Privacy Policy

General information on data processing

This notice explains how we process personal data when you visit our corporate website, contact us, request a demonstration, apply by email or interact with our LinkedIn company profile. Separate information may apply to our customer platform and support services.

We use personal data only for the purposes described below and on an applicable legal basis. These include consent under Article 6(1)(a) GDPR; performance of a contract with you or steps taken at your request before a contract under Article 6(1)(b); compliance with legal obligations under Article 6(1)(c); and our legitimate interests under Article 6(1)(f), where these are not overridden by your rights and interests.

Providing information through our forms or by email is voluntary. Fields marked as required are needed to handle the corresponding request. Without sufficient contact details and information about your request, we may be unable to respond or arrange a demonstration.

Hosting and website security

We use managed WordPress.com hosting, provided for customers in Germany by Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland, part of the Automattic group.

Hosting includes delivery of our website and its files, storage of website content and form submissions, backups, maintenance and security. Visiting the website involves processing technical information such as your IP address, requested page, access time, browser and operating system, and referring page where transmitted.

We process this information to deliver the website reliably, identify faults and protect it against misuse. Our legal basis is Article 6(1)(f) GDPR, based on our legitimate interests in operating a secure and functional website.

The site’s selected primary hosting region is Amsterdam, Netherlands. This does not mean that all processing takes place exclusively in the EU: Automattic operates internationally, and replication, support or other processing can involve locations outside the European Economic Area, including the United States.

Automattic states that visitor server logs are generally retained for approximately 30 days. Information needed for a specific security incident or legal obligation may require longer retention. Website content and submissions may also be included in backups and are removed as those backups expire.

Further information: Automattic’s notice for website visitors and Automattic’s privacy policy.

Cookies and consent management

Cookies and similar technologies store information on, or access information from, your device. We use these where necessary to operate the website and remember your privacy choices.

We use the Borlabs Cookie plugin from Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany, to manage those choices. It records your consent or rejection and enables you to change your selection. Consent information is stored in your browser and in our website’s consent records. According to Borlabs, its plugin processes website visitors’ consent data on the website operator’s own server and does not transmit that visitor data to Borlabs.

Necessary storage or access on your device is based on section 25(2)(2) TDDDG. Where personal data is processed to manage and document legally required consent, the basis is Article 6(1)(c) GDPR; maintaining and respecting your privacy choices also serves our legitimate interests under Article 6(1)(f) GDPR.

For optional technologies that require consent, the basis is section 25(1) TDDDG and Article 6(1)(a) GDPR. You can refuse these technologies and withdraw consent at any time for the future through “Cookie settings” in the footer. Withdrawal does not affect processing that was lawful before withdrawal.

The consent dialog identifies the cookies and services used, their purposes and their configured lifetimes. Consent records are retained as needed to respect and demonstrate your choices and are deleted when that purpose and any applicable legal need for retention end. You can also delete cookies through your browser; doing so may cause the website to ask for your choices again.

Optional visitor analytics and advertising tracking are disabled on this website. This does not prevent the necessary technical processing described under “Hosting and website security.”

Contact and demo-request forms; contact by email

When you use our contact or demo-request forms, we process the details you submit. Depending on the form, these include your first and last name, email address, company, country, optional telephone number or message, and the solutions you are interested in. We also process the technical information needed to deliver the submission and protect the website against abuse.

Form submissions are stored in our WordPress website and generate an email notification for our team. When you contact us directly by email, we process your address, message, attachments and the related correspondence. Our hosting and email-service providers process the information needed to provide these services, and authorised team members use it to handle your request.

The purposes are to respond to your enquiry, arrange or provide a demonstration and carry out the follow-up you requested. Submitting a form does not by itself subscribe you to a newsletter or give consent to unrelated advertising.

Where your request concerns entering into or performing a contract with you, processing is based on Article 6(1)(b) GDPR. Otherwise, including when you contact us on behalf of your employer, it is based on Article 6(1)(f) GDPR and our legitimate interest in responding to business enquiries. Any processing required to meet statutory obligations is based on Article 6(1)(c) GDPR.

We retain the information while handling your request and any resulting business relationship. We delete information that is no longer needed, unless legal retention duties or the establishment, exercise or defence of legal claims require us to keep it. Relevant criteria include whether the enquiry has been resolved, whether further communication is expected, and whether the correspondence forms part of contractual or legally required business records. These criteria apply to both the WordPress record and related email copies.

You may contact us at contact@smartseer.com to exercise your rights, including an objection to processing based on legitimate interests. A request for deletion does not override a legal obligation or other lawful reason to retain particular information.

Applications by email

You may send a job application by email. We process your contact details, application documents and other information you provide to assess and handle your application.

The legal bases are section 26(1) BDSG and, where applicable, Article 6(1)(b) GDPR for steps towards an employment contract at your request.

Following completion of the application process, application data is retained for up to two months and then deleted, unless an applicable legal obligation requires longer retention. Information needed for an employment relationship is handled for that purpose under the applicable employee privacy information.

Our LinkedIn company profile

We maintain a company profile on LinkedIn to provide information about SMARTSEER, communicate with customers and interested parties, and support recruitment. If you comment, post or react there, information such as your profile name, picture and contribution may be visible to others.

For our own communication with you, the basis is Article 6(1)(f) GDPR and our legitimate interest in answering requests and providing information about our business. Article 6(1)(b) GDPR applies where processing is necessary for a contract with you or requested steps towards one. Recruitment processing is covered above.

LinkedIn processes data under its own responsibilities and privacy information. Its storage periods and options for managing platform data are explained in the LinkedIn privacy policy. Any correspondence we retain to handle your enquiry is subject to the retention criteria described above.

You can exercise your rights concerning our processing by emailing contact@smartseer.com. For LinkedIn’s processing, please also consult its privacy policy and privacy controls.

Recipients and international transfers

Personal data may be accessed by authorised staff and providers of hosting, IT support, security and email services where needed for the purposes set out above. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims.

Processing outside the EEA may involve different legal protections. Automattic describes the use of contractual safeguards, including European Commission-approved standard contractual clauses, for international processing. Where applicable, an adequacy decision can also provide a basis for a transfer. Information about the safeguards applicable to your data, and a copy where available, can be requested from contact@smartseer.com. See also Automattic’s privacy policy.

Your rights

Subject to the conditions and exceptions in the GDPR, you have the following rights:

Access (Article 15): ask whether we process your personal data, receive a copy and obtain information about purposes, categories, recipients, retention, sources, relevant automated decisions and safeguards for international transfers.

Rectification (Article 16): have inaccurate data corrected and incomplete data completed.

Erasure (Article 17): request deletion, for example where the information is no longer needed, consent has been withdrawn without another legal basis, an objection succeeds or processing is unlawful. Exceptions may apply, including legal retention duties and the defence of legal claims.

Restriction (Article 18): request limits on processing, for example while accuracy or an objection is being assessed, or where you need data for legal claims that we no longer need.

Portability (Article 20): receive data you provided in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller, where processing is automated and based on consent or a contract.

Objection (Article 21): object at any time, for reasons relating to your particular situation, to processing based on legitimate interests or a public-interest task, including related profiling. You can object to direct marketing, including associated profiling, at any time without giving reasons.

Withdrawal of consent (Article 7(3)): withdraw consent at any time for the future. This does not affect the lawfulness of earlier processing.

Complaint (Article 77): complain to a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. The German supervisory authorities directory can help you find the relevant authority.

Please contact us using the details above to exercise your rights. We may need information to verify your identity before disclosing or changing personal data.