Privacy statement

Thank you for visiting our website company.simplesystem.com and for your interest in our company.

Protecting your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit the site. Our data protection practice is in line with the legal provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information requirements arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.

person responsible

The person responsible within the meaning of Article 4 No. 7 GDPR is the person who, alone or together with others, decides on the purposes and means of processing personal data.

With regard to our website, the person responsible is:

simple system GmbH
Haberlandstrasse 55
81241 Munich
Germany
email: info@simplesystem.com
Phone: +49 89 9982987-00
Fax: +49 89 9982987-28

Contact data protection officer

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can contact our data protection officer using the following contact details:

Ben R. Hansen
Haberlandstrasse 55
81241 Munich
Germany
email: datenschutz@simplesystem.com
Phone: +49 89 9982987-00
Fax: +49 89 9982987-28

‍

Provision of the website and creation of log files

Each time you visit our website, our system automatically collects data and information from the respective retrieving device (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) date and time of access;
(6) websites and resources (images, files, other page content) that have been accessed on our website;
(7) websites from which the user's system reached our website (referrer tracking);
(8) Report whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in our system's log files. This data is not stored together with personal data of a specific user, so that individual site visitors are not identified.

Legal basis for processing personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of data processing

The temporary (automated) storage of data is necessary for the completion of a website visit to enable the website to be delivered. Personal data is also stored and processed to maintain the compatibility of our website for as many visitors as possible and to combat misuse and rectify faults. For this purpose, it is necessary to log the technical data of the retrieving computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. We also use the data to optimize the website and generally ensure the security of our information technology systems.

Storage period

The aforementioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Objection and deletion option

You can object to processing at any time in accordance with Article 21 GDPR and request the deletion of data in accordance with Article 17 GDPR. What rights you have and how to assert them can be found at the bottom of this privacy policy.

Special features of the website

Our site offers you various functions, which we collect, process and store personal data when you use them. Below we explain what happens with this data:

contact form (s)

What personal data is collected and to what extent is it processed?

We will process the data you have entered in our contact forms, which you have entered in the input mask of the contact form, to fulfill the purpose set out below.

Legal basis for processing personal data

Art. 6 para. 1 lit. a GDPR (consent through clear affirmative action or conduct)

Purpose of data processing

We will only use the data collected via our contact form or contact forms to process the specific contact request received through the contact form.

Storage period

After processing your request, the collected data will be deleted immediately, as long as there are no legal storage periods.

Withdrawal and deletion option

The revocation and deletion options are based on the general regulations on the right of withdrawal and cancellation claim described below in this data protection declaration.

Necessity of providing personal data

The use of contact forms is voluntary and is neither contractually nor legally required. You are not required to contact us via the contact form, but can also use the other contact options listed on our website. If you want to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the necessary information on the contact form with content, you will either not be able to send the request or we will unfortunately not be able to process your request.

Login area

What personal data is collected and to what extent is it processed?

We will process the registration and login data you have entered with us to fulfill the purpose set out below.

Legal basis for processing personal data

Art. 6 para. 1 lit. b GDPR (implementation of (pre) contractual measures)

Purpose of data processing

You have the option of using a separate login area on our website. So that we can verify your authorization to use the protected area or the protected documents, you must enter your login data (email or username and password) in the appropriate form.

Storage period

The collected data is stored as long as you maintain a user account with us.

Objection and deletion option

What rights you have and how to assert them can be found at the bottom of this privacy policy.

Necessity of providing personal data

The use of the login area on our site is contractually required to use the protected area. It is not possible to use the content protected by the login area without entering personal data. If you want to use our login area, you must fill in the fields marked as mandatory (user name and password). Entering the data requires the existence of a user account. It is not possible to log in if the data you have entered is incorrect. If you enter the data incorrectly or not, the protected area cannot be used. However, the rest of the site can still be used without logging in.

Newsletter subscription form

What personal data is collected and to what extent is it processed?

