Data Privacy Declaration

Last changed: 24.05.2018

Name and Address of the Responsible Contact

The person responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Soley GmbH
Landaubogen 1, 81373 München, Deutschland
https://www.soley.io
https://support.soley.io
Email: info(a)soley.io
Phone: +49 (0)89 904 1016 00
Fax: +49 (0)89 904 1016 05

Name and address of the data protection officer

The data protection officer of the responsible contact is:
Hans-Peter Wolf
Ludwigsplatz 9
83022 Rosenheim
Email: it-ccc-wolf(at)t-online.de
Mobile: +49 172 8961301

Definitions of terms

This Privacy Statement is based on the definitions used by the European legislator for the adoption of the DS GMO (Article 4 DS GMO). This privacy policy should be easy to read and understand for everyone. To ensure this, we would first like to explain the terms used. Among other things, these definitions are used in this privacy statement:

  • "personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;
  • "data subject" means any identified or identifiable natural person whose personal data are processed by the controller.
  • "processing" means any operation carried out with or without the aid of automated procedures or any such series of operations relating to personal data, such as the collection, collection, organisation, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision, reconciliation or linking, restriction, erasure or destruction;
  • "Restriction of processing" means the marking of stored personal data with the aim of restricting their future processing;
  • "Profiling" means any automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or relocation of that natural person;
  • "controller" means the natural or legal person, authority, body, agency or other entities which alone or jointly with others decides on the purposes and means of processing personal data; where the purposes and means of such processing are specified by Union law or the law of the Member States, the controller or certain criteria for his appointment may be laid down in accordance with Union law or the law of the Member States;
  • "recipient" means any natural or legal person, authority, institution or other entities to which personal data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union law or the law of the Member States under a particular investigation mandate shall not be considered recipients; the processing of such data by the said authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing;
  • "third party" means any natural or legal person, authority, institution or other entities other than the data subject, the data processor, the data processor and the persons authorized to process the personal data under the direct responsibility of the data processor or the data processor;
  • "data subject's consent" means any voluntary declaration of intent in the specific case, in an informed and unequivocal manner, in the form of a declaration or other clear affirmative act, which the data subject indicates that he/she agrees to the processing of personal data concerning him/her.

Sect. 1 General

We will process your personal data (e.g. title, name, address, e-mail address, phone number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.


Sect.2 Provision of the website and creation of log files

(1) description and scope of data processing

You can use our website without disclosing your identity. Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

  • Information about your browser type
  • Information about your operating system
  • Information about your Internet service provider
  • Your IP address
  • the date and time of your visit to our site
  • information about the website from which your system accesses our site
  • Information about the website that your system accesses through our website.

The mentioned data will be processed by us for the following purposes:

  • Ensuring a smooth connection of the website,
  • Ensuring comfortable use of our website,
  • evaluation of system security and stability as well as
  • for other administrative purposes.


(2) legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DS-GMO. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations under points V and 7 of this data protection declaration.


(3) Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the visitor's computer. For this purpose, the IP address of the visitor to the website must remain stored for the duration of the session.

If IP addresses are stored in log files:
This is done to ensure the functionality of the website. In addition, the storage of data in log files serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f DS-GMO.
(4) Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If IP addresses are stored in log files:
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the visitors of the website are deleted or alienated so that an assignment of the calling client is no longer possible.
(5) the possibility of opposition and elimination
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the visitor to the website.


Sect. 3 Contact us and Forms

(1) Purpose of data processing

Your personal data you provide us by e-mail, contact form etc., will be processed to answer your inquiries. You are not obliged to provide us with your personal data but we would not be able to answer your inquiries sent by e-mail without your e-mail address.

(2) Legal basis

a) If your explicit consent is given for the processing of your data, the legal ground for this processing is set out in Art. 6 (1) (a) of the GDPR.
b) If your personal data is processed for the purpose of contract performance, the legal ground for this processing is set out in Art. 6 (1) (b) of the GDPR.
c) The legal ground for all other cases (especially when using a contact form) is set out in Art. 6 (1) (f) of the GDPR.

You have the right to object at any time to the processing of data which was performed according to Article 6 (1) (f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation. In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.

(3) Recipient categories

Our legitimate interest in data processing is to communicate with you in a timely manner and to answer your queries cost-effectively. If you provide us with your address, we reserve the right to use it for direct postal marketing. You can protect your interest in data protection by transferring of data efficiently (e.g. using a pseudonym).

