Privacy statement

We are pleased that you have visited our website company.simplesystem.com and are interested in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data, which we collect when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Articles 13 and 14 et seq. of the GDPR.

Right to Access and Deletion

You have the right to request information about the personal data we store at any time, as well as to request the correction, restriction, or deletion of this data. To exercise any of these rights, you can submit a request at the following webpage: Please click here.
We will process your request as quickly as possible and in accordance with the applicable legal requirements.

Person responsible

The controller within the meaning of Art. 4 No. 7 GDPR isthe person who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the controller is:

simple system GmbH
Haberlandstraße 55
81241 Munich
Germany
Email: info@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28

Contact Data Protection Officer

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can reach our data protection officer using the following contact details:

Ben R. Hansen
Haberlandstraße 55
81241 Munich
Germany
Email: datenschutz@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28

Provision of the website and creation of log files

Each time you access our website, our system automatically records data and information from the device you are using (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is itprocessed?

(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on ourwebsite;
(7) Websites from which the user's system accessed our website (referrertracking);
(8) Notification as to whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in our system's log files. This data is not stored together with the personal data of a specific user, so individual site visitors cannot be identified.

Legal basis for the processing of personal data

Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the achievement of the purpose described below.

Purpose of data processing

The temporary (automated) storage of data is necessary for the duration of a website visit to enable delivery of the website. Personal data is also stored and processed to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshoot problems. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to respond as quickly as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. We also use the data to optimize the website and generally ensure the security of our information technology systems.

Duration of storage

The afore mentioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for allvisitors, but no later than 3 months after accessing our website.

Possibility of objection and deletion

You can object to the processing at any time in accordance with Art. 21 GDPR and request the deletion of data in accordance with Art. 17GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

Special features of the website

Our site offers you various features that require us to collect, process, and store personal data. Below, we explain what happens tothis data:

Contact form(s)

What personal data is collected and to what extent is it processed?

We will process the data you enter in our contact forms, which you have entered in the input mask of the contact form, to fulfill the purpose stated below.

Legal basis for the processing of personal data

Art. 6 (1) (a) GDPR (consent through a clear affirmative action or behavior)

Purpose of data processing

We will only use the data collected via our contact form(s) to process the specific contact request received through the contact form.

Duration of storage

After your request has been processed, the data collected will be deleted immediately, unless there are statutory retention periods.

Possibility of revocation and deletion

The revocation and deletion options are based on the general provisions on the right of revocation and deletion under data protection law described below in this data protection declaration.

Necessity of providing personal data

The use of contact forms is voluntary and is neither contractually nor legally required. You are not obligated to contact us via the contact form; you can also use the other contact options provided on our website. If you wish to use our contact form, you must fill out the fields marked as mandatory. If you do not provide the required information, you will either not be able to submit your request, or we will unfortunately not be ableto process your request.

Login area

What personal data is collected and to what extent is it processed?

We will process the registration and login data you provide to us to fulfill the purpose stated below.

Legal basis for the processing of personal data

Art. 6 (1) (b) GDPR (implementation of (pre)contractual measures)

Purpose of data processing

You have the option of using a separate login area on ourwebsite. In order for us to verify your authorization to use the protected area or the protected documents, you must enter your login information (emailaddress or username and password) in the corresponding form.

Duration of storage

The data collected will be stored as long as you maintain a user account with us.

Possibility of objection and deletion

You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

Necessity of providing personal data

Use of the login area on our website is contractually required for use of the protected area. Use of the content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill out the fields marked as mandatory (user name and password). Entering this data requires the existence of a user account. Registration is not possible if the data you enter is incorrect. If you enter incorrect data or no data, you will not be able to use the protected area. However, the rest of the site can still be used without logging in.

Newsletter registration form

What personal data is collected and to what extent is it processed?

By registering for the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, other contact details, provided you provide them to us via the newsletter registration form.

Legal basis for the processing of personal data

Art. 6 (1) (a) GDPR (consent through a clear affirmative action or behavior)

Purpose of data processing

The data entered in the registration form for our newsletter will be used exclusively for sending our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation email containing a link that you must click to complete your subscription to our newsletter (double opt-in).

Duration of storage

You can unsubscribe from our newsletter at any time by clicking the unsubscribe link included in every newsletter. Your data will be deleted immediately after unsubscribing. Likewise, if you do not complete your registration, your data will be deleted immediately. We reserve the right to delete your data without giving reasons and without prior or subsequent notice.

Possibility of revocation and removal

You may revoke your consent at any time in accordance withArt. 7 (3) GDPR. However, this will not affect any processing carried out up to the time of revocation. For further information on your rights, please refer to the overview at the end of this privacy policy.

Necessity of providing personal data

If you would like to subscribe to our newsletter, you must fill out the mandatory fields and confirm your email address by clicking the double opt-in link. The information you provide for newsletter registration is neither necessary to enter into a contract with us nor legally binding. It is used solely for sending our newsletter. If you do not provide the required information, we will unfortunately not be able to provide you with our newsletter service.

Statistical analysis of visits to this website –Webtracker

When you access this website or individual files on the website, we collect, process, and store the following data: IP address, website from which the file was accessed, file name, date and time of access, amount of data transferred, and notification of the success of the access (so-called weblog). We use this access data exclusively in a non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

Google Ads

We use the Google Ads service of Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/ .

The processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the standard level of protection required by the GDPR cannot be guaranteed during transfer, as it cannot be ruled out that authorities in the third country, for example, may gain access to the collected data.

The legal basis for the transmission of personal data is your consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, which you have given on our website. Google Ads is an advertising system with which we place ads that are primarily based on search results when using the company's own services.

As part of the order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.

You can revoke your consent at any time. Further informationon revoking your consent can be found either in the consent itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://policies.google.com/privacy.

Google Tag Manager

What personal data is collected and to what extent is itprocessed?

On our website we use the service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (here in after: Google TagManager). Google Tag Manager offers a technical platform for running other webservices and web tracking programs using so-called "tags" and forbeing able to control them in a bundled manner. In this context, Google TagManager stores cookies on your computer and, if web tracking tools are run using Google Tag Manager, analyses your surfing behaviour (so-called "tracking"). The data sent by individual tags integrated in Google Tag Manager is compiled, stored and processed by Google Tag Manager under a uniform user interface. All integrated "tags" are listed separately in this data protection declaration. Further information on the data protection of the tools integrated in Google Tag Manager can be found in the respective section of this dataprotection declaration. When you use our website with activated integration of tags from Google Tag Manager, data such as in particular your IP address and your user activities are transmitted to servers of Google Ireland Limited. With regard to the web services integrated via Google Tag Manager, the regulations in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google TagManager prior to transmission by anonymizing the source code. In this case, Google Tag Manager only allows the anonymized collection of IP addresses (so-called IP masking).

Legal basis for the processing of personal data

The legal basis for data processing is, in accordance with Art. 6 (1) (a) GDPR, your consent in our information banner regarding the use of cookies and web tracking (consent through a clear confirming action orbehavior).

Purpose of data processing

On our behalf, Google will use the information obtained through Google Tag Manager to evaluate your visit to this website, compile reports on website activity and provide us with other services relating towebsite activity and internet usage.

Duration of storage

Google will store the data relevant to the functionality of Google Tag Manager for as long as necessary to fulfill the booked web service. Data collection and storage is anonymized. If personal information still exists, the data will be deleted immediately unless subject to statutory retention periods. In any case, deletion occurs after the retention period has expired.

