Privacy statement

We are pleased that you have visited our websitecompany.simplesystem.com and are interested in our company.

The protection of your personal data, such as date of birth,name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you aboutthe processing of your personal data, which we collect when you visit ourwebsite. Our data protection practices comply with the legal provisions of theEU General Data Protection Regulation (GDPR) and the German Federal DataProtection Act (BDSG). The following privacy policy serves to fulfill theinformation obligations arising from the GDPR. These can be found, for example,in Articles 13 and 14 et seq. of the GDPR.

Person responsible

The controller within the meaning of Art. 4 No. 7 GDPR isthe person who alone or jointly with others decides on the purposes and meansof processing personal data.

With regard to our website, the controller is:

simple system GmbH
Haberlandstraße 55
81241 Munich
Germany
Email: info@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28

Contact Data Protection Officer

We have appointed a data protection officer in accordancewith Art. 37 GDPR. You can reach our data protection officer using thefollowing contact details:

Ben R. Hansen
Haberlandstraße 55
81241 Munich
Germany
Email: datenschutz@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28

Provision of the website and creation of log files

Each time you access our website, our system automaticallyrecords data and information from the device you are using (e.g. computer,mobile phone, tablet, etc.).

What personal data is collected and to what extent is itprocessed?

(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on ourwebsite;
(7) Websites from which the user's system accessed our website (referrertracking);
(8) Notification as to whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in our system's log files. This data isnot stored together with the personal data of a specific user, so individualsite visitors cannot be identified.

Legal basis for the processing of personal data

Art. 6 (1) (f) GDPR (legitimate interest). Our legitimateinterest lies in ensuring the achievement of the purpose described below.

Purpose of data processing

The temporary (automated) storage of data is necessary forthe duration of a website visit to enable delivery of the website. Personaldata is also stored and processed to maintain the compatibility of our websitefor as many visitors as possible and to combat misuse and troubleshootproblems. For this purpose, it is necessary to log the technical data of theaccessing computer in order to be able to respond as quickly as possible todisplay errors, attacks on our IT systems, and/or errors in the functionalityof our website. We also use the data to optimize the website and generallyensure the security of our information technology systems.

Duration of storage

The aforementioned technical data will be deleted as soon asthey are no longer required to ensure the compatibility of the website for allvisitors, but no later than 3 months after accessing our website.

Possibility of objection and deletion

You can object to the processing at any time in accordancewith Art. 21 GDPR and request the deletion of data in accordance with Art. 17GDPR. You can find out what rights you are entitled to and how you can assertthem at the bottom of this privacy policy.

Special features of the website

Our site offers you various features that require us tocollect, process, and store personal data. Below, we explain what happens tothis data:

Contact form(s)

What personal data is collected and to what extent is it processed?

We will process the data you enter in our contact forms,which you have entered in the input mask of the contact form, to fulfill thepurpose stated below.

Legal basis for the processing of personal data

Art. 6 (1) (a) GDPR (consent through a clear affirmativeaction or behavior)

Purpose of data processing

We will only use the data collected via our contact form(s)to process the specific contact request received through the contact form.

Duration of storage

After your request has been processed, the data collectedwill be deleted immediately, unless there are statutory retention periods.

Possibility of revocation and deletion

The revocation and deletion options are based on the generalprovisions on the right of revocation and deletion under data protection lawdescribed below in this data protection declaration.

Necessity of providing personal data

The use of contact forms is voluntary and is neithercontractually nor legally required. You are not obligated to contact us via thecontact form; you can also use the other contact options provided on ourwebsite. If you wish to use our contact form, you must fill out the fieldsmarked as mandatory. If you do not provide the required information, you willeither not be able to submit your request, or we will unfortunately not be ableto process your request.

Login area

What personal data is collected and to what extent is it processed?

We will process the registration and login data you provideto us to fulfill the purpose stated below.

Legal basis for the processing of personal data

Art. 6 (1) (b) GDPR (implementation of (pre)contractualmeasures)

Purpose of data processing

You have the option of using a separate login area on ourwebsite. In order for us to verify your authorization to use the protected areaor the protected documents, you must enter your login information (emailaddress or username and password) in the corresponding form.

