We are very pleased that you have visited our website. Data protection is of a particularly high priority for us. The use of our website is possible without any indication of personal data; however, if a data subject wants to use special services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain consent from the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the applicable country-specific data protection regulations. By means of this data protection declaration, we would like to inform you and the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights by means of this data protection declaration.
As the data controller, Simplessus GmbH has implemented numerous technical and organizational measures (TOM) to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions can generally have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us via alternative means, for example by telephone.
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is:
Simplessus GmbH
Dorfstr. 5a
23818 Neuengörs
Germany
Management/Representation:
Björn Kahle
Contact:
Telephone: +49 40 – 209 311 40
Fax: +49 40 – 209 311 499
Email: info@simplessus.com
Our websites collect a series of general data and information each time the website is accessed by a data subject or an automated system. This general data and information is stored in the server's log files.
For example, the following may be recorded:
(1) browser types and versions used,
(2) the operating system used by the accessing system,
(3) the website from which an accessing system reaches our website (so-called referrers),
(4) the sub-websites that are accessed via an accessing system on our website,
(5) the date and time of access to the website,
(6) an Internet protocol address (IP address),
(7) the Internet service provider of the accessing system and
(8) other similar data and information that serve to avert dangers in the event of attacks on our information technology systems.
When using this general data and information, no conclusions are drawn about the person concerned.
This information is rather required in order to
(1) correctly deliver the contents of our website and to present,
(2) to optimize the content of our website and the advertising for it,
(3) to ensure the long-term functionality of our information technology systems and the technology of our website and
(4) to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack.
These anonymously collected data and information are therefore evaluated by the controller both statistically and with the aim of increasing data protection and data security in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
This website is hosted by an external service provider (hoster).
Personal data that is collected on this website is stored on the hoster's servers. This can primarily be data. IP addresses, contact requests, meta and communication data, website access and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the legitimate interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR).
We have concluded a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige them to protect our customers' data and not to pass it on to third parties.
Services and service providers used here:
HostEurope: web hosting and infrastructure services; service provider: Host Europe GmbH, c/o WeWork, Friesenplatz 4, 50672 Köln; Data protection declaration: https://www.hosteurope.de/AGB/Datenschutzerklaerung/;
Cloudflare: Content Delivery Network (CDN); Service provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; Privacy Policy: https://www.cloudflare.com/privacypolicy/;
Art. 6 Para. 1 lit. a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of any other service or consideration, the processing is based on Art. 6 Para. 1 lit. b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of enquiries about our products or services. If we are subject to a legal obligation which requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Art. 6 Para. 1 lit. c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and his name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. In that case, the processing would be based on Art. 6 (1) lit. d) GDPR. Ultimately, processing operations could be based on Art. 6 (1) lit. f) GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal bases if the processing is necessary to safeguard a legitimate interest of ours or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, Sentence 2 GDPR). If the processing of personal data is based on Article 6 (1) (f) GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of all our employees and our shareholders.
The criterion for the duration of storage of personal data is the respective statutory retention period. After the deadline has expired, the corresponding data will be routinely deleted unless they are no longer required to fulfill or initiate a contract or there are no other statutory or legal requirements that prevent deletion.
The controller processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or if this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.
If the purpose of storage no longer applies or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
We would like to clarify that the provision of personal data is partly required by law (e.g. tax regulations) or may also arise from contractual or pre-contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary for a data subject to provide us with personal data in order to conclude a contract, which we must subsequently process. For example, the data subject is obliged to provide us with personal data if we conclude a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before the data subject provides personal data, the data subject must contact one of our employees. Our employee will clarify to the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of non-provision of the personal data would be.
The data subject has the option of registering on the website of the controller by providing personal data or entering personal information in input masks. This may be necessary, for example, to receive a newsletter, contact us via a contact form, register to participate in events or other similar registration options. The personal data that is transmitted to the controller is determined from the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller can arrange for the data to be passed on to one or more processors, for example a parcel service provider, who also uses the personal data exclusively for internal use that is attributable to the controller.
When you contact us (e.g. via contact form), personal data is collected. This data is stored and used solely for the purpose of answering your request and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If the purpose of your contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred that the matter in question has been conclusively clarified and provided that there are no statutory or legal retention periods that prevent deletion.
By registering on the website of the controller, the IP address assigned to the data subject by the Internet service provider (ISP), the date and time of registration are also stored. This data is stored against the background that this is the only way to prevent misuse of our services and that this data enables crimes to be solved if necessary. In this respect, the storage of this data is necessary to protect the controller. This data is generally not passed on to third parties unless there is a statutory or legal obligation to do so or the passing on serves the purpose of criminal prosecution.
The registration of the data subject with voluntary provision of personal data serves the data controller to offer the data subject content or services that, due to the nature of the matter, can only be offered to registered users or those who explicitly request this. These persons are free to change the personal data provided at any time or to have it completely deleted from the data stock of the data controller.
