Privacy statement
We are pleased that you have visited our website company.simplesystem.com and are interested in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data, which we collect when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Articles 13 and 14 et seq. of the GDPR.
Person responsible
The controller within the meaning of Art. 4 No. 7 GDPR isthe person who alone or jointly with others decides on the purposes and means of processing personal data.
With regard to our website, the controller is:
simple system GmbH
Haberlandstraße 55
81241 Munich
Germany
Email: info@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28
Contact Data Protection Officer
We have appointed a data protection officer in accordance with Art. 37 GDPR. You can reach our data protection officer using the following contact details:
Ben R. Hansen
Haberlandstraße 55
81241 Munich
Germany
Email: datenschutz@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28
Provision of the website and creation of log files
Each time you access our website, our system automatically records data and information from the device you are using (e.g. computer, mobile phone, tablet, etc.).
What personal data is collected and to what extent is itprocessed?
(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on ourwebsite;
(7) Websites from which the user's system accessed our website (referrertracking);
(8) Notification as to whether the retrieval was successful;
(9) Amount of data transferred
This data is stored in our system's log files. This data is not stored together with the personal data of a specific user, so individual site visitors cannot be identified.
Legal basis for the processing of personal data
Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the achievement of the purpose described below.
Purpose of data processing
The temporary (automated) storage of data is necessary for the duration of a website visit to enable delivery of the website. Personal data is also stored and processed to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshoot problems. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to respond as quickly as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. We also use the data to optimize the website and generally ensure the security of our information technology systems.
Duration of storage
The afore mentioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for allvisitors, but no later than 3 months after accessing our website.
Possibility of objection and deletion
You can object to the processing at any time in accordance with Art. 21 GDPR and request the deletion of data in accordance with Art. 17GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.
Special features of the website
Our site offers you various features that require us to collect, process, and store personal data. Below, we explain what happens tothis data:
Contact form(s)
- What personal data is collected and to what extent is it processed?
We will process the data you enter in our contact forms, which you have entered in the input mask of the contact form, to fulfill the purpose stated below.
- Legal basis for the processing of personal data
Art. 6 (1) (a) GDPR (consent through a clear affirmative action or behavior)
- Purpose of data processing
We will only use the data collected via our contact form(s) to process the specific contact request received through the contact form.
- Duration of storage
After your request has been processed, the data collected will be deleted immediately, unless there are statutory retention periods.
- Possibility of revocation and deletion
The revocation and deletion options are based on the general provisions on the right of revocation and deletion under data protection law described below in this data protection declaration.
- Necessity of providing personal data
The use of contact forms is voluntary and is neither contractually nor legally required. You are not obligated to contact us via the contact form; you can also use the other contact options provided on our website. If you wish to use our contact form, you must fill out the fields marked as mandatory. If you do not provide the required information, you will either not be able to submit your request, or we will unfortunately not be ableto process your request.
Login area
- What personal data is collected and to what extent is it processed?
We will process the registration and login data you provide to us to fulfill the purpose stated below.
- Legal basis for the processing of personal data
Art. 6 (1) (b) GDPR (implementation of (pre)contractual measures)
- Purpose of data processing
You have the option of using a separate login area on ourwebsite. In order for us to verify your authorization to use the protected area or the protected documents, you must enter your login information (emailaddress or username and password) in the corresponding form.
- Duration of storage
The data collected will be stored as long as you maintain a user account with us.
- Possibility of objection and deletion
You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.
- Necessity of providing personal data
Use of the login area on our website is contractually required for use of the protected area. Use of the content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill out the fields marked as mandatory (user name and password). Entering this data requires the existence of a user account. Registration is not possible if the data you enter is incorrect. If you enter incorrect data or no data, you will not be able to use the protected area. However, the rest of the site can still be used without logging in.
Newsletter registration form
- What personal data is collected and to what extent is it processed?
By registering for the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, other contact details, provided you provide them to us via the newsletter registration form.
- Legal basis for the processing of personal data
Art. 6 (1) (a) GDPR (consent through a clear affirmative action or behavior)
- Purpose of data processing
The data entered in the registration form for our newsletter will be used exclusively for sending our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation email containing a link that you must click to complete your subscription to our newsletter (double opt-in).