Duration of storage

The data collected will be stored as long as you maintain auser account with us.

Possibility of objection and deletion

You can find out what rights you are entitled to and how youcan assert them at the bottom of this privacy policy.

Necessity of providing personal data

Use of the login area on our website is contractuallyrequired for use of the protected area. Use of the content protected by thelogin area is not possible without entering personal data. If you wish to useour login area, you must fill out the fields marked as mandatory (user name andpassword). Entering this data requires the existence of a user account.Registration is not possible if the data you enter is incorrect. If you enterincorrect data or no data, you will not be able to use the protected area.However, the rest of the site can still be used without logging in.

Newsletter registration form

What personal data is collected and to what extent is it processed?

By registering for the newsletter on our website, we receivethe email address you entered in the registration field and, if applicable,other contact details, provided you provide them to us via the newsletterregistration form.

Legal basis for the processing of personal data

Art. 6 (1) (a) GDPR (consent through a clear affirmativeaction or behavior)

Purpose of data processing

The data entered in the registration form for our newsletterwill be used exclusively for sending our newsletter, in which we inform youabout all our services and news. After registration, we will send you aconfirmation email containing a link that you must click to complete yoursubscription to our newsletter (double opt-in).

Duration of storage

You can unsubscribe from our newsletter at any time byclicking the unsubscribe link included in every newsletter. Your data will bedeleted immediately after unsubscribing. Likewise, if you do not complete yourregistration, your data will be deleted immediately. We reserve the right todelete your data without giving reasons and without prior or subsequent notice.

Possibility of revocation and removal

You may revoke your consent at any time in accordance withArt. 7 (3) GDPR. However, this will not affect any processing carried out up tothe time of revocation. For further information on your rights, please refer tothe overview at the end of this privacy policy.

Necessity of providing personal data

If you would like to subscribe to our newsletter, you mustfill out the mandatory fields and confirm your email address by clicking thedouble opt-in link. The information you provide for newsletter registration isneither necessary to enter into a contract with us nor legally binding. It isused solely for sending our newsletter. If you do not provide the requiredinformation, we will unfortunately not be able to provide you with ournewsletter service.

Statistical analysis of visits to this website –Webtracker

When you access this website or individual files on thewebsite, we collect, process, and store the following data: IP address, websitefrom which the file was accessed, file name, date and time of access, amount ofdata transferred, and notification of the success of the access (so-called weblog). We use this access data exclusively in a non-personalized form for thecontinuous improvement of our website and for statistical purposes. We also usethe following web trackers to evaluate visits to this website:

Google Ads

We use the Google Ads service of Google Ireland Ltd., GordonHouse, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: http://www.google.com/ .

The processing also takes place in a third country for whichno adequacy decision has been issued by the Commission. Therefore, the standardlevel of protection required by the GDPR cannot be guaranteed during transfer,as it cannot be ruled out that authorities in the third country, for example,may gain access to the collected data.

The legal basis for the transmission of personal data isyour consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, which youhave given on our website. Google Ads is an advertising system with which weplace ads that are primarily based on search results when using the company'sown services.

As part of the order processing, personal data may also betransferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043Mountain View, United States.

You can revoke your consent at any time. Further informationon revoking your consent can be found either in the consent itself or at theend of this privacy policy.

Further information on the handling of the transferred datacan be found in the provider's privacy policy at https://policies.google.com/privacy.

The provider also offers an opt-out option at https://policies.google.com/privacy.

Google Tag Manager

What personal data is collected and to what extent is itprocessed?

On our website we use the service of Google Ireland Limited,Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google TagManager). Google Tag Manager offers a technical platform for running other webservices and web tracking programs using so-called "tags" and forbeing able to control them in a bundled manner. In this context, Google TagManager stores cookies on your computer and, if web tracking tools are runusing Google Tag Manager, analyses your surfing behaviour (so-called "tracking").The data sent by individual tags integrated in Google Tag Manager is compiled,stored and processed by Google Tag Manager under a uniform user interface. Allintegrated "tags" are listed separately in this data protectiondeclaration. Further information on the data protection of the tools integratedin Google Tag Manager can be found in the respective section of this dataprotection declaration. When you use our website with activated integration oftags from Google Tag Manager, data such as in particular your IP address andyour user activities are transmitted to servers of Google Ireland Limited. Withregard to the web services integrated via Google Tag Manager, the regulationsin the respective section of this privacy policy apply. The tracking tools usedin Google Tag Manager ensure that the IP address is anonymized by Google TagManager prior to transmission by anonymizing the source code. In this case,Google Tag Manager only allows the anonymized collection of IP addresses(so-called IP masking).

