Legal

Privacy Policy

Last updated: 4 October 2026

This is a courtesy translation. Only the German version is legally binding. German version

Thank you for your interest in Simon Motorsport. The protection of your personal data is important to us. Below we inform you which data are processed when you visit this website, for what purpose and on what legal basis. Analytics and advertising only take place with your consent; without your consent, no cookies are set for these purposes and no data are transmitted to Google or Meta.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

SMN83 GmbH Laurenzberger Straße 4 52249 Eschweiler Phone: +49 2433 4466151 E-mail: verkauf@simonmotorsport.com

No data protection officer has been appointed. ⟦to be confirmed⟧

2. Hosting with Cloudflare

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare delivers the website via its global network, protects it against attacks (DDoS protection, web application firewall) and serves it in encrypted form (SSL/TLS). Images, videos and graphics are stored in Cloudflare R2 storage in Western Europe (location “WEUR”) and are delivered via the address smn.asset-bucket.download.

Each time the website is accessed, Cloudflare processes technically necessary connection data: IP address, date and time of access, page or file accessed, amount of data transferred, browser type and version, operating system, previously visited page (referrer). These data are required to deliver the website, ensure its security and fend off attacks. They are not combined with other data sources. As a rule, Cloudflare processes them only for the duration of delivery; logs that are available to us in our Cloudflare account for error analysis are automatically deleted after 7 days at the latest. Beyond this, Cloudflare stores connection data only to the extent and for as long as this is necessary to detect and fend off attacks or to comply with legal obligations.

The legal basis is our legitimate interest in the secure, fast and stable provision of the website (Art. 6(1)(f) GDPR). Cloudflare processes the data as our processor; the data processing agreement pursuant to Art. 28 GDPR (Cloudflare Data Processing Addendum) forms part of Cloudflare’s terms of use. Cloudflare is certified under the EU-US Data Privacy Framework; any transfer to the USA is based on this adequacy decision (Art. 45 GDPR); in addition, the EU Standard Contractual Clauses have been agreed (Art. 46(2)(c) GDPR). Cloudflare’s privacy information: https://www.cloudflare.com/privacypolicy/

The domain simonmotorsport.com and our e-mail mailboxes are hosted by ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf. Merely accessing the website does not involve any processing of your personal data there; for contact by e-mail, see section 7. A data processing agreement is also in place with All-Inkl. Privacy information: https://all-inkl.com/datenschutzinformationen/

3. Fonts, images and videos

The fonts used (Sen, Inter) are served from our own servers. No connection is made to Google Fonts or other font providers.

Images, videos and graphics are loaded from the Cloudflare R2 storage mentioned above. This involves the same connection data as described in section 2.

4. Cookies and consent

Cookies are small text files stored by your browser. Local storage (localStorage) and comparable technologies work in a similar way. On your first visit, we use a dialogue to ask whether you wish to allow analytics and marketing. Until you have made your decision, no cookies are set for these purposes and no data are transferred to Google or Meta.

Necessary: Only technically required data are processed to operate the site (section 2). We store your cookie decision itself in your browser’s local storage under the key “smn-einwilligung”, recording which categories you have allowed and when. This information does not leave your device and serves solely to avoid asking you again on every visit. It is valid for 12 months; after that we ask you again and the old entry is no longer taken into account. You can delete it yourself at any time by removing the site data in your browser. Legal basis: Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) and our legitimate interest in operating the site in compliance with the law (Art. 6(1)(f) GDPR).

Analytics and marketing: These categories only load after your express consent (section 5). The legal basis for storing and accessing information on your terminal device is Section 25(1) TDDDG; for the subsequent processing of your data, it is Art. 6(1)(a) GDPR.

Google Consent Mode: For the Google services, we use Google’s “Consent Mode” (version 2). When any page is accessed, “denied” is first set in your browser for all Google purposes – before anything is loaded. This default setting remains on your device; nothing is transmitted to Google in the process. Only after you have given consent do we load the Google services and inform them of your choice so that they only operate within the permitted scope: Google Analytics only if you have allowed “Analytics”, Google Ads only with “Marketing”. If you have allowed only one of the two categories, the other service is not set up.

