Privacy notice
Translation for convenience. The German version is the binding one.
1. Controller
Kyrylo Kovtunenko
Simple Kolo
Am Himmelreich 36
98527 Suhl
Germany
Email: info@simplekolo.eu
2. Purposes and legal bases
We process personal data only as far as necessary to provide this website, keep it secure and answer enquiries. The legal bases are Art. 6 (1) (b) GDPR (pre-contractual or contractual steps) and Art. 6 (1) (f) GDPR (legitimate interest in a secure, working website).
3. Server access data
When this website is accessed, technically necessary access data are processed, in particular IP address, date and time of the request, requested resource, HTTP status and volume of data transferred. Processing serves the operation and security of the website.
Server log files are deleted automatically after 14 days. They are not combined with other data sources.
4. Contact form and email
If you use the contact form or email us, we process what you send — in particular name, email address, optional company details, project description and selected categories — solely to handle your enquiry.
Through the Digital Basics request form we additionally process the plan and payment option you chose, the name of your business and — if you provide them — your phone number, existing website and message. We use the phone number only to call you back about your request.
Form entries are sent by email to the studio inbox and are not stored in a database on this website. They are not passed on to third parties for advertising. On request, a non-disclosure agreement can be signed before confidential information is shared.
The intended contact address is info@simplekolo.eu.
We keep enquiries for up to six months after the last contact, so that we can answer follow-up questions. If a contract is concluded, the statutory retention periods for business correspondence apply (§ 257 HGB, § 147 AO).
[ Email provider for sending and for the studio inbox — set before go-live ]
5. Job applications
If you apply through the application form, we process what you send — the role you chose, name, email address, optional links to profiles or a portfolio, your message and, optionally, a CV and cover letter — solely to run the application process. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into an employment or service relationship).
The details and uploaded documents are sent by email to the studio inbox and are not stored permanently in a database or as files on the server of this website.
Please do not send special categories of personal data within the meaning of Art. 9 GDPR, such as health information, unless they are necessary for the application.
After the application process ends we delete your documents within six months at the latest. We keep them that long to be able to defend ourselves against possible claims under the German General Equal Treatment Act (§ 15 (4) AGG, § 61b ArbGG; Art. 6 (1) (f) GDPR). Longer only with your consent.
6. Hosting
This website is hosted on a virtual private server (VPS) from OVHcloud in the European Union.
The datacentre is located in Madrid, Spain.
7. Cookies and similar technologies
This website currently sets no cookies for analytics, marketing or tracking and embeds no external tracking services, advertising pixels or comparable third-party scripts.
Three cookies are technically necessary: simple-kolo-session carries a random session identifier; a second cookie, named after that identifier, holds the session itself, encrypted, with the security token for the forms and the notices shown after sending; XSRF-TOKEN protects the forms against cross-site request forgery. All three live only in your browser, nothing about them is stored on the server, and they expire after 120 minutes without activity. The website keeps your choice of colour scheme and view in your browser's local storage. The legal basis is § 25 (2) no. 2 TDDDG; no consent is required for this.
Fonts are served locally from our own server. Neither Google Fonts nor other font CDNs are loaded. Cloudflare is not used.
8. Analytics and monitoring
No external analytics or monitoring product is currently in use. There is no tracking via Google Analytics or comparable services.
9. Recipients and processors
Personal data are processed only as far as needed to run the website and handle enquiries. Hosting is provided via the OVHcloud VPS in the EU named above.
A data processing agreement under Art. 28 GDPR is in place with OVHcloud; it forms part of the provider's terms of contract.
10. Storage and deletion
Personal data are stored only as long as needed for the respective purposes or as required by statutory retention duties.
In detail: server log files 14 days; the session cookie 120 minutes; enquiries up to six months after the last contact; application documents up to six months after the process ends. If a contract is concluded, the statutory retention periods apply.
11. Data subject rights
Under the GDPR you have, where the legal requirements are met, the rights of access, rectification, erasure, restriction of processing, data portability and objection. To exercise your rights, a short message to info@simplekolo.eu is enough.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. For Thuringia this is the Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI).
Häßlerstraße 8, 99096 Erfurt, Germany · Phone +49 361 57 3112900 · poststelle@datenschutz.thueringen.de · www.tlfdi.de
13. Updates to this notice
We update this privacy notice when the website, the infrastructure in use or the legal situation change. The version published on this page applies.