1. Controller
The controller responsible for the processing of personal data on this website is:
SOLBEIT GmbH
Neubaugasse 24
8020 Graz
Austria
Email: info@solbeit.com
Phone: +43 316 494 016
Company register number: FN 683618x
Company register court: Landesgericht für Zivilrechtssachen Graz
Data protection enquiries can be directed to info@solbeit.com.
2. General information on data processing
Personal data is any information relating to an identified or identifiable natural person. This may include, in particular, name, contact details, IP address as well as technical usage and communication data.
We only process personal data insofar as this is necessary for the operation of the website, the handling of enquiries, technical security or the fulfilment of legal or contractual obligations. The specific purposes, data categories and legal bases are described in the following sections.
3. Hosting and server log files
According to current information, the website is hosted by the following provider:
World4You Internet Services GmbH
Wolfgang-Pauli-Straße 2, BT3
4020 Linz
Austria
When the website is accessed, the web server processes technically necessary data. This may include, in particular:
- IP address,
- date and time of access,
- the page or file accessed,
- the amount of data transferred,
- HTTP status code,
- the previously accessed page or referrer,
- browser type and browser version,
- operating system or device information.
- technical provision of the website,
- ensuring stable and secure operation,
- error analysis,
- detection and prevention of abusive access.
Legal basis: Art. 6(1)(f) GDPR (General Data Protection Regulation; in Austria: Datenschutz-Grundverordnung, DSGVO). The legitimate interest lies in the secure, stable and technically functional operation of the website and in protecting the systems against misuse.
Storage period: According to the information currently published by the hosting provider, web server and error log files are generally stored for two weeks and then deleted automatically. This is information provided by the hosting provider and not a deletion routine implemented separately by us.
Recipient or processor: World4You Internet Services GmbH processes this data on our behalf for the provision of hosting.
4. Encrypted transmission
Our website uses an encrypted HTTPS connection. This protects data transmitted between the browser and our web server during transmission.
Despite appropriate technical measures, data transmission over the internet cannot be made entirely free of security risks.
6. Contact form and email contact
If you contact us via the contact form or by email, we process the data you provide in order to handle your enquiry, to communicate and for possible follow-up questions.
According to current information, the following data is transmitted via the contact form:
- name,
- email address,
- enquiry area,
- message.
- company,
- phone number.
- time of the enquiry,
- reCAPTCHA result or risk assessment (see section 7),
- IP address in the context of reCAPTCHA verification and the server log files.
- handling the contact or project enquiry,
- answering follow-up questions,
- assessing possible pre-contractual cooperation,
- protecting the form against automated misuse.
Legal bases: Art. 6(1)(b) GDPR insofar as the enquiry is directed at initiating or performing a contract; Art. 6(1)(f) GDPR for general business, partnership or other enquiries. The legitimate interest lies in handling and answering incoming communication.
Recipient: The enquiry is transmitted to info@solbeit.com and processed within the hosting and email infrastructure used by SOLBEIT.
Storage: According to current information, the form data is not stored separately in a website database. However, the enquiry is processed and stored as an email in the email system used.
Storage period: We store enquiries only for as long as this is necessary for handling them, for possible follow-up questions and for safeguarding legitimate legal interests. If a contractual relationship arises from the enquiry, the relevant data may be stored for longer in accordance with statutory retention and documentation obligations.
Provision: The mandatory information is required so that we can assign and answer the enquiry. Without this information, the form cannot be submitted or the enquiry cannot be handled properly.
7. Google reCAPTCHA v3
We use Google reCAPTCHA v3 in order to protect the contact form against automated input, spam and misuse. The provider is:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Processing by Google LLC or companies affiliated with Google outside the European Economic Area cannot be ruled out in this context.
Google reCAPTCHA v3 is loaded exclusively in connection with the contact form. According to the current technical implementation, the script is only integrated when you interact with the form or wish to submit an enquiry. Without interaction with the contact form, reCAPTCHA is not loaded; on all other pages of the website no connection to Google reCAPTCHA is therefore established.
When the contact form is submitted, a verification token with the action „contact“ is generated and transmitted to the server-side processing; this transmits the token together with the IP address to Google for verification. Google returns, among other things, a success indicator, a risk score, the action and the hostname, which are checked on the server side. According to the current technical implementation, the risk score received is documented in the text of the enquiry email.
A visible notice regarding the use of Google reCAPTCHA and regarding the privacy policy and terms of service of Google is provided at the contact form.
The data processed by Google in the context of reCAPTCHA may include, in particular: IP address, browser and device information, operating system, referrer URL, date and time, interactions with the website (including mouse, scroll and usage behaviour), technical identifiers, cookies or similar storage technologies, the reCAPTCHA token, the risk score as well as the website accessed or the hostname. The precise scope is determined by Google.
Purpose: Detection of automated and abusive form enquiries, protection of the contact form and ensuring the functionality of the web offering.
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in protecting the website and the contact form against automated misuse, spam and abusive input.
Transfer to third countries: Google may also process data on servers outside the European Economic Area, in particular in the USA. Google states that, depending on the specific processing operation, it bases data transfers on, among other things, the EU-US Data Privacy Framework, adequacy decisions and standard contractual clauses. This means that not every transfer is automatically and in all circumstances covered by the EU-US Data Privacy Framework.