Legal basis for the processing of personal data

The legal basis for data processing is, in accordance withArt. 6 (1) (a) GDPR, your consent in our information banner regarding the useof cookies and web tracking (consent through a clear confirming action orbehavior).

Purpose of data processing

On our behalf, Google will use the information obtainedthrough Google Tag Manager to evaluate your visit to this website, compilereports on website activity and provide us with other services relating towebsite activity and internet usage.

Duration of storage

Google will store the data relevant to the functionality ofGoogle Tag Manager for as long as necessary to fulfill the booked web service.Data collection and storage is anonymized. If personal information stillexists, the data will be deleted immediately unless subject to statutoryretention periods. In any case, deletion occurs after the retention period hasexpired.

Possibility of objection and deletion

You can prevent the collection and forwarding of personaldata to Google (in particular your IP address) as well as the processing ofthis data by Google by deactivating the execution of script code in yourbrowser, installing a script blocker in your browser or activating the "DoNot Track" setting in your browser. You can also prevent Google fromcollecting the data generated by the Google cookie and relating to your use ofthe website (including your IP address) and from processing this data by Googleby downloading and installing the browser plug-in available under the followinglink http://tools.google.com/dlpage/gaoptout?hl=de. Google's security and data protection principles can be found at https://policies.google.com/privacy.

Google-Analytics

Scope of processing of personal data

On our website we use the web tracking service of GoogleIreland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter:Google Analytics). As part of web tracking, Google Analytics uses cookies thatare stored on your computer and enable an analysis of the use of our websiteand your surfing behavior (so-called tracking). We carry out this analysis onthe basis of the Google Analytics tracking service in order to continuouslyoptimize our internet offering and make it more available. When you use ourwebsite, data such as your IP address and your user activities are transmittedto servers of Google Ireland Limited. We carry out this analysis on the basisof Google's tracking service in order to continuously optimize our internetoffering and make it more available. We also need web tracking for securityreasons. Web tracking allows us to track whether third parties are attackingour website. The information from the web tracker enables us to take effectivecountermeasures and protect the personal data we process from these cyberattacks. By activating IP anonymization within the Google Analytics trackingcode on this website, your IP address will be anonymized by Google Analyticsbefore transmission. This website uses a Google Analytics tracking code thathas been extended by the operator gat._anonymizeIp(); to enable only anonymizedcollection of IP addresses (so-called IP masking).

Legal basis for the processing of personal data

Purpose of data processing

On our behalf, Google will use this information to evaluateyour visit to this website, compile reports on website activity, and provide uswith other services related to website activity and internet usage. We alsorequire web tracking for security reasons. Web tracking allows us to trackwhether third parties are attacking our website. The information from the webtracker allows us to take effective countermeasures and protect the personaldata we process from these cyberattacks.

Duration of storage

Google will store the data relevant for providing webtracking for as long as necessary to fulfill the booked web service. Datacollection and storage is anonymized. If personal information is stillavailable, the data will be deleted immediately unless subject to statutoryretention periods. In any case, deletion occurs after the retention period hasexpired.

Options for objection and deletion

You can prevent the collection and forwarding of personaldata to Google (in particular your IP address) as well as the processing ofthis data by Google by deactivating the execution of script code in yourbrowser or activating the "Do Not Track" setting in your browser. Youcan also prevent Google from collecting the data generated by the Google cookieand relating to your use of the website (including your IP address) and fromprocessing this data by Google by downloading and installing the browser plug-inavailable under the following link ( http://tools.google.com/dlpage/gaoptout?hl=de). Google's security and data protection principles can be found at https://policies.google.com/privacy?hl=de.

