Legal
Privacy policy
CONTROLLER
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Solution Broker Mobility Service Ltd.
Centris Business Gateway, Level 4/W
Triq is-Salib tal-Imriehel
Zone 3, Central Business District
Birkirkara CBD 3020, Malta
Registration Number C 117343
VAT number MT33298207
Represented by: Martin Dettmer, Director
Contact: mobility@solutions-broker.com
We have not appointed a Data Protection Officer because the statutory requirements for doing so are not met.
1. CONTACT FORM AND EMAIL
If you use the contact form or email us, we process the data you provide (name, email address, telephone number, selected subject and message content) solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (precontractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to the enquiry). You receive an automatic confirmation of receipt at the address provided.
Providing this information is neither a statutory nor a contractual requirement. Without your name and email address, however, we cannot respond to your enquiry.
2. ONLINE BOOKING, PAYMENT AND INVOICE
When you book a package online, we process your name, email address, your telephone number if provided, your billing address and, when booking as a business, also your company name and VAT identification number, the package chosen, order number, amount, payment method and the time and wording of your consents in the order window. We use this data to perform the contract and to create and send the invoice and the order confirmation. The legal basis is Art. 6(1)(b) GDPR and, for the retention of invoices, Art. 6(1)(c) GDPR.
Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. If you pay with Revolut Pay, Revolut Bank UAB, Konstitucijos ave. 21B, 08130 Vilnius, Lithuania, is also involved. Stripe creates and sends the invoice on our behalf. The respective provider processes your payment data under its own responsibility and privacy policy; we do not receive your card details. With Stripe, data may be transferred to affiliated companies in the USA; the basis is the standard contractual clauses or the European Commission's adequacy decision for certified companies. On their own payment pages, Stripe and Revolut set their own cookies; their privacy policies apply to these.
If you book as a business with a VAT identification number from another EU member state, we verify the number before payment via the European Commission's VAT Information Exchange System (VIES). The legal basis is Art. 6(1)(c) GDPR.
After booking Fundamentals, Playbook or the initial consultation, you receive a link to a questionnaire. We use your answers solely to prepare your personal document or your consultation. Depending on the package, this includes name and form of address, nationality, current country of residence, household composition including the age of children, marital status, type of income, housing preferences and budget, timeline, documents you already hold, type of health insurance, type of school, pets, vehicle and your key question. The legal basis is Art. 6(1)(b) GDPR. All answers are voluntary; where you leave a question blank, your document covers the topic in general terms. Your answers are stored in encrypted form on our server and sent by email to our mailbox. As long as the questionnaire is outstanding, we remind you of it by email up to two times. We provide your finished document via a personal download link that is valid for 30 days.
3. EMAIL MAILBOXES
Our email mailboxes, including those used for enquiries via the contact form, are operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as a processor under Art. 28 GDPR. Processing takes place in data centres in the European Union.
4. OPEN Q&A BY VIDEO
The open Q&A takes place as a video call. To take part, your name or display name and, if you switch on your camera and microphone, your image and voice are processed for the transmission. We use Microsoft Teams, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. You join via the link in your browser; no account is needed. Microsoft also processes technical connection data under its own responsibility in accordance with its privacy statement; data may be transferred to Microsoft Corporation in the USA on the basis of the European Commission's adequacy decision for the EU US Data Privacy Framework, supplemented by standard contractual clauses. We do not record the Q&A. The legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering questions in conversation.
If you ask to be reminded of an open Q&A date on the website, we process your email address, the date chosen and the time of your confirmation in order to send you the confirmation and the reminder. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for example by writing to mobility@solutions-broker.com. We delete this data automatically after the date has passed. If you do not confirm your registration, we delete it after 48 hours; if you unsubscribe, we delete it immediately.
You answer the orientation questions on the website anonymously; your answers are not stored. To see through which channel visitors reach the website, we count visits, enquiries and bookings per entry link without identifying you.
After your result, you can choose to request a short checklist by email. For this we process only your email address, on the basis of your consent under Art. 6(1)(a) GDPR. You receive one email with a link to download the checklist; the link is valid for 48 hours. Your email address is not linked to your answers, not stored permanently and not used for advertising or a newsletter; we use it only for this one email. The email is sent via our hosting provider IONOS (see section 7). Technical email delivery logs are kept by IONOS as our processor for the period set out in its data processing agreement and then deleted automatically. You can withdraw your consent at any time with future effect, for example by writing to mobility@solutions-broker.com.
5. STORAGE PERIOD
We delete enquiries once they are no longer required for processing, and no later than six months afterwards. If your enquiry leads to a contract, we retain the documents for the applicable commercial and tax law retention periods. This also applies to invoices and booking data from online bookings.
