Data controller.
The data controller within the meaning of Article 4(7) GDPR is:
- Controller
- Green Panel Solutions GmbH, operating as Solcruit
- Address
- Volksgartenstraße 3/2.OG, 1010 Vienna, Austria
- info@solcruit.com
For all questions concerning data protection or to exercise your rights under the GDPR, please contact us at info@solcruit.com with the subject "Data Protection Enquiry".
Green Panel Solutions GmbH has assessed the requirements of Article 37 GDPR and currently does not require the appointment of a designated Data Protection Officer. Should this change, the contact information will be updated here.
Data we collect.
Data you provide
When you submit our contact form, send us an email, or otherwise communicate with us, you may provide the following categories of personal data:
- Identification data — name, family name
- Contact data — email address, phone number, country
- Professional data — your role indication (electrician, subcontractor firm, EPC/developer, landowner, homeowner), qualifications, certifications, references, work history
- Site or property data — for BESS landowner partnerships, location, size, grid proximity, and other site characteristics
- Communication content — the text of your enquiries, follow-up correspondence, and any documents you attach
Data collected automatically
When you visit www.solcruit.com, our server automatically logs certain technical data:
- IP address (anonymised where possible)
- Browser type, version, and language
- Operating system
- Referrer URL (the previous page you came from)
- Date and time of access
- Pages visited within our site
This technical data is processed to ensure the secure operation of the website and is not used to build user profiles.
Purposes and legal basis.
We process your personal data for the following purposes, each with its corresponding legal basis under the GDPR:
a) Sourcing, qualification, and introduction
To assess whether your profile, capacity, or site is suitable for introduction to one of our project operators. This includes verifying credentials, checking references, and matching against operator-defined criteria.
Legal basis: Article 6(1)(b) GDPR — processing necessary for steps taken at your request prior to entering into a (potential) contractual relationship, combined with Article 6(1)(f) GDPR — our legitimate interest in maintaining a qualified network of candidates and partners.
b) Sharing your data with operators
When we identify a project operator suited to your profile and location, we share your relevant qualifications and contact details with that operator to enable a formal commercial conversation between you and them.
Legal basis: Article 6(1)(b) GDPR — pre-contractual measures at your request. For sensitive context (e.g., specific introductions you may wish to control), we may rely on Article 6(1)(a) GDPR — your specific consent.
c) Communication and follow-up
To respond to your enquiries, schedule conversations, maintain dialogue through the qualification process, and check in on the durability of matches we have made.
Legal basis: Article 6(1)(b) and Article 6(1)(f) GDPR.
d) Website operation and security
To provide a functional, secure website, prevent abuse, and address technical problems.
Legal basis: Article 6(1)(f) GDPR — legitimate interest in operating a secure web service.
e) Legal compliance
Where required, to comply with legal obligations including tax, accounting, and record-keeping under Austrian and EU law.
Legal basis: Article 6(1)(c) GDPR — legal obligation.
Recipients of your data.
Your personal data may be disclosed to or made accessible by the following categories of recipients:
Project operators
Established European photovoltaic and battery energy storage operators to whom we introduce qualified candidates and partners. This is the core of our service and the primary reason your data is processed. Each operator is an independent data controller for the data they receive and is responsible for its further processing under their own privacy policy.
Operators are bound by professional confidentiality and, where appropriate, by separate data-sharing agreements with Green Panel Solutions GmbH. We do not share your data with operators we have not pre-qualified ourselves.
Service providers (data processors)
External service providers acting on our behalf under data processing agreements within the meaning of Article 28 GDPR. These include:
- Hosting provider for www.solcruit.com and associated email infrastructure
- Email service provider
- Where applicable, professional service providers (tax advisors, legal advisors, auditors) bound by statutory confidentiality obligations
Affiliates of Green Panel Solutions GmbH
Where strictly necessary for the qualification and introduction process, data may be shared internally with personnel and divisions of Green Panel Solutions GmbH on a need-to-know basis.
