shindiag.com
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
This Privacy Policy applies exclusively to shindiag.com and its subpages. It does not apply to any other websites operated by Simon, Evers & Co. GmbH.
This website is a product information and inquiry page for the SHINDIAG diagnostic tool. It does not operate a customer account system, registration, or e-commerce checkout. All purchases are handled offline following an inquiry.
This website is hosted by Vercel Inc., 340 Pine Street Suite 701, San Francisco, CA 94104, USA. When you visit this site, your browser establishes a connection to Vercel's servers, which automatically records:
This data is processed for the purposes of security, error diagnosis, and service availability. Art. 6(1)(f) GDPR — legitimate interest in operating a secure and functional website.
Vercel processes data in the USA under a Data Processing Addendum incorporating Standard Contractual Clauses (SCC, Commission Implementing Decision (EU) 2021/914) and is certified under the EU–US Data Privacy Framework (Adequacy Decision (EU) 2023/1795).
Vercel's privacy policy: vercel.com/legal/privacy-policy
When you submit the inquiry form on this website, the following data is collected:
This data is used exclusively to respond to your inquiry and, where applicable, to initiate a contractual relationship. Art. 6(1)(b) GDPR
Form submissions are transmitted to our servers via an encrypted HTTPS connection. Our backend function validates and forwards the inquiry via the EmailJS service (see processor table below). We do not share your inquiry data with any third party beyond EmailJS as a technical processor.
Name, e-mail, company, country and message are required to process your inquiry; the phone number is optional. Without the required information we are unable to respond. Inquiry data is retained for a maximum of 10 years where required by statutory retention periods (§ 147 AO / § 257 HGB), otherwise deleted within 7 days of final response.
You can also reach us via WhatsApp Business using the click-to-chat links on this website. These links are plain hyperlinks: nothing is loaded from Meta and no data is transmitted until you actively open WhatsApp and start a chat. WhatsApp is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, which processes your phone number, profile information and connection metadata under its own responsibility. Message content is end-to-end encrypted and not readable by Meta. Please refer to WhatsApp's privacy policy for details.
We use the WhatsApp Business App on a dedicated business number. We do not upload our address book to WhatsApp, we do not use your number for advertising or newsletters, and we do not add you to groups or broadcast lists. Handling your messages to answer your inquiry and, where applicable, to prepare a contract is based on Art. 6(1)(b) GDPR; offering WhatsApp as an additional contact channel is based on our legitimate interest in convenient communication with prospective customers, Art. 6(1)(f) GDPR. The retention rules stated above for inquiry data apply. If you prefer not to use WhatsApp, the inquiry form and e-mail are available to you at all times. Art. 6(1)(b) GDPR — inquiry handling Art. 6(1)(f) GDPR — contact channel
Meta may transfer data to the United States; see section 8 for the transfer safeguards.
All processors engaged for this website, with their data processing agreements:
| Processor | Purpose | Location | Transfer Basis |
|---|---|---|---|
| Vercel Inc. Data Processing Agreement |
Website hosting & serverless functions (section 3) | USA | SCC + EU–US DPF |
| EmailJS Pte. Ltd. Data Protection Agreement |
E-mail delivery for inquiry form | Singapore / USA (AWS) | SCC (Commission Implementing Decision (EU) 2021/914) |
| Google Ireland Ltd. Data Processing Terms |
Web analytics (Google Analytics 4) — only after your consent, see section 5 | Ireland / USA | SCC + EU–US DPF |
| Plausible Insights OÜ Data Processing Agreement |
Cookieless reach measurement, see section 5 | Estonia / EU servers | Not required (EU) |
WhatsApp (Meta Platforms Ireland Ltd.) is not listed here because Meta acts as an independent controller for WhatsApp, not as our processor — see "Contact via WhatsApp" above and section 8.
This website uses Google Analytics 4 (GA4), a web analytics service. The data controller for EU/EEA users is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). GA4 is loaded only after you have given explicit consent via the cookie banner on your first visit (opt-in). No analytics scripts or cookies are set before consent is granted.
We implement Google Consent Mode v2. Before any GA4 script loads, the following consent signals are set to denied by default for all visitors:
analytics_storagead_storagead_user_dataad_personalizationWhen you click "Accept", only analytics_storage is updated to granted. The signals ad_storage, ad_user_data, and ad_personalization remain denied at all times — this website does not use advertising or remarketing. If you decline or do not interact with the banner, no GA4 data is collected.
Legal basis: Art. 6(1)(a) GDPR (consent) and § 25(1) TDDDG (consent for storage on/access to terminal equipment).
You can withdraw your consent at any time: click "Cookie Settings" in the website footer, then click "Decline" in the banner that appears. GA4 will not be loaded on subsequent page visits.
GA4 data is retained on Google's servers for 2 months (our configured retention period). After this period, individual event data is automatically deleted by Google. Aggregated reports may be retained longer.
Google Ireland Limited processes data under Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and the EU–US Data Privacy Framework. Google's privacy policy: policies.google.com/privacy
In addition to GA4, we use Plausible Analytics, a privacy-first web analytics service operated by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, with servers located in the EU. Plausible sets no cookies, uses no persistent identifiers and does not follow visitors across websites. It records page views, the referring site, the country (derived from the IP address, which is not stored), the device type, and clicks on contact buttons, downloads and outbound links. A hash of IP address and user agent with a daily-rotating salt is used solely to tell unique visitors apart within one day and is discarded afterwards. The script and the data endpoint are served from our own domain (/stats/…); your browser sends nothing to a third-party domain.
Because nothing is stored on or read from your device, this measurement does not require consent under § 25 TDDDG. It is based on our legitimate interest in understanding the reach and use of this website. You may object at any time (see section 9); the script is also blocked by most ad blockers. Plausible's data processing agreement: plausible.io/dpa. Art. 6(1)(f) GDPR
This website uses the Inter typeface. The font files are self-hosted on our servers (via @fontsource/inter). No connection to Google Fonts CDN or any external font service is made. No IP addresses or device data are transmitted to third parties for font rendering.
This website uses the following client-side storage:
| Name | Type | Purpose | Duration |
|---|---|---|---|
shindiag_cookie_consent |
localStorage | Stores your cookie consent choice (accepted / declined) to avoid re-showing the banner on return visits | Persistent (until cleared) |
GA4 cookies (_ga, _ga_*) |
Cookie | Distinguish unique visitors and sessions for analytics — only set after consent | up to 2 years |
The consent preference (shindiag_cookie_consent) is stored to honour your choice on future visits. This is a strictly functional necessity.
§ 25(2) TDDDG
Some data processors listed in this policy are located in the United States or Singapore. Transfers are protected as follows:
Under GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact our Data Protection Officer at datenschutz@simonevers.com. We will respond within 30 days.
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority competent for Simon, Evers & Co. GmbH is:
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Inquiry submissions are reviewed manually by our sales team.
We may update this Privacy Policy to reflect changes in our services or applicable law. The version number and effective date at the top of this page indicate the current version. We recommend reviewing this page periodically.