Privacy Policy

1. Who We Are

Simature AB is a Swedish Aktiebolag registered with Bolagsverket (org. nr. 559560-7010). It is the data controller for personal data processed in connection with this website. For privacy-related questions, contact us at: privacy[at]simature.com

2. What Data We Collect and Why

We collect only the minimum personal data necessary for the following purposes:

Website analytics (Google Analytics): We collect anonymised/pseudonymous usage data, including truncated IP addresses, browser type, and pages visited. The legal basis is legitimate interest (Art. 6(1)(f) GDPR).

Contact form / email enquiries: We collect your name, email address, and message content in order to respond to your enquiry. The legal basis is legitimate interest and/or pre-contractual steps (Art. 6(1)(b)(f) GDPR).

AI-assisted work (Google Workspace, Gemini, other LLMs): We may process business data submitted through our services. No special-category personal data is submitted to these tools. The legal basis is contractual performance and/or legitimate interest.

We do not use Meta Pixel or any social media tracking tools.

3. Cookies

This website uses cookies solely through Google Analytics to understand how visitors interact with the site. No advertising or profiling cookies are used.

You may opt out of Google Analytics tracking at any time via the Google Analytics Opt-out Browser Add-on or by adjusting your browser settings.

4. Third-Party Processors

We use the following third-party processors, all operating under Data Processing Agreements (DPAs):

• Google LLC – Google Workspace (including Google Analytics and Gemini), with data processing infrastructure in the European Economic Area (EEA). Google's processing is governed by Google's Data Processing Terms and Standard Contractual Clauses where applicable.
• Other large language model (LLM) providers – used for internal business operations; no personal data identifiable to website visitors is shared without a lawful basis.

No personal data is sold or disclosed to third parties for advertising purposes.

5. International Transfers

Where personal data is transferred outside the EEA or Switzerland, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as required under GDPR Art. 46 and Swiss FADP. Google's EU-based infrastructure is our primary processing environment.

6. How Long We Keep Your Data

Analytics data: Retained for 14 months in Google Analytics, then automatically deleted.

Contact enquiries: Retained for as long as necessary to respond and for up to 2 years for legitimate business purposes.

LLM-processed data: Retained in accordance with each provider's data retention policy; enterprise/workspace tiers do not use input data for model training without permission.

7. Your Rights

Under the GDPR and Swiss FADP, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erasure ("right to be forgotten") where applicable
• Restriction of processing
• Data portability
• Object to processing based on legitimate interests
• Opt out of any automated profiling with significant effects

To exercise any of these rights, contact us at privacy[at]simature.com

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, consistent with GDPR Art. 32 and Swiss FADP requirements.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date above.