Privacy policy

Last updated: October 2026

This policy explains which personal data is processed when you visit sola-diagnostics.com, for what purpose and on what legal basis. We deliberately keep processing to a minimum: without your consent, this website does not load any content from analytics or advertising services.

1. Controller

The controller responsible for data processing on this website is:

Sola Diagnostics GmbH
℅ Health Hub Tirol
Exlgasse 24
6020 Innsbruck, Austria
Phone +43 676 4040129
E-mail info@sola-diagnostics.com

Please use this e-mail address for any questions about data protection and to exercise your rights.

2. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, on servers in the European Union. We have concluded a data processing agreement with IONOS (Art. 28 GDPR).

Each time you visit, your browser transmits technically necessary data to the server, which stores it in log files: IP address, date and time, the page or file requested, amount of data transferred, status code, the previously visited page (referrer), and browser and operating system. We need this data to deliver the website and to keep it secure and stable. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). IONOS deletes the log files after seven days at the latest.

3. Cookies and consent

Cookies are small text files that a website stores in your browser. Without your consent, we set exactly one: sola_consent stores your choice in the consent banner for six months, after which we ask again. This cookie is technically required so that we can respect and document your decision (§ 165(3) Austrian Telecommunications Act 2021; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

We operate the consent banner ourselves on our server; no data is transferred to third parties. All other cookies and comparable access to your device only take place with your consent (§ 165(3) Telecommunications Act 2021, Art. 6(1)(a) GDPR).

You can change or withdraw your choice at any time via Cookie settings. The link is also in the footer of every page. Withdrawal takes effect for the future. An overview of all cookies and their retention periods is provided in our cookie policy.

4. Visitor statistics with Google Analytics

If you agree, we use Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It shows us which pages are visited, how long a visit lasts and how visitors find us.

For this purpose, Google sets the cookies _ga and _ga_8F1D1ZHGM0 and processes information about your device and browser, the pages visited with time stamps and an approximate location (country, region, city). According to Google, Google Analytics 4 does not store IP addresses; for access from the EU, the location is determined on servers in the EU.

Google signals, advertising features and ad personalization are switched off, as is data sharing with other Google products and services. Our website technically blocks connections to Google’s advertising services.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) Telecommunications Act 2021). Google Analytics is only loaded after you have agreed; before that, there is no connection to Google. If you withdraw consent via the Cookie settings, we delete the analytics cookies in your browser.

Google processes the data as our processor on the basis of Google’s data processing terms (Art. 28 GDPR). Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Google deletes event data after the retention period set in our account, at the latest after 14 months.

5. Contact form, e-mail and telephone

If you contact us via the contact form, by e-mail or by phone, we process your details (name, e-mail address, your message and anything else you tell us) in order to answer your inquiry. In the contact form, you give your consent for this (Art. 6(1)(a) GDPR), which you can withdraw at any time. Where a contract or its preparation is concerned, Art. 6(1)(b) GDPR is an additional legal basis; for other inquiries by e-mail or phone, it is our legitimate interest in answering them (Art. 6(1)(f) GDPR).

The form transmits your details in encrypted form to our web server, which sends them by e-mail to our mailbox; the e-mail is sent via the IONOS mail servers. The content of your inquiry is not stored on the web server. To protect against misuse, we store a hash value of your IP address, from which the IP address cannot be read in plain text, together with the time of the inquiry for a maximum of 24 hours (Art. 6(1)(f) GDPR).

Our e-mail mailboxes are operated by Microsoft (Microsoft Ireland Operations Limited, Dublin, Ireland) as part of Microsoft 365 as our processor.

If your inquiry concerns one of our products, for example feedback or a complaint, we document and assess it within our quality management system. The legal basis is our legitimate interest in the quality and safety of our products (Art. 6(1)(f) GDPR) and, where statutory obligations apply, Art. 6(1)(c) GDPR.

Please do not send us any health data of patients. We can answer professional questions from doctors without any personal patient details.

6. Embedded videos (Vimeo)

Some pages show videos hosted by Vimeo (Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA). When you open such a page, your browser loads the Vimeo player. Vimeo receives your IP address, information about your browser and the page you are visiting.

We embed the player with the “Do Not Track” setting. According to Vimeo, the player then does not collect any session data, including cookies and statistics. The legal basis is our legitimate interest in presenting videos (Art. 6(1)(f) GDPR). Vimeo is responsible for any further processing; Vimeo is certified under the EU-U.S. Data Privacy Framework. Details: vimeo.com/privacy.

7. Map, fonts and links

Map. We display the map of doctors on our website using our own map material served from our server. It is based on data from OpenStreetMap (© OpenStreetMap contributors), prepared by Protomaps. No data is transferred to third parties and no cookies are set when the map is displayed. If you use “Show my location”, your browser asks for permission first; your location is processed only in your browser and is not transmitted to us.

Fonts. All fonts are delivered from our own server. There is no connection to Google Fonts or any other font provider.

Links. References to other websites, for example to LinkedIn, Facebook or our documentation portal wid-easy.info, are simple links. Data is only transferred when you click a link; the privacy policy of the respective website then applies.

8. Recipients and transfers to third countries

Recipient	Purpose	Role	Location
IONOS SE	Hosting, sending of contact form e-mails	Processor	EU
Microsoft Ireland Operations Ltd.	E-mail mailboxes (Microsoft 365)	Processor	EU, transfer to the USA possible*
Google Ireland Ltd.	Visitor statistics, only with your consent	Processor	EU, transfer to the USA possible*
Vimeo.com, Inc.	Video playback on some pages	Independent controller	USA*

* The US companies concerned are certified under the EU-U.S. Data Privacy Framework; the European Commission’s adequacy decision applies to them (Art. 45 GDPR).

We only pass on your data to other third parties if we are legally obliged to do so.

9. Retention periods

Data	Retention
Server log files	7 days at most
Cookie sola_consent	6 months
Google Analytics cookies	up to 2 years or until you withdraw consent
Analytics data at Google	14 months at most
IP hash for misuse protection	24 hours at most
Inquiries via form and e-mail	until resolved and as long as statutory retention obligations apply; our mailboxes delete e-mails after 7 years
Product-related feedback	according to the retention periods of our quality management system

10. Your rights

You have the right to access the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw your consent at any time with effect for the future (Art. 7(3)).

Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, please write to info@sola-diagnostics.com. We do not use automated decision-making or profiling.

11. Complaints to the supervisory authority

You can lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work. The authority responsible for us is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna, Austria
Phone +43 1 52 152-0
E-mail dsb@dsb.gv.at

12. Data security and changes

The connection to this website is encrypted throughout (HTTPS). We update this policy when the website or the legal situation changes. The version published here applies.