Integration of external web services and processing ofdata outside the EU

On our website, we use active content from externalproviders, so-called web services. When you access our website, these externalproviders may receive personal information about your visit to our website.This may involve processing data outside the EU. You can prevent this byinstalling an appropriate browser plug-in or disabling scripts in your browser.This may result in functional limitations on the websites you visit.

We use the following external web services:

LinkedIn

We use the LinkedIn service of LinkedIn Ireland UnlimitedCompany, Wilton Place, 2 Dublin, Ireland, email: info_impressum@cs.linkedin.com, website: https://www.linkedin.com/. Processing also takes place in a third country for which there is no adequacydecision by the Commission.

Therefore, the level of protection required by the GDPRduring transmission cannot be guaranteed, as it cannot be ruled out thatauthorities in the third country, for example, may gain access to the datacollected.

The legal basis for the transmission of personal data isyour consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR,which you have given on our website.

When using the LinkedIn plugin, we establish a connection tothe LinkedIn platform to give logged-in LinkedIn members the opportunity tointeract with us. You can revoke your consent at any time. Further informationon revoking your consent can be found either in the consent itself or at theend of this privacy policy.

Further information on the handling of the transferred datacan be found in the provider's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

The provider offers an additional opt-out optionat https://www.linkedin.com/help/linkedin/answer/68763?lang=de.

• Microsoft Bookings

We offer you the opportunity to schedule an appointment onour website using the "Microsoft Bookings" service provided byMicrosoft Corporation, One Microsoft Way, Redmond, WA 98052-6399.

In this context, we process your data to enable optimal,user-friendly communication with interested parties. When booking appointments,we process the following categories of personal data: name, email address, dateand time of the appointment, and, if provided, telephone number, address, andnotes.

This data is processed on the basis of your consent inaccordance with Art. 6 (1) (a) GDPR.

The contact details you provide will be deleted after thepurpose has been fulfilled, unless there is a statutory retention period to thecontrary. Further information about the processing of your personal data atMicrosoft can be found here: https://privacy.microsoft.com/de-de/privacystatement

• UserGuiding

We use the “UserGuiding” service provided by YNOTPartners,Inc., 316 High Street, Palo Alto, CA 94301, USA, to provide interactiveinstructions for our services.

The purpose of this processing of personal data is to enableuser-friendly operation of our platform. When providing interactiveinstructions, we process the following categories of personal data: browsertype, IP address, and app usage data.

The processing of personal data in this context is in ourlegitimate interest in order to provide users with an optimal onboardingprocess. The legal basis for this is Art. 6 (1) (f) GDPR.

The collected usage and device data will be deleted afterthe purpose has been fulfilled, unless there is a statutory retention period.Further information about the processing of personal data at UserGuiding can befound here: https://userguiding.com/privacy-policy/

• Microsoft Power BI

We use integrations of the business analysis andvisualization service Power BI from Microsoft Corporation, One Microsoft Way,Redmond, WA 98052-6399, on our website.

In this context, we process your data for the purpose ofcreating service business intelligence dashboards, reports, semantic models(formerly known as datasets), and visualizations. We perform this reporting ofanalytical data to optimize our offering and ensure better availability. Aspart of the reporting, we process the following categories of personal data:name, email address, order and approval history, and, if provided, telephonenumber, address, and notes.

This data is processed on the basis of your consent inaccordance with Art. 6 (1) (a) GDPR.

Your data will be deleted after the purpose has beenfulfilled, unless there is a statutory retention period. Further informationabout the processing of your personal data by Microsoft can be found here:  https://privacy.microsoft.com/de-de/privacystatement

• Hubspot CRM Tool

To maintain and manage our customer and supplier data and toprocess your inquiries efficiently and quickly, we use a CRM system fromHubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland (hereinafter"Hubspot"). The legal basis for processing your personal data is Art.6 (1) (b) GDPR, in order to be able to fulfill our obligations arising from thecontractual relationship with you. Furthermore, we have a legitimate interestwithin the meaning of Art. 6 (1) (f) GDPR in using the system to properly structureour customer data.