Possibility of objection and deletion

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) as well as the processing oft his data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the "DoNot Track" setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link http://tools.google.com/dlpage/gaoptout?hl=de. Google's security and data protection principles can be found at https://policies.google.com/privacy.

Google-Analytics

Scope of processing of personal data

On our website we use the web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter:Google Analytics). As part of web tracking, Google Analytics uses cookies that are stored on your computer and enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis on the basis of the Google Analytics tracking service in order to continuously optimize our internet offering and make it more available. When you use our website, data such as your IP address and your user activities are transmitted to servers of Google Ireland Limited. We carry out this analysis on the basis of Google's tracking service in order to continuously optimize our internet offering and make it more available. We also need web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the web tracker enables us to take effective countermeasures and protect the personal data we process from these cyber attacks. By activating IP anonymization within the Google Analytics trackingcode on this website, your IP address will be anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been extended by the operator gat._anonymizeIp(); to enable only anonymized collection of IP addresses (so-called IP masking).

Legal basis for the processing of personal data

The legal basis for data processing is, in accordance withArt. 6 (1) (a) GDPR, your consent in our information banner regarding the use of cookies and web tracking (consent through a clear confirming action orbehavior).

Purpose of data processing

On our behalf, Google will use this information to evaluate your visit to this website, compile reports on website activity, and provide us with other services related to website activity and internet usage. We also require web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the webtracker allows us to take effective countermeasures and protect the personal data we process from these cyberattacks.

Duration of storage

Google will store the data relevant for providing webtracking for as long as necessary to fulfill the booked web service. Datacollection and storage is anonymized. If personal information is still available, the data will be deleted immediately unless subject to statutory retention periods. In any case, deletion occurs after the retention period has expired.

Options for objection and deletion

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) as well as the processing of this data by Google by deactivating the execution of script code in your browser or activating the "Do Not Track" setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-inavailable under the following link ( http://tools.google.com/dlpage/gaoptout?hl=de). Google's security and data protection principles can be found at https://policies.google.com/privacy?hl=de.

Integration of external web services and processing ofdata outside the EU

On our website, we use active content from external providers, so-called web services. When you access our website, these externa lproviders may receive personal information about your visit to our website. This may involve processing data outside the EU. You can prevent this by installing an appropriate browser plug-in or disabling scripts in your browser. This may result in functional limitations on the websites you visit.

We use the following external web services:

LinkedIn

We use the LinkedIn service of LinkedIn Ireland Unlimited Company, Wilton Place, 2 Dublin, Ireland, email: info_impressum@cs.linkedin.com, website: https://www.linkedin.com/. Processing also takes place in a third country for which there is no adequacy decision by the Commission.

Therefore, the level of protection required by the GDPR during transmission cannot be guaranteed, as it cannot be ruled out that authorities in the third country, for example, may gain access to the datacollected.

The legal basis for the transmission of personal data is your consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR,which you have given on our website.

When using the LinkedIn plugin, we establish a connection to the LinkedIn platform to give logged-in LinkedIn members the opportunity to interact with us. You can revoke your consent at any time. Further informationon revoking your consent can be found either in the consent itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

The provider offers an additional opt-out optionat https://www.linkedin.com/help/linkedin/answer/68763?lang=de.

• Microsoft Bookings

We offer you the opportunity to schedule an appointment on our website or with one of our consultants via Mail using the "Microsoft Bookings" service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399.

In this context, we process your data to enable optimal, user-friendly communication with interested parties. When booking appointments, we process the following categories of personal data: name, email address, date and time of the appointment, and, if provided, telephone number, address, and notes.

This data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

The contact details you provide will be deleted after the purpose has been fulfilled, unless there is a statutory retention period to the contrary. Further information about the processing of your personal data at Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement

• UserGuiding

We use the “UserGuiding” service provided by YNOT Partners,Inc., 316 High Street, Palo Alto, CA 94301, USA, to provide interactive instructions for our services.

The purpose of this processing of personal data is to enable user-friendly operation of our platform. When providing interactive instructions, we process the following categories of personal data: browsertype, IP address, and app usage data.

The processing of personal data in this context is in ourlegitimate interest in order to provide users with an optimal onboardingprocess. The legal basis for this is Art. 6 (1) (f) GDPR.

The collected usage and device data will be deleted afterthe purpose has been fulfilled, unless there is a statutory retention period.Further information about the processing of personal data at UserGuiding can befound here: https://userguiding.com/privacy-policy/

• Microsoft Power BI

We use integrations of the business analysis and visualization service Power BI from Microsoft Corporation, One Microsoft Way ,Redmond, WA 98052-6399, on our website.

In this context, we process your data for the purpose of creating service business intelligence dashboards, reports, semantic models (formerly known as datasets), and visualizations. We perform this reporting of analytical data to optimize our offering and ensure better availability. As part of the reporting, we process the following categories of personal data: name, email address, order and approval history, and, if provided, telephone number, address, and notes.

This data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

Your data will be deleted after the purpose has been fulfilled, unless there is a statutory retention period. Further information about the processing of your personal data by Microsoft can be found here:  https://privacy.microsoft.com/de-de/privacystatement

• Hubspot CRM Tool

To maintain and manage our customer and supplier data and to process your inquiries efficiently and quickly, we use a CRM system from HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland (hereinafter"Hubspot"). The legal basis for processing your personal data is Art.6 (1) (b) GDPR, in order to be able to fulfill our obligations arising from the contractual relationship with you. Furthermore, we have a legitimate interest within the meaning of Art. 6 (1) (f) GDPR in using the system to properly structure our customer data.

We use the marketing automation system HubSpot on our website, provided by HubSpot, 2nd Floor, 30 NorthWall Quay, Dublin 1, Ireland (hereinafter "Hubspot"). We use this integrated software solution to carry out marketing campaigns (email, social media), for analysis purposes, and to target customers and potential customers. Data processing takes place within the European Union.

The system components integrated into our online offering (e.g., forms, email sending) use so-called "cookies," which are stored on the user's computer and enable us to analyze website usage. Hubspot will use the data and information obtained via our website on our behalf to evaluate the user behavior of the data subject who has used our website. Hubspot will also use the data to compile reports on user activities on our behalf and to provide other services for our company related to the use of our website. Certain usage data will be linked to you personally and stored in our system. This allows us to send you information and offers specifically tailored to your interests.

In particular, the following information is collected: Client ID, geographical location, browser type, duration of visit and pages accessed, operating system, mobile app data, and referral URL. The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR. If you do not want Hubspot to collect and process this data, you can refuse your consent or revoke it at any time with future effect.

We also use Hubspot to provide contact forms. You can permanently prevent cookies from being set by our website at any time by selecting the appropriate settings in your browser, or by clicking on "Cookies" in the footer of our website.

Users can find further information on data protection in Hubspot's privacy policy and in the overview of compliance with EU dataprotection regulations.

• Hotjar

With your consent, we use Hotjar, an analytics software from Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, StJulian's STJ 1000, Malta, on our website. This tool makes it possible to measure and evaluate user behavior on the website and platform.

Hotjar is a tool for analyzing your user behavior on this website and the platform simpel system. With Hotjar, we can record, among other things, your mouse and scroll movements and clicks. Hotjar can also determine how long you hovered the mouse pointer on a certain spot. Hotjar uses this information to create so-called heatmaps, which can be used to determine which website areas are viewed most frequently by website visitors.