- Duration of storage
You can unsubscribe from our newsletter at any time by clicking the unsubscribe link included in every newsletter. Your data will be deleted immediately after unsubscribing. Likewise, if you do not complete your registration, your data will be deleted immediately. We reserve the right to delete your data without giving reasons and without prior or subsequent notice.
- Possibility of revocation and removal
You may revoke your consent at any time in accordance withArt. 7 (3) GDPR. However, this will not affect any processing carried out up to the time of revocation. For further information on your rights, please refer to the overview at the end of this privacy policy.
- Necessity of providing personal data
If you would like to subscribe to our newsletter, you must fill out the mandatory fields and confirm your email address by clicking the double opt-in link. The information you provide for newsletter registration is neither necessary to enter into a contract with us nor legally binding. It is used solely for sending our newsletter. If you do not provide the required information, we will unfortunately not be able to provide you with our newsletter service.
Statistical analysis of visits to this website –Webtracker
When you access this website or individual files on the website, we collect, process, and store the following data: IP address, website from which the file was accessed, file name, date and time of access, amount of data transferred, and notification of the success of the access (so-called weblog). We use this access data exclusively in a non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:
- Google Ads
We use the Google Ads service of Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/ .
The processing also takes place in a third country for which no adequacy decision has been issued by the Commission. Therefore, the standard level of protection required by the GDPR cannot be guaranteed during transfer, as it cannot be ruled out that authorities in the third country, for example, may gain access to the collected data.
The legal basis for the transmission of personal data is your consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, which you have given on our website. Google Ads is an advertising system with which we place ads that are primarily based on search results when using the company's own services.
As part of the order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.
You can revoke your consent at any time. Further informationon revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://policies.google.com/privacy.
- Google Tag Manager
What personal data is collected and to what extent is itprocessed?
On our website we use the service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (here in after: Google TagManager). Google Tag Manager offers a technical platform for running other webservices and web tracking programs using so-called "tags" and forbeing able to control them in a bundled manner. In this context, Google TagManager stores cookies on your computer and, if web tracking tools are run using Google Tag Manager, analyses your surfing behaviour (so-called "tracking"). The data sent by individual tags integrated in Google Tag Manager is compiled, stored and processed by Google Tag Manager under a uniform user interface. All integrated "tags" are listed separately in this data protection declaration. Further information on the data protection of the tools integrated in Google Tag Manager can be found in the respective section of this dataprotection declaration. When you use our website with activated integration of tags from Google Tag Manager, data such as in particular your IP address and your user activities are transmitted to servers of Google Ireland Limited. With regard to the web services integrated via Google Tag Manager, the regulations in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google TagManager prior to transmission by anonymizing the source code. In this case, Google Tag Manager only allows the anonymized collection of IP addresses (so-called IP masking).
Legal basis for the processing of personal data
The legal basis for data processing is, in accordance with Art. 6 (1) (a) GDPR, your consent in our information banner regarding the use of cookies and web tracking (consent through a clear confirming action orbehavior).
Purpose of data processing
On our behalf, Google will use the information obtained through Google Tag Manager to evaluate your visit to this website, compile reports on website activity and provide us with other services relating towebsite activity and internet usage.
Duration of storage
Google will store the data relevant to the functionality of Google Tag Manager for as long as necessary to fulfill the booked web service. Data collection and storage is anonymized. If personal information still exists, the data will be deleted immediately unless subject to statutory retention periods. In any case, deletion occurs after the retention period has expired.
Possibility of objection and deletion
You can prevent the collection and forwarding of personal data to Google (in particular your IP address) as well as the processing oft his data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the "DoNot Track" setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link http://tools.google.com/dlpage/gaoptout?hl=de. Google's security and data protection principles can be found at https://policies.google.com/privacy.
- Google-Analytics
Scope of processing of personal data
On our website we use the web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter:Google Analytics). As part of web tracking, Google Analytics uses cookies that are stored on your computer and enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis on the basis of the Google Analytics tracking service in order to continuously optimize our internet offering and make it more available. When you use our website, data such as your IP address and your user activities are transmitted to servers of Google Ireland Limited. We carry out this analysis on the basis of Google's tracking service in order to continuously optimize our internet offering and make it more available. We also need web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the web tracker enables us to take effective countermeasures and protect the personal data we process from these cyber attacks. By activating IP anonymization within the Google Analytics trackingcode on this website, your IP address will be anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been extended by the operator gat._anonymizeIp(); to enable only anonymized collection of IP addresses (so-called IP masking).
