Privacy Policy
1. Controller
The controller responsible for the processing of personal data on this website is:
sim cargo GmbH
Rastenweg 8
53489 Sinzig
Germany
Phone: +49 2642 9937-0
Email:
Represented by the Managing Director:
Julian Loth
2. General Information on Data Processing
We process personal data only to the extent necessary to provide our website, respond to enquiries, carry out pre-contractual or contractual measures, comply with legal obligations, safeguard legitimate interests, or where you have consented to the processing.
Personal data means any information relating to an identified or identifiable natural person. This includes, in particular, names, contact details, email addresses, telephone numbers, IP addresses and technical usage data.
3. Accessing Our Website / Server Log Files
When you access our website, the web server we use may process the following information in particular:
- IP address of the accessing device
- date and time of access
- page or file accessed
- amount of data transferred
- browser type and browser version
- operating system
- referrer URL
- hostname of the accessing device
The processing is carried out to ensure the technically correct provision of the website and to guarantee the security and stability of our information technology systems.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically reliable operation of our website.
Server log data is stored only for as long as necessary for the purposes stated above. Unless security-related events require longer retention, the data is deleted after expiry of the retention period defined by the hosting provider.
4. Contacting Us
If you contact us by email, telephone or via a contact form, we process the data you provide in order to respond to your enquiry.
The following data may be processed in particular:
- name
- email address
- telephone number
- subject of the enquiry
- content of your message
- time of contact
If your enquiry relates to the initiation or performance of a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR.
In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in appropriately and efficiently responding to your enquiry.
The data will be deleted once the enquiry has been conclusively dealt with and there are no statutory retention obligations or other reasons requiring further storage.
5. Cookies, Similar Technologies and Consent Management
Our website uses cookies and similar technologies, such as local storage, pixels or comparable methods.
Some of these technologies are strictly necessary for the secure and functional operation of our website. Other technologies and external services are used only if you have given your prior consent.
For technologies that are strictly necessary, consent is not required under Section 25(2) TDDDG, provided that storing information on your device or accessing information already stored on your device is strictly necessary to provide a digital service expressly requested by you.
Where personal data is processed in this context, processing is carried out – unless a more specific legal basis applies – on the basis of Art. 6(1)(f) GDPR.
Cookies and similar technologies that are not strictly necessary are used only with your prior consent. The legal basis for storing information on your device or accessing information on your device is Section 25(1) TDDDG. Where personal data is processed, the legal basis is Art. 6(1)(a) GDPR.
You can change or withdraw your consent at any time with effect for the future via the “Manage Cookie Settings” button or link available on our website.
Note on Optional Services
Some of the services described below may already be technically prepared for future use without currently being activated on our website.
The following information therefore applies only to the extent that the relevant service is actually used or activated.
If a service is not activated and its scripts, content or other resources are not loaded, no corresponding data transmission via that service takes place.
6. Google Tag Manager
Where used, we use Google Tag Manager to manage and technically control website tags and other services.
The provider is Google Ireland Limited.
Google Tag Manager is used in particular to control other services depending on your consent settings. Services requiring consent, such as analytics, marketing or other services, may only be activated via Google Tag Manager in accordance with your selection.
Where Google Tag Manager itself results in processing requiring consent or access to your device, it will only be activated after you have given your consent.
The legal basis in such cases is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
7. Google Analytics
Where used, we use Google Analytics to statistically analyse the use of our website.
The provider is Google Ireland Limited.
Google Analytics may in particular process information about:
- pages visited
- time spent on individual pages
- the source through which visitors arrived on our website
- interactions with the website
- browser and device information
- the approximate region from which access takes place
Google Analytics is only activated after you have given your prior consent.
The legal basis for processing personal data is Art. 6(1)(a) GDPR. Where information is stored on or read from your device, the legal basis is Section 25(1) TDDDG.
You can withdraw your consent at any time with effect for the future via the cookie settings.
8. Microsoft Clarity
Where used, we use Microsoft Clarity to better understand how our website is used and to improve user experience.
For users within the European Economic Area, the provider is generally Microsoft Ireland Operations Limited.
Clarity may, for example, collect information about page views, clicks, scrolling behaviour, devices and browsers used, as well as interactions with our website, and use this information to generate statistical analyses, session recordings or so-called heatmaps.
