Privacy policy

Last updated: November 01, 2024 

Privacy policy and information on the processing of personal data in accordance with Art. 13, 14 General Data Protection Regulation (EU) 2016/679 (GDPR) 

1. introduction

DotSimple, or DotSimple.io, is a product of .simple Marketing GmbH & Co KG, based in Vienna, Austria, Europe, and processes personal data of its users as part of its activities. The following information is provided in this regard:

DotSimple is committed to protecting your privacy with respect to all information collected when you use our Services. This Privacy Policy describes the collection, use and disclosure of your information when you interact with our Services, including our websites, APIs, email notifications, applications and other services that reference this Policy (collectively, the "Services"). This Policy also covers information we receive from our white label partners and third parties.

When you use our services via the web, API or mobile apps, you consent to the collection, transfer, storage, disclosure and use of your information as described in this Privacy Policy. This includes sensitive information as defined by applicable law.

As changes to the law or changes to internal company processes may make it necessary to adapt this privacy policy, we ask you to read this privacy policy regularly. The privacy policy can be viewed at any time at https://dotsimple.io/privacy/ can be called up, saved and printed.

2. provider and person responsible

The data controller is .simple Marketing GmbH & Co KG, Osterleitengasse 2/3, 1190 Vienna, e-mail: office@DotSimple.io.

If you have any questions, comments or requests regarding this Privacy Policy, please do not hesitate to contact our Data Protection Officer Manuel Roessler at office@DotSimple.io.

3. types of data collected

The personal data that DotSimple processes independently or through third parties include: Tracker; email; Usage Data; number of users; session statistics; user ID; first name; last name; phone number.

Full details of each type of personal data processed are provided in the dedicated sections of this Privacy Policy or selectively through explanatory texts displayed prior to data collection.

Personal data may be provided voluntarily by the user or, in the case of usage data, collected automatically when DotSimple is used.

Unless otherwise stated, the provision of all data requested by DotSimple is mandatory. If the user refuses to provide the data, this may result in DotSimple being unable to provide its services to the user. In cases where DotSimple expressly states that the provision of personal data is voluntary, users may choose not to provide this data without any consequences for the availability or functionality of the service.

Users who are unclear about which personal data is mandatory can contact the provider.

Any use of Cookies - or of other tracking tools - by DotSimple or by the owners of third-party services used by www.DotSimple.io serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy.

Users are responsible for all personal data of third parties that is obtained, published or passed on by DotSimple.

4. type and place of data processing

Processing methods

The provider processes the personal data of users in a proper manner and takes appropriate security measures to prevent unauthorized access and the unauthorized forwarding, modification or destruction of data.

Data processing is carried out using computers or IT-based systems in accordance with organizational procedures and practices that are specifically aimed at the stated purposes. In addition to the Data Controller, other subjects may operate DotSimple internally (such as human resources, sales, marketing, legal department, system administrators) or externally (such as providers of technical services, delivery companies, hosting providers, IT companies or communication agencies), appointed, if necessary, as Data Processors by the Data Controller, and therefore have access to the Data. A current list of these parties can be requested from the provider at any time.

Location

The data is processed at the provider's branch office and at all other locations where the offices involved in the data processing are located.

Depending on the user's location, data transfers may involve transferring the user's data to a country other than their own. To find out more about the place of processing of the transferred data, users can consult the section with detailed information on the processing of personal data.

Storage duration

Unless otherwise specified in this document, Personal Data will be processed and stored for as long as required by the purpose for which it was collected and may be stored for a longer period of time if necessary due to a legal obligation to be fulfilled or based on the User's consent.

5. purposes of the processing

Personal data about the user is collected so that the provider can provide the service and also comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of users or third parties), detect malicious or fraudulent activity. In addition, data is collected for the following purposes: Managing contacts and sending messages, analytics, user database management, remarketing and behavioral targeting, advertising, registration and login, marketing, heat mapping and session recording, tag management, contacting the user and comment function.

Users can find more detailed information on these processing purposes and the personal data used for each purpose in the "Detailed information on the processing of personal data" section of this document.

6. detailed information on the processing of personal data

Personal data is collected for the following purposes when using the following services:

We may also receive private information about your business profiles from the social network profiles you connect to DotSimple, including Facebook, LinkedIn, X, YouTube, Pinterest and Instagram. Please note that when you use our services to connect with other platforms, you are subject to the privacy policies of those platforms. We cannot take responsibility for the content or privacy practices of these supported platforms. DotSimple's use and disclosure of information from the following APIs will be in accordance with the requirements of those providers' privacy policies, including restricted use requirements. Platform Specific Details:

YouTube API services:

If you link your YouTube channel, we use YouTube API services to obtain relevant data.

The terms of use and privacy policy for YouTube API services can be found here:

https://www.youtube.com/static?template=terms

http://www.google.com/policies/privacy

The YouTube API services allow us to access various personal data on your behalf. This includes: your channel data, statistics on the performance of your channel, your videos including metadata and KPIs as well as comments and user information on your created content.

If you want to revoke DotSimple's access to your data, you can do so at any time in the Google security settings at https://security.google.com/settings/security/permissions.