We delete your questionnaire answers and your finished document 90 days after the document has been sent, or for the initial consultation 90 days after the consultation. If you do not submit the questionnaire, we delete any saved answers 90 days after your payment. Invoices and booking data are retained separately in line with statutory retention periods.
Server log files are deleted after no more than 30 days. Backups of the website are deleted automatically after 30 days; until then, deleted data may still be contained in a backup.
6. COOKIES
This site uses only technically necessary cookies and browser storage. They are set without consent (Art. 5(3) of Directive 2002/58/EC as implemented in Malta by S.L. 586.01; for users in Germany Section 25(2) No. 2 TDDDG). In detail:
The session cookie ah_partner_public is set on every visit. It contains only a random identifier and protects forms and checkout against misuse. It cannot be read by scripts and is deleted when you close your browser.
The entry ah_funnel_seen stores in your browser, for the duration of your visit, that the notice about the open consultation has already been shown, so that it does not appear again. It is deleted when you close the tab.
The entry ah_funnel_hide is only created if you expressly choose in the consultation window that it should no longer appear. It remains stored in your browser until you delete it or untick the box again.
The language of the site is determined by the address you open; no cookie is set for this. Only in the protected administration area, which is accessible to us alone, a session cookie and a language cookie with a lifetime of one year are used.
No cookies for analytics, marketing or tracking are used; a consent banner is therefore not required. Should services requiring consent be added in future, we will obtain your consent beforehand.
7. HOSTING, TECHNICAL OPERATION AND BACKUPS
The website is hosted on a server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, acting as processor under Art. 28 GDPR in data centres within the European Union. Programming, maintenance and technical support are provided by Medecke I.T. Consulting LTD, Elinon 27, Skyros House No. 9, 5295 Pernera, Cyprus, also as processor under Art. 28 GDPR. During operation, technical data is processed in server log files (IP address, time of access, requested page, amount of data transferred and browser type). The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the secure and stable operation of the website.
As hosting provider, IONOS additionally keeps its own server log files containing IP addresses; IONOS's retention periods apply to these.
To protect against misuse, when forms are submitted, during checkout and when logging in to the administration area, we briefly store a hash value of your IP address together with the time in order to slow down excessive attempts. The IP address itself is not stored in plain text. These entries are deleted after 48 hours.
We count how many visits reach the site through our entry links, for example from TikTok or Instagram. Counting takes place without cookies and without storage in your browser. To avoid counting a visit twice on the same day, the server creates an encrypted short value from the IP address and browser identifier, using a key that is newly generated every day. The IP address itself is not stored; the short value is usually deleted after one day. The counts themselves contain no personal data.
The legal basis in each case is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the site against misuse and in understanding through which channels visitors find the site.
We store customer data such as orders, questionnaires, documents, invoices, enquiries and reminders in encrypted form. A backup of the website is created twice a day and stored on our server at IONOS SE in data centres in the European Union; customer data remains encrypted in it. Backups are deleted automatically after 30 days. We additionally keep individual backups in encrypted form on our own systems. The legal basis is Art. 6(1)(f) GDPR in conjunction with Art. 32 GDPR; the legitimate interest lies in the security and recoverability of the data.
8. EMBEDDED CONTENT AND VIDEOS
The video section may contain content from social networks, in particular TikTok (TikTok Technology Limited, Ireland) and Instagram (Meta Platforms Ireland Limited). Such content is loaded only after you actively start it. Data may then be transmitted to the respective provider and to recipients outside the European Union, where a level of data protection equivalent to EU law cannot necessarily be guaranteed. Transfers are based on the providers' Standard Contractual Clauses or, where applicable, your consent under Art. 49(1)(a) GDPR. The providers are solely responsible for any further processing; details can be found in their privacy policies.
9. LINKS TO EXTERNAL SERVICES
The website links to external services, for example our social media channels. When you click such a link, you leave this website; the respective provider is responsible for processing carried out there.
10. NO AUTOMATED DECISION MAKING
We do not carry out automated decision making, including profiling, within the meaning of Art. 22 GDPR. Your data is not sold for advertising purposes or disclosed to third parties except to the processors named above or where we are legally required to do so.
11. YOUR RIGHTS
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Arts. 15 to 21 GDPR). You may withdraw consent at any time with effect for the future.
Right to object: where we process your data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
To exercise your rights, simply contact mobility@solutions-broker.com.
You also have the right to lodge a complaint with a data protection supervisory authority. In Malta, the competent authority is the Information and Data Protection Commissioner (idpc.org.mt); you may also contact the authority in your country of residence.
12. CHANGES TO THIS POLICY
We update this policy when the functions of the website or the legal requirements change.