Hotjar uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Hotjar is used exclusively on the basis of Art. 6 (1) (a)GDPR. Consent can be revoked at any time. You can find out more about data processing by Hotjar at: https://www.hotjar.com/privacy

• Brevo

To send emails for marketing purposes and to provide functional information related to our platform, we use the “Brevo” service provided by Sendinblue SAS, 17 Rue Salneuve, 75017, Paris, Ile de France, France.

In this context, we process your personal data for the purpose of informing you about our services and providing you with technical or transactional information related to your use of our platform. When sending marketing emails and newsletters, we process the following categories of personal data: last name, first name, email address, and browsing behavior.

This data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

Personal data processed for the purpose of sending emails via Brevo will be deleted after the purpose has been fulfilled, unless there are legal retention obligations. You can object to processing for marketing purposes at any time with future effect. Further information about the processing of your personal data by Brevo can be found here: https://www.brevo.com/de/legal/privacypolicy/

Integration of external web services and processing ofdata outside the EU

For the technical operation and ongoing development of our platform, we rely on specialized service providers. These support us with, among other things, hosting, data analysis, sending system messages, communicating with users, and providing individual functionalities.

• Amazon Web Services

For hosting technical components of our platform, we use the service “Amazon Web Services (AWS)” provided by Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

Within this framework, we process your personal data for the purpose of providing our platform and the associated functions. In providing the platform, we process the following categories of personal data: IP address, login data, device type, browser, and usage data.

This data is processed to fulfill contractual obligations inaccordance with Art. 6 (1) (b) GDPR.

Personal data processed as part of platform hosting will be deleted after the purpose has been fulfilled, unless legal retentionobligations require longer storage. Further information about the processing ofyour personal data by Amazon Web Services can be found here: https://aws.amazon.com/privacy

• Microsoft Azure

To conduct our data analyses and provide interactive reportson our platform, we use the “Power BI” service based on the “Microsoft Azure”cloud infrastructure of the provider Microsoft Corporation, One Microsoft Way,Redmond, WA 98052, USA.

In this context, we process users' personal data to providethem with dashboards and analytics via our platform. Depending on the type ofreports created, we process the following categories of personal data: logindata, last name, first name, telephone number, company affiliation, datasubmitted or stored by you (e.g., activities, bookings, orders), and technicalmetadata.

This data is processed to fulfill contractual obligations in accordance with Art. 6 (1) (b) GDPR.

Personal data processed for the purpose of creating and providing reports will be deleted after the purpose has been fulfilled, unless there are legal retention obligations. Further information about the processing of your personal data by Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement

• Google BigQuery

To carry out data analyses and prepare analytical evaluations, we use the service “Google BigQuery” from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google BigQuery retains a copy of the data stored in our production system in order to create reports and analyses in downstream analysis and visualization systems. Within this framework, we process yourpersonal data to enable structured and efficient analyses of our productiondata, which, among other things, serve to optimize internal processes, ensure quality, and support decision-making in product development. When creating these reports, we process the following categories of personal data: last name, first name, email address, telephone number, customer number, order information, usage data, and technical metadata.

This data is processed on the basis of our legitimate interest in improving our products and services in order to offer you an optimal customer experience, in accordance with Art. 6 (1) (f) GDPR.

Personal data processed for the purpose of data analysis via Google BigQuery will be deleted once the purpose no longer applies, unless there are legal retention obligations. Further information about the processing of your personal data by Google can be found here: https://policies.google.com/privacy?hl=de

• Microsoft 365

For our daily office and communication processes, we use the"Microsoft 365" service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. The application includes, among other things, the "Outlook" service, which we use for email communication with customers, prospects, and other third parties.

Within this framework, we process personal data for the purpose of efficiently carrying out our organization, planning, and documentation, as well as our internal and external communication. We process the following categories of personal data: last name, first name, emailaddress, company affiliation, communication content, metadata on emails (e.g.,time of sending, subject line), telephone numbers, and attached documents, if applicable.

The afore mentioned data is processed for the initiation and execution of contractual relationships in accordance with Art. 6 (1) (b) GDPR and on the basis of our legitimate interest in secure, traceable and efficient communication with external contacts in accordance with Art. 6 (1) (f) GDPR.

Personal data processed as part of the use of Microsoft 365 will be deleted after the purpose has been fulfilled, unless there are legal retention obligations. Further information about how Microsoft processes your personal data can be found here: https://privacy.microsoft.com/de-de/privacystatement

• Slack

To provide live chat on our platform, we use the"Slack" service provided by Slack Technologies, LLC, 50 FremontStreet, San Francisco, CA 94105, USA. The chat function allows users to contact our team directly to ask questions, receive support, or obtain information about our services.

Within this framework, we process your personal data to enable direct, fast, and user-friendly communication via the platform. Within the context of live chat, we process the following personal data: communication content.

This data is processed to fulfill contractual obligations in accordance with Art. 6 (1) (b) GDPR.

Personal data processed for the purpose of conducting the live chat will be deleted after the purpose has been fulfilled, unless there are statutory retention periods. Further information about the processing ofyour personal data at Slack can be found here: https://slack.com/intl/de-de/legal/privacy-policy

• JIRA

For processing and managing external inquiries, we use the ticket system "Jira" from Atlassian Pty Ltd, Level 6, 341 GeorgeStreet, Sydney, NSW 2000, Australia. We use Jira for the structured recording,assignment, and tracking of tasks within support processes.

Within this framework, we process your personal data for the purpose of systematically processing and documenting incoming inquiries and ensuring efficient communication within our customer service processes. When receiving and processing customer service inquiries, we process the following personal data: last name, first name, email address, and ticket contents.

The afore mentioned data is processed on the basis of Art. 6(1) (b) GDPR to fulfill contractual measures and on the basis of Art. 6 (1) (f)GDPR to safeguard our legitimate interest in providing a structured and traceable system for the transmission of inquiries from interested parties.

Personal data processed within Jira will be deleted after the purpose has been fulfilled, unless there are legal retention obligations. Further information about Atlassian's processing of your personal data can befound here: https://www.atlassian.com/legal/privacy-policy.

• Vimeo
We use the video service Vimeo (Vimeo, Inc., 555 West 18th Street, New York, NY 10011, USA) on our website to display videos. When you access an embedded video, personal data, such as your IP address and possibly your location, is transmitted to Vimeo.

Data Processing by Vimeo:
Vimeo processes data in accordance with its own privacy policy, which can be reviewed here: Vimeo Privacy Policy.
Vimeo may also set cookies that access your device to collect and analyze usage data. You can find more information in Vimeo’s cookie policy.

Legal Basis:
The legal basis for using Vimeo on our site is Art. 6 para. 1 lit. f GDPR (legitimate interest), as we aim to provide an enhanced user experience by embedding videos. If you wish to object to the data processing by Vimeo, you can either disable video playback or contact Vimeo directly.

• Cloudflare
We use the services of Cloudflare, Inc. (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) for optimizing and securing our website. Cloudflare provides a Content Delivery Network (CDN) and protection against DDoS attacks. As part of these services, personal data may be processed.

Data Processing by Cloudflare:
Cloudflare processes personal data, particularly IP addresses, to ensure the security and performance of the website. Cloudflare may also set cookies to ensure the proper functioning of the website and optimize loading speed. You can find more information on data processing by Cloudflare in their privacy policy: Cloudflare Privacy Policy.