Microsoft Clarity is only activated after you have given your prior consent.
The legal basis for processing personal data is Art. 6(1)(a) GDPR. Where information is stored on or read from your device, the legal basis is Section 25(1) TDDDG.
You can withdraw your consent at any time with effect for the future via the cookie settings.
9. LinkedIn Insight Tag
Where used, we use the LinkedIn Insight Tag.
The provider is LinkedIn Ireland Unlimited Company.
The LinkedIn Insight Tag enables us in particular to measure the success of advertising campaigns on LinkedIn. It may be used to determine whether users visit our website or carry out certain actions after viewing or clicking a LinkedIn advertisement.
Depending on the configuration, the service may also be used to create audiences for advertising purposes.
The LinkedIn Insight Tag is only activated after you have given your prior consent.
The legal basis for processing personal data is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You can withdraw your consent at any time with effect for the future via the cookie settings.
10. Google Ads / Conversion Tracking
Where used, we use Google Ads, including conversion tracking, to measure and optimise our advertising activities.
The provider is Google Ireland Limited.
This may, in particular, record whether a user has performed certain actions on our website after viewing or clicking an advertisement, for example contacting us or visiting certain pages.
Where configured accordingly, the information obtained may also be used to optimise advertising campaigns and create target audiences.
Google Ads or conversion tracking is only activated after you have given your prior consent.
The legal basis for processing personal data is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You can withdraw your consent at any time with effect for the future via the cookie settings.
11. Google Maps
Where Google Maps is embedded on our website, we use this service to display maps, locations or geographical information.
The provider is Google Ireland Limited.
When the map function is loaded, the following data may in particular be transmitted to Google:
- IP address
- browser and device information
- page accessed
- date and time of access
- location information, where applicable
Google Maps is only loaded where the required consent has been given.
The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You can withdraw your consent at any time with effect for the future via the cookie settings.
12. OpenStreetMap and Mapping Services
Our website may use maps based on OpenStreetMap data.
If the map data required for this purpose is provided exclusively through our own systems, simply displaying the map does not result in a connection to servers of the OpenStreetMap Foundation.
However, if map elements, so-called map tiles, APIs or other content are loaded directly from servers of the OpenStreetMap Foundation or another external map provider, your IP address in particular may be transmitted to the respective provider.
Where consent is required, external map content will only be loaded after you have given your consent.
In such cases, the legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG where information on your device is accessed.
The applicable data protection rules depend on the specific technical mapping solution actually used.
13. YouTube
Where YouTube videos are embedded on our website, we use the YouTube video service.
The provider is Google Ireland Limited.
When an embedded video is loaded, a connection to Google or YouTube servers may be established. In particular, your IP address, browser and device information, and information about the page accessed may be processed.
Where consent is required, YouTube content will only be loaded after you have given your consent.
The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You can withdraw your consent at any time with effect for the future via the cookie settings.
14. Google reCAPTCHA
Where used, we use Google reCAPTCHA to protect our forms and website against automated submissions, spam and misuse.
The provider is Google Ireland Limited.
When reCAPTCHA is used, various technical information may be processed in order to distinguish human input from automated access.
Where consent is required for the specific technical implementation, reCAPTCHA will only be activated after you have given your consent.
The legal basis for consent-based processing is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
A legitimate interest in preventing spam, misuse and automated attacks may exist independently of this. Whether processing without consent is permissible, however, depends on the specific technical implementation and the individual processing operations involved.
15. Jotform
Where used, we use Jotform to provide online forms, for example for partner, contact or other enquiries.
Jotform is provided by companies within the Jotform group. Depending on the configuration used, Jotform Inc. in particular may be involved in the processing.
When an externally embedded Jotform form is accessed, technical connection data such as the IP address, browser and device information may be processed.
If you complete and submit a form, the data you enter in the relevant form will also be processed. The personal data concerned depends on the fields included in the respective form.
Where the form is used to initiate or perform a contractual relationship, the data entered by you is processed on the basis of Art. 6(1)(b) GDPR.
For other business enquiries, processing may be carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in efficiently handling your enquiry.
Where consent is required merely to load the embedded Jotform content, it will only be loaded after you have given your consent. The legal basis in this respect is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Where Jotform processes personal data on our behalf, this is carried out on the basis of the required data protection agreements.
