relationship, we will also retain the documents, if necessary, until a court decision has become final.

Data Deletion Process We respect your right to control your personal data. If you wish to delete your account and request the erasure of the personal data we hold about you, you can do so by taking the following steps:Via Email: Send an email to legal@solavieve.com from the email address associated with your account, using the subject line “Data Deletion Request.”In-App (If applicable): Navigate to Profile > Delete Account within the SolaVieve app.Upon receiving your request, we will delete your personal data within 30 days, except for data we are legally required to retain (such as transaction records for tax purposes).

Your rights as a data subject

When your personal data is processed, the GDPR grants you the following rights. You can exercise the rights described in sections 9.1.-9.7. at any time by sending an email to legal@solavieve.com. The right to lodge a complaint described in section 9.8. must be exercised vis-à-vis the respective competent supervisory authority.

Please note: When exercising your rights under Articles 15 to 22 of the GDPR, the personal data you provide will be processed in order to process your request and to be able to provide evidence thereof. The legal basis of the documenting processing is either Art. 6 (1) (c) of the GDPR, if and to the extent that we are legally obliged to provide the proof of processing within the scope of our accountability, or our legitimate interest in evidence-based establishment, exercise or defence of legal claims according to Art. 6 (1) (f) of the GDPR.

9.1. Right of acces (Art. 15 GDPR, §§ 29, 34 BDSG)

In accordance with Art. 15 GDPR in conjunction with. §§ Sections 29 and 34 of the German Federal Data Protection Act (BDSG), you have the right to request confirmation as to whether personal data relating to you is being processed; if this is the case, you have the right to information about this personal data and to the information listed in detail in Article 15 GDPR.

9.2. Right of rectification (Art. 16 GDPR)

You have the right to request the correction of incorrect personal data relating to you and the completion of incomplete data without delay.

9.3. Right to erasure (Art. 17 GDPR, § 35 BDSG)

You have the right to request the immediate deletion of the personal data concerning you, provided that the conditions listed in Art. 17 of the GDPR are met and no legal provision justifies further processing.

9.4. Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Article 18 of the GDPR applies, e.g. if you dispute the accuracy of processed data or have objected to the processing. If you make use of this right, the restriction of processing shall apply at least for the duration of the review by the controller, so that during this period, apart from being stored, the data concerned will only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

9.5. Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Article 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

9.6. Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If you exercise your right, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Article 21 (1) GDPR in conjunction with Section 36 BDSG).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection pursuant to Art. 21 (2) GDPR).

9.7. Revocation of consent (Art. 7 (3) GDPR)

You also have the right to revoke your consent to the processing of personal data at any time with effect for the future. To do this, you can either change the respective consent status via the configuration provided by us or send us an informal message by e-mail at the above-mentioned e-mail address. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

9.8. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Pursuant to Article 77 of the GDPR, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you infringes the GDPR or other data protection provisions. This right of appeal is without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is the:

Baden-Württemberg State Commissioner for Data Protection and Freedom of Information

Home address: Lautenschlagerstraße 20

70173 Stuttgart, Germany

Postal address: Postfach 10 29 32

70025 Stuttgart, Germany

Phone: +49(0)711/615541-0
Fax: +49 (0)711/615541-15

Email: poststelle@lfdi.bwl.de

Necessity of the provision of personal data

You are neither legally nor contractually obliged to provide your personal data. However, the provision of personal data may result from (pre-)contractual necessities or may be purely technically required.

With regard to our Online Services, it generally applies that the personal data required for use are marked as such or are requested or processed within the scope of technical necessity. In the event that this data is not provided, this may result in certain functions of our Online Services not being available or our Online Services not being able to be used in their entirety.

In case of doubt, you can contact us in confidence at any time at legal@solavieve.com before providing personal data. We will be happy to explain to you on a case-by-case basis whether the provision of data is necessary for technical reasons or for the initiation or execution of a contract and what the consequences of not providing the data would be in each individual case.

Automated decision making

We do not use any mechanisms for automated individual decision-making – including profiling – that have legal effect vis-à-vis you as a data subject or affect you significantly in a similar way.

Data security

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities. To secure your data, we maintain technical and organisational security measures in accordance with Art. 25 and 32 GDPR, which we constantly adapt to the latest state of the art.

If we also use the services of third parties for the processing of your data, these are selected carefully and in accordance with the statutory provisions.

Note: If you would like more information about this, please feel free to contact us at any time at legal@solavieve.com.

Status and changes to this privacy policy

We reserve the right to change this privacy policy at any time in compliance with applicable laws and regulations.

For the use of our Online Services, the version available online at the time of your visit applies. The current version of this privacy policy is always available at: https://solavieve.com/data-privacy/.

Date: 27.01.2025

Who is responsible?
What do we collect?
Why and how?
How do we protect you?
Retention of your data
Your rights and choices
Links to other third-party websites
Third Parties
Integration of third-party services
Updates to this Privacy Policy
How to contact us?
Additional Terms
HIPAA