We use the marketing automation system HubSpot on ourwebsite, provided by HubSpot, 2nd Floor, 30 NorthWall Quay, Dublin 1, Ireland(hereinafter "Hubspot"). We use this integrated software solution tocarry out marketing campaigns (email, social media), for analysis purposes, andto target customers and potential customers. Data processing takes place withinthe European Union.

The system components integrated into our online offering(e.g., forms, email sending) use so-called "cookies," which arestored on the user's computer and enable us to analyze website usage. Hubspotwill use the data and information obtained via our website on our behalf toevaluate the user behavior of the data subject who has used our website.Hubspot will also use the data to compile reports on user activities on ourbehalf and to provide other services for our company related to the use of ourwebsite. Certain usage data will be linked to you personally and stored in oursystem. This allows us to send you information and offers specifically tailoredto your interests.

In particular, the following information is collected:Client ID, geographical location, browser type, duration of visit and pagesaccessed, operating system, mobile app data, and referral URL. The legal basisfor processing is your consent in accordance with Art. 6 (1) (a) GDPR. If youdo not want Hubspot to collect and process this data, you can refuse yourconsent or revoke it at any time with future effect.

We also use Hubspot to provide contact forms. You canpermanently prevent cookies from being set by our website at any time byselecting the appropriate settings in your browser, or by clicking on"Cookies" in the footer of our website.

Users can find further information on data protectionin Hubspot'sprivacy policy and in the overview of compliance with EU dataprotection regulations.

• Hotjar

With your consent, we use Hotjar, an analytics software fromHotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, StJulian's STJ 1000, Malta, on our website. This tool makes it possible tomeasure and evaluate user behavior on the website.

Hotjar is a tool for analyzing your user behavior on thiswebsite. With Hotjar, we can record, among other things, your mouse and scrollmovements and clicks. Hotjar can also determine how long you hovered the mousepointer on a certain spot. Hotjar uses this information to create so-calledheatmaps, which can be used to determine which website areas are viewed mostfrequently by website visitors.

Hotjar uses technologies that enable user recognition forthe purpose of analyzing user behavior (e.g., cookies or devicefingerprinting). Hotjar is used exclusively on the basis of Art. 6 (1) (a)GDPR. Consent can be revoked at any time. You can find out more about dataprocessing by Hotjar at: https://www.hotjar.com/privacy

• Brevo

To send emails for marketing purposes and to providefunctional information related to our platform, we use the “Brevo” serviceprovided by Sendinblue SAS, 17 Rue Salneuve, 75017, Paris, Ile de France,France.

In this context, we process your personal data for thepurpose of informing you about our services and providing you with technical ortransactional information related to your use of our platform. When sendingmarketing emails and newsletters, we process the following categories ofpersonal data: last name, first name, email address, and browsing behavior.

This data is processed on the basis of your consent inaccordance with Art. 6 (1) (a) GDPR.

Personal data processed for the purpose of sending emailsvia Brevo will be deleted after the purpose has been fulfilled, unless thereare legal retention obligations. You can object to processing for marketingpurposes at any time with future effect. Further information about theprocessing of your personal data by Brevo can be found here: https://www.brevo.com/de/legal/privacypolicy/

Integration of external web services and processing ofdata outside the EU

For the technical operation and ongoing development of ourplatform, we rely on specialized service providers. These support us with,among other things, hosting, data analysis, sending system messages,communicating with users, and providing individual functionalities.

• Amazon Web Services

For hosting technical components of our platform, we use theservice “Amazon Web Services (AWS)” provided by Amazon WebServices, Inc., 410Terry Avenue North, Seattle, WA 98109, USA.

Within this framework, we process your personal data for thepurpose of providing our platform and the associated functions. In providingthe platform, we process the following categories of personal data: IP address,login data, device type, browser, and usage data.

This data is processed to fulfill contractual obligations inaccordance with Art. 6 (1) (b) GDPR.

Personal data processed as part of platform hosting will bedeleted after the purpose has been fulfilled, unless legal retentionobligations require longer storage. Further information about the processing ofyour personal data by Amazon Web Services can be found here: https://aws.amazon.com/privacy

• Microsoft Azure

To conduct our data analyses and provide interactive reportson our platform, we use the “Power BI” service based on the “Microsoft Azure”cloud infrastructure of the provider Microsoft Corporation, One Microsoft Way,Redmond, WA 98052, USA.

