1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Solution Flow PTE. LTD.
1 North Bridge Road
B1-35 High Street Center
Singapore 179094

Email: support@thesolutionflow.com

Solution Flow is an internationally operating holding company. Certain operational activities within the Solution Flow group are carried out by affiliated entities, in particular Nexo Flow Ltd., which operates within the holding structure and provides services under the Solution Flow brand.

Overall responsibility for data processing on this website remains with Solution Flow PTE. LTD.
For any questions regarding data protection, you may contact us at the email address listed above at any time.

2. General Information on Data Processing

We take the protection of your personal data very seriously. Personal data is processed confidentially and in accordance with applicable data protection laws and this Privacy Policy.

Personal data refers to any information that can be used to identify you personally. This Privacy Policy explains what data we collect, how we use it, for what purposes, and what rights you have as a data subject.

3. Data Collection on Our Website

3.1 Access Data and Server Log Files

When visiting our website, our systems automatically collect technical information, including:

• IP address
• browser type and version
• operating system used
• referrer URL
• hostname of the accessing device
• date and time of the server request
• accessed pages and amount of data transferred

These data are technically necessary to ensure the proper operation, security, and optimization of the website. The data is not merged with other data sources.

Legal basis:
Article 6(1)(f) GDPR (legitimate interest in ensuring website stability, security, and optimization).

3.2 Contact Requests

If you contact us via email, contact form, or other communication channels, the data you provide will be processed, including:

• name (if provided)
• email address
• phone number (if provided)
• any other information you voluntarily submit

The data is processed exclusively to handle your request.

Legal basis:
Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in communication).

3.3 Newsletter

You may subscribe to our newsletter via the website. For this purpose, we process:

• your email address
• date and time of registration
• IP address at the time of registration (double opt-in verification)

You may unsubscribe at any time.

Legal basis:
Article 6(1)(a) GDPR (consent).

3.4 Cookies and Tracking Technologies

Our website uses cookies, including:

• Essential cookies required for website functionality and security
• Analytics cookies (eg Google Analytics)
• Marketing cookies, where applicable

Google Analytics uses IP anonymization. Any transfer of data to third countries takes place only on a valid legal basis.

Legal basis:
Article 6(1)(a) GDPR (consent for non-essential cookies)
Art. 6(1)(f) GDPR (legitimate interest for essential cookies)

4. Legal Bases for Processing

Personal data is processed on the basis of:

• Art. 6(1)(a) GDPR – consent
• Art. 6(1)(b) GDPR – contractual or pre-contractual measures
• Article 6(1)(c) GDPR – legal obligation
• Article 6(1)(f) GDPR – legitimate interest
  
  

5. Transfer of Data to Third Countries

As part of an international corporate structure, personal data may also be processed outside the European Economic Area, in particular in Singapore.

To ensure an adequate level of data protection, we implement:

• EU Standard Contractual Clauses (Art. 46 GDPR)
• appropriate technical and organizational safeguards
• compliance with the Personal Data Protection Act (PDPA) of Singapore

A copy of the Standard Contractual Clauses may be requested from us.

6. Rights of Data Subjects

You have the right to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact: support@thesolutionflow.com

7. Data Retention Periods

Personal data is stored only as long as necessary for the sensitive purpose or as required by law:

• server log files: up to 7 days
• contact inquiries: after completion of processing
• newsletter data: until withdrawal of consent
• contract-related data: up to 10 years (statutory retention periods)
  
  

8. Data Security

We implement appropriate technical and organizational security measures, including:

• SSL/TLS encryption
• access controls and authorization concepts
• firewalls and monitoring systems
• regular backups
• data protection training for staff

These measures are continuously reviewed and adapted to technological developments.
‘

9. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect legal, technical, or organizational changes. The current version published on our website shall always apply.

Last updated: April 2026