Privacy policy

This policy sets out what personal data we process on exposol.de, on what legal basis, how long we keep it, and what rights you have under the GDPR.

Controller

The controller for data processing on this website is SOL GmbH, Plaza Cubes, Hammer Straße 19, 40219 Düsseldorf, Germany, business address Hanauer Landstraße 291b, 60314 Frankfurt am Main. You can reach us at info@exposol.de or +49 1523 6967869.

We are not required to appoint a data protection officer under Art. 37 GDPR. Please direct data protection enquiries to the address above.

Legal bases

We process personal data on the basis of Art. 6 (1) (a) GDPR (consent, for analytics and video services), (b) (initiation and performance of a contract, such as a quote request), (c) (legal obligation, such as commercial and tax retention) and (f) (legitimate interest in the secure and functional operation of this website).

Server log files

When you open this website, our hosting provider automatically records data your browser transmits: IP address, date and time of access, page requested, volume of data transferred, referrer URL, and browser and operating system identifiers. We cannot attribute this data to an individual. It serves only technical delivery and defence against attacks. The legal basis is Art. 6 (1) (f) GDPR. Logs are deleted after 30 days at the latest.

Contact and quote forms

If you send us an enquiry through a form on this website, we process the data you enter — usually your name, company, email address, telephone number, the show, the stand size and your message, and for job applications the file you upload. We need this data to answer your enquiry and prepare a quote.

The legal basis is Art. 6 (1) (b) GDPR. Submissions are delivered by email to info@exposol.de and, for applications, hr@exposol.de. We keep enquiries for as long as processing and statutory retention periods require; application documents are deleted no later than six months after the process ends unless you have agreed to longer storage.

This website contains links to WhatsApp. A connection to WhatsApp Ireland Limited is established only once you click such a link, at which point your telephone number and the content of your message are processed there. No data is transmitted to WhatsApp before the click. If you would rather avoid this, please use email or telephone.

YouTube videos

Videos on this website are not embedded directly. You initially see only a thumbnail. A video is loaded from YouTube only when you click that thumbnail, at which point a connection to Google Ireland Limited is established and your IP address is transmitted. We use the extended privacy mode (youtube-nocookie.com), which limits cookie storage until playback begins. The legal basis is your consent given by clicking, Art. 6 (1) (a) GDPR.

Google Maps

The map on our contact page also loads only after a click. Until then there is no connection to Google. After the click, Google Ireland Limited processes your IP address and possibly location data. Transfer to the United States cannot be ruled out; Google relies on the standard contractual clauses and the EU-US Data Privacy Framework.

Analytics

We use Google Analytics via Google Tag Manager to understand which pages are used. This sets cookies and transmits usage data to Google Ireland Limited; the IP address is truncated. The legal basis is your consent under Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. You may withdraw consent at any time with effect for the future.

Cookies

We set technically necessary cookies without consent on the basis of § 25 (2) TDDDG. All other cookies, in particular for analytics, are set only with your consent. You can delete cookies or restrict their storage in your browser at any time; individual functions of this website may then be limited.

Recipients and transfers to third countries

Access to your data is limited to staff who need it to handle your enquiry, and to service providers who supply hosting, email and analytics on our behalf. Data processing agreements under Art. 28 GDPR are in place with those providers. Where data is transferred to a third country, this takes place on the basis of an adequacy decision or the standard contractual clauses.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time; the lawfulness of processing carried out before withdrawal is unaffected.

An informal message to info@exposol.de is enough to exercise these rights. You also have the right to lodge a complaint with a supervisory authority — for our registered office, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Changes

We update this privacy policy when the legal position or the services used on this website change. The version published here is the one that applies.