In this context, we process users' personal data to providethem with dashboards and analytics via our platform. Depending on the type ofreports created, we process the following categories of personal data: logindata, last name, first name, telephone number, company affiliation, datasubmitted or stored by you (e.g., activities, bookings, orders), and technicalmetadata.

This data is processed to fulfill contractual obligations inaccordance with Art. 6 (1) (b) GDPR.

Personal data processed for the purpose of creating andproviding reports will be deleted after the purpose has been fulfilled, unlessthere are legal retention obligations. Further information about the processingof your personal data by Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement

• Google BigQuery

To carry out data analyses and prepare analyticalevaluations, we use the service “Google BigQuery” from Google LLC, 1600Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google BigQuery retains a copy of the data stored in ourproduction system in order to create reports and analyses in downstreamanalysis and visualization systems. Within this framework, we process yourpersonal data to enable structured and efficient analyses of our productiondata, which, among other things, serve to optimize internal processes, ensurequality, and support decision-making in product development. When creatingthese reports, we process the following categories of personal data: last name,first name, email address, telephone number, customer number, orderinformation, usage data, and technical metadata.

This data is processed on the basis of our legitimateinterest in improving our products and services in order to offer you anoptimal customer experience, in accordance with Art. 6 (1) (f) GDPR.

Personal data processed for the purpose of data analysis viaGoogle BigQuery will be deleted once the purpose no longer applies, unlessthere are legal retention obligations. Further information about the processingof your personal data by Google can be found here: https://policies.google.com/privacy?hl=de

• Microsoft 365

For our daily office and communication processes, we use the"Microsoft 365" service provided by Microsoft Corporation, OneMicrosoft Way, Redmond, WA 98052, USA. The application includes, among otherthings, the "Outlook" service, which we use for email communicationwith customers, prospects, and other third parties.

Within this framework, we process personal data for thepurpose of efficiently carrying out our organization, planning, anddocumentation, as well as our internal and external communication. We processthe following categories of personal data: last name, first name, emailaddress, company affiliation, communication content, metadata on emails (e.g.,time of sending, subject line), telephone numbers, and attached documents, ifapplicable.

The aforementioned data is processed for the initiation andexecution of contractual relationships in accordance with Art. 6 (1) (b) GDPRand on the basis of our legitimate interest in secure, traceable and efficientcommunication with external contacts in accordance with Art. 6 (1) (f) GDPR.

Personal data processed as part of the use of Microsoft 365will be deleted after the purpose has been fulfilled, unless there are legalretention obligations. Further information about how Microsoft processes yourpersonal data can be found here: https://privacy.microsoft.com/de-de/privacystatement

• Slack

To provide live chat on our platform, we use the"Slack" service provided by Slack Technologies, LLC, 50 FremontStreet, San Francisco, CA 94105, USA. The chat function allows users to contactour team directly to ask questions, receive support, or obtain informationabout our services.

Within this framework, we process your personal data toenable direct, fast, and user-friendly communication via the platform. Withinthe context of live chat, we process the following personal data: communicationcontent.

This data is processed to fulfill contractual obligations inaccordance with Art. 6 (1) (b) GDPR.

Personal data processed for the purpose of conducting thelive chat will be deleted after the purpose has been fulfilled, unless thereare statutory retention periods. Further information about the processing ofyour personal data at Slack can be found here: https://slack.com/intl/de-de/legal/privacy-policy

• JIRA

For processing and managing external inquiries, we use theticket system "Jira" from Atlassian Pty Ltd, Level 6, 341 GeorgeStreet, Sydney, NSW 2000, Australia. We use Jira for the structured recording,assignment, and tracking of tasks within support processes.

Within this framework, we process your personal data for thepurpose of systematically processing and documenting incoming inquiries andensuring efficient communication within our customer service processes. Whenreceiving and processing customer service inquiries, we process the followingpersonal data: last name, first name, email address, and ticket contents.