Legal basis for the processing of personal data
The legal basis for data processing is, in accordance withArt. 6 (1) (a) GDPR, your consent in our information banner regarding the use of cookies and web tracking (consent through a clear confirming action orbehavior).
Purpose of data processing
On our behalf, Google will use this information to evaluate your visit to this website, compile reports on website activity, and provide us with other services related to website activity and internet usage. We also require web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the webtracker allows us to take effective countermeasures and protect the personal data we process from these cyberattacks.
Duration of storage
Google will store the data relevant for providing webtracking for as long as necessary to fulfill the booked web service. Datacollection and storage is anonymized. If personal information is still available, the data will be deleted immediately unless subject to statutory retention periods. In any case, deletion occurs after the retention period has expired.
Options for objection and deletion
You can prevent the collection and forwarding of personal data to Google (in particular your IP address) as well as the processing of this data by Google by deactivating the execution of script code in your browser or activating the "Do Not Track" setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-inavailable under the following link ( http://tools.google.com/dlpage/gaoptout?hl=de). Google's security and data protection principles can be found at https://policies.google.com/privacy?hl=de.
Integration of external web services and processing ofdata outside the EU
On our website, we use active content from external providers, so-called web services. When you access our website, these externa lproviders may receive personal information about your visit to our website. This may involve processing data outside the EU. You can prevent this by installing an appropriate browser plug-in or disabling scripts in your browser. This may result in functional limitations on the websites you visit.
We use the following external web services:
We use the LinkedIn service of LinkedIn Ireland Unlimited Company, Wilton Place, 2 Dublin, Ireland, email: info_impressum@cs.linkedin.com, website: https://www.linkedin.com/. Processing also takes place in a third country for which there is no adequacy decision by the Commission.
Therefore, the level of protection required by the GDPR during transmission cannot be guaranteed, as it cannot be ruled out that authorities in the third country, for example, may gain access to the datacollected.
The legal basis for the transmission of personal data is your consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR,which you have given on our website.
When using the LinkedIn plugin, we establish a connection to the LinkedIn platform to give logged-in LinkedIn members the opportunity to interact with us. You can revoke your consent at any time. Further informationon revoking your consent can be found either in the consent itself or at the end of this privacy policy.
Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.
The provider offers an additional opt-out optionat https://www.linkedin.com/help/linkedin/answer/68763?lang=de.
• Microsoft Bookings
We offer you the opportunity to schedule an appointment on our website or with one of our consultants via Mail using the "Microsoft Bookings" service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399.
In this context, we process your data to enable optimal, user-friendly communication with interested parties. When booking appointments, we process the following categories of personal data: name, email address, date and time of the appointment, and, if provided, telephone number, address, and notes.
This data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
The contact details you provide will be deleted after the purpose has been fulfilled, unless there is a statutory retention period to the contrary. Further information about the processing of your personal data at Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement
• UserGuiding
We use the “UserGuiding” service provided by YNOT Partners,Inc., 316 High Street, Palo Alto, CA 94301, USA, to provide interactive instructions for our services.
The purpose of this processing of personal data is to enable user-friendly operation of our platform. When providing interactive instructions, we process the following categories of personal data: browsertype, IP address, and app usage data.
The processing of personal data in this context is in ourlegitimate interest in order to provide users with an optimal onboardingprocess. The legal basis for this is Art. 6 (1) (f) GDPR.
The collected usage and device data will be deleted afterthe purpose has been fulfilled, unless there is a statutory retention period.Further information about the processing of personal data at UserGuiding can befound here: https://userguiding.com/privacy-policy/
• Microsoft Power BI
We use integrations of the business analysis and visualization service Power BI from Microsoft Corporation, One Microsoft Way ,Redmond, WA 98052-6399, on our website.
