Privacy Policy

The controller for data processing on this website is:

Solvia FlexKapG, Schmiedingerstraße 16, 5020 Salzburg, Austria

Represented by: David Emanuel Rehrl

Email: david.rehrl@thesolvia.com

Phone: +43 660 2350039

Due to the size of the company, no data protection officer has been appointed. For data-protection matters, please contact the email address above.

The following overview summarises the types of data we process and the purposes of processing, and refers to the data subjects.

Data types: identity data (e.g. names), contact data (e.g. email, phone), content data (e.g. messages in our pilot form), meta/communication data (IP addresses, device information from server logs).

Data-subject categories: prospects and points of contact at potential pilot partners (hospitals, senior-care facilities, clinics); website visitors.

Purposes: providing and securing the website, responding to enquiries, initiating and delivering the pilot programme.

We process personal data on the following legal bases:

— Art. 6(1)(a) GDPR (consent) — where you have given consent.

— Art. 6(1)(b) GDPR (pre-contractual measures and contract performance) — for pilot-programme enquiries.

— Art. 6(1)(f) GDPR (legitimate interests) — for the technically necessary provision and security of the website.

Server logs: This website is hosted on servers of Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). Vercel operates EU edge nodes; delivery is preferentially from European regions. When the website is accessed, the following data is processed automatically and temporarily stored in log files: IP address (shortened where technically possible), date and time of access, page requested, HTTP status, browser type and version, operating system, referrer URL. This data is used to ensure operation, prevent abuse, and diagnose errors; it is deleted after at most 30 days. Legal basis: Art. 6(1)(f) GDPR. Vercel is certified under the EU–US Data Privacy Framework; standard contractual clauses pursuant to Art. 46 GDPR apply additionally.

Pilot form: When you contact us via the form on our website, we process the information you provide (name, email, institution, role, free-text description of your challenge) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR. The form notification is sent via Resend, Inc. (2261 Market Street #4667, San Francisco, CA 94114, USA), certified under the EU–US Data Privacy Framework. A data-processing agreement is in place with Resend; standard contractual clauses pursuant to Art. 46 GDPR apply additionally. Your data is deleted after the enquiry is concluded and any statutory retention periods have expired (max. 3 years).

Fonts: We use the fonts "Fraunces" and "Inter", self-hosted on our own servers (via Next.js). No connection to Google servers is made and no cookies are set.

Cookies: This website sets no cookies and stores no information on your device. Should this change, we will inform you in advance via a consent banner.

Web analytics: We use Vercel Web Analytics (cookieless) for aggregated visit counts. No cookies, no localStorage, and no personal identifiers are stored on your device. IP addresses are hashed server-side and discarded after 24 hours; no user profiles are created. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach measurement). Provider: Vercel Inc., USA — certified under the EU-US Data Privacy Framework.

We only pass personal data to the following processors, to the extent necessary to operate the website and handle enquiries:

— Vercel Inc. (hosting and web analytics, USA) — certified under the EU–US Data Privacy Framework.

— Resend, Inc. (email delivery, USA) — certified under the EU–US Data Privacy Framework.

Data-processing agreements pursuant to Art. 28 GDPR are in place with both, plus standard contractual clauses pursuant to Art. 46 GDPR for third-country transfers.

No further disclosure to third parties takes place unless we are legally obliged.

We only store personal data as long as necessary for the respective purposes or as required by statutory retention periods. Once the purpose ceases or periods expire, data is routinely deleted or anonymised.

For pilot-form enquiries, a maximum retention period of three years applies, provided no business relationship arises.

Under the GDPR, you have the following rights:

— Right of access (Art. 15 GDPR)

— Right to rectification (Art. 16 GDPR)

— Right to erasure (Art. 17 GDPR)

— Right to restriction of processing (Art. 18 GDPR)

— Right to data portability (Art. 20 GDPR)

— Right to object (Art. 21 GDPR)

— Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please email david.rehrl@thesolvia.com.

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority:

— Austria: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien (dsb.gv.at)

— Germany: the state commissioner for data protection of your federal state.

— Switzerland: Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDÖB), Feldeggweg 1, 3003 Bern (edoeb.admin.ch)

In addition to the GDPR, we observe the provisions of the Swiss Federal Act on Data Protection (FADP). You have the right to access, rectify, erase, and receive your data. The competent supervisory authority is the EDÖB.

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes in our services. The current version can always be found on this page.