Privacy policy
Information about personal data processing on the ContentSignal generator and tools websites.
Last updated: 26 July 2026
1. Controller
Simplarix GmbH i. G.
Voßhorst 9
45699 Herten
Germany
Phone: +49 (0) 2366 4079657
Email: contact@simple-dpp.com
2. Local file processing
The generators and inspection tools process supported files locally in the browser by default. In local mode, selected image or video files, file names, file contents, extracted metadata, inspection results and generated exports are not transferred to us. Temporary object URLs are created only on the device and released after use.
If an optional server feature is offered in the future, it will be identified separately. A file transfer will begin only after explicit confirmation. Files, Base64 content and sensitive raw metadata are not placed in URL parameters.
3. Hosting and server logs
The websites are externally hosted by:
netcup GmbH
Emmy-Noether-Straße 10
76131 Karlsruhe
Germany
When a page is requested, the host may process technically required server log data. This may include the IP address, timestamp, requested resource, referrer, browser type and operating system. Processing serves the secure, stable and efficient provision of the websites under Article 6(1)(f) GDPR. A data processing agreement is in place with the host.
Log data is retained only as long as required for operation, error analysis, attack prevention or legal obligations.
4. Consent management
When optional audience measurement is enabled, the website presents a choice on
the first visit. The decision is stored for six months in the technically
necessary cs_consent_v1 cookie. It contains only the selection “necessary” or
“analytics”.
This storage is required to apply the requested setting and is based on our legitimate interest in reliable consent management under Article 6(1)(f) GDPR. The selection can be changed at any time through “Cookie settings” in the footer.
5. Google Analytics
Google Analytics is disabled by default. It is loaded only when technically configured for the respective website and after explicit consent through the cookie banner. Without consent, no connection to Google Analytics is made and no analytics cookies are set.
Following consent, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It may process information about page views, interactions, referrers, approximate location, browser and device properties. File and video names, file contents, hashes, raw metadata and tool inspection results are not sent as analytics events.
Processing is based on consent under Article 6(1)(a) GDPR and the applicable rules governing storage or access on a user device. Google Signals and personalised advertising features are disabled by us. Processing by Google companies outside the European Union cannot be ruled out completely.
Further information:
6. Contact
If you contact us by email or phone, we process the information supplied to respond to the request. Depending on the request, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR. Statutory retention duties remain unaffected.
7. External links
Links to the related generator/tools domains, the European Commission or optional ContentSignal services are ordinary links. A connection to the target website is established only when the link is opened. The respective provider is responsible for processing on an external target website.
8. Legal bases and retention
Personal data is processed only where a legal basis exists. Depending on the operation, this may be consent, a contract or pre-contractual steps, a legal obligation or legitimate interests.
Data is deleted when its purpose has ended unless a statutory retention requirement or another permissible basis applies.
9. Your rights
Subject to the statutory conditions, rights include:
- access to personal data,
- correction of inaccurate data,
- erasure or restriction of processing,
- data portability,
- withdrawal of consent with future effect,
- objection to processing based on legitimate interests.
You may also lodge a complaint with a competent data protection supervisory authority. Use the contact details above for questions or to exercise your rights.
10. Security and changes
The websites are intended to be delivered only through encrypted HTTPS connections. Even with technical and organisational safeguards, internet transmission cannot be protected against every possible risk.
We update this policy when functions, providers or legal requirements change.