The aforementioned data is processed on the basis of Art. 6(1) (b) GDPR to fulfill contractual measures and on the basis of Art. 6 (1) (f)GDPR to safeguard our legitimate interest in providing a structured andtraceable system for the transmission of inquiries from interested parties.

Personal data processed within Jira will be deleted afterthe purpose has been fulfilled, unless there are legal retention obligations.Further information about Atlassian's processing of your personal data can befound here: https://www.atlassian.com/legal/privacy-policy

Information about the use of cookies

• Usercentrics

We use the Usercentrics consent management serviceprovided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This tool enables us to obtain and manage website users' consent to dataprocessing.

The processing is carried out on the basis of Art. 6 (1)(c) GDPR (fulfilment of a legal obligation) and Art. 6 (1) (f) GDPR(legitimate interest in legally compliant consent management).

The following data is processed:

Date and time of access
Browser information
Device information
Approximate location data (country, region)
Cookie preferences
URL of the visited page

The functionality of the website cannot be guaranteedwithout this processing. Usercentrics is the recipient of this data and acts asour processor . Processing takes place within the European Union . Thedata is stored for 12 months and then automatically deleted. You canchange or revoke your consent at any time using our cookie settings tool. Further information on data processing by Usercentrics can be found at: https://usercentrics.com/de/datenschutzerklaerung/

What personal data is collected and to what extent is it processed?

We integrate and use cookies on various pages to enablecertain functions of our website and to integrate external web services.So-called “cookies” are small text files that your browser can store on youraccess device. These text files contain a characteristic string of charactersthat uniquely identifies the browser when you return to our website. Theprocess of saving a cookie file is also referred to as “setting a cookie”.Cookies can be set both by the website itself and by external web services. Thecookies are set by our website or the external web services to maintain thefull functionality of our website, to improve user-friendliness or to pursuethe purpose specified with your consent. Cookie technology also enables us torecognize individual visitors using pseudonyms, e.g. a unique or random ID, sothat we can offer more personalized services. Details are provided in the tablebelow.

Legal basis for the processing of personal data

If the cookies are processed on the basis of consent inaccordance with Art. 6 (1) (a) GDPR, this consent also counts as consent withinthe meaning of Section 25 (1) TTDSG for the setting of the cookie on the user'sdevice. If another legal basis is stated under the GDPR (e.g. for theperformance of a contract or to comply with statutory obligations), the storageor setting takes place on the basis of an exception in accordance with Section25 (2) TTDSG. This applies “if the sole purpose of storing information in theend user's terminal equipment or the sole purpose of accessing informationalready stored in the end user's terminal equipment is to carry out thetransmission of a message over a public telecommunications network” or “if thestorage of information in the end user's terminal equipment or access toinformation already stored in the end user's terminal equipment is absolutelynecessary for the provider of a telemedia service to be able to provide atelemedia service expressly requested by the user”. The applicable legal basisis set out in the cookie table listed later in this section.

Purpose of data processing

Cookies are set by our website or external web services tomaintain the full functionality of our website, improve user experience, or topursue the purpose specified with your consent. Cookie technology also allowsus to recognize individual visitors using pseudonyms, such as a unique orrandom ID, so we can offer more personalized services. Details are listed inthe table below.

Duration of storage

Our cookies are stored until they are deleted in yourbrowser or, in the case of session cookies, until the session expires. Detailsare listed in the table below.

Possibility of objection and removal

You can set your browser to generally prevent cookies frombeing set. You can then decide on a case-by-case basis whether to acceptcookies or to accept cookies in general. Cookies can be used for variouspurposes, e.g. to recognize that your access device is already connected to ourwebsite (permanent cookies) or to save recently viewed offers (sessioncookies). If you have expressly given us permission to process your personaldata, you can revoke this consent at any time. Please note that this doesnot affect the legality of the processing carried out on the basis of theconsent until the revocation.

Data security and data protection, communication viaemail

Your personal data is protected by technical andorganizational measures during collection, storage, and processing to ensurethat it is not accessible to third parties. For unencrypted communication viaemail, we cannot guarantee complete data security during transmission to our ITsystems. Therefore, we recommend encrypted communication or sending informationwith a high level of confidentiality by post.

