Privacy Policy

1. Controller

SimpleAct UG (haftungsbeschränkt)
Tannenstraße 2a, 45661 Recklinghausen, Deutschland
Email: …

2. Data categories and purposes

• Account data (name, email, role) to provide access and user administration.
• Organization and compliance data for contract performance and platform operation.
• Security and system logs (IP, request metadata) for security and troubleshooting.
• Billing and subscription metadata for invoicing and payment processing.

Legal bases: Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (security and legitimate interests), and where applicable Art. 6(1)(a) GDPR (consent).

3. Processors / sub-processors

• Hetzner Online GmbH (hosting, including self-managed PostgreSQL)
• Stripe (payment processing)
• Brevo (transactional email)

A data processing agreement (DPA) under Art. 28 GDPR is in place where required.

4. International data transfers

Where services from providers in third countries are used, transfers are based on applicable safeguards, in particular Standard Contractual Clauses (SCCs) and/or adequacy decisions.

5. Retention

• Contract-related data: for contract term and statutory retention periods.
• System/security logs: typically 30 to 90 days unless longer retention is required.
• Backups: typically 30 days, then automatic deletion.

6. Data subject rights

You have rights under Art. 15-22 GDPR (access, rectification, erasure, restriction, portability, objection) and the right to lodge a complaint with a supervisory authority.

7. Cookies and local storage

On this website (simpleact.de / simpleact.eu) we only use first-party cookies and local storage (local/session storage). We do not set any third-party cookies, ad-network cookies, or social media plugins.

• Necessary cookies/storage (technically required, Sec. 25(2) No. 2 TTDSG, Art. 6(1)(f) GDPR): language setting ("NEXT_LOCALE", 12 months), your cookie choice ("sa_cookie_consent", 12 months), dismissing already-closed banners ("sales_bar_dismissed", 12 months), and a chat assistant session ID (session storage only, cleared when the tab is closed).
• Analytics cookies/storage (only with consent, Sec. 25(1) TTDSG, Art. 6(1)(a) GDPR): first-party traffic measurement via our own server (pages visited, approximate origin from IP-based country lookup, a random visitor/session ID). Data is never shared with third parties or ad networks.

You can withdraw or change your consent at any time via the "Cookie settings" link in the footer. Your stored choice is valid for 12 months, after which you will be asked again.