Privacy Policy

1. Data controller

The controller of your personal data is VALTERA DEVELOPMENT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (limited liability company), with its registered office at ul. Złota 59, 00-120 Warszawa, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001189786, NIP (tax ID) 5253057820, REGON 542500154, share capital PLN 5,000 (“Valtera”, “we”, “us”).

The Management Board: João Saracho De Almeida (Member of the Management Board) and Hanna Abi Mourad (Member of the Management Board).

For all matters relating to personal data, contact us at contact@solidacapital.com or by post at the address above. We have not appointed a Data Protection Officer.

2. What data we collect

• Contact form: name, company, e-mail address, the content of your message, and a record of the privacy consent you gave (its text and time).
• Correspondence: data you provide when you write to us by e-mail or phone.
• Technical and usage data: IP address, browser and device information, pages visited and interactions, collected through cookies and similar technologies — analytics only with your consent.

3. Purposes and legal bases

• Answering your enquiry and further business correspondence — your consent (Art. 6(1)(a) GDPR) and our legitimate interest in communicating with prospective partners and clients (Art. 6(1)(f) GDPR).
• Website analytics and measurement (Google Analytics 4 via Google Tag Manager) — your consent (Art. 6(1)(a) GDPR).
• Ensuring the security and proper operation of the website — our legitimate interest (Art. 6(1)(f) GDPR).
• Establishing, pursuing or defending legal claims — our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies and consent management

We use the CookieYes consent platform together with Google Consent Mode v2. When you first visit the site you can accept, reject or customise cookie categories. Analytics cookies (Google Analytics 4, loaded through Google Tag Manager) are only activated after you consent; until then Google tags operate in a restricted, cookieless mode.

Strictly necessary cookies, required for the site to work and to remember your consent choice, are used without consent. You can change or withdraw your consent at any time using the cookie settings link or icon on the website, and you can also delete cookies in your browser settings.

5. Recipients and processors

We share personal data only with service providers that process it on our behalf under data processing agreements, and with public authorities where required by law:

• Lovable — website hosting and application platform (Lovable Cloud).
• Supabase — database and file storage, hosted in the European Union.
• Cloudflare, Inc. — content delivery network, security and hosting infrastructure.
• Google Ireland Limited — Google Tag Manager and Google Analytics 4.
• CookieYes Limited — cookie consent management.

6. Transfers outside the EEA

Some of our providers (in particular Google, Cloudflare and Lovable) or their sub-processors may process data outside the European Economic Area, including in the United States. Such transfers take place on the basis of the European Commission’s adequacy decision for the EU-US Data Privacy Framework for certified companies, or Standard Contractual Clauses (Art. 46 GDPR) with additional safeguards. You may request a copy of the applicable safeguards by contacting us.

7. Retention

• Enquiries and correspondence — for up to 3 years from our last contact, or until you withdraw consent or object, unless longer retention is needed to pursue or defend claims.
• Analytics data in Google Analytics 4 — up to 14 months.
• Your cookie consent record — 12 months, after which we ask you again.

8. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy of it (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (“right to be forgotten”) (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on our legitimate interest (Art. 21);
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)).

To exercise your rights, write to contact@solidacapital.com. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.

9. Voluntary provision and automated decisions

Providing your data is voluntary, but without an e-mail address and consent we cannot reply to an enquiry sent through the form. We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.

10. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access restricted to authorised staff, and role-based access controls on our systems.

11. Changes to this policy

We may update this policy when our services, providers or legal requirements change. The current version is always available on this page.