By subscribing to the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, other contact details, provided that you provide us with this via the newsletter registration form.

Legal basis for processing personal data

Art. 6 para. 1 lit. a GDPR (consent through clear affirmative action or conduct)

Purpose of data processing

The data entered in the registration form for our newsletter is used by us exclusively for sending our newsletter, in which we provide information about all our services and news. After signing up, we will send you a confirmation email that contains a link that you must click on to complete your subscription to our newsletter (double opt-in).

Storage period

You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after you unsubscribe. We will also delete your data immediately if you do not complete your registration. We reserve the right to delete without giving reasons and without prior or subsequent information.

Withdrawal and removal option

You can withdraw your consent at any time in accordance with Article 7 (3) GDPR. However, the processing carried out up to the time of withdrawal remains unaffected. With regard to other rights, we refer to the overview at the end of this privacy policy.

Necessity of providing personal data

If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt in link. The information required to subscribe to the newsletter is neither necessary to enter into a contract with us nor is legally binding. They are used exclusively to send our newsletter. If you do not fill in the necessary information with content, we will unfortunately not be able to provide you with our newsletter service.

Statistical evaluation of visits to this website — Webtracker

When you access this website or individual files on the website, we collect, process and store the following data: IP address, website from which the file was retrieved, name of the file, date and time of retrieval, amount of data transferred and notification of the success of the retrieval (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

Google Ads

On our website, we use the Google Ads service from Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com , web site: http://www.google.com/ .

Processing is also carried out in a third country for which the Commission has not adopted an adequacy decision. Therefore, the usual level of protection under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in a third country, for example, may access the collected data.

The legal basis for the transfer of personal data is your consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have provided on our website. Google Ads is an advertising system with which we place ads based primarily on search results when using the company's own services.

As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA.

You can withdraw your consent at any time. You can find more information about withdrawing your consent either in the consent itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://policies.google.com/privacy.

Google Tag Manager

What personal data is collected and to what extent is it processed?

On our site, we use the service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager). Google Tag Manager offers a technical platform to run and bundle other web services and web tracking programs using so-called “tags”. In this context, Google Tag Manager stores cookies on your computer and, insofar as web tracking tools are executed using Google Tag Manager, analyses your surfing behavior (so-called “tracking”). This data sent by individual tags integrated into Google Tag Manager is combined, stored and processed by Google Tag Manager under a uniform user interface. All integrated “tags” are listed separately in this privacy policy. You can find more information about the data protection of the tools integrated in Google Tag Manager in the respective section of this privacy policy. When using our website with activated integration of tags from Google Tag Manager, data, in particular your IP address and your user activities, is transmitted to servers operated by Google Ireland Limited. With regard to the web services integrated via Google Tag Manager, the regulations in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google Tag Manager before transmission by IP anonymization of the source code. This only allows Google Tag Manager to collect IP addresses anonymously (so-called IP masking).

Legal basis for processing personal data

In accordance with Article 6 (1) (a) GDPR, the legal basis for data processing is your consent in our banner regarding the use of cookies and web tracking (consent through clear affirmative action or conduct).

Purpose of data processing

On our behalf, Google will use the information obtained using Google Tag Manager to evaluate your visit to this website, compile reports on website activity and provide us with other services related to website activity and Internet usage.

Storage period

Google will store the data relevant to the Google Tag Manager function for as long as is necessary to fulfill the booked web service. Data is collected and stored anonymously. However, if there is a personal reference, the data will be deleted immediately, provided that it is not subject to any legal storage requirements. In any case, the deletion takes place after the storage obligation has expired.

Objection and deletion option

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser, or activating your browser's “Do Not Track” setting. You can also prevent Google from collecting the data generated by the Google cookie and related to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link http://tools.google.com/dlpage/gaoptout?hl=de Download and install the available browser plug-in. Google's security and privacy principles can be found at https://policies.google.com/privacy.

