Privacy Policy

1. Data Controller

Solum Invest GmbH
represented by Managing Director Ing. Axel Ludwig Mühlbacher, MSc
Augasse 4, 6111 Volders, Austria
Email: office@soluminvest.at
Phone: +43 676 4008771
UID: ATU81665404 | Company Register: FN 642566a | Register Court: Regional Court Innsbruck

2. Collection and Processing of Personal Data

2.1 Contact Request
When you send a request on the contact page, the following data is collected: your answers to the multiple-choice questions (topic, company size, biggest time sink, desired start), phone number or email address, first name (optional) and a note (optional).

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries).

Storage period: Your inquiry is automatically deleted from our database (Supabase) after 90 days. We keep the copy delivered to us by email until the inquiry is fully processed and no legal retention obligations exist.

2.2 Server Log Files
The hosting provider (Vercel) automatically collects information in so-called server log files that your browser transmits. These include: IP address, browser type, operating system, referrer URL, time of access. This data is not merged with other data sources.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website).

Storage period: For security reasons, the server log files are stored for a maximum of 30 days and then automatically deleted.

3. Data Processors

Supabase Inc. is used as a data processor for storing contact form data. The server location and data storage are within the EU (Frankfurt am Main). As Supabase Inc. is a US company, access from the USA (e.g. for support or maintenance) cannot be entirely ruled out; any such third-country transfer is based on Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR).

Hosting is provided by Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA) as a data processor. Pages are delivered via Vercel’s global delivery network; the nearest Vercel location processes technically necessary connection data such as the IP address, including to protect the contact form against abuse. Server functions, such as storing and forwarding your request, run in Frankfurt am Main. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR); Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR) are in place as well.

For email delivery of contact form submissions, Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) is used as a data processor. Resend is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR) are in place as well. More information: resend.com/privacy.

To detect technical errors, Sentry (Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA) is used as a data processor. If an error occurs on the website, the error message, the page visited and the browser and device type are transmitted; for technical reasons the IP address may also be transferred. The data is stored in Sentry’s EU data region. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a website that works without errors). Sentry is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); Standard Contractual Clauses are in place as well.

4. Your Rights

You have the right at any time to: Access your stored data (Art. 15 GDPR), Rectification of inaccurate data (Art. 16 GDPR), Erasure of your data (Art. 17 GDPR), Restriction of processing (Art. 18 GDPR), Data portability (Art. 20 GDPR), Objection to processing (Art. 21 GDPR).

Contact us by email for this purpose. You also have the right to lodge a complaint with the competent supervisory authority (Austrian Data Protection Authority, dsb.gv.at).

5. Cookies

By default, this website does not use tracking cookies or advertising networks. Technically necessary cookies are used exclusively for the password-protected areas (/immo and /uni). Tracking cookies (Google Analytics 4) are only set after your active consent via the cookie banner — see section 6. Without consent, they remain disabled.

6. Web Analytics

This website uses Vercel Analytics, a privacy-friendly analytics tool from the hosting provider. Vercel Analytics does not collect personal data, does not set cookies, and is fully GDPR-compliant. No data is shared with third parties. Also without cookies, Vercel Speed Insights measures page load times (metrics, page visited, device and browser type).

Additionally, Google Analytics 4 (GA4) is used — however, exclusively after explicit consent via the cookie banner (Google Consent Mode v2). Without consent, no GA4 cookies are set and no analytics data about your usage behavior is processed (consent status "denied"). Data processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Where data is transmitted to Google in the USA, this is based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission).

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) for GA4, Art. 6 para. 1 lit. f GDPR (legitimate interest) for Vercel Analytics and Vercel Speed Insights. Consent can be withdrawn at any time via the cookie banner.

7. Appointment Booking (Calendly)

The service Calendly LLC (115 E Main St., Ste A1B, Buford, GA 30518, USA) is used for appointment booking. The booking window is only loaded when you point at, focus via keyboard, tap or click a booking button; your IP address is transmitted to Calendly in the process. If you book, your name and email address are also transmitted to Calendly. Calendly LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR) are in place as well. You can find Calendly's privacy policy at calendly.com/privacy.

8. Contact via WhatsApp

The website has a button that opens a chat with us in WhatsApp (a link to wa.me). Nothing is sent to WhatsApp when you visit our pages. Only when you tap the button do you switch to WhatsApp or to the wa.me website of WhatsApp Ireland Limited (Merrion Road, Dublin 4, Ireland), where their privacy policy applies. If you write to us, we process your phone number, your profile name and the content of your message in order to answer your request (Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR: legitimate interest in answering enquiries). Whether the button was tapped is only measured with your consent (see section 6). If you prefer not to use WhatsApp, you can reach us just as well by email or phone.

9. Changes

This privacy policy may be updated occasionally. The current version is always available on this page.

Last updated: October 2026