Privacy policy

Who processes your data

The controller is Solaris Power PV UG (haftungsbeschränkt), Auer Straße 29, 89257 Illertissen, represented by managing director Sadok Ben Haj Hamida.

Privacy contact: support@skriptovia.com

The Bavarian State Office for Data Protection Supervision is responsible for data protection complaints concerning private-sector businesses in Bavaria.

Visits and technical security

When the website loads, the hosting infrastructure processes technical connection data, such as your IP address, the requested page, the time, and browser and device information. This processing is necessary to deliver the website, maintain stability and prevent abuse. The application does not use this data to create visitor profiles.

The website uses Cloudflare for hosting, its database and protected file storage. Cloudflare processes technical data in accordance with the privacy and contractual terms applicable to the service. Depending on the technical processing involved, data may be processed outside the European Economic Area; Cloudflare describes its safeguards and data processing in its privacy policy and data protection terms.

Website statistics with minimal data

The operator area counts page views, clicks on selected action links, enquiry form starts and successfully saved enquiries. It stores the page type or path, event type, a shortened action label and the calendar date. Form starts contain no entered information. Successful enquiries are counted only after they have been saved. Anonymous statistics are reported for the past 90 days. Older statistics records are cleared on a sampled basis when further statistics events are saved.

The statistics system does not read an IP address from the browser and does not use analytics cookies, device identifiers or visitor IDs. It therefore cannot identify unique individuals or returning visitors. The admin area shows actual page views, CTA clicks and received enquiries; a page view is not a reliable count of individual people.

We compare two labels on the main homepage button. A variant is chosen randomly on each page load, without recognising visitors. We count visible button exposures, first clicks and successfully saved enquiries by variant and language. The enquiry link passes only fixed categories for the test, variant and language. On submission, these categories are used only for an anonymous daily event count and are not stored in your enquiry record. No visitor identifier or test cookie is used, and the test is not linked to later purchases. Repeated visits and blocked events can affect the counts; they do not measure unique people or person-based conversion rates. The same reporting period and cleanup apply to these statistics.

To protect login and enquiry forms, the IP address supplied by the hosting service is briefly hashed together with the email address and used as a counter to limit abuse. These security values expire after 15 minutes and are not used for website statistics. The legal basis is our legitimate interest in the security and functionality of the service (Article 6(1)(f) GDPR).

Enquiries without a customer account

When you use the enquiry form, we process your name, email address, requested service, subject area, topic, approximate length, preferred deadline and description. A customer account is not required. We use this information to review your non-binding enquiry, ask follow-up questions and send you an offer. You may optionally provide a general source channel, such as a search engine or recommendation; full referrer URLs or advertising click identifiers are not stored for this purpose. Internally, we may record processing stages, quoted amounts and associated costs, and link the enquiry to a matching order and its recorded payments. Only authorised admins can access these details.

The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). Enquiries that are not pursued are cleared after six months, when the public form is next used or the admin inbox is opened. If an enquiry leads to an order, the information below and statutory retention requirements apply to the data needed to perform the contract.

Customer portal and communication

When you create an account or use the portal, we process your email address, alias, account role, hashed credentials and recovery codes, session data and order details. These may include the service, subject, topic, length, deadline, price and processing status, messages and associated files. We use the data to handle enquiries and orders, provide support and protect access.

The legal basis is taking steps before entering into a contract and performing the contract (Article 6(1)(b) GDPR). Where retention requirements apply, we process the necessary data to meet legal obligations (Article 6(1)(c) GDPR). Accounts and project information are deleted when they are no longer needed for these purposes, unless retention requirements or the legitimate pursuit of legal claims prevent deletion.

Documents and payment processing

Order files are held in protected object storage and made available in the portal only on the basis of order access rights. Please submit only documents needed for your project and remove third parties' personal information wherever possible. Assigned contributors receive only the project access they need for their task.

If Stripe Checkout is offered for your order, you enter payment details directly with Stripe. Skriptovia receives the necessary checkout and payment references and payment status, but no complete card details. Stripe processes data in accordance with its privacy policy. The payment page shows the available payment methods before you pay.

Necessary browser storage

Skriptovia uses a technically necessary, protected session cookie for a signed-in portal session. It expires after no more than seven days and is deleted when you sign out. When you select a service, the browser may briefly store your selection so it can be transferred to the enquiry form. Website tracking does not use this storage.

Your language choice is stored in a cookie for up to one year. The website starts in German unless you choose English.

Access, correction and deletion

Within the scope of the law, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing. You may withdraw consent you have given with effect for the future. To do so, contact support@skriptovia.com.

You may also complain to the competent data protection supervisory authority. We do not make decisions based solely on automated processing that have legal or similarly significant effects, and we do not create visitor profiles.