In this context, we process your data for the purpose of creating service business intelligence dashboards, reports, semantic models (formerly known as datasets), and visualizations. We perform this reporting of analytical data to optimize our offering and ensure better availability. As part of the reporting, we process the following categories of personal data: name, email address, order and approval history, and, if provided, telephone number, address, and notes.
This data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Your data will be deleted after the purpose has been fulfilled, unless there is a statutory retention period. Further information about the processing of your personal data by Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement
• Hubspot CRM Tool
To maintain and manage our customer and supplier data and to process your inquiries efficiently and quickly, we use a CRM system from HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland (hereinafter"Hubspot"). The legal basis for processing your personal data is Art.6 (1) (b) GDPR, in order to be able to fulfill our obligations arising from the contractual relationship with you. Furthermore, we have a legitimate interest within the meaning of Art. 6 (1) (f) GDPR in using the system to properly structure our customer data.
We use the marketing automation system HubSpot on our website, provided by HubSpot, 2nd Floor, 30 NorthWall Quay, Dublin 1, Ireland (hereinafter "Hubspot"). We use this integrated software solution to carry out marketing campaigns (email, social media), for analysis purposes, and to target customers and potential customers. Data processing takes place within the European Union.
The system components integrated into our online offering (e.g., forms, email sending) use so-called "cookies," which are stored on the user's computer and enable us to analyze website usage. Hubspot will use the data and information obtained via our website on our behalf to evaluate the user behavior of the data subject who has used our website. Hubspot will also use the data to compile reports on user activities on our behalf and to provide other services for our company related to the use of our website. Certain usage data will be linked to you personally and stored in our system. This allows us to send you information and offers specifically tailored to your interests.
In particular, the following information is collected: Client ID, geographical location, browser type, duration of visit and pages accessed, operating system, mobile app data, and referral URL. The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR. If you do not want Hubspot to collect and process this data, you can refuse your consent or revoke it at any time with future effect.
We also use Hubspot to provide contact forms. You can permanently prevent cookies from being set by our website at any time by selecting the appropriate settings in your browser, or by clicking on "Cookies" in the footer of our website.
Users can find further information on data protection in Hubspot's privacy policy and in the overview of compliance with EU dataprotection regulations.
• Hotjar
With your consent, we use Hotjar, an analytics software from Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, StJulian's STJ 1000, Malta, on our website. This tool makes it possible to measure and evaluate user behavior on the website and platform.
Hotjar is a tool for analyzing your user behavior on this website and the platform simpel system. With Hotjar, we can record, among other things, your mouse and scroll movements and clicks. Hotjar can also determine how long you hovered the mouse pointer on a certain spot. Hotjar uses this information to create so-called heatmaps, which can be used to determine which website areas are viewed most frequently by website visitors.
Hotjar uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Hotjar is used exclusively on the basis of Art. 6 (1) (a)GDPR. Consent can be revoked at any time. You can find out more about data processing by Hotjar at: https://www.hotjar.com/privacy
• Brevo
To send emails for marketing purposes and to provide functional information related to our platform, we use the “Brevo” service provided by Sendinblue SAS, 17 Rue Salneuve, 75017, Paris, Ile de France, France.
In this context, we process your personal data for the purpose of informing you about our services and providing you with technical or transactional information related to your use of our platform. When sending marketing emails and newsletters, we process the following categories of personal data: last name, first name, email address, and browsing behavior.
This data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Personal data processed for the purpose of sending emails via Brevo will be deleted after the purpose has been fulfilled, unless there are legal retention obligations. You can object to processing for marketing purposes at any time with future effect. Further information about the processing of your personal data by Brevo can be found here: https://www.brevo.com/de/legal/privacypolicy/
Integration of external web services and processing ofdata outside the EU
For the technical operation and ongoing development of our platform, we rely on specialized service providers. These support us with, among other things, hosting, data analysis, sending system messages, communicating with users, and providing individual functionalities.
• Amazon Web Services
For hosting technical components of our platform, we use the service “Amazon Web Services (AWS)” provided by Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.
Within this framework, we process your personal data for the purpose of providing our platform and the associated functions. In providing the platform, we process the following categories of personal data: IP address, login data, device type, browser, and usage data.
This data is processed to fulfill contractual obligations inaccordance with Art. 6 (1) (b) GDPR.
