Privacy policy

Information about personal data processing on the ContentSignal generator and tools websites.

Last updated: 26 July 2026

1. Controller

Simplarix GmbH i. G.
Voßhorst 9
45699 Herten
Germany

Phone: +49 (0) 2366 4079657
Email: contact@simple-dpp.com

2. Local file processing

The generators and inspection tools process supported files locally in the browser by default. In local mode, selected image or video files, file names, file contents, extracted metadata, inspection results and generated exports are not transferred to us. Temporary object URLs are created only on the device and released after use.

If an optional server feature is offered in the future, it will be identified separately. A file transfer will begin only after explicit confirmation. Files, Base64 content and sensitive raw metadata are not placed in URL parameters.

3. Hosting and server logs

The websites are externally hosted by:

netcup GmbH
Emmy-Noether-Straße 10
76131 Karlsruhe
Germany

When a page is requested, the host may process technically required server log data. This may include the IP address, timestamp, requested resource, referrer, browser type and operating system. Processing serves the secure, stable and efficient provision of the websites under Article 6(1)(f) GDPR. A data processing agreement is in place with the host.

Log data is retained only as long as required for operation, error analysis, attack prevention or legal obligations.

When optional audience measurement is enabled, the website presents a choice on the first visit. The decision is stored for six months in the technically necessary cs_consent_v1 cookie. It contains only the selection “necessary” or “analytics”.

This storage is required to apply the requested setting and is based on our legitimate interest in reliable consent management under Article 6(1)(f) GDPR. The selection can be changed at any time through “Cookie settings” in the footer.

5. Google Analytics

Google Analytics is disabled by default. It is loaded only when technically configured for the respective website and after explicit consent through the cookie banner. Without consent, no connection to Google Analytics is made and no analytics cookies are set.

Following consent, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It may process information about page views, interactions, referrers, approximate location, browser and device properties. File and video names, file contents, hashes, raw metadata and tool inspection results are not sent as analytics events.

Processing is based on consent under Article 6(1)(a) GDPR and the applicable rules governing storage or access on a user device. Google Signals and personalised advertising features are disabled by us. Processing by Google companies outside the European Union cannot be ruled out completely.

Further information:

6. Contact

If you contact us by email or phone, we process the information supplied to respond to the request. Depending on the request, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR. Statutory retention duties remain unaffected.

Links to the related generator/tools domains, the European Commission or optional ContentSignal services are ordinary links. A connection to the target website is established only when the link is opened. The respective provider is responsible for processing on an external target website.

Personal data is processed only where a legal basis exists. Depending on the operation, this may be consent, a contract or pre-contractual steps, a legal obligation or legitimate interests.

Data is deleted when its purpose has ended unless a statutory retention requirement or another permissible basis applies.

9. Your rights

Subject to the statutory conditions, rights include:

  • access to personal data,
  • correction of inaccurate data,
  • erasure or restriction of processing,
  • data portability,
  • withdrawal of consent with future effect,
  • objection to processing based on legitimate interests.

You may also lodge a complaint with a competent data protection supervisory authority. Use the contact details above for questions or to exercise your rights.

10. Security and changes

The websites are intended to be delivered only through encrypted HTTPS connections. Even with technical and organisational safeguards, internet transmission cannot be protected against every possible risk.

We update this policy when functions, providers or legal requirements change.