Straightforward privacy.

Controller

Provision of the website

When you access the website, your browser transmits technically necessary connection data to the web server. This may include, in particular, the IP address, date and time, requested file or URL, HTTP status, amount of data transferred, and browser and operating system information.

This processing is necessary to deliver the website, detect technical errors and ensure the security of the web server. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

The technical operation is provided through a hosting service provider. Server log data is processed only for as long as necessary for operation, error analysis and prevention of misuse; it is then deleted unless legal or security-related reasons require longer retention.

No analytics or marketing technologies

SolPEG does not use web analytics, marketing or tracking cookies, or browser fingerprinting on this website. No external Captcha, analytics or advertising services are integrated into the contact form.

External websites, such as mapping services, are only linked and are not embedded in this website. The privacy terms of the respective provider apply only when you choose to follow such a link.

Contact form and email inquiries

If you contact us via the contact form or by email, we process the information you provide in order to handle your inquiry. In the web form, name, email address, topic and message are required; further project details are optional.

Where your inquiry relates to entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR. Other technical or general inquiries are processed on the basis of Art. 6(1)(f) GDPR; our legitimate interest is handling and responding to business communications.

Within SolPEG, the information is made available only to those who need it to handle the inquiry. Technical service providers for hosting and email may be involved as recipients or processors. We retain correspondence for as long as necessary to handle the inquiry and, where applicable, the subsequent business relationship. Where statutory retention obligations apply, the retention period follows those requirements.

Spam and abuse protection

The form uses an invisible honeypot, a short minimum completion time and server-side rate limiting. For the rate limit, an HMAC identifier is derived from the IP address without storing the IP address in plain text and is processed together with timestamps in a temporary server directory. The time window is 15 minutes. Expired rate-limit files are automatically cleaned up during subsequent form requests. SolPEG does not maintain its own permanent form logs containing IP addresses, browser fingerprints, user agents or form content.

The legal basis for this security processing is Art. 6(1)(f) GDPR. Our legitimate interest is protecting the form and our mail infrastructure against automated misuse and spam.

No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place in connection with this website.

Your rights

Subject to the statutory requirements, you have in particular the right of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. For a company based in Hamburg, the Hamburg Commissioner for Data Protection and Freedom of Information can in particular be contacted at:

Last updated

This privacy notice was last updated in September 2026.