Legal Basis:
The legal basis for using Cloudflare on our website is Art. 6 para. 1 lit. f GDPR (legitimate interest), as we aim to protect the website from attacks and optimize loading speed.

• Usercentrics

We use the Usercentrics consent management serviceprovided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This tool enables us to obtain and manage website users' consent to dataprocessing.

The processing is carried out on the basis of Art. 6 (1)(c) GDPR (fulfilment of a legal obligation) and Art. 6 (1) (f) GDPR(legitimate interest in legally compliant consent management).

The following data is processed:

Date and time of access
Browser information
Device information
Approximate location data (country, region)
Cookie preferences
URL of the visited page

The functionality of the website cannot be guaranteed without this processing. Usercentrics is the recipient of this data and acts asour processor. Processing takes place within the European Union. The data is stored for 12 months and then automatically deleted. You can change or revoke your consent at any time using our cookie settings tool. Further information on data processing by Usercentrics can be found at: https://usercentrics.com/de/datenschutzerklaerung/.

• Meta (Facebook/Instagram)

We use services provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”), on our website. This includes marketing and tracking technologies such as the Meta Pixel, as well as the integration of social media content or advertisements.

Using these technologies helps us to:

understand how visitors interact with our website,
measure the effectiveness of our advertising on Facebook and Instagram,
and show you more relevant ads.

Which data is processed?

Through the integration of Meta services, Meta may process information such as:

pages visited, click behaviour and interactions
browser and device data
IP address
your Facebook/Instagram user ID, if you are logged in

These data may be transmitted to Meta servers in the United States or other third countries. Meta states that it uses Standard Contractual Clauses (SCCs) as a legal safeguard for such transfers.

Joint Controllership (Art. 26 GDPR)

For certain processing activities (e.g. when using the Meta Pixel), we and Meta act as joint controllers.
The joint controller agreement pursuant to Art. 26 GDPR can be found here:
https://www.facebook.com/legal/controller_addendum

Meta is primarily responsible for ensuring the rights of data subjects (e.g. access or deletion requests). Nevertheless, you may exercise your rights with both us and Meta.

Legal basis

Meta services are used on the basis of Art. 6 (1) lit. a GDPR (consent).
Data processing begins only after you have given your consent via our cookie/consent banner.

Withdrawal of consent

You may withdraw your consent at any time with effect for the future by:

adjusting your preferences in our cookie/consent banner, or
deleting cookies from your browser.

Further information

Further details on how Meta processes personal data can be found in Meta’s privacy policy:
https://www.facebook.com/privacy/policy
‍

Information about the use of cookies

What personal data is collected and to what extent is it processed?

We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called “cookies” are small text files that your browser can store on your access device. These text files contain a characteristic string of characters that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also referred to as “setting a cookie”. Cookies can be set both by the website itself and by external web services. The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also enables us torecognize individual visitors using pseudonyms, e.g. a unique or random ID, sothat we can offer more personalized services. Details are provided in the table below.

Legal basis for the processing of personal data

If the cookies are processed on the basis of consent in accordance with Art. 6 (1) (a) GDPR, this consent also counts as consent within the meaning of Section 25 (1) TTDSG for the setting of the cookie on the user's device. If another legal basis is stated under the GDPR (e.g. for theperformance of a contract or to comply with statutory obligations), the storageor setting takes place on the basis of an exception in accordance with Section 25 (2) TTDSG. This applies “if the sole purpose of storing information in theend user's terminal equipment or the sole purpose of accessing informational ready stored in the end user's terminal equipment is to carry out the transmission of a message over a public telecommunications network” or “if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of a telemedia service to be able to provide a telemedia service expressly requested by the user”. The applicable legal basis is set out in the cookie table listed later in this section.

Purpose of data processing

Cookies are set by our website or external web services to maintain the full functionality of our website, improve user experience, or to pursue the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as a unique or random ID, so we can offer more personalized services. Details are listed inthe table below.

Duration of storage

Our cookies are stored until they are deleted in your browser or, in the case of session cookies, until the session expires. Details are listed in the table below.

Possibility of objection and removal

You can set your browser to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or to accept cookies in general. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save recently viewed offers (sessioncookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Data security and data protection, communication viaemail

Your personal data is protected by technical and organizational measures during collection, storage, and processing to ensure that it is not accessible to third parties. For unencrypted communication via email, we cannot guarantee complete data security during transmission to our IT systems. Therefore, we recommend encrypted communication or sending information with a high level of confidentiality by post.

Right to information and requests for correction –Deletion and restriction of data – Revocation of consent – Right of objection

Right to information

You have the right to request confirmation as to whether we process your personal data. If so, you have the right to information about theinformation specified in Art. 15 (1) GDPR, provided that the rights and freedoms of others are not adversely affected (see Art. 15 (4) GDPR). We will also be happy to provide you with a copy of the data.

Right to rectification

According to Art. 16 GDPR, you have the right to have any personal data we have stored about you (such as address, name, etc.) corrected at any time. You can also request that the data we have stored be completed at any time. The appropriate adjustment will be made immediately.

Right to erasure

According to Art. 17 (1) GDPR, you have the right to have us delete the personal data collected about you if

the data is either no longer needed;
due to the withdrawal of your consent, the legal basis for processing no longer applies;
you have objected to the processing and there are no legitimate grounds for the processing;
your data is processed unlawfully;
a legal obligation requires this or a collection has taken place in accordance with Art. 8 (1) GDPR.

According to Art. 17 (3) GDPR, this right does not exist if

processing is necessary for the exercise of the right to freedom of expression and information;
Your data has been collected on the basis of a legal obligation;
processing is necessary for reasons of public interest;
the data is necessary to assert, exercise or defend legal claims.

Right to restriction of processing

According to Art. 18 Para. 1 GDPR, you have the right to request the restriction of the processing of your personal data in individual cases.

This is the case when:

you contest the accuracy of the personal data;
the processing is unlawful and you do not consent to erasure;
the data are no longer required for the purpose of processing, but the data collected serve to assert, exercise or defend legal claims;
an objection to the processing has been lodged pursuant to Art. 21 (1) GDPR and it is still unclear which interests prevail.

Right of withdrawal

If you have given us your express consent to process your personal data (Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR), you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of your consent until the revocation.

Right to object

According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that was collected based on Art. 6 (1) (f) (within the scope of a legitimate interest). You only have this right if there are special circumstances that speak against the storage and processing.

How do you exercise your rights?

You can exercise your rights at any time by contacting ususing the contact details below or use the option of submitting your data privacy request digitally.
You can find this option at the top section of this privacy policy.

simple system GmbH
Haberlandstraße 55
81241 Munich
Germany
Email: info@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28

Right to data portability

According to Art. 20 GDPR, you have the right to have your personal data transferred to us. We will provide this data in a structured, common, and machine-readable format. The data can be sent either to you or to acontroller designated by you.

We will provide you with the following data upon request inaccordance with Art. 20 (1) GDPR:

Data collected on the basis of express consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR;
Data that we have received from you in accordance with Art. 6 (1) (b) GDPR within the framework of existing contracts;
Data that has been processed as part of an automated procedure.

We will transfer your personal data directly to a controller of your choice, provided this is technically feasible. Please note that, in accordance with Art. 20 (4) GDPR, we are not permitted to transfer data that interferes with the freedoms and rights of other individuals.

