shindiag.com
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
This Privacy Policy applies exclusively to shindiag.com and its subpages. It does not apply to any other websites operated by Simon, Evers & Co. GmbH.
This website is a product information and inquiry page for the SHINDIAG diagnostic tool. It does not operate a customer account system, registration, or e-commerce checkout. All purchases are handled offline following an inquiry.
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit this site, your browser establishes a connection to Vercel's servers, which automatically records:
This data is processed for the purposes of security, error diagnosis, and service availability. Art. 6(1)(f) GDPR — legitimate interest in operating a secure and functional website.
Vercel processes data in the USA under a Data Processing Addendum incorporating Standard Contractual Clauses (SCC, Commission Implementing Decision (EU) 2021/914) and is certified under the EU–US Data Privacy Framework (Adequacy Decision (EU) 2023/1795).
Vercel's privacy notice: vercel.com/legal/privacy-notice
When you submit the inquiry form on this website, the following data is collected:
This data is used exclusively to respond to your inquiry and, where applicable, to initiate a contractual relationship. Art. 6(1)(b) GDPR
Form submissions are transmitted to our servers via an encrypted HTTPS connection. Our backend function validates and forwards the inquiry via the EmailJS service (see processor table below). We do not share your inquiry data with any third party beyond EmailJS as a technical processor.
Name, e-mail, company, country and message are required to process your inquiry; the phone number is optional. Without the required information we are unable to respond. Inquiries that do not lead to a business relationship are deleted no later than 12 months after our last communication with you. Where we issue a quotation or a contract is concluded, the related correspondence is retained for the statutory retention periods under § 257 HGB and § 147 AO (6 years for business correspondence, up to 10 years for accounting records) and deleted afterwards. You can ask us to delete your inquiry earlier at any time (section 9), unless a statutory retention obligation applies.
If you write to us directly by e-mail instead of using the form, we process your e-mail address, the details you provide and your message for the same purposes, on the same legal basis and under the same retention rules.
You can also reach us via WhatsApp Business using the click-to-chat links on this website. These links are plain hyperlinks: nothing is loaded from Meta and no data is transmitted until you actively open WhatsApp and start a chat. WhatsApp is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (a Meta company). For the WhatsApp service itself — your account, phone number, profile information and connection metadata — WhatsApp Ireland Limited is an independent controller. Please refer to WhatsApp's privacy policy for details.
We use the WhatsApp Business App on a dedicated business number and have connected it to Meta Business Suite so that we can also answer from a computer. Our business chats are therefore managed by a secure service hosted by Meta; WhatsApp shows this as a notice in the chat. For this hosting, WhatsApp Ireland Limited processes the messages on our behalf as our processor (see the processor table below). Messages are encrypted in transit and stored by Meta; WhatsApp does not consider chats with businesses managed in this way to be end-to-end encrypted.
We do not upload our address book to WhatsApp, we do not use your number for advertising or newsletters, we do not add you to groups or broadcast lists, and we do not use automated replies or AI agents in these chats. Handling your messages to answer your inquiry and, where applicable, to prepare a contract is based on Art. 6(1)(b) GDPR; offering WhatsApp as an additional contact channel is based on our legitimate interest in convenient communication with prospective customers, Art. 6(1)(f) GDPR. The retention rules stated above for inquiry data apply. If you prefer not to use WhatsApp, the inquiry form and e-mail are available to you at all times. Art. 6(1)(b) GDPR — inquiry handling Art. 6(1)(f) GDPR — contact channel
WhatsApp may transfer data to WhatsApp LLC and Meta Platforms, Inc. in the United States; see section 8 for the transfer safeguards.
All processors engaged for this website, with their data processing agreements:
| Processor | Purpose | Location | Transfer Basis |
|---|---|---|---|
| Vercel Inc. Data Processing Agreement |
Website hosting & serverless functions (section 3) | USA | SCC + EU–US DPF |
| EmailJS Pte. Ltd. Data Protection Agreement |
E-mail delivery for inquiry form | Singapore / USA (AWS) | SCC (Commission Implementing Decision (EU) 2021/914) |
| Plausible Insights OÜ Data Processing Agreement |
Cookieless reach measurement, see section 5 | Estonia / EU servers | Not required (EU) |
| WhatsApp Ireland Limited (Meta) Data Processing Terms |
Hosting and management of our WhatsApp business chats (Meta Business Suite), see section 4 | Ireland / USA | EU–US DPF |
For the WhatsApp service itself (your account, phone number, profile and connection metadata), WhatsApp Ireland Limited remains an independent controller — see "Contact via WhatsApp" above and section 8.
We use Plausible Analytics, a privacy-first web analytics service operated by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, with servers located in the EU. Plausible sets no cookies, uses no persistent identifiers and does not follow visitors across websites. It records the pages viewed, the referring site and campaign parameters (e.g. utm_source), the approximate location — country, region and city, derived from the IP address, which is not stored —, browser, operating system and device type, engagement (time on page, scroll depth), and these events: clicks on contact buttons, file downloads, outbound links and the successful submission of the inquiry form (inquiry type only, never the content of the form). To tell unique visitors apart within one day, Plausible computes a hash of IP address, user agent and a daily salt; the salt is deleted after 24 hours, so the identifier cannot be linked to anyone afterwards or recognised on a later day. Raw IP addresses and user agents are never stored. The script and the data endpoint are served from our own domain (/stats/…); your browser sends nothing to a third-party domain.
Because nothing is stored on or read from your device, this measurement does not require consent under § 25 TDDDG. It is based on our legitimate interest in understanding the reach and use of this website. You may object at any time (see section 9); the script is also blocked by most ad blockers. Plausible's data processing agreement: plausible.io/dpa. Art. 6(1)(f) GDPR
We do not use Google Analytics or any other tracking, advertising or remarketing service, and there are no tracking pixels (such as the Meta Pixel) on this website. Until 11 October 2026 this website also used Google Analytics 4 (Google Ireland Limited), loaded only with your consent; it has been removed, and we no longer use the data collected until then and have it deleted at Google.
This website uses the Inter typeface. The font files are self-hosted on our servers (via @fontsource/inter). No connection to Google Fonts CDN or any external font service is made. No IP addresses or device data are transmitted to third parties for font rendering.
This website sets no cookies and stores nothing in your browser's local storage or anywhere else on your device. That is why there is no cookie banner.
If you visited this website before 11 October 2026, your browser may still hold your earlier banner choice (local storage entry shindiag_cookie_consent) and, if you had accepted analytics, Google Analytics cookies (_ga, _ga_*). They are no longer read or used; you can delete them in your browser settings.
Some data processors listed in this policy are located in the United States or Singapore. Transfers are protected as follows:
Under GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact our Data Protection Officer at datenschutz@simonevers.com. We will respond without undue delay and at the latest within one month (Art. 12(3) GDPR).
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority competent for Simon, Evers & Co. GmbH is:
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Inquiry submissions are reviewed manually by our sales team.
We may update this Privacy Policy to reflect changes in our services or applicable law. The version number and effective date at the top of this page indicate the current version. We recommend reviewing this page periodically.