Storage period: The storage period at Google is governed by Google’s specifications and settings. On our side, the risk score received is processed together with the contact enquiry in the incoming email.
8. Google Fonts
For a consistent presentation of fonts, our website integrates fonts of the Google Fonts service according to the current technical implementation. These are currently loaded dynamically on all pages via the servers fonts.googleapis.com and fonts.gstatic.com. When a page is accessed, your browser thereby establishes a direct connection to Google servers.
In the context of this connection, your IP address, the requested URL and technical HTTP headers with browser, operating system and referrer information may be processed in particular. Accessing the website is technically associated with such a connection to Google.
According to Google’s information in the Google Fonts Web API, the service itself does not set or log cookies, and the information collected is not used to create user profiles or for targeted advertising.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC or companies affiliated with Google outside the European Economic Area may be possible in this context.
Purpose: Consistent and technically reliable presentation of the fonts used.
Legal basis: Art. 6(1)(f) GDPR is considered as the currently assumed legal basis. The legitimate interest lies in a technically flawless and consistent presentation of the web offering. This legal assessment is not conclusively settled (see also the notes on consent in section 13).
Transfer to third countries: In the context of Google Fonts, processing outside the European Economic Area, in particular in the USA, may also take place. According to its own information, Google bases data transfers on, among other things, the EU-US Data Privacy Framework and standard contractual clauses.
Further information can be found in the Google Privacy Policy.
9. External links and LinkedIn
Our website contains a link to our presence on LinkedIn. As long as you do not click this link, no connection to LinkedIn is established by the mere link according to our technical implementation. When you access the external LinkedIn page, the privacy provisions of the respective platform operator apply.
This is a simple external reference. A LinkedIn plugin, an insight tag or a comparable embedded script is not integrated on our website according to the current technical implementation.
10. Recipients and processors
Personal data is transmitted only insofar as this is necessary for the provision of the website, for handling an enquiry, on the basis of a legal obligation or within the framework of a correspondingly regulated processing relationship.
According to current information, the following recipients or categories of recipients come into consideration in particular:
- the hosting and email provider (World4You Internet Services GmbH),
- Google in the context of reCAPTCHA (only when interacting with the contact form) and Google Fonts,
- where applicable, technical IT service providers insofar as they require access to systems on our behalf,
- authorities or other recipients exclusively where a legal obligation exists.
11. Transfers to third countries
Through the use of Google reCAPTCHA (in connection with the contact form) and Google Fonts, personal data may be processed outside the European Economic Area, in particular in the USA.
Google states that, depending on the specific processing operation, it bases data transfers on recognised transfer mechanisms such as the EU-US Data Privacy Framework, adequacy decisions or standard contractual clauses.
12. Storage period
Personal data is stored only for as long as this is necessary for the respective processing purpose or as long as statutory retention, documentation or evidence obligations exist. The data is then deleted or anonymised, unless there are legitimate grounds for further retention.
- Server logs: generally two weeks according to provider information,
- PHP session: for the duration of the session or according to the technical session configuration,
- contact enquiries: until they have been handled and according to the criteria described in section 6,
- reCAPTCHA data: according to Google’s specifications,
- email communication: according to necessity and statutory obligations.
13. Legal bases
Depending on the processing, we rely on the following legal bases:
- Art. 6(1)(b) GDPR: handling pre-contractual and contractual enquiries.
- Art. 6(1)(c) GDPR: fulfilment of legal obligations, insofar as applicable.
- Art. 6(1)(f) GDPR: secure operation of the website, server log files, protection against misuse, handling of general business enquiries as well as technically necessary functions including reCAPTCHA and Google Fonts.
- Art. 6(1)(a) GDPR: only for processing for which explicit consent is actually obtained.
- § 165(3) TKG 2021: in connection with the storage of information on end devices or access to information already stored.
14. Your rights
Data subjects have, under the statutory conditions, in particular the following rights:
- right of access,
- right to rectification,
- right to erasure,
- right to restriction of processing,
- right to data portability,
- right to object,
- right to withdraw consent that has been given.
A withdrawal does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
Requests can be directed to info@solbeit.com. Erasure takes place insofar as no statutory retention periods or other legal grounds preclude it.
15. Right to lodge a complaint
If you are of the opinion that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a data protection supervisory authority. For Austria:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
16. Automated decisions and profiling
We do not use any solely automated decision-making within the meaning of Art. 22 GDPR that produces legal effects concerning data subjects or similarly significantly affects them.
Google reCAPTCHA v3 automatically generates a risk score to assess whether a form enquiry is likely to come from a human or an automated system. If the form is rejected, you still have the option of contacting us directly by email or telephone.
17. Data security
We use appropriate technical and organisational measures to protect personal data against unintended loss, unauthorised access, alteration or disclosure. In the website context, these include in particular:
- encrypted HTTPS transmission,
- restricted administrative access,
- server-side validation of the contact form,
- protection against automated misuse,
- secure processing of form and email data,
- regular technical updates and maintenance.
Despite appropriate protective measures, residual risks in data transmission over the internet cannot be entirely ruled out.
18. Changes to this privacy policy
We may adapt this privacy policy if legal requirements, technical functions or the services we use change. The version published on this page at the relevant time applies.
AS OF: JULY 2026