Information according to Art. 13 and 14 GDPR

In order to comply with the principle of fair and transparent processing of personal data, we inform applicants, customers and suppliers about the processing of the personal data collected below:

You can download the information for applicants as a PDF file here.

You can download the information for customers and suppliers as a PDF file here.

Right to lodge a complaint with the supervisory authoritypursuant to Art. 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our website, you can of course seek judicial clarification of the issue at any time. Furthermore, you have every other legal option open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. You have the right to lodge a complaint inaccordance with Art. 77 GDPR in the EU member state of your residence, place of work and/or the place of the alleged in fringement, i.e. you can choose the supervisory authority you want to contact from the locations listed above. The supervisory authority to which the complaint was submitted will then inform you of the status and outcome of your submission, including the possibility ofj udicial remedy in accordance with Art. 78 GDPR.

Thank you for visiting our website company.simplesystem.com and for your interest in our company.

Protecting your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit the site. Our data protection practice is in line with the legal provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information requirements arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.

person responsible

The person responsible within the meaning of Article 4 No. 7 GDPR is the person who, alone or together with others, decides on the purposes and means of processing personal data.

With regard to our website, the person responsible is:

Simple System GmbH
Haberlandstraße 55
81241 Munich
germany
email: info@simplesystem.com
Phone: +49 89 9982987-00
Fax: +49 89 9982987-28

Contact data protection officer

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can contact our data protection officer using the following contact details:

Ben R. Hansen
Haberlandstraße 55
81241 Munich
germany
email: datenschutz@simplesystem.com
Phone: +49 89 9982987-00
Fax: +49 89 9982987-28

Provision of the website and creation of log files

Each time you visit our website, our system automatically collects data and information from the respective retrieving device (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) date and time of access;
(6) websites and resources (images, files, other page content) that have been accessed on our website;
(7) websites from which the user's system reached our website (referrer tracking);
(8) Report whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in our system's log files. This data is not stored together with personal data of a specific user, so that individual site visitors are not identified.

Legal basis for processing personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of data processing

The temporary (automated) storage of data is necessary for the completion of a website visit to enable the website to be delivered. Personal data is also stored and processed to maintain the compatibility of our website for as many visitors as possible and to combat misuse and rectify faults. For this purpose, it is necessary to log the technical data of the retrieving computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. We also use the data to optimize the website and generally ensure the security of our information technology systems.

Storage period

The aforementioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Objection and deletion option

You can object to processing at any time in accordance with Article 21 GDPR and request the deletion of data in accordance with Article 17 GDPR. What rights you have and how to assert them can be found at the bottom of this privacy policy.

Special features of the website

Our site offers you various functions, which we collect, process and store personal data when you use them. Below we explain what happens with this data:

contact form (s)

What personal data is collected and to what extent is it processed?

We will process the data you have entered in our contact forms, which you have entered in the input mask of the contact form, to fulfill the purpose set out below.

Legal basis for processing personal data

Art. 6 para. 1 lit. a GDPR (consent through clear affirmative action or conduct)

Purpose of data processing

We will only use the data collected via our contact form or contact forms to process the specific contact request received through the contact form.

Storage period

After processing your request, the collected data will be deleted immediately, as long as there are no legal storage periods.

Withdrawal and deletion option

The revocation and deletion options are based on the general regulations on the right of withdrawal and cancellation claim described below in this data protection declaration.

Necessity of providing personal data

The use of contact forms is voluntary and is neither contractually nor legally required. You are not required to contact us via the contact form, but can also use the other contact options listed on our website. If you want to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the necessary information on the contact form with content, you will either not be able to send the request or we will unfortunately not be able to process your request.

Login area

What personal data is collected and to what extent is it processed?

We will process the registration and login data you have entered with us to fulfill the purpose set out below.

Legal basis for processing personal data

Art. 6 para. 1 lit. b GDPR (implementation of (pre) contractual measures)

Purpose of data processing

You have the option of using a separate login area on our website. So that we can verify your authorization to use the protected area or the protected documents, you must enter your login data (email or username and password) in the appropriate form.

Storage period

The collected data is stored as long as you maintain a user account with us.

Objection and deletion option

What rights you have and how to assert them can be found at the bottom of this privacy policy.

Necessity of providing personal data

The use of the login area on our site is contractually required to use the protected area. It is not possible to use the content protected by the login area without entering personal data. If you want to use our login area, you must fill in the fields marked as mandatory (user name and password). Entering the data requires the existence of a user account. It is not possible to log in if the data you have entered is incorrect. If you enter the data incorrectly or not, the protected area cannot be used. However, the rest of the site can still be used without logging in.

Newsletter subscription form

What personal data is collected and to what extent is it processed?

By subscribing to the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, other contact details, provided that you provide us with this via the newsletter registration form.

Legal basis for processing personal data

Art. 6 para. 1 lit. a GDPR (consent through clear affirmative action or conduct)

Purpose of data processing

The data entered in the registration form for our newsletter is used by us exclusively for sending our newsletter, in which we provide information about all our services and news. After signing up, we will send you a confirmation email that contains a link that you must click on to complete your subscription to our newsletter (double opt-in).

Storage period

You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after you unsubscribe. We will also delete your data immediately if you do not complete your registration. We reserve the right to delete without giving reasons and without prior or subsequent information.

Withdrawal and removal option

You can withdraw your consent at any time in accordance with Article 7 (3) GDPR. However, the processing carried out up to the time of withdrawal remains unaffected. With regard to other rights, we refer to the overview at the end of this privacy policy.

Necessity of providing personal data

If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt in link. The information required to subscribe to the newsletter is neither necessary to enter into a contract with us nor is legally binding. They are used exclusively to send our newsletter. If you do not fill in the necessary information with content, we will unfortunately not be able to provide you with our newsletter service.

Statistical evaluation of visits to this website — Webtracker

When you access this website or individual files on the website, we collect, process and store the following data: IP address, website from which the file was retrieved, name of the file, date and time of retrieval, amount of data transferred and notification of the success of the retrieval (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

Google Ads

On our website, we use the Google Ads service from Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com , web site: http://www.google.com/ .

Processing is also carried out in a third country for which the Commission has not adopted an adequacy decision. Therefore, the usual level of protection under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in a third country, for example, may access the collected data.

The legal basis for the transfer of personal data is your consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have provided on our website. Google Ads is an advertising system with which we place ads based primarily on search results when using the company's own services.

As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA.

You can withdraw your consent at any time. You can find more information about withdrawing your consent either in the consent itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://policies.google.com/privacy.

Google Tag Manager

What personal data is collected and to what extent is it processed?

On our site, we use the service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager). Google Tag Manager offers a technical platform to run and bundle other web services and web tracking programs using so-called “tags”. In this context, Google Tag Manager stores cookies on your computer and, insofar as web tracking tools are executed using Google Tag Manager, analyses your surfing behavior (so-called “tracking”). This data sent by individual tags integrated into Google Tag Manager is combined, stored and processed by Google Tag Manager under a uniform user interface. All integrated “tags” are listed separately in this privacy policy. You can find more information about the data protection of the tools integrated in Google Tag Manager in the respective section of this privacy policy. When using our website with activated integration of tags from Google Tag Manager, data, in particular your IP address and your user activities, is transmitted to servers operated by Google Ireland Limited. With regard to the web services integrated via Google Tag Manager, the regulations in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google Tag Manager before transmission by IP anonymization of the source code. This only allows Google Tag Manager to collect IP addresses anonymously (so-called IP masking).

