Privacy Policy

1. Controller

The controller for this website and the Keep it Simple Booking service is:

2. Purpose of this website

Keep it Simple Booking is a service for businesses and commercial users. This website serves to provide information about the product, enable contact, demo requests and the conclusion of B2B services.

3. What data we process

Depending on how you use this website or our service, we process in particular:

• Contact data such as name, email address, phone number
• Company-related information
• Contract and billing data
• Technical data such as IP address, browser information and server logs
• Content you submit via forms, demo requests or support requests

4. Purposes of processing

We process data in particular to:

• Respond to inquiries
• Provide demos
• Prepare, conclude and execute contracts
• Provide support
• Ensure the security and stability of the website and the product
• Comply with legal obligations

5. Legal basis

Where the GDPR applies, we process data in particular on the basis of:

• Art. 6(1)(b) GDPR (contract / pre-contractual measures)
• Art. 6(1)(f) GDPR (legitimate interest in secure and efficient operations)
• Art. 6(1)(c) GDPR (legal obligations)

6. Hosting

The product (the booking platform) is hosted on servers in the EU. Where we use external technical service providers for hosting or infrastructure, they process data exclusively on our behalf and according to our instructions. This website itself is hosted with Vercel; you can find more details in the following section.

7. Vercel (hosting of this website and web analytics)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (“Vercel”). When you visit the website, Vercel automatically processes technical data such as your IP address, date and time of access, browser and device information, and server logs. This processing is necessary to deliver the website and to ensure its security and stability. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR). Vercel acts as our processor; we have concluded a data processing agreement with Vercel.

In addition, we use Vercel Analytics – but only if you have given your prior consent. Vercel Analytics works without cookies and produces anonymized, aggregated statistics about the use of the website (e.g. page views); no personal usage profile is created. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future. For information on data transfers to the USA, see the section “Data transfers to the USA”.

8. Google Tag Manager

We use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to integrate and manage website tags. Google Tag Manager is only loaded after you have consented to analytics or marketing cookies – without your consent, no connection to Google is established. The Tag Manager itself does not set cookies and does not create a usage profile; when it loads, however, technically necessary connection data – in particular your IP address – is transmitted to Google. We also pass on your consent choice (Google Consent Mode) so that services integrated via Tag Manager can only run within the scope of your consent. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings with effect for the future. Any services integrated via Tag Manager are described separately in this privacy policy. For information on data transfers to the USA, see the section “Data transfers to the USA”.

9. Google Analytics 4

To measure reach we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics is integrated via Google Tag Manager and is only loaded after you have consented to analytics or marketing cookies – without your consent no measurement takes place. Google Analytics sets cookies and processes in particular your shortened IP address, information about your device and browser, the pages you visit as well as the time and duration of your visit. We additionally transmit two events: an enquiry via our contact form (only the language of the page and the type of business you indicated are transmitted) and a completed purchase (the amount paid, the currency, the selected plan, the billing interval and an identifier for the purchase are transmitted). We do not transmit your name, your email address or your payment details. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings with effect for the future. The data collected by Google Analytics is deleted at user and event level after 14 months. You can additionally prevent collection by installing the browser add-on provided by Google (https://tools.google.com/dlpage/gaoptout). For information on data transfers to the USA, see the section “Data transfers to the USA”.

10. Google Ads and conversion measurement

We advertise with Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), and measure whether an ad led to an enquiry or a purchase. This service is also integrated via Google Tag Manager and is only loaded after you have consented to marketing cookies. If you reach this site via one of our ads, Google sets a cookie containing a random identifier. If you subsequently complete an enquiry or a purchase, this event is reported to Google – in the case of a purchase together with the amount paid, the currency and an identifier for the purchase, so that the same purchase is not counted more than once. This tells us how many enquiries and purchases result from ads; it does not allow us to determine which individual person clicked an ad. We do not transmit your name, your email address or your payment details. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings with effect for the future. A purchase can be attributed to an ad click for up to 90 days after that click (purchase attribution window). For information on data transfers to the USA, see the section “Data transfers to the USA”.

11. Resend (email delivery)

To send transactional and confirmation emails – for example after a contact or demo request – we use the service Resend, provided by Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA (“Resend”). Resend processes the data required for delivery, in particular your email address, your name and the content of the respective message. Resend acts as a processor exclusively on our behalf and according to our instructions; we have concluded a data processing agreement with Resend. The legal basis is the handling of your request or the implementation of pre-contractual measures (Art. 6(1)(b) GDPR) as well as our legitimate interest in reliable email delivery (Art. 6(1)(f) GDPR). For information on data transfers to the USA, see the following section.

12. Data transfers to the USA

With Vercel (hosting of this website, web analytics) and Resend (email delivery), we use service providers based in the USA. As a result, personal data may be transferred to the USA. Under data protection law, the USA is considered a third country. To safeguard these transfers, we have agreed the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) with these providers; where a provider is certified under the EU-US Data Privacy Framework, the transfer is additionally based on the adequacy decision of the EU Commission (Art. 45 GDPR). Beyond this, we do not transfer personal data to the USA.

13. Payment processing

Payments are processed through external payment service providers. The data required for payment is processed directly by the respective payment provider. We generally only receive the information we need for allocation and processing.

14. Communication / Forms / Demo

When you contact us, request a demo or start a purchase, we process the data you enter to handle your request, set up your access and fulfil the contract. If you separately and voluntarily consent to product updates, we also store the consent wording and version, language, source and time until you withdraw your consent. You can unsubscribe at any time.

15. Recipients / Service providers

We only share data with service providers that are necessary for the operation of the website or the service, in particular in the areas of:

• Hosting / Infrastructure
• Payment processing
• Email delivery
• Technical maintenance and security

16. Storage duration

We store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations.

17. ID documents

ID copies, passport scans and ID photos are not collected by default. If a site uses online check-in with ID verification — for example because of local registration duties — the guest uploads the image there. As controller, the site decides on collection, legal basis and retention period; we store the file solely on its behalf on servers in the EU and delete it on its instruction.

18. Your rights

Where the GDPR applies, you have, within the framework of the legal requirements, in particular the right to:

• Access
• Rectification
• Erasure
• Restriction of processing
• Objection
• Data portability

You can send related requests to info@keepitsimplebooking.com.

19. Security

We take appropriate technical and organizational measures to protect personal data. However, complete security of all systems cannot be guaranteed.

20. Changes

We may update this privacy policy if required for legal, technical or operational reasons.