Authorities
Government authorities, courts, or law enforcement agencies where disclosure is required by law or a binding legal request.
We do not sell, rent, or otherwise commercially transfer your personal data to third parties beyond what is described above.
International transfers.
Solcruit operates across 27 European countries. Your personal data may be transferred to project operators or service providers based in any of these countries. All these countries are either members of the European Economic Area (EEA) or have equivalent GDPR-compliant data protection standards.
We do not currently transfer personal data outside the EEA. Should this change in the future — for example, through the use of a non-EEA service provider — we will ensure appropriate safeguards under Chapter V of the GDPR (such as Standard Contractual Clauses or an adequacy decision) are in place, and we will update this Policy.
Retention periods.
We retain personal data only as long as necessary for the purposes for which it was collected, taking into account statutory retention obligations.
- Active candidates, firms, and partners: For the duration of the active relationship plus 36 months after last meaningful contact, for documentation and reactivation purposes.
- General enquiries that do not progress to qualification: 12 months after last contact, then deleted.
- Communication and correspondence: Up to 36 months after the conclusion of the related matter.
- Statutory retention obligations: Where Austrian commercial or tax law requires longer retention (typically 7 years under §132 BAO and §190 UGB), data is preserved for the legally required period and then deleted.
- Server logs (technical data): Up to 30 days, then deleted or anonymised, unless required for the investigation of a specific security incident.
Your rights.
Under the GDPR, you have the following rights with respect to your personal data:
Right of access
You may request confirmation of whether we process your personal data and obtain a copy of that data along with information about how it is processed.
Right to rectification
You may request that we correct inaccurate personal data or complete incomplete data.
Right to erasure ("right to be forgotten")
You may request deletion of your personal data, subject to applicable statutory retention obligations.
Right to restriction of processing
You may request that we limit how we process your data in certain circumstances.
Right to data portability
You may receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to object
You may object to processing based on Article 6(1)(f) GDPR (legitimate interest) for reasons relating to your particular situation. Where you object to processing for direct marketing purposes, the objection is absolute.
Right to withdraw consent
Where processing is based on your consent (Article 6(1)(a)), you may withdraw that consent at any time without affecting the lawfulness of previous processing.
Right to lodge a complaint
You may lodge a complaint with a supervisory authority — particularly in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. The competent authority for Austria is the Datenschutzbehörde:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
dsb@dsb.gv.at · www.dsb.gv.at
To exercise any of these rights, please contact us at info@solcruit.com with the subject "Data Protection Rights Request". We respond to verified requests within one month, with possible extension under Article 12(3) GDPR for complex cases.
Cookies and analytics.
Our website does not currently use tracking cookies, third-party analytics services, retargeting pixels, or social-media plug-ins that transmit data to external providers.
We use only technically necessary cookies (or similar storage mechanisms) strictly required for the website to function. Such cookies do not require consent under §165 of the Austrian Telecommunications Act (TKG 2021) or Article 5(3) of the ePrivacy Directive.
Should we introduce analytics, marketing, or other non-essential cookies in the future, we will update this Policy and implement an appropriate cookie consent mechanism in compliance with the GDPR and the TKG.
Data security.
We implement appropriate technical and organisational measures (TOM) under Article 32 GDPR to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted transmission (TLS/HTTPS), access controls, principle-of-least-privilege account management, and regular review of our security practices.
Despite these measures, no transmission over the internet can be guaranteed to be completely secure. If we become aware of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the supervisory authority and affected data subjects in accordance with Articles 33 and 34 GDPR.
Minors.
Our website and services are directed at professional audiences and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have inadvertently collected data from a minor without verified parental consent, we will delete that data without undue delay.
Automated decision-making.
We do not engage in solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR. Our qualification process always involves human review.
Changes to this Policy.
We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, or service offerings. The current version is always available at www.solcruit.com/legal/privacy. Significant changes will be communicated to active candidates and partners by email where appropriate.