Privacy Policy

Responsible Party

SiMiPa GmbH
Wittbräucker Str. 566
44267 Dortmund-Hörde
E-Mail: info@e-rechnungs-info.de

Purpose of Processing

This website provides information and a self-check tool regarding electronic invoicing. If you use the self-check or contact form, we process the information provided for evaluation and contacting purposes. Legal basis is Art. 6 para. 1 lit. a GDPR (consent) for voluntary information, Art. 6 para. 1 lit. b GDPR (contract initiation) for contacting purposes.

SSL Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the browser address line changing from "http://" to "https://" and the lock icon in your browser bar. When SSL encryption is active, data you transmit to us cannot be read by third parties.

Cookies

This website does not use any third-party cookies. The Matomo web analytics software (see below) is configured not to set any cookies. Only technically necessary session information is processed, which does not require permanent storage on your device.

Matomo (Web Analytics)

This website uses Matomo, a self-hosted open-source software for statistical analysis of visitor access. Matomo is configured not to set any cookies. Anonymized data is collected including: IP address (truncated), visited pages, time on site, browser used, and screen resolution. The data is not shared with third parties and does not leave the server (matomo.simipa.com). Legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in website optimization). You can object to data collection by configuring your browser to prevent web analytics (e.g. enable Do-Not-Track).

Email Service (Resend)

We use Resend (Resend Inc., 3500 South DuPont Highway, Dover, DE 19901, USA) to send confirmation emails. Your email address is transmitted encrypted. Resend processes data exclusively on our behalf. Resend is certified under the EU-US Data Privacy Framework (DPF). A Data Processing Agreement (DPA) is in place. Legal basis is Art. 6 para. 1 lit. b GDPR (contract initiation / pre-contractual measures).

Airtable

Self-check results and contact inquiries are stored in Airtable (Airtable Inc., San Francisco, USA). Specifically stored data includes wizard answers, result category, contact information, and message text. Airtable is certified under the EU-US Data Privacy Framework (DPF). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR is in place with Airtable.

Server Log Files

Our hosting provider Hetzner collects technical access data (server log files) on each access to the website. This includes: IP address, date and time of access, name of the page accessed, amount of data transferred, browser type and version, operating system, previously visited page (referrer). This data is processed for technical reasons and to ensure the operation of our server. Legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in security and operational functionality of the website). Log files are automatically deleted after 7 days.

Hosting

This website is operated on a dedicated server at Hetzner (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany). The server is secured by Caddy as a reverse proxy, providing automatic SSL encryption (Let's Encrypt). Technical access data (IP address, timestamps, requested pages) may be processed.

Third-Country Transfer

Some of the service providers we use (Airtable Inc., Resend Inc.) are based in the United States. For these service providers, an adequate level of data protection is ensured through the EU-US Data Privacy Framework (DPF). Both companies are certified under the DPF. Additionally, Data Processing Agreements (DPA) pursuant to Art. 28 GDPR have been concluded.

Storage Duration

Data stored in Airtable is automatically deleted after 12 months without activity. Upon request, your data can be deleted earlier at any time – please contact us via email. Data transmission for email delivery is encrypted.

Data Processing Agreements

Data Processing Agreements (DPA) pursuant to Art. 28 GDPR have been concluded with all service providers who process personal data on our behalf (Hetzner, Airtable, Resend).

Withdrawal of Your Consent

If you have given us consent to process your personal data, you can withdraw this consent at any time with effect for the future. The lawfulness of data processing carried out up to the withdrawal remains unaffected. Contact us via email for this purpose.

Your Rights

You have the right to access, correct, delete, restrict processing, data portability, and lodge a complaint with a supervisory authority at any time. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia. Contact: info@e-rechnungs-info.de.