1. Data Controller
contact@solmeria.co
Data Protection Officer (DPO) : dpo@solmeria.co
2. Data Collected and Purposes
Solmeria collects personal data exclusively through the forms on this website. No data is collected without a voluntary action by the user.
Form A, Land Qualification (IT landowners)
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name | Landowner identification | Legitimate interest |
| Email, phone | Contact and case management | Legitimate interest |
| Land location | Eligibility assessment | Performance of a service |
| Approximate area | Eligibility assessment | Performance of a service |
| Land type | Eligibility assessment | Performance of a service |
| Availability for contact | Appointment management | Consent |
This data is transmitted, under a non-disclosure agreement (NDA), to Solmeria's partner developers for the purpose of introduction. The landowner is informed of this transmission before submitting the form.
When a developer acquires a lead, they may record project-progress milestones and open service requests referencing the project. These are processed by Solmeria to manage the marketplace relationship and are not shared beyond Solmeria, the assigned account manager and the acquiring developer.
Form B, Marketplace Access Request (B2B professionals)
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name | Contact identification | Performance of a contract |
| Professional email | Communication and access | Performance of a contract |
| Company, role | Profile qualification | Legitimate interest |
| Countries, technologies sought | Access personalisation | Legitimate interest |
| Search stage | Commercial qualification | Legitimate interest |
Form C, Project Submission (sellers)
| Data | Purpose | Legal basis |
|---|---|---|
| Professional contact details | Seller identification | Performance of a contract |
| Project information | File processing | Performance of a contract |
| Project documents | Technical qualification | Performance of a contract |
Form D, General Contact (all languages)
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name, profile | Identification and routing | Consent |
| Email, phone (optional) | Response to the request | Consent |
| Free-form message | Context understanding | Consent |
| IP address | Abuse prevention | Legitimate interest |
An internal Slack notification (channel #activity) contains your first and last name, your profile and a masked email (first character + domain) ; the full email and your message are delivered to our internal inbox via Brevo (acknowledgement email and internal notification to the sales team). The consent expressed via the checkbox is recorded verbatim for evidentiary purposes.
Form E, Question about a Listing (marketplace)
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name | Identification | Pre-contractual steps (Art. 6(1)(b)) |
| Professional email | Reply | Pre-contractual steps (Art. 6(1)(b)) |
| Company | Routing and qualification | Legitimate interest (Art. 6(1)(f)) |
| Question text | Understanding and answering | Pre-contractual steps (Art. 6(1)(b)) |
| Listing reference | Linking to the project | Pre-contractual steps (Art. 6(1)(b)) |
When a visitor or member asks a question about a specific project listing, the requester's name, company and question are forwarded internally by email (Brevo, FR / EU) and as an internal Slack notification (channel #activity, Slack Technologies, Inc., USA, EU SCCs), mirroring the connection-request flow. This data is used solely to answer the question and is retained under the "B2B contacts" period.
Weekly newsletter
If you hold a professional account on Solmeria, we send you a weekly selection of opportunities every Monday, matching the products and markets you selected.
Legal basis: our legitimate interest (Article 6(1)(f) GDPR) in informing professionals of opportunities in their market. The content relates strictly to your professional activity.
Data used:your work address, first name, the newsletter language, which you may choose independently of the site language from your account or from the link in every issue, your company's country, the products and markets you select, the markets you declare an interest in, and a log recording which editions were sent to you and whether delivery succeeded. These preferences are used only to compose and order the content sent to you. No automated decision producing legal effects is made from them.
Right to object: you may object to this prospecting at any time and without justification (Article 21 GDPR), either through the unsubscribe link in every send or from the Notifications tab of your account. Objecting takes effect immediately and does not affect your use of the platform.
Listing content: each edition is also readable on a web page reachable through a non-indexed link, so the email stays legible when a mail client truncates it. That page carries the featured listings only, with no personal data of the recipient, and no precise location or landowner identity.
3. Retention Periods
| Category | Active retention | Archive |
|---|---|---|
| Landowner leads (Form A) | 3 years after last contact | 5 years |
| B2B contacts (Forms B and C) | 5 years after last contact | 5 years |
| Navigation data & cookies | 13 months maximum | Not archived |
| Connection logs | 12 months | Legal obligation |
| Newsletter preferences | Lifetime of the account | Deleted with the account |
| Newsletter delivery log | 13 months | Not archived |
4. Recipients of Data
Ferme Solaire SAS team, internal access limited to persons handling the files.
Partner developers, solely in the context of the land introduction service (Form A), after signing an NDA and with prior user information.
Technical sub-processors :
| Provider | Use | Location | Safeguards |
|---|---|---|---|
| Brevo (Sendinblue) | Automated emails and the weekly newsletter | France / EU | GDPR compliant |
| Slack Technologies, Inc. | Internal lead notification | USA | EU SCC |
| Supabase Inc. | Backend database | EU, Ireland (eu-west-1) | No extra-EU transfer |
| Axeptio SAS | Consent management (CMP) | France / EU | No extra-EU transfer |
| Google (GA4 / GTM) | Audience analytics | USA | EU SCC |
| Airtable | CRM, lead management | USA | EU SCC |
| PandaDoc | NDA signing | USA | EU SCC |
| Calendly | Appointment booking | USA | EU SCC |
| Vercel | Website hosting | USA | EU SCC |
| DeepL SE | Automated translation (search queries and short listing summaries) | Germany / EU | No extra-EU transfer |
| Anthropic PBC | Automated processing of listing content (translation, description generation, data extraction, weekly newsletter copy) | USA | EU SCC |
No data is sold to third parties for commercial purposes.
5. International Data Transfers
Transfers outside the EU are governed by the Standard Contractual Clauses adopted by the European Commission (Decision 2021/914).
6. User Rights
Under the GDPR (Regulation (EU) 2016/679), you have the following rights :
- Right of access, obtain a copy of your personal data
- Right of rectification, correct inaccurate or incomplete data
- Right to erasure, request deletion of your data
- Right to restriction, restrict processing in certain cases
- Right to data portability, receive your data in a structured format
- Right to object, object to processing based on legitimate interest
- Right to withdraw consent, at any time, without retroactive effect
To exercise your rights : dpo@solmeria.co or by post to Ferme Solaire SAS, 25 avenue Sainte-Victoire, 13100 Aix-en-Provence, France. Response within one month.
7. Cookies and Trackers
| Type | Duration | Consent required |
|---|---|---|
| Session cookies (navigation) | Session | No (essential) |
| Language preference (sol_lang_pref) | 12 months | No (functional) |
| Google Analytics 4 | 13 months | Yes |
| Google Tag Manager | Depending on active tags | Yes |
| Advertising cookies | 6 months | Yes |
| Axeptio consent cookie (stores the consent choice) | 12 months | No (essential) |
On your first visit, before any cookie is set, we use the country associated with your IP address, provided by our hosting / CDN edge at connection time, solely to redirect you to the appropriate language version of the site and to initialise the sol_lang_prefcookie to that locale. The IP-derived country is used transiently for this routing and is not stored for any other purpose. You can change this choice at any time via the language switcher. Legal basis : legitimate interest (Art. 6(1)(f) GDPR), serving the site in the user's likely language.
8. Supervisory Authorities
France: Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr
Italy : Garante per la Protezione dei Dati Personali, www.garanteprivacy.it
You have the right to lodge a complaint with the supervisory authority in your country of residence.