Background Lightning Beam

Privacy Notice for the Website

This privacy notice explains how we process personal data when you visit our website or use the functions offered there. Personal data means any information relating to an identified or identifiable natural person.

1.   Name and contact details of the controller

Simtec Systems GmbH
Hermann-Blenk-Str. 52
38108 Braunschweig
Germany
Phone: +49 5307 2039 400
Email: info@simtec.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2.   Contact details of the external Data Protection Officer

We have appointed Kämmer Consulting GmbH to perform the duties of our external Data Protection Officer. You can contact the Data Protection Officer at:

Kämmer Consulting GmbH
Nordstraße 11
38106 Braunschweig
Germany
Phone: +49 531 702 249 – 0
Email: dsb-team(at)kaemmer-consulting.de

3.   Provision, use and security of the website

We provide our website to give information about our company, products and services and to enable secure communication. When you access the website, your browser transmits technically necessary data to the web server. These data are processed in server log files.

Data processed:

  • IP address of the accessing device

  • date and time of the server request

  • page or file accessed and volume of data transferred

  • referrer URL

  • browser type and browser version

  • operating system and hostname of the accessing computer

  • status messages and security-related events

Purposes and legal basis:
The processing serves to provide the website in a technically error-free, stable and secure manner, to detect and defend against attacks and to analyse errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the functionality, security and user-friendly presentation of our online services.

Storage period:
Log data are deleted as soon as they are no longer required for the purposes stated above. Data needed to investigate a specific security incident may be stored until the investigation has been completed and, where applicable, for the establishment, exercise or defence of legal claims. Statutory retention obligations remain unaffected.

4.   External hosting

The content of this website is hosted by an external service provider. In this context, IP addresses, website visits, log data, metadata and communication data, as well as data from contact and contract enquiries, may in particular be processed on the hosting provider’s systems.

Mobil Macher GmbH
Salzdahlumer Str. 196
38126 Braunschweig
Germany

Purposes and legal bases:
Hosting is provided to make our online services available securely, quickly and efficiently on the basis of Article 6(1)(f) GDPR. Where hosting serves to take steps prior to entering into a contract or to perform a contract, Article 6(1)(b) GDPR also applies.

Processing on behalf of the controller and storage period:
We have entered into a data processing agreement with the hosting provider pursuant to Article 28 GDPR. The hosting provider processes personal data in accordance with our instructions and only to the extent necessary to provide its services. The storage period is determined by the purposes described above and the deletion periods agreed with the hosting provider.

5.   AMP Content Delivery Network

To provide our website more quickly and in a technically optimised manner, we use Accelerated Mobile Pages (AMP) technology and an AMP Content Delivery Network (AMP CDN). Services at cdn.ampproject.org are provided by Google. When AMP resources are retrieved, your browser establishes a connection to Google’s servers. In particular, the IP address, date and time of retrieval, the requested resource, the previously visited page and information about the browser, operating system and device used may be processed. AMP versions of our pages may also be stored and delivered via the Google AMP Cache.

Purpose and legal basis:
The purpose is the fast, stable and secure delivery of the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the performance and availability of our online services.

Recipients and transfers to third countries:
Where the Google AMP Cache is used, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, may be a recipient. Further processing by Google LLC in the United States is possible. For transfers to certified US companies, the European Commission’s adequacy decision concerning the EU-US Data Privacy Framework may be relied upon; otherwise, appropriate safeguards, in particular standard contractual clauses, are required. Information: https://policies.google.com/privacy?hl=en and https://www.dataprivacyframework.gov/participant/5780.

Storage period:
The storage period is determined by the technical configuration and the requirements of the respective cache provider. We store our own copies of retrieval data only as part of the server log files described above.

6.   Contact form and contact by email or telephone

If you contact us using a contact form, by email or by telephone, we process the data you provide. These may include, in particular, your name, contact details, company, the content and time of your enquiry and any other information you provide voluntarily.

Purposes and legal bases:
The processing serves to handle and respond to your enquiry. Where your enquiry relates to taking steps prior to entering into a contract or to performing a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in appropriate and efficient communication pursuant to Article 6(1)(f) GDPR. Where consent is requested, the legal basis is Article 6(1)(a) GDPR.

Storage period and recipients:
We delete the data once your enquiry has been conclusively dealt with, provided that no statutory retention obligations or other legitimate grounds for storage prevent deletion. Data are disclosed only where this is necessary to process the enquiry or is permitted by law. Where necessary, IT service providers are engaged as processors.

7.   Cookies and similar technologies

Our website does not use optional cookies or cookies for analytics or marketing purposes, nor does it use comparable technologies requiring consent. Therefore, we do not use a consent banner. Where strictly necessary cookies or comparable technologies are used, they serve exclusively to provide the website functions requested by you in a secure and functional manner.

Protection of terminal equipment under Section 25 TDDDG:
Consent is not required pursuant to Section 25(2) no. 2 TDDDG for access to information on your terminal equipment that is strictly technically necessary, provided that the access is necessary to provide a digital service expressly requested by you.

Subsequent processing of personal data:
The subsequent processing of personal data in connection with strictly necessary technologies is generally based on Article 6(1)(f) GDPR; our legitimate interest lies in the secure and functional provision of the website. Where a function is necessary for the performance of a contract, Article 6(1)(b) GDPR may apply.