Last updated: 27 October 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Solution Broker Mobility Service Ltd.
Centris Business Gateway, Level 4/W
Triq is-Salib tal-Imriehel
Zone 3, Central Business District
Birkirkara CBD 3020, Malta
Registration Number C 117343
VAT number MT33298207
Represented by: Martin Dettmer, Director
Contact: mobility@solutions-broker.com
We have not appointed a Data Protection Officer because the statutory requirements for doing so are not met.
1. CONTACT FORM AND EMAIL
If you use the contact form or email us, we process the data you provide (name, email address, telephone number, selected subject and message content) solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (precontractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to the enquiry). You receive an automatic confirmation of receipt at the address provided.
Providing this information is neither a statutory nor a contractual requirement. Without your name and email address, however, we cannot respond to your enquiry.
2. ONLINE BOOKING, PAYMENT AND INVOICE
When you book a package online, we process your name, email address, your telephone number if provided, your billing address and, when booking as a business, also your company name and VAT identification number, the package chosen, order number, amount, payment method and the time and wording of your consents in the order window. We use this data to perform the contract and to create and send the invoice and the order confirmation. The legal basis is Art. 6(1)(b) GDPR and, for the retention of invoices, Art. 6(1)(c) GDPR.
Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. If you pay with Revolut Pay, Revolut Bank UAB, Konstitucijos ave. 21B, 08130 Vilnius, Lithuania, is also involved. Stripe creates and sends the invoice on our behalf. The respective provider processes your payment data under its own responsibility and privacy policy; we do not receive your card details. With Stripe, data may be transferred to affiliated companies in the USA; the basis is the standard contractual clauses or the European Commission's adequacy decision for certified companies. On their own payment pages, Stripe and Revolut set their own cookies; their privacy policies apply to these.
If you book as a business with a VAT identification number from another EU member state, we verify the number before payment via the European Commission's VAT Information Exchange System (VIES). The legal basis is Art. 6(1)(c) GDPR.
After booking Fundamentals, Playbook or the initial consultation, you receive a link to a questionnaire. We use your answers solely to prepare your personal document or your consultation. Depending on the package, this includes name and form of address, nationality, current country of residence, household composition including the age of children, marital status, type of income, housing preferences and budget, timeline, documents you already hold, type of health insurance, type of school, pets, vehicle and your key question. The legal basis is Art. 6(1)(b) GDPR. All answers are voluntary; where you leave a question blank, your document covers the topic in general terms. Your answers are stored in encrypted form on our server and sent by email to our mailbox. As long as the questionnaire is outstanding, we remind you of it by email up to two times. We provide your finished document via a personal download link that is valid for 30 days.
3. EMAIL MAILBOXES
Our email mailboxes, including those used for enquiries via the contact form, are operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as a processor under Art. 28 GDPR. Processing takes place in data centres in the European Union.
4. OPEN Q&A BY VIDEO
The open Q&A takes place as a video call. To take part, your name or display name and, if you switch on your camera and microphone, your image and voice are processed for the transmission. We use Microsoft Teams, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. You join via the link in your browser; no account is needed. Microsoft also processes technical connection data under its own responsibility in accordance with its privacy statement; data may be transferred to Microsoft Corporation in the USA on the basis of the European Commission's adequacy decision for the EU US Data Privacy Framework, supplemented by standard contractual clauses. We do not record the Q&A. The legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering questions in conversation.
If you ask to be reminded of an open Q&A date on the website, we process your email address, the date chosen and the time of your confirmation in order to send you the confirmation and the reminder. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for example by writing to mobility@solutions-broker.com. We delete this data automatically after the date has passed. If you do not confirm your registration, we delete it after 48 hours; if you unsubscribe, we delete it immediately.
You answer the orientation questions on the website anonymously; your answers are not stored. To see through which channel visitors reach the website, we count visits, enquiries and bookings per entry link without identifying you.
After your result, you can choose to request a short checklist by email. For this we process only your email address, on the basis of your consent under Art. 6(1)(a) GDPR. You receive one email with a link to download the checklist; the link is valid for 48 hours. Your email address is not linked to your answers, not stored permanently and not used for advertising or a newsletter; we use it only for this one email. The email is sent via our hosting provider IONOS (see section 7). Technical email delivery logs are kept by IONOS as our processor for the period set out in its data processing agreement and then deleted automatically. You can withdraw your consent at any time with future effect, for example by writing to mobility@solutions-broker.com.
5. STORAGE PERIOD
We delete enquiries once they are no longer required for processing, and no later than six months afterwards. If your enquiry leads to a contract, we retain the documents for the applicable commercial and tax law retention periods. This also applies to invoices and booking data from online bookings.