Google Analytics

Scope of processing of personal data

On our site, we use the web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). As part of web tracking, Google Analytics uses cookies, which are stored on your computer and enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis based on the Google Analytics tracking service in order to constantly optimize our website and make it more available. When using our website, data, in particular your IP address and user activities, is transferred to servers operated by Google Ireland Limited. We carry out this analysis based on Google's tracking service in order to constantly optimize our website and make it more available. We also need web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. With the information from the web tracker, we can take effective countermeasures and protect the personal data we process from these cyber attacks. By activating IP anonymization within the Google Analytics tracking code of this website, Google Analytics anonymizes your IP address before transmission. This website uses a Google Analytics tracking code, which includes the operator gat. _anonymizeIp (); was extended to only allow anonymized collection of IP addresses (so-called IP masking).

Legal basis for processing personal data

Purpose of data processing

On our behalf, Google will use this information to evaluate your visit to this website, compile reports on website activity and provide us with other services related to website activity and Internet usage. We also need web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. With the information from the web tracker, we can take effective countermeasures and protect the personal data we process from these cyber attacks.

Storage period

Google will store the data relevant to providing web tracking for as long as is necessary to fulfill the booked web service. Data collection and storage is anonymized. However, if there is a personal reference, the data will be deleted immediately, provided that it is not subject to any legal storage requirements. In any case, the deletion takes place after the storage obligation has expired.

Objection and deletion options

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser or activating the “Do Not Track” setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and related to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=de) download and install the available browser plug-in. Google's security and privacy principles can be found at https://policies.google.com/privacy?hl=de.

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. This may allow data to be processed outside the EU. You can prevent this by installing an appropriate browser plug-in or deactivating the execution of scripts in your browser. This may result in functional restrictions on websites that you visit.

We use the following external web services:

linkedin

On our website, we use the LinkedIn service from LinkedIn Ireland Unlimited Company, Wilton Place, 2 Dublin, Ireland, e-mail: info_impressum@cs.linkedin.com, web site: https://www.linkedin.com/. Processing is also carried out in a third country for which the Commission has not adopted an adequacy decision.

Therefore, the usual level of protection under the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in a third country, for example, may access the collected data.

The legal basis for the transfer of personal data is your consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, which you have provided on our website.

When using the Linkedin plugin, we connect to the Linkedin platform in order to give any logged-in LinkedIn members the opportunity to interact with us. You can withdraw your consent at any time. You can find more information about withdrawing your consent either in the consent itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

The provider offers at https://www.linkedin.com/help/linkedin/answer/68763?lang=de In addition, an opt-out option.

• Microsoft Bookings

We offer you the opportunity to make an appointment on our website using the “Microsoft Bookings” service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399.

In this context, we process your data to enable optimal, user-friendly communication with interested parties. As part of booking an appointment, we process the following categories of personal data: name, e-mail address, date and time of the appointment and, if provided, telephone number, address and notes.

This data is processed on the basis of your consent in accordance with Article 6 (1) (a) GDPR.

The contact data you have provided will be deleted after the purpose has been fulfilled, unless there is a legal storage period to the contrary. You can find more information about how Microsoft processes your personal data here: https://privacy.microsoft.com/de-de/privacystatement

• Demio

To conduct our webinars, we use the “Demio” service provided by Banzai International, Inc., 435 Ericksen Avenue, Suite 250, Bainbridge Island, WA 98110, USA. Our webinars take place on the Demio platform and registered participants receive a notification before the webinar.

Within this framework, we process your personal data for the purpose of informing you about our services in an interactive and user-friendly way. As part of conducting our webinars, we process the following categories of personal data: name, email address, company affiliation, webinar activity data.

The processing of the above data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent is given when you submit the webinar registration form.

Personal data that is processed for the purpose of holding webinars will be deleted after the purpose has been fulfilled, unless there is a legal retention period. You can find more information about Banzai's processing of your personal data here: https://www.banzai.io/legal/privacy-policy

• UserGuiding

We use the “UserGuiding” service provided by YNOT Partners, Inc., 316 High Street, Palo Alto, CA 94301, USA, to provide interactive instructions for our services.

