Privacy policy
Last updated: 23 September 2026 · Applies to the website voxio.simrelay.com
This policy explains what happens to personal data when you visit this website. It does not describe the Voxio telephony service itself — customers receive a separate data processing agreement under Article 28 GDPR for that.
1. Controller
SIMRelay GmbHLilienthalstr. 5c
12529 Schönefeld
Germany
office@simrelay.com
Represented by Aleksander Koleski, Managing Director. Full company details are in our imprint.
Data protection officer
[TODO: Either name your DPO with contact details, or delete this section. A DPO is mandatory under § 38 BDSG only if you permanently employ at least 20 people processing personal data by automated means, or if Article 37 GDPR applies.]
2. Hosting and server log files
This website runs on the Cloudflare Workers platform of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, and its European edge locations. When you open a page, your browser necessarily transmits technical data that Cloudflare processes to deliver the page and to protect the service against attacks:
- the IP address of the requesting device
- date and time of the request
- the requested path, HTTP status and amount of data transferred
- the referring URL, browser type and version, and operating system
This processing is necessary to provide the website and is in our legitimate interest in a secure, stable and efficiently delivered website (Article 6 (1) (f) GDPR). We do not merge this data with other sources and we do not use it to identify individual visitors.
Cloudflare acts as our processor under Article 28 GDPR. Data may be processed on servers in the United States. Cloudflare, Inc. is certified under the EU–US Data Privacy Framework, and we have additionally concluded the European Commission's standard contractual clauses with Cloudflare. Cloudflare's own privacy policy is available at cloudflare.com/privacypolicy.
3. Fonts and other assets
All fonts, stylesheets and images used on this website are delivered from our own domain. No connection to Google Fonts or any other third-party content delivery network is established when you open a page, so no data is transmitted to such providers.
4. Consent management
On your first visit we ask whether you agree to optional analytics. Until you agree, only the technically necessary processing described in section 2 takes place.
Your decision is stored in your browser's local storage under the key
voxio-consent, together with the date it was given. This storage is
necessary to honour your choice on subsequent visits and is based on Article 6 (1) (c)
and (f) GDPR in conjunction with § 25 (2) no. 2 TDDDG. The entry is not transmitted to
us as a cookie and expires after twelve months, after which we will ask again.
You can withdraw or change your decision at any time with effect for the future:
5. Google Tag Manager and web analytics
Only if you have given your consent do we load Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager itself is a tag management system: it loads the analytics tags we have configured and does not create profiles of its own, but it does process your IP address in order to be delivered.
Where tags loaded through Google Tag Manager set cookies or similar identifiers,
they do so only within the scope of the consent you have given. We operate Google
Consent Mode v2: before consent, all consent signals
(analytics_storage, ad_storage, ad_user_data,
ad_personalization, functionality_storage,
personalization_storage) are set to denied, and they are only
updated to granted after you agree.
The legal basis is your consent under Article 6 (1) (a) GDPR and § 25 (1) TDDDG. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework. Google's privacy policy is available at policies.google.com/privacy.
[TODO: If your Tag Manager container loads Google Analytics 4, Google Ads conversion tracking, Meta Pixel, LinkedIn Insight Tag or similar, list each of them here with provider, purpose, cookie lifetime and legal basis. A container is not a sufficient description on its own.]
6. Contacting us by email
If you write to us at the address shown on this website, we process your email address, your name and the content of your message in order to answer you. Where your enquiry concerns a contract or its preparation, the legal basis is Article 6 (1) (b) GDPR; otherwise it is our legitimate interest in answering enquiries addressed to us, Article 6 (1) (f) GDPR.
We keep such correspondence until it is no longer needed for the purpose it was sent for, and delete it at the latest when statutory retention periods under commercial and tax law (generally six or ten years) have expired.
7. Recipients of data
Apart from the providers named above, we pass personal data on only where we are legally obliged to, or where it is necessary to assert or defend legal claims. We do not sell personal data.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Article 15)
- have inaccurate data corrected (Article 16)
- have your data erased (Article 17)
- have processing restricted (Article 18)
- receive your data in a portable format (Article 20)
- withdraw consent you have given, at any time with effect for the future (Article 7 (3))
You also have the right to object at any time to processing based on Article 6 (1) (f) GDPR on grounds relating to your particular situation (Article 21 GDPR). To exercise any of these rights, write to office@simrelay.com.
9. Right to lodge a complaint
You may lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or of the alleged infringement. The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht BrandenburgStahnsdorfer Damm 77
14532 Kleinmachnow
Germany
10. SSL/TLS encryption
This site uses TLS encryption for all connections. You can recognise an encrypted
connection by the https:// prefix in your browser's address bar.
11. Changes to this policy
We update this policy when changes to our website or to the law make it necessary. The version in force is always the one published here, with the date shown at the top of the page.