Withdrawal: You can change or withdraw your consent at any time with effect for the future – via “Cookie settings” at the very bottom of every page. Upon withdrawal, we delete the cookies of the withdrawn category (the Google and Meta cookies named below), and no further data are transmitted for that category. In addition, you can delete or block cookies at any time in your browser settings.

5. Analytics and advertising (only with consent)

Only once you have agreed in the cookie dialogue do we integrate the following services. They set cookies, process your IP address and also transfer data to the USA. The US providers are certified under the EU-US Data Privacy Framework; in addition, the EU Standard Contractual Clauses apply. Despite these measures, it cannot be ruled out that US authorities may access the data. Your consent expressly also covers this transfer (Art. 49(1)(a) GDPR).

Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how our website is used: which pages are viewed, how long visitors stay, how they arrive and which device they use. From this, we compile aggregated statistics and use them to improve our offering. The data are pseudonymous: Google assigns them to a random identifier in a cookie, not to your name – but they are not anonymous.

This involves processing, among other things, the date and time, the pages viewed including their address (also with additions such as “?anliegen=…”), the referring page, browser, operating system, screen size and approximate location (country, region, city). Your IP address is transmitted for this purpose; according to Google, Google Analytics 4 uses it for access from the EU only to derive the approximate location and does not store it. Google Analytics sets the cookies “_ga” and “_ga_<Kennung>” with a lifetime of up to 24 months; depending on the settings, also “_gid” (24 hours) and “_gat” (1 minute). ⟦set the retention period in Google Analytics, suggestion: 14 months⟧

For Google Analytics, Google is our processor; we have concluded a data processing agreement with Google for this purpose. ⟦to be confirmed once the Analytics account has been set up⟧ Google’s privacy information: https://policies.google.com/privacy

Google Ads (conversion tracking and remarketing)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We place advertisements with Google. With Google Ads, we measure whether an advertisement has led to an enquiry, and we can show you relevant advertising for Simon Motorsport on other websites and on Google (remarketing).

This involves setting cookies – “_gcl_au” and, if you arrive via one of our advertisements, additionally “_gcl_aw” or “_gcl_dc”, each with a lifetime of up to 90 days – and processing your IP address and information about your visit. We receive only aggregated reports from Google, not data that would allow us to identify you personally.

Unlike with Google Analytics, Google does not act on our behalf for Google Ads: Google processes the data for conversion tracking and remarketing as an independent controller and also uses them for its own purposes, for example to improve its advertising services. Google’s Ads Controller-Controller Data Protection Terms apply: https://business.safety.google/adscontrollerterms/

You can also switch off personalised advertising directly with Google: https://adssettings.google.com

Meta Pixel (Facebook and Instagram)

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The Meta Pixel measures the success of our advertisements on Facebook and Instagram and makes it possible to show you relevant advertising there. For this purpose, your IP address, information about your browser and your behaviour on our website (pages viewed, events triggered) are transmitted to Meta.

The pixel sets the cookie “_fbp” and, if you arrive via one of our advertisements, “_fbc”, each with a lifetime of up to 90 days. If you are logged in to Facebook or Instagram at the same time, Meta can assign the visit to your account.

We and Meta are joint controllers for the collection and transmission of the data (Art. 26 GDPR); an agreement with Meta is in place for this purpose. Meta is solely responsible for any further processing by Meta. You can exercise your rights both with us and with Meta. Meta’s privacy information: https://www.facebook.com/privacy/policy Advertising preferences: https://www.facebook.com/adpreferences

6. Other external services

Regardless of cookie consent, we integrate the following services:

EVC electronic – WinOLS licence seal

On the home page, we integrate a licence seal from EVC electronic GmbH (Dieselstraße 13, 47228 Duisburg). It certifies that SMN83 GmbH is a licensed user of the WinOLS 5 software. The seal is retrieved directly from the evc.de server when the home page loads. In the process, your IP address is transmitted to EVC; from this, EVC can recognise that you have accessed our home page. No other personal data are transmitted and no cookies are set. By clicking on the seal, you can verify the licence yourself on evc.de.

