Simple Websites

GDPR-Compliant Privacy Notice for Simple Websites

Information: This Model Notice is for websites that do not process any personal data, do not use cookies or tracking technologies, and only handle information voluntarily provided by the visitor. This policy may be used without implementing a Consent Management Platform (CMP).

Last Updated: September 28, 2025

1. Summary: Core Principles

We don't process any personal data on this website. We don't use cookies or any tracking technologies to collect your information, and we don't have user accounts. The only time we handle personal data is when you choose to give it to us by directly contacting us. We're committed to keeping this a private and simple browsing experience.

2. Types of Personal Data We Collect

We do not collect any personal data from you when you visit this website. The only personal data we may handle is information you voluntarily provide to us when you contact us through a provided email link, phone number, or a contact form. This may include your name, email address, phone number, and the content of your message.

3. Purposes and Legal Basis for Processing

We process the personal data you voluntarily provide to us for the sole purpose of responding to your inquiries. The legal basis for this processing is our legitimate interest in communicating with you to answer your questions or requests.

4. Cookies and Tracking Technologies

We do not use cookies or any other tracking technologies on this website. Our site does not have any features that require us to track your behavior for advertising, analytics, or any other purpose.

5. Recipients of Your Personal Data

We do not sell your personal data. We will not share your personal data with any third parties unless it's necessary to reply to your inquiry. In such cases, only the minimum information required to complete the operation will be shared.

If we transfer your data to a country outside of the EU/EEA, we will ensure that it is done using appropriate data protection safeguards, such as Standard Contractual Clauses (SCCs).

6. Data Retention

We retain your personal data for as long as necessary to address your inquiry and for a short period thereafter for our records. Your data will be deleted once it's no longer needed for this purpose.

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data.

• Rectify inaccurate data.

• Erase your data (the "right to be forgotten").

• Restrict or object to processing.

We do not use any automated decision-making, including profiling, that produces a legal or similarly significant effect on you. To exercise these rights, please contact us using the details below.

8. Changes and updates to this policy

This GDPR-compliant Model Privacy Policy Notice is regularly reviewed. Only the latest version, which is currently applicable, is published on the SME Privacy website (www.smeprivacy.org).

9. Contact Information and Supervisory Authority

For any questions or concerns regarding this notice or our data processing activities, you can contact us at the email address provided in our Data Protection Clause. You also have the right to lodge a complaint with a Data Protection Authority (https://www.edpb.europa.eu/about-edpb/about-edpb/members_en).

—

SME Privacy’s Recommended Data Protection Clause to be Embedded on your Website:

"Data Protection: we use a Privacy Policy for Simple Websites developed by SME Privacy. You can read it at https://www.smeprivacy.org/notice/simple-websites. This policy, along with the details below, explains how we process your personal data.

Controller: For all enquiries regarding your personal data, please contact [FULL NAME (sole proprietor) or COMPANY NAME (registered company)] at [EMAIL ADDRESS]."

Optional Clauses to be Included as Applicable:

• EU Representative: If you're based outside of the EU/EEA, please also mention the identity and contact details of the controller's EU Representative.

• Data Protection Officer: Where applicable, please also mention the identity and contact details of the controller's Data Protection Officer.