Legal basis for processing personal data

In accordance with Article 6 (1) (a) GDPR, the legal basis for data processing is your consent in our banner regarding the use of cookies and web tracking (consent through clear affirmative action or conduct).

Purpose of data processing

On our behalf, Google will use the information obtained using Google Tag Manager to evaluate your visit to this website, compile reports on website activity and provide us with other services related to website activity and Internet usage.

Storage period

Google will store the data relevant to the Google Tag Manager function for as long as is necessary to fulfill the booked web service. Data is collected and stored anonymously. However, if there is a personal reference, the data will be deleted immediately, provided that it is not subject to any legal storage requirements. In any case, the deletion takes place after the storage obligation has expired.

Objection and deletion option

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser, or activating your browser's “Do Not Track” setting. You can also prevent Google from collecting the data generated by the Google cookie and related to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link http://tools.google.com/dlpage/gaoptout?hl=de Download and install the available browser plug-in. Google's security and privacy principles can be found at https://policies.google.com/privacy.

Google Analytics

Scope of processing of personal data

On our site, we use the web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). As part of web tracking, Google Analytics uses cookies, which are stored on your computer and enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis based on the Google Analytics tracking service in order to constantly optimize our website and make it more available. When using our website, data, in particular your IP address and user activities, is transferred to servers operated by Google Ireland Limited. We carry out this analysis based on Google's tracking service in order to constantly optimize our website and make it more available. We also need web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. With the information from the web tracker, we can take effective countermeasures and protect the personal data we process from these cyber attacks. By activating IP anonymization within the Google Analytics tracking code of this website, Google Analytics anonymizes your IP address before transmission. This website uses a Google Analytics tracking code, which includes the operator gat. _anonymizeIp (); was extended to only allow anonymized collection of IP addresses (so-called IP masking).

Legal basis for processing personal data

Purpose of data processing

On our behalf, Google will use this information to evaluate your visit to this website, compile reports on website activity and provide us with other services related to website activity and Internet usage. We also need web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. With the information from the web tracker, we can take effective countermeasures and protect the personal data we process from these cyber attacks.

Storage period

Google will store the data relevant to providing web tracking for as long as is necessary to fulfill the booked web service. Data collection and storage is anonymized. However, if there is a personal reference, the data will be deleted immediately, provided that it is not subject to any legal storage requirements. In any case, the deletion takes place after the storage obligation has expired.

Objection and deletion options

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser or activating the “Do Not Track” setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and related to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=de) download and install the available browser plug-in. Google's security and privacy principles can be found at https://policies.google.com/privacy?hl=de.

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. This may allow data to be processed outside the EU. You can prevent this by installing an appropriate browser plug-in or deactivating the execution of scripts in your browser. This may result in functional restrictions on websites that you visit.

We use the following external web services:

linkedin

On our website, we use the LinkedIn service from the company LinkedIn Ireland Unlimited Company, Wilton Place, 2 Dublin, Ireland, e-mail: info_impressum@cs.linkedin.com, web site: https://www.linkedin.com/.Processing is also carried out in a third country for which the Commission has not taken an adequacy decision.

Therefore, the usual level of protection under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in a third country, for example, may access the collected data.

The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 1 lit. ADSGVO and Art. 9 para. 2 lit. a GDPR, which you have provided on our website.

When using the Linkedin plugin, we establish a connection to the Linkedin platform to give any logged-in members of Linkedin the opportunity to interact with us. You can withdraw your consent at any time. More detailed information about withdrawing your consent can be found either with the consent itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

The provider offers at https://www.linkedin.com/help/linkedin/answer/68763?lang=de an additional opt-out option.

• Microsoft Bookings

We offer you the opportunity to make an appointment on our website using the “Microsoft Bookings” service from the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399.

In this context, we process your data for the purpose of enabling optimal, user-friendly communication with interested parties. As part of booking an appointment, we process the following categories of personal data: name, e-mail address, date and time of the appointment and, if specified, telephone number, address and notes.

This data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

The contact data you have provided will be deleted after the purpose has been fulfilled, unless there is a legal storage period. You can find more information about how Microsoft processes your personal data here: https://privacy.microsoft.com/de-de/privacystatement

• UserGuiding

We use the “UserGuiding” service provided by YnotPartners, Inc., 316 High Street, Palo Alto, CA 94301, USA, to provide interactive instructions for our services.

The purpose of this processing of personal data is to enable user-friendly operation of our platform. As part of providing interactive instructions, we process the following categories of personal data: browser type, IP address, app usage data.

The processing of personal data in this context is in our legitimate interest to provide users with an optimal onboarding process. The legal basis for this is iStart. 6 para. 1 lit. f DSGVO.

The collected usage and device data will be deleted after the purpose has been fulfilled, unless there is a legal storage period. Further information about the processing of personal data at UserGuiding can be found here: https://userguiding.com/privacy-policy/

• Microsoft Power BI

On our site, we use integrations of the Power BI business analysis and visualization service from the provider MicrosoftCorporation, One Microsoft Way, Redmond, WA 98052-6399.

In this context, we process your data for the purpose of creating service business intelligence dashboards, reports, semantic models (previously known as datasets), and visualizations. We carry out this reporting of analytical data in order to be able to optimize our offerings and ensure better availability. As part of reporting, we process the following categories of personal data: name, email address, order and approval history and, if provided, telephone number, address and notes.

This data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Your data will be deleted after the purpose has been fulfilled, unless there is a legal storage period. For more information about how Microsoft processes your personal data, see: https://privacy.microsoft.com/de-de/privacystatement

• Hubspot CRM tool

To maintain and manage our customer and supplier data and to process your inquiries efficiently and quickly, we use a CRM system from the provider HubSpot, 2ndFloor 30 North Wall Quay, Dublin1, Ireland (hereinafter “Hubspot”). The legal basis for processing your personal data is Art. 6 para. 1 lit. b) GDPR, in order to be able to fulfill our obligation arising from the contractual relationship with you. In addition, we have a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR in using the system to properly structure our customer data.

On our website, we use the Hubspot marketing automation system from the provider HubSpot, 2nd Floor 30 NorthWall Quay, Dublin 1, Ireland (hereinafter “Hubspot”). We use the integrated software solution to carry out marketing campaigns (e-mail, social media), for analysis purposes and to address customers and potential customers in a targeted manner. Data processing takes place within the European Union.

The system components integrated into our online offering (e.g. forms, email delivery) use so-called “cookies”, which are stored on the user's computer and allow us to analyze the use of the website. On our behalf, Hubspot will use the data and information obtained via our website to evaluate the user behavior of the person concerned who has used our website. Hubspot will also use the data to create reports on user activities on our behalf and to provide other services for our company that are related to the use of our website. Certain usage data is linked to your person and stored in our system. In this way, we can provide you with information and offers tailored specifically to your interest.

In particular, the following information is collected: client ID, geographical location, type of browser, duration of visit and pages viewed, operating system, mobile app data, referral URL. The legal basis for processing is your consent in accordance with art. 6 para. 1 lit. a GDPR. If you do not want the data provided by Hubspot to be collected and processed, you can refuse your consent or withdraw it at any time with effect for the future.