Personal data processed as part of platform hosting will bedeleted after the purpose has been fulfilled, unless legal retentionobligations require longer storage. Further information about the processing ofyour personal data by Amazon Web Services can be found here: https://aws.amazon.com/privacy
• Microsoft Azure
To conduct our data analyses and provide interactive reportson our platform, we use the “Power BI” service based on the “Microsoft Azure”cloud infrastructure of the provider Microsoft Corporation, One Microsoft Way,Redmond, WA 98052, USA.
In this context, we process users' personal data to providethem with dashboards and analytics via our platform. Depending on the type ofreports created, we process the following categories of personal data: logindata, last name, first name, telephone number, company affiliation, datasubmitted or stored by you (e.g., activities, bookings, orders), and technicalmetadata.
This data is processed to fulfill contractual obligations in accordance with Art. 6 (1) (b) GDPR.
Personal data processed for the purpose of creating and providing reports will be deleted after the purpose has been fulfilled, unless there are legal retention obligations. Further information about the processing of your personal data by Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement
• Google BigQuery
To carry out data analyses and prepare analytical evaluations, we use the service “Google BigQuery” from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google BigQuery retains a copy of the data stored in our production system in order to create reports and analyses in downstream analysis and visualization systems. Within this framework, we process yourpersonal data to enable structured and efficient analyses of our productiondata, which, among other things, serve to optimize internal processes, ensure quality, and support decision-making in product development. When creating these reports, we process the following categories of personal data: last name, first name, email address, telephone number, customer number, order information, usage data, and technical metadata.
This data is processed on the basis of our legitimate interest in improving our products and services in order to offer you an optimal customer experience, in accordance with Art. 6 (1) (f) GDPR.
Personal data processed for the purpose of data analysis via Google BigQuery will be deleted once the purpose no longer applies, unless there are legal retention obligations. Further information about the processing of your personal data by Google can be found here: https://policies.google.com/privacy?hl=de
• Microsoft 365
For our daily office and communication processes, we use the"Microsoft 365" service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. The application includes, among other things, the "Outlook" service, which we use for email communication with customers, prospects, and other third parties.
Within this framework, we process personal data for the purpose of efficiently carrying out our organization, planning, and documentation, as well as our internal and external communication. We process the following categories of personal data: last name, first name, emailaddress, company affiliation, communication content, metadata on emails (e.g.,time of sending, subject line), telephone numbers, and attached documents, if applicable.
The afore mentioned data is processed for the initiation and execution of contractual relationships in accordance with Art. 6 (1) (b) GDPR and on the basis of our legitimate interest in secure, traceable and efficient communication with external contacts in accordance with Art. 6 (1) (f) GDPR.
Personal data processed as part of the use of Microsoft 365 will be deleted after the purpose has been fulfilled, unless there are legal retention obligations. Further information about how Microsoft processes your personal data can be found here: https://privacy.microsoft.com/de-de/privacystatement
• Slack
To provide live chat on our platform, we use the"Slack" service provided by Slack Technologies, LLC, 50 FremontStreet, San Francisco, CA 94105, USA. The chat function allows users to contact our team directly to ask questions, receive support, or obtain information about our services.
Within this framework, we process your personal data to enable direct, fast, and user-friendly communication via the platform. Within the context of live chat, we process the following personal data: communication content.
This data is processed to fulfill contractual obligations in accordance with Art. 6 (1) (b) GDPR.
Personal data processed for the purpose of conducting the live chat will be deleted after the purpose has been fulfilled, unless there are statutory retention periods. Further information about the processing ofyour personal data at Slack can be found here: https://slack.com/intl/de-de/legal/privacy-policy
• JIRA
For processing and managing external inquiries, we use the ticket system "Jira" from Atlassian Pty Ltd, Level 6, 341 GeorgeStreet, Sydney, NSW 2000, Australia. We use Jira for the structured recording,assignment, and tracking of tasks within support processes.
Within this framework, we process your personal data for the purpose of systematically processing and documenting incoming inquiries and ensuring efficient communication within our customer service processes. When receiving and processing customer service inquiries, we process the following personal data: last name, first name, email address, and ticket contents.