The data controller provides any data subject with information on request at any time about which personal data about the data subject is stored. Furthermore, the data controller corrects or deletes personal data at the request or indication of the data subject, provided that there are no statutory or legal retention periods to the contrary. All of the data controller's employees are available to the data subject as contact persons in this context.
Depending on the purpose of the personal data collection, we transmit this data, for example, to the recipients or categories of recipients named in section 17 or they are directly involved in the processing of the personal data.
If we transmit personal data to service providers outside the European Economic Area (EEA), the transmission will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contractual clauses) are in place.
As a responsible company, we refrain we do not use automated decision-making or profiling.
The controller collects and processes the personal data of applicants for the purpose of processing the application process. Processing can also be carried out electronically. This is particularly the case if an applicant sends the relevant application documents to the controller electronically, for example by email or via a web form on the website. If the controller concludes an employment contract with an applicant, the transmitted data is stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted no later than six months after the rejection decision is announced, provided that deletion does not conflict with any other legitimate interests of the controller in accordance with Art. 6 (1) (f) GDPR. Other legitimate interests in this sense include, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).
This data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration is intended to be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.
In this data protection declaration we use the following terms, among others:
a) personal data
"Personal data" is all information that relates to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
"Data subject" is any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
"Processing" is any operation or set of operations which is carried out with or without the aid of automated procedures in connection with personal data, such as the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or another form of provision, comparison or linking, restriction, erasure or destruction.
d) Restriction of processing
"Restriction of processing" means the marking of stored personal data with the aim of restricting its future processing.
e) Profiling
"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
f) Pseudonymisation
“Pseudonymisation” is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not assigned to an identified or identifiable natural person.
g) File system
“File system” is. any structured set of personal data accessible according to specific criteria, whether centralised, decentralised or organised according to functional or geographical criteria.
h) Controller or person responsible for processing
“Controller” (or “person responsible for processing”) means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
i) Processor
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
j) Recipient
“Recipient” means a natural or legal person, public authority, agency or other body to whom personal data is disclosed, whether a third party or not. However, authorities which may receive personal data in the context of a specific investigation in accordance with Union or Member State law shall not be regarded as recipients.
k) Third party
“Third party” means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or processor.
l) Consent
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes in the form of a statement or other unambiguous affirmative action by which the data subject signifies agreement to the processing of personal data concerning him or her.
m) Company
“Company” means a natural or legal person, which carries out an economic activity, regardless of its legal form, including partnerships or associations which regularly carry out an economic activity.
n) Group of companies
“Group of companies” means a group consisting of a controlling company and the companies controlled by it.
Every data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, he or she may contact an employee of the controller at any time.
b) Right to informationEvery data subject affected by the processing of personal data has the right granted by the European legislator to obtain from the controller free information about the personal data stored about him or her at any time and a copy of this information. Furthermore, the European legislator has granted the data subject the right to information about the following:
Any person affected by the processing of personal data has the right granted by the European legislator to request the immediate rectification of inaccurate personal data concerning him or her. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary statement. If a data subject wishes to exercise this right to rectification, he or she may contact an employee of the controller at any time.
d) Right to erasure (right to be forgotten)Every person affected by the processing of personal data has the right granted by the European legislator to request the controller to erase personal data concerning him or her without undue delay, provided that one of the following reasons applies and to the extent that processing is not necessary:
If one of the above reasons applies and a data subject wishes to request the erasure of personal data stored by us, he or she can contact an employee of the controller at any time. Our employee will ensure that the deletion request is complied with immediately.
If the personal data was made public by us and we as the controller pursuant to Art. 17 Para. 1 GDPR are obliged to delete the personal data, we shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, in order to inform other data controllers which process the published personal data that the data subject has requested the deletion of all links to these personal data or of copies or replications of these personal data from these other data controllers, unless processing is required. Our employee will arrange the necessary measures in individual cases.
e) Right to restriction of processingAny person affected by the processing of personal data has the right granted by the European legislator to request the controller to restrict processing if one of the following conditions is met:
If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by us, he or she may contact an employee of the controller at any time. The employee will arrange for the processing to be restricted.
f) Right to data portabilityEvery data subject shall have the right granted by the European legislator to receive the personal data concerning him or her, which was made available to a controller, in a structured, common and machine-readable format. He or she also has the right to transmit these data to another controller without hindrance from the controller to whom the personal data was made available, provided that the processing is based on consent pursuant to Art. 6 Para. 1 lit. a) GDPR or Art. 9 Para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b) GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Art. 20 Para. 1 GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and doing so does not adversely affect the rights and freedoms of others. To assert the right to data portability, the data subject may contact one of our employees at any time using the contact details provided above.
g) Right to objectAny person affected by the processing of personal data has the right granted by the European legislator to object at any time to processing of personal data concerning him or her based on Art. 6 (1) (e) or (f) GDPR, for reasons related to his or her particular situation. This also applies to profiling based on these provisions.