(4) Recipient categories

Provider of hosting, service provider for direct marketing

(5) Duration of Storage

Your data will be deleted if it can be inferred from the circumstances that your queries or questions have been completely clarified. However, if a contract is concluded, the data required by commercial and tax law will be retained by us for the periods as required by law, i.g. generally for ten years (cf. § 257 HGB, § 147 AO).

(6) Right of revocation

You have the right to revoke your consent for processing at any time in compliance with your consent.


Sect. 4 Comments in our forum on support.soley.io

(1) Purpose of data processing

There is the possibility to write questions or comments in our forum. Your personal data (e.g. name/pseudonym, email address, website) collected in this scope will be solely processed for the purpose of publishing your comments.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

(3) Legitimate interest

Our legitimate interest is the public exchange of user opinions on specific topics and products. The publication serves, among other things, the purpose of transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.

(4) Duration of Storage

There is no provision for a certain storage period. You may request the deletion of your comment at any time.

(5) Right of objection

You have the right to object at any time to the processing of data which was performed according to Article 6 (1) (f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.


Sect. 4 Web Analysis with Google Analytics, Google Tag Manager, Google Adwords

(1) Purpose of data processing

This website uses Google Analytics and Google Tag Manager, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. ("Google"). Google Analytics and Google Tag Manager uses so-called “cookies”, small text files, which are placed on your computer to analyze how you use the website. The information generated by the cookie about your use of this website will be transmitted and saved on server in the United States by Google. If the anonymizeIP function is activated on this website, Google will shorten your IP address in advance within the member states of the European Union or in other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases Google will transmit the full IP address on server in the United States and will shorten there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activities and providing other services related to website and internet usage for the website operators.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

(3) Legitimate interest

Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. For your interest in data protection, this website uses Google Analytics with the extension of IP anonymization via Google Tag Manger, so that the IP addresses are only processed in an abridged form in order to exclude direct personal reference.

(4) Recipient categories

Goolge, Partner companies

(5) Transfer to a third country

Google LLC, located in the USA, is certified for the EU-US Data Protection Agreement "Privacy Shield", which guarantees compliance with the data protection rates applicable in the EU.

(6) Duration of Storage

Unlimited

(7) Right of objection

You can agree to the tracking at the beginning of your website visit via an opt-in dialog. If you do not agree or actively reject tracking, no tracking code will be executed. If you have agreed, this decision is stored in the cookie "cookie_notice_accepted" for 30 days. You can reset your consent at any time by deleting this cookie in your browser. The next time you visit the site you will be asked for your preference.


Sect. 5 Information about cookies

(1) Purpose of data processing

This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system and only serve the functionality of the website. Other cookies remain stored permanently and recognize your browser on your next visit to improve theusability of the website.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

You have expressly given your consent to the use of cookies on our website as follows:

""Yes" to cookies & tracking. Get faster, better, stronger!"

(3) Duration of Storage

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years.

(4) Right of revocation

You can reject the additional cookies by responding to the request displayed in our cookie notification as follows:
"No" to cookies and tracking."
Then only the technically necessary cookies are created in your browser.

Your decision will be stored in the cookie "cookie_notice_accepted" for 30 days.
You can revoke your consent to permanent storage by deleting the stored cookies via your browser. If you delete the cookie "cookie_notice_accepted", we will ask you for your cookie and tracking preference the next time you visit us.

(5) Cookies used

Technically necessary cookies

  • PHPSESSID - necessary - ends with session
  • Cookie_notice_accepted - necessary - storage for 30 days - stores the cookie and tracking decision without personal data.
  • Personio_session - ends with session - iframe of job ads from Personio

Additional Cookies if you give the permission for Cookies and Tracking:

  • Google Analytics/Tag Manager
    • _ga
    • _gat_UA-...
    • _gid

Sect. 6 Newsletter

(1) Purpose of data processing

When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. the newsletter will inform you in particular about products from our product range. For statistical purposes we may evaluate which links are viewed in the newsletter. However, it is not recognizable for us, which concrete person has accessed the links.

You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: Subscribe to the newsletter

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

(3) Recipient categories

if necessary: newsletter provider

(4) Duration of Storage

Your e-mail address will only be stored for the respective duration of your registration.