The purpose of this processing of personal data is to enable user-friendly operation of our platform. As part of providing interactive instructions, we process the following categories of personal data: browser type, IP address, app usage data.

The processing of personal data in this context is in our legitimate interest to provide users with an optimal onboarding process. The legal basis for this is Article 6 (1) (f) GDPR.

The collected usage and device data will be deleted after the purpose has been fulfilled, unless there is a legal storage period to the contrary. You can find more information about UserGuiding's processing of personal data here: https://userguiding.com/privacy-policy/

• Weglot

To provide our website in several languages, we use the “Weglot” translation service provided by Weglot SAS, 7 Cité Paradis, 75010 Paris, France. Weglot is loaded when you visit our website to allow you to select a different language for the content of the website.

Within this framework, we process personal data for the purpose of presenting our website in several languages. To make this possible, your IP address is processed when you visit our website. If you give your consent, a cookie is also stored on your device that tracks your language choices.

The processing of personal data in this context is in our legitimate interest to offer as many interested parties as possible an optimal navigation experience on our website. The legal basis for this is Art. 6 para. 1 lit. f DSGVO.

The personal data collected will be deleted after the purpose has been fulfilled, unless there is a legal retention period. The cookie is deleted from your device at the end of the session. You can find more information about the processing of personal data at Weglot here: https://www.weglot.com/privacy

• Microsoft Power BI
‍
On our site we use integrations from the business analysis and visualization service Power BI from the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399.
In this context, we process your data for the purposes of creating service business intelligence dashboards, reports, semantic models (previously known as datasets) and visualizations. We perform this reporting of analytics data to optimize our offering and ensure better availability. As part of reporting, we process the following categories of personal data: name, email address, order and approval history and, if provided, telephone number, address and notes.
This data is processed based on your consent in accordance with Article 6 Paragraph 1 Letter a GDPR.
Your data will be deleted after the purpose has been fulfilled, unless there is a statutory retention period to the contrary. Further information about how Microsoft processes your personal data can be found here: https://privacy.microsoft.com/de-de/privacystatement

‍

Information about the use of cookies

What personal data is collected and to what extent is it processed?

We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called “cookies” are small text files that your browser can save on your access device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as “setting a cookie.” Cookies can be set both by the website itself and by external web services. The cookies are set by our website or external web services to maintain the full functionality of our website, to improve usability or to pursue the purpose stated with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as an individual or random ID, so that we can offer more individual services. Details are shown in the table below.

Legal basis for processing personal data

Insofar as cookies are processed on the basis of consent in accordance with Article 6 (1) (a) GDPR, this consent is also considered consent within the meaning of Section 25 (1) TTDSG to set the cookie on the user's terminal device. Insofar as another legal basis is mentioned under the GDPR (e.g. to fulfill a contract or to fulfill legal obligations), the storage or setting is based on an exception in accordance with Section 25 (2) TTDSG. This exists “when the sole purpose of storing information in the end user's terminal device or the sole purpose of accessing information already stored in the end user's terminal device is to carry out the transmission of a message via a public telecommunications network” or “when the storage of information in the end user's terminal device or access to information already stored in the end user's terminal device is absolutely necessary so that the provider of a Telemedia service can provide a telemedia service expressly requested by the user.” The relevant legal basis is set out in the cookie table listed later in this section.

Purpose of data processing

The cookies are set by our website or external web services to maintain the full functionality of our website, to improve usability or to pursue the purpose stated with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as an individual or random ID, so that we can offer more individual services. Details are shown in the table below.

Storage period

Our cookies are stored until they are deleted in your browser or, if it is a session cookie, until the session has expired. Details are shown in the table below.

Objection and removal option

You can set your browser according to your wishes so that cookies are generally prevented from being set. You can then decide whether to accept cookies on a case-by-case basis or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can withdraw this consent at any time. Please note that the lawThis does not affect the extent of the processing carried out on the basis of consent up to the withdrawal.

