Privacy policy

The controller is ARTIO Mining GmbH (“we”). SIMPLY CODE SOLUTIONS is a brand of this company. This privacy policy applies to this website, to requests through the project assistant and the contact form, and to quotes, the acceptance of quotes and contracts, invoices and payments.

Personal data means any information relating to an identified or identifiable person.

The controller for data processing is ARTIO Mining GmbH. For data protection enquiries you can reach us at the following address:

We process data to provide and securely operate the website, to answer project and contact requests, to communicate with prospective customers, to prepare quotes, to handle contracts, invoices and payments, and to meet legal obligations.

We do not process data without a suitable legal basis. The main bases are contract or pre-contractual steps (Art. 31 FADP), overriding interests (Art. 31 FADP) where appropriate, and consent where we obtain it.

This website is operated on Vercel, and the application runs in the Frankfurt region. Server and access data are processed for technical reasons.

Where required, we enter into agreements with processors under the FADP or suitable EU standard contractual clauses for transfers.

Depending on the feature, we use the following providers: Vercel (hosting, usage statistics after consent), Neon (database, which also holds customer files and documents), GitHub (nightly creation and encrypted storage of database backups), Resend (email delivery), Cloudflare Turnstile (spam protection in forms), Sentry (error monitoring), Upstash (request limits to prevent abuse) and Stripe (online payments).

These providers may process data outside Switzerland, including in the USA. See the section on transfers abroad.

When you visit the website, information such as your IP address (possibly shortened), date and time, user agent and the requested resource may be processed automatically. This serves stability, security and error analysis.

We keep this data only as long as necessary for these purposes or required by law.

When you use the project assistant, we process the details you enter (name, email, company, project description, selected project type and features, budget details) and any files you upload, in order to answer your request and contact you.

With the contact form, we process your name, email, company and message in order to reply to you. If you request a callback, we also process your phone number and preferred time.

We store uploaded files in our database. Only signed-in people with access to the project in question can open them. We use these details to reply to you and to prepare a quote.

If we offer a booking link and you use it, you move to an external provider. That provider's privacy terms apply there.

For quotes, contracts, invoices and their handling, we process your contact and company details, project details, agreed prices and the status of payments.

We also send quotes, contracts and invoices through personal links. These links are signed, expire after a set period and are blocked for search engines. Anyone who has the link can open the document, so please share it only with people who may see the document. When a document is opened through such a link, we log the access.

If you accept a quote or a contract online through a personal link, we log your name, email address, IP address, the time of acceptance and a checksum of the accepted document. We store the accepted document as a PDF in our database. This also applies to quotes whose acceptance we record for you, for example after a phone call. If you reject a quote online, we store the IP address, the time and any reason you give. This log serves as proof of your decision. After you accept, we send you a confirmation with the PDF by email. If someone else accepted, the confirmation also goes to the address we have on file. Our team receives a notice with the name and email address of the person who accepted.

We store invoices as a PDF in our database when we send them. For bank transfers, we record the incoming payment with its amount, date and reference.

Online payments run through Stripe. You enter your payment details directly with Stripe. For an invoice, we pass your email address and the invoice number to Stripe. For a quote, we pass your email address, its version and the project title. Stripe sends us confirmation of the payment with the amount and a reference. Stripe also reports refunds and payment disputes to us. We book them with the amount, date and reference and inform our team by email.

For staff with an internal account, we process name, email address and role. We store passwords only as a hash.

If someone turns on two-step sign-in with one-time codes (TOTP), we store the TOTP secret in encrypted form, the last time step used and the recovery codes as a hash. The time step prevents a code from being valid twice.

For project work, we also process tasks and recorded working hours for these accounts.

The NEXT_LOCALE cookie is technically necessary and stores your language choice for one year. The internal login adds a session cookie that lasts at most 14 days.

We store your cookie choice locally in your browser (scs_cookie_consent in localStorage) so the notice does not appear on every visit. You can change it at any time using the “Cookie settings” link in the page footer.

We also store your appearance choice (system, light or dark) locally in your browser (scs_theme in localStorage).

Your entries in the project assistant and your choices in the price calculator stay in your browser as a draft (sessionStorage) until you send the request or close the tab.

We load usage statistics through Vercel only after you have agreed by choosing “Accept all”. We then also record individual events, for example which project type and package you choose in the price calculator, where you click a button leading to the request, which step of the project assistant you reach, on which form field an error message appears and whether a request was sent. These events contain only these selected values, the name of the field, the number of selected features and whether a callback was requested. They contain no form entries, no name and no email address.

Sentry (error monitoring) and Cloudflare Turnstile (spam protection in forms) run regardless of this choice.

We keep data only as long as necessary for these purposes or as required by statutory retention duties. Requests and project documents may be kept longer for handling quotes and contracts.

We keep invoices, accepted quotes and contracts and accounting records for the statutory period of 10 years (Art. 958f CO). If you ask us to delete your data, we remove your personal data from our system. These records stay unchanged until the period ends. The acceptance log remains as evidence for these records. If the stored PDF of an older document is missing, we generate it afterwards before removing your data and mark it accordingly.

We back up our database every night. The backups contain all data, including customer files and documents. They are created at GitHub and stored there in encrypted form. They are deleted automatically after 35 days. Until then, deleted or anonymized data may remain in older backups. Our database provider Neon can also restore earlier states for a limited time, and deleted data stays there until that time has passed.

Under the FADP you have the right to access, rectification, erasure, restriction of processing and, where applicable, data portability.

You may object to processing based on overriding interests where there are grounds worthy of protection. You also have the right to lodge a complaint with the competent supervisory authority.

Data subjects in the EU may assert additional rights under the GDPR where it applies.

Where data is transferred to countries without an adequate level of data protection (for example the USA with cloud providers), we rely on suitable safeguards such as standard contractual clauses and, where necessary, additional technical measures.

We may update this privacy policy. The version published on this website with its date applies.