8.   Website analytics using WP Statistics

We use the WP Statistics analytics tool provided by Veronalabs, Tatari 64, 10134 Tallinn, Estonia, on our website. WP Statistics is used to analyse website use statistically and helps us improve our online services. In particular, pages accessed, referrers, browser type and version, operating system, approximate geographical origin, search engine used, and the time and volume of page views are processed. The IP address is truncated or anonymised before being stored.

Purpose and legal basis:
The purpose is to analyse website use in aggregate in order to improve functionality, stability and content. WP Statistics is used without cookies or comparable identifiers. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in statistical analysis and the needs-based optimisation of our website.

Recipients and storage period:
The statistical data are stored exclusively in the WordPress database on the web server we use. Visitor data collected by WP Statistics are not transmitted to Veronalabs or other third parties. Raw data that could be linked to an individual are deleted or anonymised as soon as they are no longer required for statistical analysis. Further information: https://wp-statistics.com/resources/wp-statistics-data-privacy/.

9.   Applications and external Jobcluster portal

Our website contains a link to an external application portal operated by Jobcluster Deutschland GmbH, Fuldaer Straße 13, 36124 Eichenzell. The application portal is not embedded in our website. Only when you follow the relevant link do you leave our website and your browser establishes a direct connection to Jobcluster. Merely displaying our website does not transmit any application data to Jobcluster.

If you submit an application through the Jobcluster portal, we process the data you provide. These may include, in particular, identification and contact details, communication data, your CV, qualifications and professional experience, certificates and references, and any other information you provide voluntarily. When you access the portal, technically necessary connection data such as your IP address, the time of access and browser and device information are also processed.

Purpose and legal basis:
The processing is carried out to decide whether to establish an employment relationship on the basis of Section 26(1) BDSG. Where consent is given for an additional purpose, the legal basis is Section 26(2) BDSG in conjunction with Article 6(1)(a) GDPR. If your application is successful, the data will be processed further for the administration of the employment relationship. Access is limited to persons involved in the application process. Jobcluster processes application data for us as a service provider on the basis of an agreement pursuant to Article 28 GDPR.

Storage period:
If no employment relationship is established, we generally delete the application data six months after the application process has ended, unless consent, a statutory obligation or a specific legal dispute justifies a longer storage period. If an employment relationship is established, the data required for this purpose are transferred to the personnel file. Further information about data protection at Jobcluster is available at https://www.jobcluster.de/datenschutzhinweise/.

10.   Recipients and processors

We disclose personal data only where this is necessary for the performance of a contract, where there is a statutory obligation, where disclosure is justified by an overriding legitimate interest, where you have given your consent or where another legal basis permits the disclosure. Processors are engaged on the basis of an agreement pursuant to Article 28 GDPR. Where we act as joint controllers, we enter into an arrangement pursuant to Article 26 GDPR. Specific recipients are identified in the relevant sections; otherwise, recipients may in particular include hosting, IT, communications and shipping service providers.

11.   Transfers of data outside the EU and EEA

Where personal data are transferred to a third country outside the European Union or the European Economic Area, this takes place only in accordance with the requirements of Articles 44 et seq. GDPR. Where the European Commission has adopted an adequacy decision, the transfer may be based on that decision. For certified US companies, this applies under the EU-US Data Privacy Framework. In the absence of an adequacy decision, we use appropriate safeguards, in particular the European Commission’s standard contractual clauses, and assess supplementary protective measures. Derogations under Article 49 GDPR are used only in the individual cases provided for by law.

12.   Storage period

Unless a more specific period is stated in this notice, we store personal data only for as long as necessary for the relevant purpose. Following a valid request for erasure or the withdrawal of consent, we delete the data unless overriding statutory retention obligations or other permissible grounds for storage prevent deletion. The data are deleted once those grounds no longer apply.

13.   Your rights

Subject to the statutory requirements, you have the following rights in particular:

  • access to your personal data pursuant to Article 15 GDPR

  • rectification of inaccurate data pursuant to Article 16 GDPR

  • erasure pursuant to Article 17 GDPR

  • restriction of processing pursuant to Article 18 GDPR

  • data portability pursuant to Article 20 GDPR

  • objection to processing based on Article 6(1)(e) or (f) GDPR pursuant to Article 21(1) GDPR

  • objection to direct marketing at any time pursuant to Article 21(2) GDPR

  • withdrawal of consent at any time with effect for the future pursuant to Article 7(3) GDPR

  • the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR

Right to object under Article 21 GDPR
Where processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You may object to direct marketing at any time without giving reasons.

Right to lodge a complaint
You may in particular contact the supervisory authority responsible for us: The State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany, phone: +49 511 120-4500, email: poststelle@lfd.niedersachsen.de. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

14.   Requirement to provide data and automated decision-making

Mandatory fields in forms are required in order to process the respective enquiry or to take steps prior to entering into a contract. Without this information, we may be unable to provide the requested service. Information provided voluntarily is treated as such. No decision based solely on automated processing that produces legal effects or similarly significantly affects you within the meaning of Article 22 GDPR takes place in connection with the website.

15.   SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons. You can generally identify an encrypted connection by the change from ‘http://’ to ‘https://’ and the padlock symbol in your browser’s address bar. When encryption is active, content transmitted cannot readily be read by third parties.

16.   Changes to this privacy notice

We update this privacy notice when the procedures used, the legal situation or regulatory requirements change. The version published on the website at the relevant time applies. Merely using the website does not constitute consent to processing activities that require consent.