Facebook API services:

The terms of use and privacy policy for the Facebook API services are available under the following links:

https://www.facebook.com/terms.php

https://www.facebook.com/privacy/policy/

Facebook Community Standards:

https://www.facebook.com/communitystandards

Facebook advertising guidelines:

https://www.facebook.com/policies/ads

When using the Facebook API services, DotSimple can access certain categories of your personal data on your behalf. This includes: your channel data, statistics on the performance of your posts, your posts including metadata and KPIs, comments (profile information and message content) on your posts or those in which you are mentioned, and private messages relating to your account.

If you wish to revoke DotSimple's access to your Facebook data, you can do so at https://www.facebook.com/settings/?tab=applications.

Instagram API services:

The terms of use and privacy policy for Instagram API services can be found here:

https://instagram.com/legal/terms

https://privacycenter.instagram.com/policy

If you use Instagram API services, DotSimple will receive access to the following information on your behalf: your channel data, statistics on your channel's performance, your posts with associated metadata and KPIs, comments and messages related to posts you have published or in which you have received mentions, and private messages related to your account.

You can deactivate DotSimple's access to your Instagram data at https://www.facebook.com/settings/?tab=applications.

X API services:

The terms of use and privacy policy for X API services can be found here:

https://x.com/en/tos

https://x.com/en/privacy

If you use the X API services, DotSimple can access certain personal information on your behalf. This includes your channel data, analytics on the performance of your content, your own posts with metadata and KPIs, comments (including profile and message information) and private messages.

You can revoke DotSimple's access to your data at any time at https://x.com/settings/connected_apps.

LinkedIn API services:

The terms of use and privacy policy for the LinkedIn API services can be viewed under the following links:

https://www.linkedin.com/legal/l/service-terms

https://www.linkedin.com/legal/privacy-policy

User agreement:

https://www.linkedin.com/legal/user-agreement

When using the LinkedIn API services, DotSimple can access the following personal data: your channel data, performance statistics for your channel, your own posts and their metadata/KPIs, as well as comments (including profile and message information) that appear in your posts or in relevant threads.

You can revoke DotSimple's access to your LinkedIn data via the preferences page at https://www.linkedin.com/mypreferences/d/data-sharing-for-permitted-services.

Pinterest API services:

Pinterest API Services Terms of Use and Privacy Policy:

https://policy.pinterest.com/en/terms-of-service

https://policy.pinterest.com/en/privacy-policy

Community guidelines:

https://policy.pinterest.com/en/community-guidelines

For Pinterest API services, DotSimple provides access to the following data: your channel data, statistics on the performance of your content and your own pins with metadata and KPIs.

If you would like to remove DotSimple's access to your Pinterest data, you can do so at https://at.pinterest.com/settings/security.

TikTok API services:

The terms of use and privacy policy for TikTok API services can be accessed here:

https://www.tiktok.com/legal/page/eea/terms-of-service/en

https://www.tiktok.com/legal/page/eea/privacy-policy/en

By using the TikTok API services, we can access the following personal data on your behalf: your channel data, analytics on your channel's performance, your videos including their metadata/KPIs, and comments (user profiles and messages) on videos you have created.

In addition to the regular DotSimple deletion procedure for removing stored data, you can revoke DotSimple's access to your TikTok data via the TikTok app. To do this, go to "Settings and privacy" > "Security" > "Apps and websites" in the app and remove the corresponding authorization there.

OpenAI API services:

 Our application uses the OpenAI API services to create customized captions for social media content for you.

The privacy policy for OpenAI API services can be found here:

https://openai.com/policies/privacy-policy

To generate the labels, we only transmit the specific data required for this. This includes the text you provide, which is used to create the labels. You also have the option of creating and customizing your own prompts to tailor the labels to your needs.

Your personal data and the content of your social media accounts will not be passed on to OpenAI without your express consent.

7. information on the rejection of interest-based advertising

In addition to any opt-out feature provided by the services listed in this document, users can learn more about how to opt-out of interest-based advertising in general in the relevant section of the Cookie Policy.

8. cookies

When you visit our website, we use cookies to temporarily store certain information. Some cookies are (technically) necessary for the operation of our website and are set in any case. Other cookies, on the other hand, are not absolutely necessary, but support user-friendliness or enable the analysis of user behavior, for example.

Further information and cookie settings can be found in the cookie policy.

9. further information for users in the European Union

This section applies to all users in the European Union under the General Data Protection Regulation ("GDPR") and supersedes any other potentially differing or contradictory information in the Privacy Policy for such users. Further details on the categories of data processed, the purposes of the processing, the categories of recipients of the personal data, if any, and further information on personal data can be found in the Section "Detailed information on the processing of personal data" in this document.

Legal bases of the processing

The provider may only process users' personal data if one of the following points applies:

• The users have their Consent granted for one or more specific purposes, these are
  • the analysis of user behavior and the improvement of our offers and/or
  • for keeping evidence of application documents;
• the collection of data is necessary for the performance of a contract with the user and/or for Pre-contractual measures necessary, these are
  • Operation and provision of the platform;
  • Provision of service and support services in connection with the platform,
  • proper accounting and billing and
  • the conclusion of a service contract (Art 6 para 1 lit b GDPR).