Data security and data protection, communication via e-mail

Your personal data is protected by technical and organizational measures during collection, storage and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security during transmission to our IT systems, so we recommend encrypted communication or by post for information with a high level of confidentiality requirements.

Right to information and requests for correction — Deletion & restriction of data — Withdrawal of consent — Right of objection

Right to information

You have the right to request confirmation as to whether we process your personal data. If this is the case, you have a right to information about the information specified in Article 15 (1) GDPR, provided that the rights and freedoms of other persons are not affected (see Article 15 (4) GDPR). We would also be happy to provide you with a copy of the data.

Right to rectification

In accordance with Article 16 GDPR, you have the right to have any incorrectly stored personal data (such as address, name, etc.) corrected by us at any time. You can also request that the data stored by us be completed at any time. A corresponding adjustment will be made immediately.

Right to delete

Pursuant to Article 17 (1) GDPR, you have the right to have us delete the personal data collected about you if

the data is either no longer required;
as a result of the withdrawal of your consent, the legal basis for processing has ceased to exist without replacement;
you have objected to processing and there are no legitimate reasons for processing;
your data is processed unlawfully;
a legal obligation requires this or a collection has taken place in accordance with Article 8 (1) GDPR.

According to Article 17 (3) GDPR, the right does not exist if

processing is necessary to exercise the right to freedom of expression and information;
your data was collected on the basis of a legal obligation;
processing is necessary for reasons of public interest;
the data is required to assert, exercise or defend legal claims.

Right to restrict processing

Gem. In individual cases, you have the right to request that the processing of your personal data be restricted in accordance with Article 18 (1) GDPR.

This is the case when

the accuracy of the personal data is disputed by you;
the processing is unlawful and you do not agree to its deletion;
the data is no longer required for the purpose of processing, but the data collected is used to assert, exercise or defend legal claims;
an objection has been filed against processing in accordance with Article 21 (1) GDPR and it is still unclear which interests prevail.

Right of withdrawal

If you have given us express consent to process your personal data (Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO), you can withdraw this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of consent up to the time of withdrawal.

Right to object

In accordance with Article 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Article 6 (1) lit. f (within the framework of a legitimate interest). You are only entitled to this right if there are special circumstances against storage and processing.

How do you exercise your rights?

You can exercise your rights at any time by using the contact details below:

simple system GmbH
Haberlandstrasse 55
81241 Munich
Germany
email: info@simplesystem.com
Phone: +49 89 9982987-00
Fax: +49 89 9982987-28

Right to data portability

In accordance with Article 20 GDPR, you have the right to transfer personal data relating to you. We provide the data in a structured, common and machine-readable format. The data can be sent either to yourself or to a person responsible named by you.

On request, we will provide you with the following data in accordance with Article 20 (1) GDPR:

data collected on the basis of express consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR;
data that we have received from you in accordance with Article 6 (1) (b) GDPR as part of existing contracts;
Data that has been processed as part of an automated process.

We will transfer personal data directly to a person responsible of your choice, insofar as this is technically feasible. Please note that we may not transfer data that interferes with the freedoms and rights of other persons in accordance with Article 20 (4) GDPR.

Information in accordance with articles 13 and 14 GDPR

In order to comply with the principle of fair and transparent processing of personal data, we inform applicants, customers and suppliers below about the processing of the personal data collected:

You can find the information for applicants here download as a PDF file.

The information for customers and vendor can be here download as a PDF file.

Right to lodge a complaint with the supervisory authority in accordance with Article 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our part, you can of course seek judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Article 77 (1) GDPR. You have the right of appeal in accordance with Article 77 GDPR in the EU member state of your place of residence, place of work and/or place of the alleged infringement, i.e. you can choose the supervisory authority you are contacting from the locations mentioned above. The supervisory authority with which the complaint was submitted will then inform you of the status and results of your submission, including the possibility of a judicial remedy in accordance with Article 78 GDPR.