Privacy Policy

1. Controller

Solid Safety GmbH
Rheinstraße 22
65185 Wiesbaden
Germany

Represented by the Managing Director Sharif Jusufi
Phone: +49 611 950 123 20
Email: info@solid-safety.de

For any questions about data protection or to exercise your rights, please contact us using the details above.

2. Overview

We process personal data only where this is necessary to operate this website, answer your enquiries, handle job applications or – with your consent – measure website usage. We do not sell data and do not use it for advertising. The legal framework is the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

3. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, on servers in Germany. We have concluded a data processing agreement with STRATO under Art. 28 GDPR.

When you visit the website, the server automatically processes technically necessary data: IP address, date and time, page requested, referrer URL, browser and operating system. This data is required to deliver the website and keep it secure (e.g. to fend off attacks). The legal basis is Art. 6(1)(f) GDPR. Log files are deleted automatically after a short period unless they are needed to investigate a security incident.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock icon in your browser’s address bar.

5. Cookies, local storage and consent

We use technically necessary cookies and local storage entries without which the website would not work as intended (Sec. 25(2) TDDDG, Art. 6(1)(f) GDPR). These include:

• Cookie consent (plugin “GDPR Cookie Consent” by WebToffee, running locally on our server): stores your choice in the cookie banner, e.g. viewed_cookie_policy and cookielawinfo-checkbox-*, retention up to 12 months.
• Language selection (WPML): stores your chosen language, e.g. wp-wpml_current_language, for the session or up to 24 hours. In addition, we store in your browser’s local storage (ss_lang) whether the language was selected automatically based on your browser settings or changed by you.
• Security: when the login area is accessed, the plugin “Limit Login Attempts Reloaded” processes the IP address to prevent attacks on user accounts.

All other cookies and services that are not strictly necessary are used only with your consent (Sec. 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time with effect for the future via the cookie settings: Open cookie settings.

6. Website analytics

Google Analytics 4

Only if you give your consent in the cookie banner do we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies (e.g. _ga, _ga_*, retention up to 2 years) to analyse how the website is used, e.g. pages viewed, time on site, device and approximate location. IP addresses are truncated within the EU and are not stored. Data may be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Google. The legal basis is your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG), which you can withdraw at any time via the cookie settings. More information: policies.google.com/privacy.

LinkedIn Insight Tag

Only if you consent in the cookie banner do we use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It helps us measure the reach of our posts and ads on LinkedIn. It processes, among other things, pages visited, referrer, browser, device, time and a truncated IP address; LinkedIn sets cookies for this (e.g. li_sugr, bcookie, UserMatchHistory, stored for up to 2 years). We only receive aggregated reports, no information about individual persons. Data may be transferred to LinkedIn Corporation in the USA; LinkedIn is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings. More information: linkedin.com/legal/privacy-policy.

7. Fonts

Fonts are loaded locally from our own server. No connection is made to Google Fonts servers.

8. Contact via form, email, phone or WhatsApp

If you contact us via the enquiry form, by email or by phone, we process the details you provide (e.g. name, company, email address, phone number, project location and your message) to handle your enquiry and, where applicable, prepare a quote. The form is processed on our server using the Contact Form 7 plugin and sent to us by email. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR. We delete the data once your enquiry has been fully dealt with, unless statutory retention periods apply (e.g. 6 years for business correspondence under the German Commercial Code, 10 years under the German Fiscal Code).

WhatsApp: The website contains a link that lets you message us via WhatsApp. A connection to WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a Meta group company) is only established when you click the link. WhatsApp then processes your phone number, metadata and the content of your message; data may be transferred to the USA (Meta is certified under the EU-U.S. Data Privacy Framework). The legal basis is Art. 6(1)(a) and (b) GDPR. If you do not want this, please use phone, email or our form instead.

9. Applying through our candidate portal

We receive applications through our own portal at portal.solid-safety.de, hosted by STRATO AG in Germany.

What we store: name, email, phone, postcode and town, the position you want, availability, regions, language skills, qualifications (e.g. § 34a GewO, guard ID), driving licence, experience, your message, uploaded documents and the result of the short aptitude test. To prevent misuse we also store your IP address and the time of your consent.

Source: if you come from a link on our website, we take over the position, language and source (e.g. “karriere”).

Purpose and legal basis: handling the application (§ 26 BDSG, Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Retention: deleted no later than 6 months after the process has ended, unless you are hired.

Cookies in the portal: only technically necessary cookies (session; for personal invitation links a device cookie for 14 days). No tracking.

10. Client and staff login

“Login” takes you to our portal at portal.solid-safety.de. We set up all accounts ourselves; there is no public registration. The portal’s own privacy policy explains what it processes.

11. Links to LinkedIn

Our website links to our company profile on LinkedIn. This simple link does not transmit any data to LinkedIn when you visit our pages; data is only transmitted when you click the link and open the LinkedIn website (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). LinkedIn’s privacy policy applies there. Separately, and only with your consent, we use the LinkedIn Insight Tag (see section 6).

12. Recipients and transfers to third countries

Besides us, the only recipients of your data are the service providers named above (hosting and, where applicable, Google, LinkedIn and WhatsApp) and – where required by law – authorities, tax advisers and courts. Data is transferred to countries outside the EU only in the cases described above and on the basis of an adequacy decision (EU-U.S. Data Privacy Framework) or EU Standard Contractual Clauses.

13. Retention

Unless a more specific period is stated in this policy, we store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. It is then deleted.

14. Your rights

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.

15. Obligation to provide data, no automated decision-making

Providing your data is voluntary. However, we cannot process your enquiry or application without the information in mandatory fields. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

16. Changes

We update this privacy policy when the website, our services or the legal situation change. The version published here applies.

This English version is provided for convenience. In case of doubt, the German version of the privacy policy (Datenschutzerklärung) is legally binding.