• the processing is necessary for the fulfillment of a legal obligationto which the provider is subject is required, these are
  • the management of the accounts;
  • the fulfillment of legal and
  • the fulfillment of official and/or judicial requests (e.g. disclosure of data to law enforcement authorities).
• the processing is in connection with a task that in the public interest or in the exercise of sovereign powers (e.g. law enforcement authorities and courts) that have been transferred to the provider;
• The processing is necessary to safeguard the legitimate interests of the provider or a third party is required, these are
  • the analysis of user behavior and the improvement of our offers within the framework of our platform,
  • the detection and correction of software errors on our platform;
  • the collection and processing of customer feedback,
  • the prevention, detection and prevention of misuse of our platform;
  • cross-team collaboration between DotSimple employees,
  • product development, design and improvement and
  • the exercise and defense of legal claims (in particular with regard to the Equal Treatment Act).

In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.

Further information on the storage period

Unless otherwise specified in this document, Personal Data will be processed and stored for as long as required by the purpose for which it was collected and may be stored for a longer period of time if necessary due to a legal obligation to be fulfilled or based on the User's consent.

Therefore:

• Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been completely fulfilled.
• Personal data collected to protect the legitimate interests of the provider will be retained for as long as necessary to fulfill these purposes. Users can obtain more information about the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.
• In the event of rejection of applications, we store application documents for a period of seven months from the date of notification of rejection (§§ 15 para. 1, 29 para. 1 Equal Treatment Act + one month).
• If you give us your consent to keep your application documents on file, we will store them for the processing period covered by your consent or at the latest until you withdraw your consent.

Furthermore, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked. Furthermore, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.

After the retention period has expired, personal data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be asserted after the retention period has expired.

The rights of users under the General Data Protection Regulation (GDPR)

Users may exercise certain rights in relation to their data processed by the provider.

In particular, users have the right to do the following to the extent permitted by law:

• Revoke your consent at any time. If the user has previously consented to the processing of personal data, they can withdraw their consent at any time.
• object to the processing of their data. The user has the right to object to the processing of their data if the processing is carried out on a legal basis other than consent.
• receive information about their data. The user has the right to know whether the data is being processed by the provider, to receive information about individual aspects of the processing and to receive a copy of the data.
• Have it checked and corrected. The user has the right to check the accuracy of his/her data and to request that it be updated or corrected.
• request the restriction of the processing of their data. Users have the right to restrict the processing of their data. In this case, the provider will not process the data for any purpose other than storage.
• request the deletion or other removal of personal data. Users have the right to demand that the provider delete their data.
• receive your data and have it transferred to another controller. The user has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance.
• Submit a complaint. Users have the right to lodge a complaint with the competent supervisory authority.

Users also have the right to be informed of the legal basis for the transfer of data abroad or to an international organization governed by international law or established by two or more countries, such as the UN, and of the security measures taken by the provider to protect their data.

Details on the right to object to processing

If personal data is processed in the public interest or to protect the legitimate interests of the provider, the user can object to this processing by providing a justification relating to his or her particular situation.

Users are informed that they can object to the processing of their personal data for direct marketing purposes at any time free of charge and without giving reasons. If the user objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Users can find out whether the provider processes personal data for direct marketing purposes in the relevant sections of this document.

How the rights can be exercised

All requests to exercise user rights may be addressed to the Owner using the contact details provided in this document. These requests can be made free of charge and will be answered by the Owner as soon as possible, at the latest within one month, providing Users with the information required by law. Any rectification or erasure of personal data or restriction of processing shall be communicated by the Provider to all recipients to whom personal data have been disclosed, if any. Unless this proves impossible or involves a disproportionate effort. The provider shall inform the user of these recipients if the user so requests.

If you receive the newsletter from DotSimple, you have the right to withdraw your consent to receive the newsletter without affecting the lawfulness of processing based on consent before its withdrawal.

You can unsubscribe from the newsletter at any time by either unsubscribing directly via the link provided in the newsletter or alternatively by sending your unsubscribe request to office@DotSimple.io send.

10. further information on the collection and processing of data 

Legal measures

The user's personal data may be processed by the provider for the purposes of legal enforcement within or in preparation of legal proceedings arising from the improper use of www.DotSimple.io or the associated services.

The user declares that he is aware that the provider could be obliged by the authorities to disclose personal data.

Further information about the user's personal data

In addition to the information listed in this privacy policy, www.DotSimple.io may provide the user with further contextual information relating to specific services or to the collection and processing of personal data upon request.

System logs and maintenance

For operational and maintenance purposes, www.DotSimple.io and the services of third parties may collect files that record the interaction taking place via www.dotsimple.io (system logs) or use other personal data (e.g. IP address) for this purpose.

Information not contained in this privacy policy

Further information on the collection or processing of personal data can be requested from the provider at any time using the contact details provided.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly at www.dotsimple.io and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. Users are therefore advised to visit this page regularly and in particular to check the date of the last change indicated at the bottom of the page.

If changes affect the use of data based on the user's consent, the provider will - if necessary - obtain new consent.