Data Privacy Policy
This Privacy Policy applies to data processing by Solid Labs GmbH, Linienstraße 40, 10119 Berlin, registered in the commercial register of the local court Charlottenburg under HRB 257503 B (“Solid Labs”, “we”, “us”) regarding the use of our software according to your Contract with us (“Software”) as well as our website available at https://www.solidlabs.com/ (“Website”).
With the following Privacy Policy, we inform you about the type, scope and purpose of the collection, use and other processing of Personal Data, as specified hereunder, when using the Software and Website. Insofar as the processing of Personal Data is based on Art. 6 para. 1 lit. f) GDPR, the purposes mentioned also represent our legitimate interests. When you use the Software and Website, we processes your Personal Data. “Personal Data”means any information relating to an identified or identifiable natural person. When Personal Data is processed, this means that we collect, store, transmit, delete or otherwise use this data.
When processing your Personal Data, we comply with the applicable data protection laws, in particular the General Data Protection Regulation (“GDPR”), the German Federal Data Protection Act (“BDSG”) and the German Telecommunications Digital Services Data Protection Act (“TDDDG”).
If the data processing carried out by us changes, we will adapt our Privacy Policy. We therefore ask you to inform yourself regularly about the content of our Privacy Policy. We will inform you if the change requires any action on your part, such as consent or other individual notification.
1 Controller; Contact Information
The Controller responsible for processing your Personal Data is:
Solid Labs GmbH, Linienstraße 40, 10119 Berlin
If you have any questions regarding data protection or to exercise your rights in accordance with section 6 of this Privacy Policy in connection with the use of our Software and/or Website you can contact the person responsible for data protection issues at: patrick@solidlabs.com
2 Collection and Storage of your Personal Data; Type and Purpose of Processing and Relevant Legal Basis
In the following, we will inform you which Personal Data we process when you use the Software and/or Website. We also explain the purpose for which we process your data and the legal basis on which we do so.
2.1 Informative Use of our Website (Automatically Collected Data)
During the mere informative use of our Website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called server log files), whereby logging only takes place to the technically necessary extent. The following information is collected:
● Name of the Website accessed,
● File, date and time of retrieval,
● Volume of data transferred,
● Notification of successful retrieval,
● Browser type and version,
● Operating system of the user,
● Referrer URL (the website from which the access is made),
● IP address and the requesting provider,
● When the Website is accessed via a mobile device: country code, language, name of device, name of operating system and version.
The legal basis for the collection of this data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in collecting this data results from the following purposes:
● ensuring optimal use of our Website,
● ensuring smooth connection establishment,
● evaluation of system security and stability.
2.2 Website Optimization and Website Analysis
(a) Functional Cookies
Our Website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer. The cookie contains a string of characters that allows your system to be uniquely identified when you return to the Website.
Most of the cookies we use ("Session Cookies") and the data stored and transmitted in them are automatically deleted at the end of your visit. Other cookies ("Persistent Cookies") remain stored on your end device until you delete them.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser.
You can delete cookies that have already been saved at any time. If you deactivate cookies, the functionality of the Website may be limited.
Some elements of our Website require that the calling browser can be identified even after a page change. Cookies may be stored for this purpose, which enable us to recognize your browser on your next visit.
If Personal Data is processed by means of cookies, we process them on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f) GDPR (ensuring optimal use of our Website, ensuring smooth connection establishment, evaluation of system security and stability), which always also takes your interests into account.
(b) Analysis Cookies
When you visit our Website, cookies are also set that enable an analysis of your use of the Website for reach measurement ("Analysis Cookies").
We use Analysis Cookies exclusively on the basis of your consent in accordance with section 25 para. 1 TDDDG and Art. 6 para. 1 lit. a) GDPR via our cookie banner. You can also access further information about the cookies we use via our cookie banner. You can also use the cookie banner to revoke your consent to the processing of your data through Analysis Cookies at any time.
2.3 Use of Software; Customer/Employee Account
In order to use our Software, you have to create a customer/employee account. Upon creation of such account we collect the following Personal Data from you:
● Your salutation: Mr./Mrs. or not specified,
● Your first name and surname
● Your email address
● The URL of your avatar image
We process your Personal Data in order to fulfill the contract with you for the services offered. The legal basis for data processing is therefore Art. 6 para. 1 lit. b) GDPR.
2.4 Advertising
In addition, we process your Personal Data under section 2.3 of this Privacy Policy for advertising purposes in order to send you personalized advertising, provided you have given your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
3 Recipients or categories of recipients of your Personal Data
We sometimes use external service providers to process your Personal Data (e.g. IT service providers). In part these service providers process your Personal Data as data processors on our behalf, in accordance with our instructions and under our supervision exclusively for the purposes described in this Privacy Policy according to Art. 28 GDPR, in part they act as independent data controllers. In the last case we only forward your Personal Data if necessary for the fulfillment of the contract, in which case the legal basis for the transfer is Art. 6 para. 1 lit. b) GDPR.