Right to information and requests for correction –Deletion and restriction of data – Revocation of consent – Right of objection

Right to information

You have the right to request confirmation as to whether weprocess your personal data. If so, you have the right to information about theinformation specified in Art. 15 (1) GDPR, provided that the rights andfreedoms of others are not adversely affected (see Art. 15 (4) GDPR). We willalso be happy to provide you with a copy of the data.

Right to rectification

According to Art. 16 GDPR, you have the right to have anypersonal data we have stored about you (such as address, name, etc.) correctedat any time. You can also request that the data we have stored be completed atany time. The appropriate adjustment will be made immediately.

Right to erasure

According to Art. 17 (1) GDPR, you have the right to have usdelete the personal data collected about you if

the data is either no longer needed;
due to the withdrawal of your consent, the legal basis for processing no longer applies;
you have objected to the processing and there are no legitimate grounds for the processing;
your data is processed unlawfully;
a legal obligation requires this or a collection has taken place in accordance with Art. 8 (1) GDPR.

According to Art. 17 (3) GDPR, this right does not exist if

processing is necessary for the exercise of the right to freedom of expression and information;
Your data has been collected on the basis of a legal obligation;
processing is necessary for reasons of public interest;
the data is necessary to assert, exercise or defend legal claims.

Right to restriction of processing

According to Art. 18 Para. 1 GDPR, you have the right torequest the restriction of the processing of your personal data in individualcases.

This is the case when

you contest the accuracy of the personal data;
the processing is unlawful and you do not consent to erasure;
the data are no longer required for the purpose of processing, but the data collected serve to assert, exercise or defend legal claims;
an objection to the processing has been lodged pursuant to Art. 21 (1) GDPR and it is still unclear which interests prevail.

Right of withdrawal

If you have given us your express consent to process yourpersonal data (Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR), you can revoke thisconsent at any time. Please note that this does not affect the legality of theprocessing carried out on the basis of your consent until the revocation.

Right to object

According to Art. 21 GDPR, you have the right to object atany time to the processing of personal data concerning you that was collectedbased on Art. 6 (1) (f) (within the scope of a legitimate interest). You onlyhave this right if there are special circumstances that speak against thestorage and processing.

How do you exercise your rights?

You can exercise your rights at any time by contacting ususing the contact details below:

simple systemGmbH
Haberlandstraße 55
81241 Munich
Germany
Email: info@simplesystem.com
Tel.: +49 89 9982987-00
Fax: +49 89 9982987-28

Right to data portability

According to Art. 20 GDPR, you have the right to have yourpersonal data transferred to us. We will provide this data in a structured,common, and machine-readable format. The data can be sent either to you or to acontroller designated by you.

We will provide you with the following data upon request inaccordance with Art. 20 (1) GDPR:

Data collected on the basis of express consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR;
Data that we have received from you in accordance with Art. 6 (1) (b) GDPR within the framework of existing contracts;
Data that has been processed as part of an automated procedure.

We will transfer your personal data directly to a controllerof your choice, provided this is technically feasible. Please note that, inaccordance with Art. 20 (4) GDPR, we are not permitted to transfer data thatinterferes with the freedoms and rights of other individuals.

Information according to Art. 13 and 14 GDPR

In order to comply with the principle of fair andtransparent processing of personal data, we inform applicants, customers andsuppliers about the processing of the personal data collected below:

You can download the information for applicants as a PDFfile here

.You can download the information for customers and suppliers as a PDF file here .

Right to lodge a complaint with the supervisory authoritypursuant to Art. 77 (1) GDPR

If you suspect that your data is being processed unlawfullyon our website, you can of course seek judicial clarification of the issue atany time. Furthermore, you have every other legal option open to you.Irrespective of this, you have the option of contacting a supervisory authorityin accordance with Art. 77 (1) GDPR. You have the right to lodge a complaint inaccordance with Art. 77 GDPR in the EU member state of your residence, place ofwork and/or the place of the alleged infringement, i.e. you can choose thesupervisory authority you want to contact from the locations listed above. Thesupervisory authority to which the complaint was submitted will then inform youof the status and outcome of your submission, including the possibility ofjudicial remedy in accordance with Art. 78 GDPR.