Privacy Policy

1. Controller

Solid Safety GmbH
Rheinstraße 22
65185 Wiesbaden
Germany

Represented by the Managing Director Sharif Jusufi
Phone: +49 611 950 123 20
Email: info@solid-safety.de

For any questions about data protection or to exercise your rights, please contact us using the details above.

2. Overview

We process personal data only where this is necessary to operate this website, answer your enquiries, handle job applications or – with your consent – measure website usage. We do not sell data and do not use it for advertising. The legal framework is the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

3. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, on servers in Germany. We have concluded a data processing agreement with STRATO under Art. 28 GDPR.

When you visit the website, the server automatically processes technically necessary data: IP address, date and time, page requested, referrer URL, browser and operating system. This data is required to deliver the website and keep it secure (e.g. to fend off attacks). The legal basis is Art. 6(1)(f) GDPR. Log files are deleted automatically after a short period unless they are needed to investigate a security incident.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock icon in your browser’s address bar.

5. Cookies, local storage and consent

We use technically necessary cookies and local storage entries without which the website would not work as intended (Sec. 25(2) TDDDG, Art. 6(1)(f) GDPR). These include:

• Cookie consent (plugin “GDPR Cookie Consent” by WebToffee, running locally on our server): stores your choice in the cookie banner, e.g. viewed_cookie_policy and cookielawinfo-checkbox-*, retention up to 12 months.
• Language selection (WPML): stores your chosen language, e.g. wp-wpml_current_language, for the session or up to 24 hours. In addition, we store in your browser’s local storage (ss_lang) whether the language was selected automatically based on your browser settings or changed by you.
• Security: when the login area is accessed, the plugin “Limit Login Attempts Reloaded” processes the IP address to prevent attacks on user accounts.

All other cookies and services that are not strictly necessary are used only with your consent (Sec. 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time with effect for the future via the cookie settings: Open cookie settings.

6. Website analytics

WP Statistics

We use the WP Statistics plugin to analyse page views. The data is stored exclusively on our own server and is not shared with third parties. It records, among other things, pages viewed, referrer, browser type, device type and approximate location (country/city). IP addresses are anonymised and hashed before storage so that no individual can be identified. WP Statistics does not set cookies. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving our website.

Jetpack Stats

We use the Jetpack plugin with its “Jetpack Stats” feature, provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Information about your use of the website (including IP address, pages viewed, browser and referrer) is transmitted to Automattic’s servers and analysed in pseudonymised form. Data may be transferred to the USA; Automattic is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG) where information is stored on or read from your device, and otherwise Art. 6(1)(f) GDPR. More information: automattic.com/privacy.

Google Analytics 4

Only if you give your consent in the cookie banner do we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies (e.g. _ga, _ga_*, retention up to 2 years) to analyse how the website is used, e.g. pages viewed, time on site, device and approximate location. IP addresses are truncated within the EU and are not stored. Data may be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Google. The legal basis is your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG), which you can withdraw at any time via the cookie settings. More information: policies.google.com/privacy.

7. Fonts

Fonts are loaded locally from our own server. No connection is made to Google Fonts servers.

8. Contact via form, email, phone or WhatsApp

If you contact us via the enquiry form, by email or by phone, we process the details you provide (e.g. name, company, email address, phone number, project location and your message) to handle your enquiry and, where applicable, prepare a quote. The form is processed on our server using the Contact Form 7 plugin and sent to us by email. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR. We delete the data once your enquiry has been fully dealt with, unless statutory retention periods apply (e.g. 6 years for business correspondence under the German Commercial Code, 10 years under the German Fiscal Code).

WhatsApp: The website contains a link that lets you message us via WhatsApp. A connection to WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a Meta group company) is only established when you click the link. WhatsApp then processes your phone number, metadata and the content of your message; data may be transferred to the USA (Meta is certified under the EU-U.S. Data Privacy Framework). The legal basis is Art. 6(1)(a) and (b) GDPR. If you do not want this, please use phone, email or our form instead.

9. Job applications

If you apply via our application form or by email, we process your details and uploaded documents (e.g. CV, certificates, proof of qualifications such as the German security qualification under Sec. 34a GewO) to carry out the application process. The legal basis is Art. 6(1)(b) GDPR in conjunction with Sec. 26 BDSG. Only the people involved in the selection process have access.

If you are hired, the data will be transferred to your personnel file. Otherwise, we delete your application documents no later than 6 months after the process has ended, so that we can defend ourselves against claims under the German General Equal Treatment Act (AGG). Longer storage for future vacancies only takes place with your explicit consent.

10. Links to LinkedIn

Our website links to our company profile on LinkedIn. This is a simple link; we do not embed LinkedIn plugins or tracking. Data is only transmitted to LinkedIn when you click the link and open the LinkedIn website (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). LinkedIn’s privacy policy applies there.

11. Recipients and transfers to third countries

Besides us, the only recipients of your data are the service providers named above (hosting, analytics and, where applicable, Google and WhatsApp) and – where required by law – authorities, tax advisers and courts. Data is transferred to countries outside the EU only in the cases described above and on the basis of an adequacy decision (EU-U.S. Data Privacy Framework) or EU Standard Contractual Clauses.

12. Retention

Unless a more specific period is stated in this policy, we store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. It is then deleted.

13. Your rights

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.

14. Obligation to provide data, no automated decision-making

Providing your data is voluntary. However, we cannot process your enquiry or application without the information in mandatory fields. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

15. Changes

We update this privacy policy when the website, our services or the legal situation change. The version published here applies.

This English version is provided for convenience. In case of doubt, the German version of the privacy policy (Datenschutzerklärung) is legally binding.