3.1
4 Transfer of Personal Data outside the EEA
Your Personal Data may be transferred or disclosed to third-party companies which can be located outside the European Economic Area (EEA), i.e. in third countries. This concerns the use of the following services:
In the context of the transfer of Personal Data to a third country, we will regularly ensure by means of suitable guarantees, for example by concluding the standard contractual clauses of the European Commission, that data is only transferred to a third country on the basis of a level of protection corresponding to the GDPR.
With respect to Personal Data transferred to the USA, the data security is ensured by the EU-US Data Privacy Framework which has been approved by the EU Commission via its Adequacy Decision dated 10 July 2023 (C(2023)4745final).
5 When do we delete your Personal Data?
We delete your data when it is no longer required for the purposes for which it was originally collected.
Irrespective of this, we store your Personal Data processed when using the Software and/or the Website until the expiry of the statutory or possible contractual warranty rights. After this period has expired, we will retain the information required under commercial and tax law relating to the contractual relationship for the periods specified by law. For this period, the Personal Data will only be processed again in the event of a review by the tax authorities.
6 Your Rights
With regard to our processing of your Personal Data, you are entitled to the following rights free of charge:
6.1 Right to information pursuant to Art. 15 GDPR
You have the right to obtain information from us as to whether and what Personal Data we process about you. This also includes information on how long and for what purpose we process the Personal Data, from which source it originates and to which recipients or categories of recipients we pass it on. We can also provide you with a copy of this Personal Data.
6.2 Right to rectification pursuant to Art. 16 GDPR
You have the right to demand that we correct any incorrect or no longer correct information about you without delay. You can also request that we complete your incomplete Personal Data. If this is required by law, we will also inform third parties of this correction if we have passed on your Personal Data to them.
6.3 Right to erasure pursuant to Art. 17 GDPR
You have the right to request that we erase your Personal Data without undue delay if one of the following applies:
● Your Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed, or the purpose has been achieved;
● You withdraw your consent and there is no other legal basis for the processing;
● You object to the processing and there are no overriding legitimate grounds for
the processing; in the case of the use of Personal Data for direct marketing
purposes, a mere objection on your part to the processing is sufficient;
● Your Personal Data has been processed unlawfully;
● the deletion of your Personal Data is necessary to fulfil a legal obligation under
EU law or the law of a member state to which we are subject. Your right to erasure may be restricted on the basis of statutory provisions. This includes in particular the restrictions listed in Art. 17 GDPR.
6.4 Right to restriction of processing pursuant to Art. 18 GDPR
You have the right to obtain from us restriction of processing of your Personal Data if one of the following grounds applies:
● You contest the correctness of your Personal Data for a period of time that enables us to verify the correctness of the Personal Data;
● the processing is unlawful and you oppose the erasure of the Personal Data and request the restriction of their use instead;
● We no longer need your Personal Data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims, or
● You have objected to processing as long as it is not yet clear whether our legitimate grounds override yours.
If you have obtained a restriction of processing in accordance with the above list, we will inform you before the restriction is cancelled.
6.5 Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those Personal Data to a third party. The exercise of this right does not affect your right to erasure.
6.6 Right to object pursuant to Art. 21 GDPR
You have the right to object to the processing of your Personal Data at any time for reasons arising from your particular situation if we base this processing on legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR. If you file an objection, we will no longer process your Personal Data, except in two cases
● We can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or
● The processing serves the assertion, exercise or defence of legal claims.
In particular, if we process your Personal Data for direct marketing purposes, you have the right to object at any time to the processing of your Personal Data for the purpose of such marketing.
If you object to the processing of your Personal Data for direct marketing purposes, we will no longer use your Personal Data for this purpose.
6.7 Right to withdrawal of consent pursuant to Art. 7 GDPR
You can withdraw the consent you have given us at any time with effect for the future.
This withdrawal can be made in the form of an informal notification to the above-mentioned contact addresses. If you withdraw your consent, this will not affect the legitimacy of the Personal Data processing carried out up to that point.
6.8 Right to file a complaint with the supervisory authority
If you believe that the processing of your Personal Data by us violates applicable data protection law, you have the right to file a complaint with the competent supervisory authority.
The supervisory authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
+49 30 13889-0
mailbox@datenschutz-berlin.de
In addition, you can file a complaint with the data protection supervisory authority responsible for you at your place of residence.
7 Automated individual decision-making including profiling pursuant to Art. 22 GDPR
We do not process your Personal Data for automated decisions in individual cases, including profiling within the meaning of Art. 22 GDPR.
Status: November 2025