The afore mentioned data is processed on the basis of Art. 6(1) (b) GDPR to fulfill contractual measures and on the basis of Art. 6 (1) (f)GDPR to safeguard our legitimate interest in providing a structured and traceable system for the transmission of inquiries from interested parties.
Personal data processed within Jira will be deleted after the purpose has been fulfilled, unless there are legal retention obligations. Further information about Atlassian's processing of your personal data can befound here: https://www.atlassian.com/legal/privacy-policy.
• Vimeo
We use the video service Vimeo (Vimeo, Inc., 555 West 18th Street, New York, NY 10011, USA) on our website to display videos. When you access an embedded video, personal data, such as your IP address and possibly your location, is transmitted to Vimeo.
Data Processing by Vimeo:
Vimeo processes data in accordance with its own privacy policy, which can be reviewed here: Vimeo Privacy Policy.
Vimeo may also set cookies that access your device to collect and analyze usage data. You can find more information in Vimeo’s cookie policy.
Legal Basis:
The legal basis for using Vimeo on our site is Art. 6 para. 1 lit. f GDPR (legitimate interest), as we aim to provide an enhanced user experience by embedding videos. If you wish to object to the data processing by Vimeo, you can either disable video playback or contact Vimeo directly.
• Cloudflare
We use the services of Cloudflare, Inc. (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) for optimizing and securing our website. Cloudflare provides a Content Delivery Network (CDN) and protection against DDoS attacks. As part of these services, personal data may be processed.
Data Processing by Cloudflare:
Cloudflare processes personal data, particularly IP addresses, to ensure the security and performance of the website. Cloudflare may also set cookies to ensure the proper functioning of the website and optimize loading speed. You can find more information on data processing by Cloudflare in their privacy policy: Cloudflare Privacy Policy.
Legal Basis:
The legal basis for using Cloudflare on our website is Art. 6 para. 1 lit. f GDPR (legitimate interest), as we aim to protect the website from attacks and optimize loading speed.
• Usercentrics
We use the Usercentrics consent management serviceprovided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This tool enables us to obtain and manage website users' consent to dataprocessing.
The processing is carried out on the basis of Art. 6 (1)(c) GDPR (fulfilment of a legal obligation) and Art. 6 (1) (f) GDPR(legitimate interest in legally compliant consent management).
The following data is processed:
- Date and time of access
- Browser information
- Device information
- Approximate location data (country, region)
- Cookie preferences
- URL of the visited page
The functionality of the website cannot be guaranteed without this processing. Usercentrics is the recipient of this data and acts asour processor. Processing takes place within the European Union. The data is stored for 12 months and then automatically deleted. You can change or revoke your consent at any time using our cookie settings tool. Further information on data processing by Usercentrics can be found at: https://usercentrics.com/de/datenschutzerklaerung/.
Information about the use of cookies
- What personal data is collected and to what extent is it processed?
We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called “cookies” are small text files that your browser can store on your access device. These text files contain a characteristic string of characters that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also referred to as “setting a cookie”. Cookies can be set both by the website itself and by external web services. The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also enables us torecognize individual visitors using pseudonyms, e.g. a unique or random ID, sothat we can offer more personalized services. Details are provided in the table below.
- Legal basis for the processing of personal data
If the cookies are processed on the basis of consent in accordance with Art. 6 (1) (a) GDPR, this consent also counts as consent within the meaning of Section 25 (1) TTDSG for the setting of the cookie on the user's device. If another legal basis is stated under the GDPR (e.g. for theperformance of a contract or to comply with statutory obligations), the storageor setting takes place on the basis of an exception in accordance with Section 25 (2) TTDSG. This applies “if the sole purpose of storing information in theend user's terminal equipment or the sole purpose of accessing informational ready stored in the end user's terminal equipment is to carry out the transmission of a message over a public telecommunications network” or “if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of a telemedia service to be able to provide a telemedia service expressly requested by the user”. The applicable legal basis is set out in the cookie table listed later in this section.
- Purpose of data processing
Cookies are set by our website or external web services to maintain the full functionality of our website, improve user experience, or to pursue the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as a unique or random ID, so we can offer more personalized services. Details are listed inthe table below.
- Duration of storage
Our cookies are stored until they are deleted in your browser or, in the case of session cookies, until the session expires. Details are listed in the table below.