The legal basis is our legitimate interest in transparent proof of our software licence that can be verified at any time (Art. 6(1)(f) GDPR). EVC’s privacy information: https://www.evc.de/de/datenschutz.asp

Google Maps (only after clicking)

On the contact page, we initially show only a static map preview served from our own storage (map data © OpenStreetMap contributors). Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is only integrated once you click on “Load map”. In the process, your IP address and the address of the page accessed are transmitted to Google; Google may set its own cookies and process usage data, including in the USA. The same applies if you click on “Plan route” – you then leave our website.

The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR), which you can end at any time by reloading the page. Google’s privacy information: https://policies.google.com/privacy

7. Contacting us

Contact form: The form on the contact page does not transmit any data to our web server. When you submit it, your e-mail program opens with a prepared message to verkauf@simonmotorsport.com; your details (name, company, e-mail address, phone number, vehicle, request, message) are only transmitted to us when you send the message in your e-mail program. If you select a package or request on our pages beforehand, the request and vehicle are passed to the contact page as part of the page address (e.g. “/kontakt?anliegen=…&fahrzeug=…”) so that the form is pre-filled. This address does not contain any personal information about you. We do not store it separately; however, like every address accessed, it appears in the connection data at Cloudflare (section 2) and, only if you have allowed “Analytics”, in Google Analytics (section 5).

E-mail and phone: If you contact us by e-mail or phone, we process the data transmitted with the enquiry (sender address or phone number, date and time, content of the enquiry) in order to deal with your request. Our e-mail mailboxes are operated by ALL-INKL.COM – Neue Medien Münnich (see section 2); the provider processes the e-mails on our behalf as a processor.

The legal basis is Art. 6(1)(b) GDPR (initiation or performance of a contract) or our legitimate interest in uncomplicated communication (Art. 6(1)(f) GDPR).

Storage period: We delete enquiries as soon as they have been dealt with and no retention obligations prevent this, at the latest ⟦period to be added, suggestion: 12 months⟧ after completion. If a contract is concluded, the retention periods under commercial and tax law of six and ten years respectively apply.

Providing your data is voluntary; however, without the required information we cannot process your enquiry.

8. Downloads and functions in the browser

Save contact (vCard) and QR code: The business card on the contact page offers our contact details as a file for download; the QR code contains the same data. No data are collected from you in the process.

Copy buttons: The buttons for copying the phone number, e-mail address and postal address place the respective text exclusively in your device’s clipboard.

9. Links to social media channels and external sites

Our website contains links to our channels on Instagram, YouTube and Facebook, to Franz Simon’s channels on Instagram, YouTube and Facebook, to our online shop (shop.simonmotorsport.com), to our business listing with reviews on Google Maps, to EVC’s verification page, to OpenStreetMap and to the PA Creations website. These are plain links without embedded content or plug-ins; accessing our pages therefore does not transmit any data to these providers. Only when you follow a link do the privacy policies of the respective provider apply.

10. Your rights

You have the following rights vis-à-vis us with regard to the personal data concerning you:

access to your data stored by us and its processing (Art. 15 GDPR),
rectification of inaccurate personal data (Art. 16 GDPR),
erasure of your data stored by us (Art. 17 GDPR),
restriction of data processing where we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR),
data portability where you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR),
objection to the processing of your data by us (Art. 21 GDPR).

If you have given us your consent, you can withdraw it at any time with effect for the future – for analytics and advertising via “Cookie settings” at the very bottom of every page.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de. A list of all supervisory authorities can be found at https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table-node.html

Your right to object under Art. 21 GDPR

Where we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If your data are processed for advertising purposes, you may object to this at any time without giving reasons; the data will then no longer be processed for this purpose.

Please send your objection, without any particular formality, to the contact details given in section 1.

11. Data security

All pages are transmitted in encrypted form via HTTPS (TLS). Access to the website and to the storage is restricted to the operators and protected against attacks by Cloudflare.

12. Changes to this Privacy Policy

We will amend this Privacy Policy if the legal situation or our website changes, for example when new services are introduced. The version published here at any given time applies.

Please direct any questions about data protection to the contact details given in section 1.