Solitics

Solitics is a real time customer data and marketing automation platform that connects a brand backend and external data sources to deliver personalised engagement across channels. This guide explains what Solitics does, the data and cookies involved, and how to use it in a way that respects GDPR and the ePrivacy Directive.

What Solitics is

Founded in 2013 and headquartered in Tel Aviv, Israel, Solitics connects directly to distributed data sources such as CRM, business intelligence, trading platforms and website or app data, and processes customer behaviour in near real time. Brands use it to build automated journeys, profiling and campaigns that respond to each customer within seconds across email, push, SMS, in app and messaging channels. It is widely used in finance, igaming and ecommerce.

Data and cookies collected

To deliver real time personalisation, Solitics typically sets a visitor identifier and personalisation cookies, and ingests behavioural data such as page views, clicks, transactions and engagement events. Combined with backend data, this creates rich customer profiles. Because the platform builds detailed behavioural profiles and links them to identifiable individuals, the data it handles is personal data under GDPR.

GDPR and ePrivacy implications

The ePrivacy Directive requires prior consent before non essential cookies and similar identifiers are stored or read on a user device. The personalisation and analytics cookies used by Solitics are not strictly necessary, so they require consent. Under GDPR, the profiling and combination of data sources amount to high risk processing, which is why we classify this service as high risk and recommend a Data Protection Impact Assessment.

Consent requirements

You must obtain freely given, specific, informed and unambiguous consent before loading Solitics tracking and before profiling begins. The lawful basis is consent under Art. 6(1)(a) GDPR for marketing, profiling and analytics cookies, with legitimate interest reserved only for limited core functions. Consent must be as easy to withdraw as to give, and tracking must stay blocked until the user opts in.

Data transfers

Solitics processes personal data in Israel, a country that benefits from an EU adequacy decision, so transfers there can rely on that decision without extra safeguards. Depending on the deployment, data may also be processed in other cloud regions, including the United States. Where data reaches a region without an adequacy decision, standard contractual clauses and supplementary measures should be in place.

Practical compliance steps

Block Solitics until consent is captured through your consent management platform, list its cookies and purposes in your cookie policy, and document the lawful basis and transfer mechanisms in your records of processing. Complete a Data Protection Impact Assessment, apply data minimisation and retention limits, and give users a clear way to withdraw consent and object to profiling.