We delete your questionnaire answers and your finished document 90 days after the document has been sent, or for the initial consultation 90 days after the consultation. If you do not submit the questionnaire, we delete any saved answers 90 days after your payment. Invoices and booking data are retained separately in line with statutory retention periods.
Server log files are deleted after no more than 30 days. Backups of the website are deleted automatically after 30 days; until then, deleted data may still be contained in a backup.
6. COOKIES
This site uses only technically necessary cookies and browser storage. They are set without consent (Art. 5(3) of Directive 2002/58/EC as implemented in Malta by S.L. 586.01; for users in Germany Section 25(2) No. 2 TDDDG). In detail:
The session cookie ah_partner_public is set on every visit. It contains only a random identifier and protects forms and checkout against misuse. It cannot be read by scripts and is deleted when you close your browser.
The entry ah_funnel_seen stores in your browser, for the duration of your visit, that the notice about the open consultation has already been shown, so that it does not appear again. It is deleted when you close the tab.
The entry ah_funnel_hide is only created if you expressly choose in the consultation window that it should no longer appear. It remains stored in your browser until you delete it or untick the box again.
The language of the site is determined by the address you open; no cookie is set for this. Only in the protected administration area, which is accessible to us alone, a session cookie and a language cookie with a lifetime of one year are used.
No cookies for analytics, marketing or tracking are used; a consent banner is therefore not required. Should services requiring consent be added in future, we will obtain your consent beforehand.
7. HOSTING, TECHNICAL OPERATION AND BACKUPS
The website is hosted on a server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, acting as processor under Art. 28 GDPR in data centres within the European Union. Programming, maintenance and technical support are provided by Medecke I.T. Consulting LTD, Elinon 27, Skyros House No. 9, 5295 Pernera, Cyprus, also as processor under Art. 28 GDPR. During operation, technical data is processed in server log files (IP address, time of access, requested page, amount of data transferred and browser type). The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the secure and stable operation of the website.
As hosting provider, IONOS additionally keeps its own server log files containing IP addresses; IONOS's retention periods apply to these.
To protect against misuse, when forms are submitted, during checkout and when logging in to the administration area, we briefly store a hash value of your IP address together with the time in order to slow down excessive attempts. The IP address itself is not stored in plain text. These entries are deleted after 48 hours.
We count how many visits reach the site through our entry links, for example from TikTok or Instagram. Counting takes place without cookies and without storage in your browser. To avoid counting a visit twice on the same day, the server creates an encrypted short value from the IP address and browser identifier, using a key that is newly generated every day. The IP address itself is not stored; the short value is usually deleted after one day. The counts themselves contain no personal data.
The legal basis in each case is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the site against misuse and in understanding through which channels visitors find the site.
We store customer data such as orders, questionnaires, documents, invoices, enquiries and reminders in encrypted form. A backup of the website is created twice a day and stored on our server at IONOS SE in data centres in the European Union; customer data remains encrypted in it. Backups are deleted automatically after 30 days. We additionally keep individual backups in encrypted form on our own systems. The legal basis is Art. 6(1)(f) GDPR in conjunction with Art. 32 GDPR; the legitimate interest lies in the security and recoverability of the data.
8. EMBEDDED CONTENT AND VIDEOS
The video section may contain content from social networks, in particular TikTok (TikTok Technology Limited, Ireland) and Instagram (Meta Platforms Ireland Limited). Such content is loaded only after you actively start it. Data may then be transmitted to the respective provider and to recipients outside the European Union, where a level of data protection equivalent to EU law cannot necessarily be guaranteed. Transfers are based on the providers' Standard Contractual Clauses or, where applicable, your consent under Art. 49(1)(a) GDPR. The providers are solely responsible for any further processing; details can be found in their privacy policies.
9. LINKS TO EXTERNAL SERVICES
The website links to external services, for example our social media channels. When you click such a link, you leave this website; the respective provider is responsible for processing carried out there.
10. NO AUTOMATED DECISION MAKING
We do not carry out automated decision making, including profiling, within the meaning of Art. 22 GDPR. Your data is not sold for advertising purposes or disclosed to third parties except to the processors named above or where we are legally required to do so.
11. YOUR RIGHTS
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Arts. 15 to 21 GDPR). You may withdraw consent at any time with effect for the future.
Right to object: where we process your data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
To exercise your rights, simply contact mobility@solutions-broker.com.
You also have the right to lodge a complaint with a data protection supervisory authority. In Malta, the competent authority is the Information and Data Protection Commissioner (idpc.org.mt); you may also contact the authority in your country of residence.
12. CHANGES TO THIS POLICY
We update this policy when the functions of the website or the legal requirements change.
Last updated: 27 October 2026