Privacy policy

1. Data protection at a glance

General information

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information please see the further sections of this policy.

Who is responsible for collecting the data?

Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the controller”.

How do we collect your data?

On the one hand your data is collected because you provide it to us – through one of our forms, by email or on the phone.

On the other hand, when pages are called up our web server automatically records technical data (such as browser, operating system and the time of access). This happens automatically as soon as you enter the website and is necessary for operation.

What do we use your data for?

The technical data serves solely to provide the website without errors and to secure its operation. The details you give in forms, emails or phone calls we use to deal with your request.

Your user behaviour is only analysed with your consent. If you agree, we use Google Analytics to measure which pages are called up (section 5). Without consent this service is not loaded.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given consent to data processing, you can withdraw it at any time with effect for the future. In addition you have the right, in certain circumstances, to request the restriction of processing. You also have a right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about this and about any other questions on data protection.

2. Hosting

We host this website on our own servers. Operation and maintenance are carried out by:

Menke Werbe GmbH
Am alten Güterbahnhof 7-11
49716 Meppen, Germany

The servers are located in Germany. No personal data is transferred to third countries as part of the hosting.

The basis for processing is Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website reliably and securely.

Processing on behalf

A data processing agreement exists with the service provider named. This is a contract required by data protection law which ensures that the personal data of our website visitors is processed only on our instructions and in compliance with the GDPR.

3. General notes and mandatory information

Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection rules and this privacy policy.

Please note that data transmission over the internet – for example when communicating by email – can have security gaps. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller for data processing on this website is:

Kursimple GmbH
Am alten Güterbahnhof 7-11
49716 Meppen, Germany

Phone: 05931 99099-10
Email: info@kursimple.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose of the processing no longer applies. If you make a legitimate request for deletion or withdraw consent, your data will be deleted unless we have other legally permissible grounds for storing it – such as retention periods under tax or commercial law. In the latter case deletion takes place once those grounds cease to apply.

Legal bases for data processing

Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. Consent can be withdrawn at any time. Where your data is necessary for the performance of a contract or for pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. Where it is necessary to fulfil a legal obligation, this takes place on the basis of Art. 6(1)(c) GDPR. Processing may further be based on our legitimate interest under Art. 6(1)(f) GDPR. We state the applicable legal basis in the sections below.

Recipients of personal data

We only pass personal data to external bodies where this is necessary to perform a contract, where we are legally obliged to do so, where we have a legitimate interest in doing so under Art. 6(1)(f) GDPR, or where another legal basis permits it. When using processors we only pass on personal data on the basis of a valid data processing agreement.

Withdrawing your consent to data processing

Many data processing operations are only possible with your explicit consent. You can withdraw consent already given at any time. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

IF THE PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS ON WHICH ANY PROCESSING RESTS CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING; THIS ALSO APPLIES TO PROFILING IN SO FAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged breach. This right exists without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer to another controller, this will only take place where it is technically feasible.

Information, correction and deletion

Within the applicable statutory provisions you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing, and where applicable a right to correction or deletion of that data. You can contact us at any time about this and about further questions.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us about this at any time. The right to restriction exists in the following cases:

• If you dispute the accuracy of the personal data we hold about you, we generally need time to verify this. For the duration of that check you have the right to request restriction.
• If the processing of your personal data was or is unlawful, you may request restriction of the processing instead of deletion.
• If we no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request restriction instead of deletion.
• If you have lodged an objection under Art. 21(1) GDPR, a balance has to be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request restriction.

If you have restricted the processing of your personal data, that data may – apart from being stored – only be processed with your consent, or to assert, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL / TLS encryption. You can recognise an encrypted connection by the browser address line changing from “http://” to “https://” and by the padlock symbol in your browser bar. When encryption is active, the data you transmit to us cannot be read by third parties.

Objection to advertising emails

We hereby object to the use of contact details published as part of the legal notice obligation for sending advertising and information material that has not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising.

4. Data collection on this website

Cookies and consent

Without your consent this website sets no cookies and loads no content from third-party servers. The fonts used are also on our own server; in particular there is no connection to Google Fonts. Maps, videos and social network buttons are not embedded.

