Privacy policy

General information

The following information gives a brief overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. Detailed information can be found in the privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?

The website operator is responsible for processing data on this website. Their contact details are provided in the “Information about the controller” section of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us, for example when you contact us through the contact form, by email or by telephone.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data, such as your internet browser, operating system or the time you access a page. This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website works properly. Where contracts can be concluded or initiated through the website, the data you provide is also processed for quotations, orders or other enquiries relating to contracts.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request its rectification or erasure. If you have consented to data processing, you can withdraw that consent at any time with effect for the future. In certain circumstances, you also have the right to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about these rights or any other questions concerning data protection.

We host the content of our website with the following provider:

External hosting

This website is hosted externally. Personal data collected on this website may be processed on the hosting provider’s servers. This includes, in particular, IP addresses, server log data, metadata and communications data, as well as data from contact enquiries.

Hosting is carried out to take steps prior to entering into a contract and to perform contracts (Article 6(1)(b) GDPR), and in our legitimate interest in providing our online services securely, quickly and efficiently (Article 6(1)(f) GDPR). Our hosting provider processes data only to the extent necessary to fulfil its contractual obligations and in accordance with our instructions.

We use the following hosting provider:

netcup GmbH
Emmy-Noether-Straße 10
76131 Karlsruhe
Germany

Processing on our behalf

When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement.

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

Various personal data is collected when you use this website. Personal data means data that can be used to identify you personally. This privacy policy explains what data we collect, what we use it for, and how and for what purposes it is processed.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is:

Simplarix GmbH
Voßhorst 9
45699 Herten
Germany

Telephone: +49 (0) 2366 4079657
Email: contact@simplarix.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Storage period

Unless a more specific storage period is stated in this privacy policy, we retain your personal data until the purpose for processing it no longer applies. If you make a valid request for erasure or withdraw your consent to processing, your data will be deleted unless we have other legally permissible grounds for retaining it, such as retention periods under tax or commercial law. In that case, the data will be deleted once those grounds no longer apply.

General information about the legal bases for processing data on this website

Where you have consented to processing, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of data within the meaning of Article 9(1) GDPR are processed, Article 9(2)(a) GDPR. Where you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. Where you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Consent may be withdrawn at any time.

Where your data is necessary to perform a contract or to take steps prior to entering into a contract, we process it on the basis of Article 6(1)(b) GDPR. We also process your data where necessary to comply with a legal obligation, on the basis of Article 6(1)(c) GDPR. Processing may also be based on our legitimate interests under Article 6(1)(f) GDPR. The following sections explain the legal bases applicable to individual processing activities.

Recipients of personal data

We work with various external parties in the course of our business. In some cases, this requires us to disclose personal data to them. We disclose personal data to external parties only where necessary to perform a contract, where we are legally obliged to do so, for example when disclosing data to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. Where processing is carried out jointly, a joint controller agreement is concluded.

Withdrawing your consent to data processing

Many processing activities are possible only with your express consent. You may withdraw consent you have already given at any time. This does not affect the lawfulness of processing carried out before you withdrew it.

Right to object to processing in specific circumstances and to direct marketing (Article 21 GDPR)

IF DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING ACTIVITY IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT RELATES TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of a GDPR infringement, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, or to have it provided to a third party. Where you request direct transfer to another controller, this will take place only where technically feasible.

Access, rectification and erasure

Within the limits of applicable law, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing. Where applicable, you also have the right to rectification or erasure. You can contact us at any time about these rights or other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You can contact us at any time to do so. This right applies in the following circumstances:

• If you dispute the accuracy of your personal data held by us, we generally need time to verify it. You have the right to request restriction of processing for the duration of that verification.
• If your personal data has been or is being processed unlawfully, you can request restriction of processing instead of erasure.
• If we no longer need your personal data, but you need it to establish, exercise or defend legal claims, you can request restriction of processing instead of erasure.
• If you have objected under Article 21(1) GDPR, your interests must be balanced against ours. You have the right to request restriction of processing until it has been established whose interests prevail.

Where processing has been restricted, your personal data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL / TLS encryption

This website uses SSL / TLS encryption for security reasons and to protect the transmission of confidential information, such as orders or enquiries you send to us as the website operator. You can recognise an encrypted connection when the browser address changes from “http://” to “https://” and a padlock symbol appears in the address bar.

When SSL / TLS encryption is enabled, the data you send to us cannot be read by third parties.

SiteFoundry visitor analytics

This website uses the integrated SiteFoundry visitor analytics service if you consent through the privacy settings. The analysis helps us understand which content is accessed. You can change your choice at any time through “Privacy settings” in the footer; your choice is stored in your browser. No external analytics or marketing services are integrated. Fonts and images are served locally.

Contact form

When you send us an enquiry through the contact form, we process your name, email address and message to respond to your enquiry. Your message is stored in the SiteFoundry inbox and forwarded by email to contact@simplarix.com. We do not ask for a telephone number.

Before submission, we ask for your consent to process your information for the purpose of responding to your enquiry. The retention period in the SiteFoundry inbox is 180 days; the general information about storage periods and your rights applies in addition.