Skip to content

Privacy Policy

Last updated: September 2026

1. Data controller

The data controller for this website is Soulution Enterprise LLP, a limited liability partnership registered under the laws of the Province of British Columbia, Canada (Registration No. LL02421), represented by Kai Tobias Mispelbaum. Address: 1103 - 11871 Horseshoe Way, 2nd Floor, Richmond, B.C., V7A 5H5, Canada. Contact: info@soulution.systems. For data protection matters specifically: dsgvo@soulution.systems. This website is aimed exclusively at companies in the DACH region; the GDPR therefore applies regardless of the controller's own seat, pursuant to Art. 3(2) GDPR. Further details on the provider in the Imprint.

2. Hosting

This website is hosted with Hostinger. When you access the site, the hosting provider collects technically necessary server log data (for example IP address, date and time of access, page requested, browser type) to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR, legitimate interest in secure operation. Retention of log data follows the hosting provider's standard settings.

3. Cookies and Google Analytics 4

This website does not embed any third-party fonts; fonts are hosted locally on our own server, there is no call to Google Fonts. No cookies are set and no connection to Google is made until you have actively given consent. On your first visit a cookie notice appears with the options "Accept" and "Decline". If you click "Accept", we load Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to statistically evaluate use of this website; IP addresses are transmitted anonymized. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. Your consent is stored locally in your browser and remains valid until you withdraw it; you can withdraw it at any time via the "Cookie settings" link in the footer, after which no further data is sent to Google. If you click "Decline" or make no choice, no data whatsoever is transmitted to Google. Details on processing by Google are available in Google's privacy policy. The WhatsApp button on the imprint page is a plain link to wa.me; only clicking it takes you to WhatsApp (Meta Platforms Ireland Ltd.), no data is transmitted to WhatsApp beforehand.

4. International data transfers

Google LLC, the parent company of Google Ireland Limited, states that it has self-certified under the EU-US Data Privacy Framework (DPF) and is listed as a participating organisation (checked September 2026 at policies.google.com/privacy/frameworks and dataprivacyframework.gov). Use of Google Analytics 4 may therefore involve a transfer of data to the US, based on the European Commission's adequacy decision for the DPF under Art. 45 GDPR. We note that the legal stability of the DPF is disputed by privacy organisations (including noyb/Max Schrems) and further judicial review by the CJEU is possible; as of September 2026 no annulment has occurred. Without your consent under section 3, no data is transmitted to Google and therefore no transfer to a third country takes place.

5. Contact form

When you use the contact form, we process the data you enter (name, company, e-mail address, message) solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for pre-contractual measures and otherwise Art. 6(1)(f) GDPR, legitimate interest in handling incoming enquiries. The data is delivered by e-mail to our inbox and processed there. It is not passed on to third parties.

6. Recipients and processors

Categories of recipients of your data are: our hosting provider (server log data, section 2), Google Ireland Limited as processor for Google Analytics 4, where you have consented (sections 3 and 4), and our e-mail provider for delivering contact-form enquiries (section 5). A data processing agreement under Art. 28 GDPR is in place with all processors where required. Data is not passed on to any other third party, in particular not for advertising purposes.

7. Retention period

Server log data is retained according to the hosting provider's standard settings and then deleted automatically. Contact-form data is deleted once it is no longer required to process your enquiry, at the latest once any resulting business relationship has ended, unless statutory retention duties apply. Your cookie consent is stored in your browser until you withdraw it or clear your browser's local storage; GA4 usage data is subject to the retention period Google applies to the respective Analytics account.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR), the latter in particular against processing based on legitimate interest. You may withdraw a given consent at any time with effect for the future under Art. 7(3) GDPR, for Google Analytics 4 via the "Cookie settings" link in the footer. Please contact dsgvo@soulution.systems to exercise your rights. We answer requests within one month of receipt; under Art. 12(3) GDPR that period may be extended by two further months, and we will inform you within the first month if it is. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your workplace, or the place of the alleged infringement.

9. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

10. SSL encryption

This website uses SSL encryption to protect the transmission of confidential content, indicated by the lock icon and "https://" in your browser's address bar.

11. Changes to this privacy policy

We update this privacy policy whenever changes to our data processing make this necessary, for example due to new website features or changes in legal requirements. The version published on this page at any given time applies.