16. Google Fonts
Our website may use fonts provided by Google Fonts.
Locally Hosted Google Fonts
Where Google Fonts are hosted locally on our own web server, no connection to Google servers is established when the fonts are retrieved.
Consent is not required for the mere local provision of the fonts.
Externally Hosted Google Fonts
If fonts are loaded directly from Google servers, the IP address of your device in particular may be transmitted to Google.
Such external integration will only take place – where consent is required – after you have given your prior consent.
The legal basis in this case is Art. 6(1)(a) GDPR.
Where information is also stored on or read from your device, Section 25(1) TDDDG applies additionally.
17. Applications
If you apply for a position with us, we process the data you provide in connection with your application.
This may include in particular:
- name and contact details
- CV
- certificates and references
- proof of qualifications
- cover letter
- other application documents
- information obtained during interviews
The data is processed for the purpose of deciding whether to establish an employment relationship.
The legal basis is in particular Section 26(1) BDSG in conjunction with Art. 6(1)(b) GDPR.
If no employment relationship is established, the application data will be deleted as soon as further storage is no longer necessary for the application procedure or for safeguarding legitimate interests, unless you have consented to a longer retention period or there is a legal obligation to retain the data.
If an employment relationship is established, application data required for the employment relationship may be transferred to the personnel file.
18. Recipients of Personal Data
Within our company, personal data is only made available to those departments and persons who require it to perform their respective tasks.
In addition, data may be transferred to service providers used by us, in particular:
- hosting and IT service providers
- providers of website and security services
- providers of form and communication services
- providers of analytics and statistical services, where you have consented
- providers of marketing services, where you have consented
- providers of map or video services, where you have consented
- other processors and service providers where this is necessary to provide our website or services
Where service providers process personal data on our behalf, this is carried out on the basis of the data protection agreements required by law.
19. Transfers of Data to Third Countries
When certain external services are used, personal data may be processed outside the European Union or the European Economic Area.
This may in particular apply where providers or their subprocessors use technical infrastructure or group companies located outside the European Economic Area.
Such transfers only take place where the applicable legal requirements are met.
These may include in particular:
- an adequacy decision by the European Commission,
- participation by the relevant recipient in a data protection framework recognised by the European Commission, where applicable,
- standard contractual clauses approved by the European Commission, or
- another legal basis permitted under Chapter V of the GDPR.
Details of any actual transfer to a third country depend on the respective service used and its technical configuration.
20. Retention Period
We store personal data only for as long as necessary for the respective processing purpose.
Longer storage may in particular be required where statutory retention periods apply or where data is needed to establish, exercise or defend legal claims.
Where data is processed on the basis of your consent, processing generally continues until you withdraw your consent or until the respective purpose of processing ceases to apply, unless another legal basis permits further storage.
Once the purpose of processing no longer applies and any statutory retention periods have expired, the data will be deleted or anonymised.
External service providers may apply additional retention periods. Where we are able to configure retention periods ourselves, we select them in accordance with the relevant purpose and the principle of data minimisation.
21. Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Consent relating to cookies, analytics, marketing and external services can in particular be changed or withdrawn via the “Manage Cookie Settings” button or link.
Withdrawing consent must be as easy as giving consent.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
22. Rights of Data Subjects
Subject to the applicable legal requirements, you have in particular the right to:
- obtain information about the processing of your personal data in accordance with Art. 15 GDPR,
- rectification of inaccurate data or completion of incomplete data in accordance with Art. 16 GDPR,
- erasure of your data in accordance with Art. 17 GDPR,
- restriction of processing in accordance with Art. 18 GDPR,
- data portability in accordance with Art. 20 GDPR,
- object to certain processing activities in accordance with Art. 21 GDPR, and
- withdraw consent with effect for the future in accordance with Art. 7(3) GDPR.
Right to Object
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to such processing at any time on grounds relating to your particular situation.
To exercise your rights, you can contact us at:
sim cargo GmbH
Rastenweg 8
53489 Sinzig
Germany
Email:
23. Right to Lodge a Complaint with a Data Protection Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The supervisory authority responsible in particular for our registered office is:
The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
Germany
Phone: +49 6131 8920-0
Email:
You may also contact another data protection supervisory authority that is competent for you.
24. Validity and Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy if our website, the services used or the applicable legal requirements change.
Last updated: September 2026