Version date: 4 Feb 2026
1. Controller
SoluForge (sole proprietorship)
Owner: Benjamin Wenzel
Kolonnenstraße 8, 10827 Berlin, Germany
Privacy email: privacy@craftifact.com
Note: Craftifact is intended exclusively for business customers (B2B).
2. Scope
This privacy policy applies to the craftifact.com marketing website.
Separate privacy notices apply to other services:
SaaS platform: https://app.soluforge.de/shop/legal/privacy
Identity service (IAM): see section C of this document
3. Hosting
The website is operated in the EU/EEA. Data processing agreements with hosting and infrastructure providers are in place pursuant to Art. 28 GDPR.
4. Server log files
When the website is accessed, the following data is processed server-side:
- truncated or anonymized IP address
- date and time of access
- requested URL
- referrer URL
- browser and operating system information
- HTTP status codes
The IP address is anonymized immediately after collection at the latest, so that it can no longer be linked to a person.
Purpose: stability, security, abuse and attack detection.
Legal basis: Art. 6(1)(f) GDPR.
Retention period: up to 14 days.
5. Cookies / tracking
No tracking or marketing technologies are used on craftifact.com. No cookies are used for analytics or advertising purposes.
Details are described in the Cookie and Device Policy.
Consent under Art. 6(1)(a) GDPR is not required.
6. Server-side statistics
For purely technical evaluation, server-side statistics functions of the hosting provider are used (e.g., AWStats).
- no cookies
- no user profiles
- IP addresses anonymized
Legal basis: Art. 6(1)(f) GDPR.
7. Contact by email
If you contact us by email, we process the data provided to handle your request.
Legal basis: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR.
Retention period: up to 12 months after completion of the inquiry.
8. Contact form
If you use the contact form, we process the submitted data server‑side and forward it to us by email. The website does not store the message contents.
For abuse prevention, we temporarily store a hashed IP address and a timestamp (up to 10 minutes) in the server’s temp directory.
Legal basis: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR.
Retention: same as contact by email (section 7).
9. Recipients
Recipients are only internal persons bound to confidentiality and commissioned processors (in particular hosting).
10. Third-country transfers
No personal data is transferred to third countries in connection with craftifact.com.
11. Data subject rights
Data subjects have the rights under Arts. 15–21 GDPR. There is also a right to lodge a complaint with the competent supervisory authority.
12. Data security
Appropriate technical and organizational measures are used to protect personal data.