On your first visit we ask you, through a notice at the bottom of the screen, whether we may measure usage. Only when you choose “I agree” is Google Analytics loaded and cookies set (section 5). If you choose “only essential”, nothing is loaded and nothing is stored; the website works just the same. We do not embed advertising or social media pixels.

The website remembers your decision in your browser's local storage under the key ks-consent, together with the time. You can change it at any time – through “cookie settings” in the footer of every page.

Local storage in the browser

On the pricing page you can switch between monthly and yearly billing. The website stores your choice under the key ks-billing in your browser's local storage so that it is kept for your next visit. This is not a cookie; the value is not transmitted to us and allows no conclusions about you as a person. You can delete it at any time through your browser settings. The website uses the same storage for your decision about measurement (ks-consent, see above).

Server log files

Our web server automatically collects and stores information in what are known as server log files, which your browser transmits automatically. These are:

• browser type and version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources. Collection takes place on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and the security of our website.

Forms on this website

This website contains three forms through which you can reach us: the demo request, the contact form and the webinar registration. If you submit one of them, the details from the form – depending on the form, name, organisation, email address, phone number, industry, size, preferred date and your message – are transmitted to us by email and stored by us in order to deal with your request and in case of follow-up questions. We do not pass this data on without your consent.

Processing takes place on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract, and on the basis of your consent under Art. 6(1)(a) GDPR, which we obtain explicitly in the form. Consent can be withdrawn at any time.

The data remains with us until you ask us to delete it, withdraw your consent, or the purpose of storage no longer applies – for instance once your request has been dealt with. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Protection against automated requests

To prevent mass submissions by programs we use no captcha and no external service. Instead the form contains an extra field invisible to humans, and it is checked whether a plausible amount of time has passed between opening and submitting.

In addition we limit the number of requests per sender to five per hour. For this the server stores a cryptographic hash (SHA-256) of your IP address together with the time of the request in a temporary file. The IP address itself is not stored, and while the hash shows the time, it does not readily identify you. Entries older than one hour are discarded. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our systems against abusive automated use.

The self-check “Is Kursimple right for me?”

The self-check runs entirely in your browser. Your answers are not transmitted to us and not stored. They do not leave your device.

Enquiries by email or phone

If you contact us by email or phone, your enquiry including all personal data arising from it is stored and processed by us for the purpose of dealing with your request. We do not pass this data on without your consent.

Processing takes place on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).

The data remains with us until you ask us to delete it, withdraw your consent, or the purpose of storage no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Test system and course management

If you create a free test system through this website, you leave kursimple.de and arrive at test.kursimple.de. The privacy notices of the test system apply to the processing there.

5. Analytics with Google Analytics

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service is only loaded if you have consented beforehand.

Purpose and scope

We want to know which pages are read and how visitors find their way to us, in order to improve our content. For this Google collects, among other things, the pages called up and the time spent, device, browser and operating system, the previously visited page and an approximate location derived from the IP address. Google states that it does not store IP addresses in Google Analytics 4.

Cookies are stored on your device in the process, in particular _ga and _ga_<measurement ID> each with a lifetime of two years. They contain a random identifier by which returning visits are recognised. There is no merging with other data we hold about you.

Legal basis and withdrawal

The storing of cookies and the reading of information from your device take place exclusively on the basis of your consent under § 25(1) of the German Telecommunications Digital Services Data Protection Act; the subsequent processing of your data is based on Art. 6(1)(a) GDPR. Consent is voluntary and not required in order to use this website. You can withdraw it at any time with effect for the future – through “cookie settings” in the footer of every page. The lawfulness of the processing carried out until then remains unaffected.

Transfer to the USA

A transfer of data to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses under Art. 46(2)(c) GDPR apply. This cannot guarantee a level of protection equivalent to the European one in every respect; in particular, access by US authorities cannot be entirely excluded.

Storage period and processing on behalf

According to our setting in the property, Google retains the usage data for 14 months ; after that it is deleted there. The cookies named expire after two years. If you withdraw your consent, the website additionally deletes them itself; independently of that you can remove them in your browser at any time.

Google processes the data on our behalf. The basis for this is Google's data processing terms, which we have accepted in our Google account.

Further information on the handling of user data can be found in Google's privacy policy: policies.google.com/privacy.