(5) Right of revocation

You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe as follows:By a log-out link in the newsletter

Sect. 8 Rights of the data subject

If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards the controller:

1. Right of access by the data subject

You may ask the controller to confirm whether your personal data is processed.

In the case of such processing, you may request the following information from the controller:

(1) the purposes of the processing of the personal data;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed;
(4) the estimated period of time for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the right to request from the controller to rectify or erase the personal data or the right to restrict the processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) the right to all available information on the source of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information for your about the logic involved, as well as the consequences and intended effects of such processing.

As a data subject, you have the right to be informed whether the personal data concerning you are transferred to a third country or to an international organisation. In this regard, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

2. Right to rectification

You have the right to have corrected and/or completed your personal data from the controller if your personal data processed is incorrect or incomplete. The controller has to make the correction without delay.

3. Right to restriction of processing

You have the right to obtain from the controller restriction of processing where one of the following applies:

(1) if you contest the accuracy of the personal data relating to you for a period of time that enables the controller to verify the accuracy of the personal data; 
(2) the processing is unlawful and you refuse to erase the personal data and request the restriction of the use of the personal data instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims; or
(4) if you have lodged an objection against the processing in accordance with Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your grounds.
Where processing of personal data relating to you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or for the protecting of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the conditions mentioned above, you will be informed by the controller before the restriction of processing is lifted.

4. Right to erasure

a) Obligation regarding erasure

You have the right to obtain from the controller the erasure of your personal data immediately and the controller is obliged to erase this data without delay where one of the following reasons applies:

(1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; 
(2) you withdraw your consent on which the processing is based accordance to point (a) of Article 6 (1), or point (a) of Article 9 (2) GDPR and where there is no other legal ground for the processing; 
(3) you submit an objection to the processing accordance to Article 21 (1) of the GDPR, and there are no legitimate reasons for the processing, or you lodge an objection against the processing accordance to Article 21 (2) of the GDPR; 
(4) your personal data have been unlawfully processed; 
(5) your personal data need to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; 
(6) your personal data have been collected in relation to the offer information society services referred to Article 8 (1);

b) Obligation to inform other controllers (third parties)

If the controller has made your personal data public and is obliged to erase them accordance to Article 17 (1) of the GDPR, he has to take reasonable steps, taking into account the available technology and the cost of implementation, including technical measures, to inform the controllers who process the personal data that you, as the person concerned, have requested the erasure of any links to, or copy or replication of those personal data.

c) Exceptions

The right to erasure does not apply to the extent that processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for fulfilment of a legal obligation which requires processing by the law of the Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or the exercise of official authority transferred to the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) as well as Article 9 (3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to make it impossible or seriously impair the achievement of the objectives of such processing; or
(5) for the establishing, exercising or defending legal claims.

5. Notification obligation

If you have made use of your right to correct, erase or restrict the processing of your personal data, the controller is obliged to inform all recipients to whom the personal data have been disclosed of this correction or erasure of the data or limitation of the processing, unless this proves to be impossible or involves a disproportionate effort.

You have the right to be informed of these recipients by the controller.

6. Right to data portability

You have the right to receive the personal data relating to you which you have provided to the data controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance by the controller, who has been provided with the personal data, where:

(1) the processing is based on a consent in accordance with the point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract in accordance with the point (b) of Article 6 (1); and 

(2) the processing is carried out using automated means.

In exercising this right, you also have the right to have your personal data are transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected thereby.

The right to data portability is not applicable to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority given to the data controller.

7. Right to object

For reasons arising from your particular situation, you have the right to object at any time to processing of personal data concerning you, which is carried out based on point (e) or (f) of Article 6 (1); this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you, unless the controller can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.

Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

Where you object to the processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.

8. Right to withdraw the declaration of consent under Data Protection Act

You have the right to withdraw your declaration of consent under Data Protection Act at any time. The withdrawal of the consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or which significantly impairs you in a similar manner.

This does not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between you and a data controller;

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data in accordance with Article 9 (1), unless point (a) or (g) of Article 9 (2) applies and appropriate measures to safeguard the rights and freedoms and your legitimate interests are in place.

Regarding the cases referred to in (1) and (3), the data controller has to take appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the data controller, to state his or her own position and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.

The supervisory authority with which the complaint has been lodged is to inform the complainant on the progress and the outcome of the complaint including the possibility of judicial remedy accordance to Article 78.