We will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If we process personal data in order to conduct direct advertising, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is related to such direct advertising. If the data subject objects to us processing the data for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, the data subject has the right to object to the processing of personal data concerning him or her by us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR for reasons related to his or her particular situation, unless such processing is necessary to perform a task carried out in the public interest.
To exercise the right to object, the data subject may contact one of our employees directly. Furthermore, in relation to the use of information society services, the data subject is free to exercise his or her right of objection by automated means using technical specifications, notwithstanding Directive 2002/58/EC.
h) Automated decisions in individual cases, including profilingEvery person affected by the processing of personal data has the right granted by the European legislator not to be subjected to a decision based exclusively on automated processing - including profiling - which produces legal effects concerning him or her or similarly significantly affects him or her, provided that the decision
(1) is not necessary for entering into, or the performance of, a contract between the data subject and the controller, or
(2) is permitted by Union or Member State law to which the controller is subject, and this law
contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or
(3) is made with the data subject's explicit consent.
If the decision
(1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or
(2) is made with the data subject's explicit consent,
we shall take appropriate measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise rights with regard to automated decisions, he or she may at any time to contact an employee of the controller.
i) Right to withdraw consent under data protection lawAny person affected by the processing of personal data has the right granted by the European legislator to withdraw consent to the processing of personal data at any time.
If the data subject wishes to exercise his or her right to withdraw consent, he or she may contact an employee of the controller at any time.
j) Right to lodge a complaint with the data protection supervisory authorityIf you believe that the processing of your personal data violates the GDPR, you have the option of submitting a complaint to the data protection officer mentioned above or to a data protection supervisory authority in accordance with Art. 77 GDPR.
The data protection supervisory authority responsible for us is:
The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
65021 Wiesbaden
Our data protection officer is also happy to help you using the contact details given under point 2!
Our websites use cookies. Cookies are text files that are stored and saved via an Internet browser on an information technology system (e.g. computer, notebook, smartphone, tablet).
Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a character string that allows websites and servers to be assigned to the specific Internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the person concerned from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.
By using cookies, we can provide users of this website with more user-friendly services that would not be possible without the cookie setting.
By using a cookie, the information and offers on our website can be optimized for the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to check the cookie banner every time they visit and make a selection here or, for example, enter their access data again on the website, because this is done by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in an online shop. The online shop can use a cookie to remember the items that a customer has placed in the virtual shopping cart.
The person concerned can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
As you know from our entire offering: We want to offer you the best possible service. We have therefore integrated various applications, plugins and tools (hereinafter: "tools") on our website. Depending on their function, these can, for example, optimize the loading times of our website, simplify use, help us improve our offering or increase security.
Data protection provisions on the application and use of Cloudflare We have integrated the content delivery network (CDN) Cloudflare on our website. The operating company of Cloudflare is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
Cloudflare is a service that enables loading times of websites to be reduced. This means that websites can be loaded quickly and in the best possible way even during peak loads. At the same time, Cloudflare protects its users' websites with an additional firewall and DDOS protection. In order for Cloudflare to be provided, personal data can be sent from your browser to the service. This gives the provider the opportunity to collect and store user data such as your IP address, your browser version, the browser type or the date of your site visit. Cloudflare says it processes the data in compliance with the law, including the GDPR. Third-party providers with whom Cloudflare works may only process personal data under the direction of Cloudflare and in accordance with the data protection guidelines and other confidentiality and security measures. Cloudflare never passes on personal data without our express consent. We only process personal data for as long as it is necessary. As soon as the purpose of the data processing has been fulfilled, the data is blocked and deleted in accordance with the standards of the local deletion concept, unless legal regulations prevent deletion. If a cookie is set for you, it will be automatically deleted after the storage period has expired, unless you have deleted it yourself before the end of this period.
Purposes of processing Cloudflare is suitable for us in order to be able to offer you a well-functioning experience on our website. Our website can be loaded much faster with the help of Cloudflare and at the same time Cloudflare increases our security against threats.
Legal basis In order to use the tool, we require existing or impending contractual relationships, which represent the legal basis according to Section 25 Para. 1 TDDDG and Art. 6 Para. 1 lit. b) GDPR (contractual or pre-contractual measures).
On the other hand, we have a legitimate interest in optimizing our online service and making it more secure, which is why we rely on Art. 6 Para. 1 lit. f) GDPR (legitimate interest).
You can find more information on how personal data is handled in Cloudflare's privacy policy: https://www.cloudflare.com/dede/privacypolicy/
Opportunity to object In principle, you always have the option of managing the setting, administration and deletion of cookies in your browser according to your wishes and knowledge. If, for example, you do not want this tool to set cookies and collect information about you and possibly your behavior, you can deactivate the general setting of cookies at any time in your browser settings. However, in individual cases this can lead to various functionalities (such as shopping carts) on the websites visited no longer working even if you want them to.