Controller
The controller responsible for the processing described in this policy is:
50LUTION COMPANY LIMITED28 Thanh Luong 20, Da Nang, Viet Nam
Email: [email protected]
Tax identification number: 0402210945
Scope of this policy
This policy applies to the public 50lution company website. Separate privacy information may apply to Commerce MCP, customer projects, accounts, contracts and the future extension store. Those notices will be made available at the relevant point of service.
Personal data we process
Website access and security logs
When you access the website, our hosting and infrastructure providers may process technical information such as your IP address, request date and time, requested URL, browser and device information, referring page, response status and similar diagnostic data.
This processing is necessary to deliver the website, maintain stability, prevent abuse and investigate security incidents. Where the GDPR applies, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is operating a secure, reliable and abuse-resistant website.
Contact form and business enquiries
If you use the contact form, we process the information you choose to provide, including your name, work email address, company or store, requested timeline, enquiry type, project context and related correspondence.
When you interact with the form, Cloudflare Turnstile verifies the request for automated abuse. When you submit it, the information is sent to our server and delivered to 50lution by our email delivery provider, Resend. The form data is used only to handle your enquiry and related business communication; it is not added to a marketing mailing list.
Depending on the context, the legal basis is Article 6(1)(b) GDPR when you ask us to take steps before entering into a contract, or Article 6(1)(f) GDPR for general business communication. In the latter case, our legitimate interest is responding to relevant enquiries and maintaining business relationships. We process contract, invoice or compliance records under Article 6(1)(b) or Article 6(1)(c) GDPR where the relevant legal obligation applies.
The fields marked as required are needed to understand and respond to your request. You are not legally required to provide them, but we cannot process the enquiry through the form without them.
Hosting and service providers
The primary website and application infrastructure is hosted by DigitalOcean in its FRA1 region in Frankfurt, Germany. Website requests, application data and server logs are therefore processed on origin infrastructure located in the European Economic Area. The DigitalOcean Data Processing Agreement applies to the hosting service.
Cloudflare supports content delivery, network security and Turnstile verification. Resend processes contact form content to deliver the enquiry email to 50lution. More information is available in the Cloudflare Privacy Policy and Resend Privacy Policy. These providers may process technical or contact data only as needed to provide their respective services and may use their own subprocessors.
We may also disclose data when required by law, to protect legal rights or security, or in connection with a corporate transaction subject to appropriate safeguards.
Data location and international access
Our primary origin infrastructure is located in Frankfurt, Germany. However, EU hosting does not mean that every processing activity takes place only within the EU. 50lution is established in Viet Nam, and authorised 50lution personnel may access information from Viet Nam where necessary to respond to enquiries, provide support, operate services or protect their security.
The European Commission has not adopted an adequacy decision for Viet Nam. Cloudflare, Resend and DigitalOcean may also process limited data outside the EEA as described in their privacy and data-processing terms. Where Chapter V GDPR applies, we rely on the transfer mechanism applicable to the provider or processing relationship, including Standard Contractual Clauses or another recognised safeguard where required. You may contact us at [email protected] to ask which mechanism applies to your data and to request a copy of the relevant safeguards, subject to necessary redactions.
How long we keep data
We retain technical logs only for as long as reasonably necessary for delivery, security and troubleshooting. Business enquiries are kept while we handle the request and, where appropriate, for a reasonable period afterwards. Contract, invoice and compliance records may be retained for the periods required by applicable law.
Retention periods are determined by the purpose of processing, legal requirements, potential claims and the need to protect systems and users.
Your data protection rights
Subject to the conditions of applicable law, you may have the right to request access, correction, deletion or restriction of your personal data, object to processing, receive portable data and withdraw consent without affecting processing already carried out.
To exercise a right, email [email protected]. We may need to verify your identity before fulfilling a request. You have the right to object at any time to processing based on Article 6(1)(f) GDPR for reasons relating to your particular situation. If the GDPR applies, you may also lodge a complaint with the competent data protection supervisory authority in the EEA country where you live, work or believe an infringement occurred.
Automated decisions and children
This website does not use automated decision-making or profiling that produces legal or similarly significant effects. It is intended for businesses and professionals, not for children.
Security and policy changes
We use reasonable technical and organisational measures intended to protect personal data. No online system can be guaranteed completely secure.
We may update this policy when our website, services, providers or legal obligations change. The current version and its update date will remain available on this page.