1. Data Controller
contact@solmeria.co
Data Protection Officer (DPO) : dpo@solmeria.co
2. Data Collected and Purposes
Solmeria collects personal data exclusively through the forms on this website. No data is collected without a voluntary action by the user.
Form A, Land Qualification (IT landowners)
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name | Landowner identification | Legitimate interest |
| Email, phone | Contact and case management | Legitimate interest |
| Land location | Eligibility assessment | Performance of a service |
| Approximate area | Eligibility assessment | Performance of a service |
| Land type | Eligibility assessment | Performance of a service |
| Availability for contact | Appointment management | Consent |
This data is transmitted, under a non-disclosure agreement (NDA), to Solmeria's partner developers for the purpose of introduction. The landowner is informed of this transmission before submitting the form.
Form B, Marketplace Access Request (B2B professionals)
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name | Contact identification | Performance of a contract |
| Professional email | Communication and access | Performance of a contract |
| Company, role | Profile qualification | Legitimate interest |
| Countries, technologies sought | Access personalisation | Legitimate interest |
| Search stage | Commercial qualification | Legitimate interest |
Form C, Project Submission (sellers)
| Data | Purpose | Legal basis |
|---|---|---|
| Professional contact details | Seller identification | Performance of a contract |
| Project information | File processing | Performance of a contract |
| Project documents | Technical qualification | Performance of a contract |
Form D, General Contact (all languages)
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name, profile | Identification and routing | Consent |
| Email, phone (optional) | Response to the request | Consent |
| Free-form message | Context understanding | Consent |
| IP address | Abuse prevention | Legitimate interest |
An internal Slack notification (channel #activity) contains your first and last name, your profile and a masked email (first character + domain) ; the full email and your message are delivered to our internal inbox via Brevo (acknowledgement email and internal notification to the sales team). The consent expressed via the checkbox is recorded verbatim for evidentiary purposes.
Form E, Question about a Listing (marketplace)
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name | Identification | Pre-contractual steps (Art. 6(1)(b)) |
| Professional email | Reply | Pre-contractual steps (Art. 6(1)(b)) |
| Company | Routing and qualification | Legitimate interest (Art. 6(1)(f)) |
| Question text | Understanding and answering | Pre-contractual steps (Art. 6(1)(b)) |
| Listing reference | Linking to the project | Pre-contractual steps (Art. 6(1)(b)) |
When a visitor or member asks a question about a specific project listing, the requester's name, company and question are forwarded internally by email (Brevo, FR / EU) and as an internal Slack notification (channel #activity, Slack Technologies, Inc., USA, EU SCCs), mirroring the connection-request flow. This data is used solely to answer the question and is retained under the "B2B contacts" period.
3. Retention Periods
| Category | Active retention | Archive |
|---|---|---|
| Landowner leads (Form A) | 3 years after last contact | 5 years |
| B2B contacts (Forms B and C) | 5 years after last contact | 5 years |
| Navigation data & cookies | 13 months maximum | Not archived |
| Connection logs | 12 months | Legal obligation |
4. Recipients of Data
Ferme Solaire SAS team, internal access limited to persons handling the files.
Partner developers, solely in the context of the land introduction service (Form A), after signing an NDA and with prior user information.
Technical sub-processors :
| Provider | Use | Location | Safeguards |
|---|---|---|---|
| Brevo (Sendinblue) | Automated emails | France / EU | GDPR compliant |
| Slack Technologies, Inc. | Internal lead notification | USA | EU SCC |
| Supabase Inc. | Backend database | EU, Ireland (eu-west-1) | No extra-EU transfer |
| Axeptio SAS | Consent management (CMP) | France / EU | No extra-EU transfer |
| Google (GA4 / GTM) | Audience analytics | USA | EU SCC |
| Airtable | CRM, lead management | USA | EU SCC |
| PandaDoc | NDA signing | USA | EU SCC |
| Calendly | Appointment booking | USA | EU SCC |
| Vercel | Website hosting | USA | EU SCC |
| DeepL SE | Automated translation (search queries and short listing summaries) | Germany / EU | No extra-EU transfer |
| Anthropic PBC | Automated processing of listing content (translation, description generation, data extraction) | USA | EU SCC |
No data is sold to third parties for commercial purposes.
5. International Data Transfers
Transfers outside the EU are governed by the Standard Contractual Clauses adopted by the European Commission (Decision 2021/914).
6. User Rights
Under the GDPR (Regulation (EU) 2016/679), you have the following rights :
- Right of access, obtain a copy of your personal data
- Right of rectification, correct inaccurate or incomplete data
- Right to erasure, request deletion of your data
- Right to restriction, restrict processing in certain cases
- Right to data portability, receive your data in a structured format
- Right to object, object to processing based on legitimate interest
- Right to withdraw consent, at any time, without retroactive effect
To exercise your rights : dpo@solmeria.co or by post to Ferme Solaire SAS, 25 avenue Sainte-Victoire, 13100 Aix-en-Provence, France. Response within one month.
7. Cookies and Trackers
| Type | Duration | Consent required |
|---|---|---|
| Session cookies (navigation) | Session | No (essential) |
| Language preference (sol_lang_pref) | 12 months | No (functional) |
| Google Analytics 4 | 13 months | Yes |
| Google Tag Manager | Depending on active tags | Yes |
| Advertising cookies | 6 months | Yes |
| Axeptio consent cookie (stores the consent choice) | 12 months | No (essential) |
On your first visit, before any cookie is set, we use the country associated with your IP address, provided by our hosting / CDN edge at connection time, solely to redirect you to the appropriate language version of the site and to initialise the sol_lang_prefcookie to that locale. The IP-derived country is used transiently for this routing and is not stored for any other purpose. You can change this choice at any time via the language switcher. Legal basis : legitimate interest (Art. 6(1)(f) GDPR), serving the site in the user's likely language.
8. Supervisory Authorities
France: Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr
Italy : Garante per la Protezione dei Dati Personali, www.garanteprivacy.it
You have the right to lodge a complaint with the supervisory authority in your country of residence.