Privacy Policy

Draft -- not yet complete. Square brackets [ ]mark details still to be filled in. To be reviewed by a lawyer before publishing.

1. Controller

CMOLLS-IT, Christoph Molls, [address, see imprint].
Contact: info@solvarix.net.

No data protection officer has been appointed, as there is no legal obligation to do so (§ 38 BDSG) at our current size.

2. Visiting this website

This website is delivered via Cloudflare Pages. When you visit, Cloudflare processes, as our processor (Art. 28 GDPR), technically necessary server logs (IP address, page requested, timestamp, user agent) to deliver and secure the site. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).

No cookies, no consent required: This website does not use analytics, marketing or tracking cookies. The only stored preference (light/dark mode) lives in your browser's localStorage, never leaves your device, and is strictly necessary -- no consent is required for this under applicable ePrivacy rules. [If an analytics tool is added later: update this section -- Cloudflare Web Analytics is cookie-less and would not change this paragraph.]

3. Signing up & using the hosting platform

When you register on our customer platform, we process account data (name, email address), the apps you book, and related usage and billing data. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Each app you book runs in its own instance, isolated for you. Content you store inside your app stays there -- as the infrastructure operator we have technical access to the extent necessary to provide the service (operation, updates, backups, support). If you process third parties' personal data yourself through your app, you are the controller for that processing; on request we provide a data processing agreement under Art. 28 GDPR.

4. Payment processing

Stripe processes, as our processor, the payment data necessary for billing. Stripe's privacy notices apply in addition.

5. Recipients / processors

Stripe (payment processing), Cloudflare (delivery of this website). We do not share data with any other third parties unless legally required to.

6. International Data Transfers

Cloudflare (delivery of this website) and Stripe (payment processing) are US-based companies; processing of your data in the US therefore cannot be ruled out. The transfer is based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) or, where certified, the EU-US Data Privacy Framework. [Finalize and reference the actual agreements in place with both providers.]

7. Storage Duration

We only store personal data for as long as necessary for the respective purpose. We retain invoicing and billing data for ten years due to statutory retention obligations (incl. § 147 AO, § 14b UStG, German tax law). Account and usage data is deleted after the end of the contractual relationship, unless a statutory retention obligation applies. [Finalize the retention period for technically necessary server logs at Cloudflare.]

8. Server location

This marketing website is delivered via Cloudflare's global network. The actual hosting platform and the apps booked on it run on physical hardware we own and operate ourselves -- no third-party cloud hosting -- located in Germany.

9. Automated Decision-Making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

10. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

As of: draft 2026-10.