In addition, we also use Hubspot to provide contact forms. You can permanently prevent cookies from being set by our website at any time by means of an appropriate setting in the Internet browser you are using or make the appropriate settings by clicking on “Cookies” in the footer of our website.

Users can find further information on data protection in the Hubspot privacy statement as well as in the overview of compliance with EU data protection regulations.

• Hotjar

With your consent, we use Hotjar, an analysis software from Hotjar Ltd., Level 2, St Julian's BusinessCentre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. With this tool, it is possible to measure and evaluate the usage behavior of users on the website.

Hotjar is a tool for analyzing your user behavior on this website. With Hotjar, we can record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you have remained with the mouse pointer on a specific location. From this information, Hotjar creates so-called heat maps, which can be used to determine which website areas are preferred by website visitors.

Hotjar uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g. cookies or the use of device fingerprinting). Hotjar is used exclusively on the basis of Art. 6 para. 1 lit. a DSGVO. The consent can be withdrawn at any time. You can find out more about data processing by Hotjar at: https://www.hotjar.com/privacy

• Brevo

To send emails for marketing purposes and to provide functional information in connection with our platform, we use the “Brevo” service from the provider Sendinblue SAS, 17 Rue Salneuve, 75017, Paris, Ile de France, France.

Within this framework, we process your personal data for the purpose of informing you about our services and providing you with technical or transactional information in connection with your use of our platform. When sending marketing emails and newsletters, we process the following categories of personal data: name, first name, email address, navigation behavior.

This data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

Personal data that is processed for the purpose of sending emails via Brevo will be deleted after the purpose has been fulfilled, unless there are legal storage requirements. You can object to processing for marketing purposes at any time with effect for the future. You can find more information about Brevo's processing of your personal data here:https://www.brevo.com/de/legal/privacypolicy/

Integration of external web services and processing of data outside the EU

For the technical operation and continuous development of our platform, we rely on specialized service providers. These help us, among other things, with hosting, data analysis, sending system messages, communicating with users and providing individual functionalities.

• Amazon Web Services

To host technical components of our platform, we use the “Amazon Web Services (AWS)” service provided by Amazon WebServices, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

Within this framework, we process your personal data for the purpose of providing our platform and the associated functions. As part of providing the platform, we process the following categories of personal data: IP address, login data, device type, browser, usage data.

This data is processed to fulfill contractual obligations in accordance with Art. 6 (1) (b) GDPR.

Personal data that is processed as part of platform hosting will be deleted after the purpose has been fulfilled, unless legal storage obligations require a longer storage period. You can find more information about the processing of your personal data by Amazon Web Services here: https://aws.amazon.com/privacy

• Microsoft Azure

To carry out our data analyses and provide interactive reports on our platform, we use the “Power BI” service based on the cloud infrastructure from “Microsoft Azure” from the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA.

In this context, we process personal data from users in order to provide them with dashboards and analyses via our platform. Depending on the type of reports created, we process the following categories of personal data: registration data, surname, first name, telephone number, company affiliation, data transmitted or stored by you (e.g. activities, bookings, orders), technical data.

This data is processed to fulfill contractual obligations in accordance with Art. 6 (1) (b) GDPR.

Personal data that is processed for the purpose of preparing and providing reports will be deleted after the purpose has been fulfilled, unless there are legal storage requirements. Further information about the processing of your personal data by Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement

• Google BigQuery

To carry out data analyses and prepare analytical evaluations, we use the “Google BigQuery” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google BigQuery stores a copy of the data stored in our production system in order to generate reports and evaluations in downstream analysis and visualization systems based on this. Within this framework, we process your personal data for the purpose of enabling structured and efficient evaluations of our productive data, which are used, among other things, to optimize internal processes, quality assurance and to support decisions in product development. As part of preparing these reports, we process the following categories of personal data: name, first name, email address, telephone number, customer number, order information, usage data, technical metadata.

This data is processed on the basis of our legitimate interest in improving our products and services in order to offer you an optimal customer experience, in accordance with Article 6 (1) (f) GDPR.

Personal data that is processed via Google BigQuery for the purpose of data analysis will no longer be deleted unless there are legal storage requirements. You can find more information about the processing of your personal data by Google here: https://policies.google.com/privacy?hl=de

• Microsoft 365

To carry out our daily office and communication processes, we use the “Microsoft 365” service from the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. The application includes, among other things, the “Outlook” service, which we use for e-mail communication with customers, prospects and other third parties.

Within this framework, we process personal data for the purpose of efficiently carrying out our organization, planning and documentation as well as our internal and external communication. In doing so, we process the following categories of personal data: name, email address, company affiliation, communication content, metadata about emails (e.g. time of dispatch, subject line), telephone numbers, if applicable, and attached documents.

The above data is processed to initiate and execute contractual relationships in accordance with Article 6 (1) (b) GDPR and on the basis of our legitimate interest in secure, comprehensible and efficient communication with external contacts in accordance with Article 6 (1) (f) GDPR.

Personal data that is processed as part of the use of Microsoft 365 will be deleted after the purpose has been fulfilled, unless there are legal storage obligations. You can find more information about how Microsoft processes your personal data here: https://privacy.microsoft.com/de-de/privacystatement

• Slack

To provide live chat on our platform, we use the “Slack” service from the provider Slack Technologies, LLC, 50 Fremont Street, San Francisco, CA 94105, USA. The chat function allows users to get in touch with our team directly to ask questions, receive support or obtain information about our services.

Within this framework, we process your personal data for the purpose of enabling direct, fast and user-friendly communication via the platform. As part of the live chat, we process the following personal data: Communication content.

This data is processed to fulfill contractual obligations in accordance with Art. 6 (1) (b) GDPR.

Personal data that is processed for the purpose of carrying out a live chat will be deleted after the purpose has been fulfilled, unless there are legal storage requirements. You can find more information about how Slack processes your personal data here: https://slack.com/intl/de-de/legal/privacy-policy

• Jira

To process and manage external inquiries, we use the “Jira” ticket system from the provider Atlassian Pty Ltd, Level 6.341 George Street, Sydney, NSW 2000, Australia. We use Jira to record, assign and track tasks as part of support processes in a structured way.

Within this framework, we process your personal data for the purpose of systematically processing and documenting incoming inquiries and ensuring efficient communication as part of our customer service processes. As part of receiving and processing customer service inquiries, we process the following personal data: surname, first name, email address, ticket content.

The processing of the above data is carried out on the basis of Article 6 (1) (b) GDPR to fulfill contractual measures and on the basis of Article 6 (1) (f) GDPR to ensure our legitimate interest in providing a structured and comprehensible system for transmitting inquiries from interested parties.

Personal data that is processed as part of Jira will be deleted after the purpose has been fulfilled, unless there are legal storage obligations. You can find more information about how Atlassian processes your personal data here: https://www.atlassian.com/legal/privacy-policy

• Vimeo
We use the video service from Vimeo (Vimeo, Inc., 555 West 18th Street, New York, NY 10011, USA) on our website to view videos. Personal data, such as your IP address and possibly your location, is transferred to Vimeo broadcast when you access an embedded video.

Data processing by Vimeo:
Vimeo processes data in accordance with its own privacy policy, which can be viewed here: Vimeo privacy policy.
Vimeo may also set cookies that access your device to collect and analyze usage data. For more information, please see Vimeo's Cookie Policy.

legal basis:
The legal basis for using Vimeo on our site is Art. 6 para. 1 lit. f DSGVO (legitimate interest), as we want to offer you an improved user experience by embedding videos. If you would like to object to data processing by Vimeo, you can do so by deactivating video playback or by contacting Vimeo directly.