- Possibility of objection and removal
You can set your browser to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or to accept cookies in general. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save recently viewed offers (sessioncookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Data security and data protection, communication viaemail
Your personal data is protected by technical and organizational measures during collection, storage, and processing to ensure that it is not accessible to third parties. For unencrypted communication via email, we cannot guarantee complete data security during transmission to our IT systems. Therefore, we recommend encrypted communication or sending information with a high level of confidentiality by post.
Right to information and requests for correction –Deletion and restriction of data – Revocation of consent – Right of objection
Right to information
You have the right to request confirmation as to whether we process your personal data. If so, you have the right to information about theinformation specified in Art. 15 (1) GDPR, provided that the rights and freedoms of others are not adversely affected (see Art. 15 (4) GDPR). We will also be happy to provide you with a copy of the data.
Right to rectification
According to Art. 16 GDPR, you have the right to have any personal data we have stored about you (such as address, name, etc.) corrected at any time. You can also request that the data we have stored be completed at any time. The appropriate adjustment will be made immediately.
Right to erasure
According to Art. 17 (1) GDPR, you have the right to have us delete the personal data collected about you if
- the data is either no longer needed;
- due to the withdrawal of your consent, the legal basis for processing no longer applies;
- you have objected to the processing and there are no legitimate grounds for the processing;
- your data is processed unlawfully;
- a legal obligation requires this or a collection has taken place in accordance with Art. 8 (1) GDPR.
According to Art. 17 (3) GDPR, this right does not exist if
- processing is necessary for the exercise of the right to freedom of expression and information;
- Your data has been collected on the basis of a legal obligation;
- processing is necessary for reasons of public interest;
- the data is necessary to assert, exercise or defend legal claims.
Right to restriction of processing
According to Art. 18 Para. 1 GDPR, you have the right to request the restriction of the processing of your personal data in individual cases.
This is the case when:
- you contest the accuracy of the personal data;
- the processing is unlawful and you do not consent to erasure;
- the data are no longer required for the purpose of processing, but the data collected serve to assert, exercise or defend legal claims;
- an objection to the processing has been lodged pursuant to Art. 21 (1) GDPR and it is still unclear which interests prevail.
Right of withdrawal
If you have given us your express consent to process your personal data (Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR), you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of your consent until the revocation.
Right to object
According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that was collected based on Art. 6 (1) (f) (within the scope of a legitimate interest). You only have this right if there are special circumstances that speak against the storage and processing.
How do you exercise your rights?
You can exercise your rights at any time by contacting ususing the contact details below:
simple system GmbH
Haberlandstraße 55
81241 Munich
Germany
Email: info@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28
Right to data portability
According to Art. 20 GDPR, you have the right to have your personal data transferred to us. We will provide this data in a structured, common, and machine-readable format. The data can be sent either to you or to acontroller designated by you.
We will provide you with the following data upon request inaccordance with Art. 20 (1) GDPR:
- Data collected on the basis of express consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR;
- Data that we have received from you in accordance with Art. 6 (1) (b) GDPR within the framework of existing contracts;
- Data that has been processed as part of an automated procedure.
We will transfer your personal data directly to a controller of your choice, provided this is technically feasible. Please note that, in accordance with Art. 20 (4) GDPR, we are not permitted to transfer data that interferes with the freedoms and rights of other individuals.
Information according to Art. 13 and 14 GDPR
In order to comply with the principle of fair and transparent processing of personal data, we inform applicants, customers and suppliers about the processing of the personal data collected below:
You can download the information for applicants as a PDF file here.
You can download the information for customers and suppliers as a PDF file here.
Right to lodge a complaint with the supervisory authoritypursuant to Art. 77 (1) GDPR
If you suspect that your data is being processed unlawfully on our website, you can of course seek judicial clarification of the issue at any time. Furthermore, you have every other legal option open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. You have the right to lodge a complaint inaccordance with Art. 77 GDPR in the EU member state of your residence, place of work and/or the place of the alleged in fringement, i.e. you can choose the supervisory authority you want to contact from the locations listed above. The supervisory authority to which the complaint was submitted will then inform you of the status and outcome of your submission, including the possibility ofj udicial remedy in accordance with Art. 78 GDPR.