• Cloudflare
We use the services of Cloudflare, Inc. (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) to optimize and secure our website. Cloudflare provides a content delivery network (CDN) and protection against DDoS attacks. Personal data may be processed as part of these services.

Data processing by Cloudflare:
Cloudflare processes personal data, in particular IP addressesto ensure the security and performance of the website. Cloudflare also uses cookies to ensure that the website functions properly and to optimize loading speed. For more information about data processing by Cloudflare, please see their privacy policy: Cloudflare privacy policy.

legal basis:
The legal basis for using Cloudflare on our website is Art. 6 para. 1 lit. f DSGVO (legitimate interest), as we want to protect the website from attacks and optimize the loading speed.

‍

Information about the use of cookies

• Usercentrics

We use the consent management service Usercentrics The Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This tool enables us to obtain and manage the consent of website users to process data.

Processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. c GDPR (compliance with a legal obligation) and Art. 6 para. 1 p. 1 lit. f GDPR (legitimate interest in legally compliant consent administration).

The following data is processed in the process:

date and time of access
Browser information
device information
Approximate location data (country, region)
Cookie preferences
URL of the page visited

The functionality of the website is not guaranteed without this processing. Usercentrics is the recipient of this data and is used as Contract processor working for us. Processing takes place within the European Union instead of. The data is used for 12 months saved and then automatically deleted. You can give your consent at any time via our Cookie settings tool change or revoke. For more information about data processing by Usercentrics, please visit: https://usercentrics.com/de/datenschutzerklaerung/

What personal data is collected and to what extent is it processed?

We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called “cookies” are small text files that your browser can save on your access device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as “setting a cookie.” Cookies can be set both by the website itself and by external web services. The cookies are set by our website or external web services to maintain the full functionality of our website, to improve usability or to pursue the purpose stated with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as an individual or random ID, so that we can offer more individual services. Details are shown in the table below.

Legal basis for processing personal data

Insofar as cookies are processed on the basis of consent in accordance with Article 6 (1) (a) GDPR, this consent is also considered consent within the meaning of Section 25 (1) TTDSG to set the cookie on the user's terminal device. Insofar as another legal basis is mentioned under the GDPR (e.g. to fulfill a contract or to fulfill legal obligations), the storage or setting is based on an exception in accordance with Section 25 (2) TTDSG. This exists “when the sole purpose of storing information in the end user's terminal device or the sole purpose of accessing information already stored in the end user's terminal device is to carry out the transmission of a message via a public telecommunications network” or “when the storage of information in the end user's terminal device or access to information already stored in the end user's terminal device is absolutely necessary so that the provider of a Telemedia service can provide a telemedia service expressly requested by the user.” The relevant legal basis is set out in the cookie table listed later in this section.

Purpose of data processing

The cookies are set by our website or external web services to maintain the full functionality of our website, to improve usability or to pursue the purpose stated with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as an individual or random ID, so that we can offer more individual services. Details are shown in the table below.

Storage period

Our cookies are stored until they are deleted in your browser or, if it is a session cookie, until the session has expired. Details are shown in the table below.

Objection and removal option

You can set your browser according to your wishes so that cookies are generally prevented from being set. You can then decide whether to accept cookies on a case-by-case basis or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can withdraw this consent at any time. Please note that the lawThis does not affect the extent of the processing carried out on the basis of consent up to the withdrawal.

Data security and data protection, communication via e-mail

Your personal data is protected by technical and organizational measures during collection, storage and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security during transmission to our IT systems, so we recommend encrypted communication or by post for information with a high level of confidentiality requirements.

Right to information and requests for correction — Deletion & restriction of data — Withdrawal of consent — Right of objection

Right to information

You have the right to request confirmation as to whether we process your personal data. If this is the case, you have a right to information about the information specified in Article 15 (1) GDPR, provided that the rights and freedoms of other persons are not affected (see Article 15 (4) GDPR). We would also be happy to provide you with a copy of the data.

Right to rectification

In accordance with Article 16 GDPR, you have the right to have any incorrectly stored personal data (such as address, name, etc.) corrected by us at any time. You can also request that the data stored by us be completed at any time. A corresponding adjustment will be made immediately.

Right to delete

Pursuant to Article 17 (1) GDPR, you have the right to have us delete the personal data collected about you if

the data is either no longer required;
due to the withdrawal of your consent, the legal basis for processing has ceased to exist without replacement;
you have objected to processing and there are no legitimate reasons for processing;
your data is processed unlawfully;
a legal obligation requires this or a collection has taken place in accordance with Article 8 (1) GDPR.

According to Article 17 (3) GDPR, the right does not exist if

processing is necessary to exercise the right to freedom of expression and information;
your data was collected on the basis of a legal obligation;
processing is necessary for reasons of public interest;
the data is required to assert, exercise or defend legal claims.

Right to restrict processing

Gem. In individual cases, you have the right to request that the processing of your personal data be restricted in accordance with Article 18 (1) GDPR.

This is the case when

the accuracy of the personal data is disputed by you;
the processing is unlawful and you do not agree to its deletion;
the data is no longer required for the purpose of processing, but the data collected is used to assert, exercise or defend legal claims;
an objection has been filed against processing in accordance with Article 21 (1) GDPR and it is still unclear which interests prevail.

Right of withdrawal

If you have given us express consent to process your personal data (Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO), you can withdraw this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of consent up to the time of withdrawal.

Right to object

In accordance with Article 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Article 6 (1) lit. f (within the framework of a legitimate interest). You are only entitled to this right if there are special circumstances against storage and processing.

How do you exercise your rights?

You can exercise your rights at any time by using the contact details below:

Simple System GmbH
Haberlandstraße 55
81241 Munich
germany
email: info@simplesystem.com
Phone: +49 89 9982987-00
Fax: +49 89 9982987-28

Right to data portability

In accordance with Article 20 GDPR, you have the right to transfer personal data relating to you. We provide the data in a structured, common and machine-readable format. The data can be sent either to yourself or to a person responsible named by you.

On request, we will provide you with the following data in accordance with Article 20 (1) GDPR:

data collected on the basis of express consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR;
data that we have received from you in accordance with Article 6 (1) (b) GDPR as part of existing contracts;
Data that has been processed as part of an automated process.

We will transfer personal data directly to a person responsible of your choice, insofar as this is technically feasible. Please note that we may not transfer data that interferes with the freedoms and rights of other persons in accordance with Article 20 (4) GDPR.

Information in accordance with articles 13 and 14 GDPR

In order to comply with the principle of fair and transparent processing of personal data, we inform applicants, customers and suppliers below about the processing of the personal data collected:

You can find the information for applicants here download as a PDF file.

The information for customers and suppliers can be here download as a PDF file.

Right to lodge a complaint with the supervisory authority in accordance with Article 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our part, you can of course seek judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Article 77 (1) GDPR. You have the right of appeal in accordance with Article 77 GDPR in the EU member state of your place of residence, place of work and/or place of the alleged infringement, i.e. you can choose the supervisory authority you are contacting from the locations mentioned above. The supervisory authority with which the complaint was submitted will then inform you of the status and results of your submission, including the possibility of a judicial remedy in accordance with Article 78 GDPR.