Privacy policy

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Hafiz M. Waqas
Kurt-Schumacher-Str 60
82256 Fürstenfeldbruck
Germany

Email: contact@simwize.com

You may contact me at any time regarding data protection matters.

2. Hosting and server log files

This website is hosted by Namecheap, Inc. (“Namecheap”).

When you access this website, the following data may be automatically collected and stored in server log files:

  • IP address
  • Date and time of access
  • Requested page/file
  • Referrer URL (if applicable)
  • Browser type and version
  • Operating system

This processing is necessary to ensure the security, stability, and proper functioning of the website.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technical operation and security of the website).

Namecheap acts as a data processor and processes data only as necessary to provide hosting services under a data processing agreement.

Data may be processed on servers in the EU and/or USA. Where data is transferred outside the EU/EEA, appropriate safeguards such as Standard Contractual Clauses are applied.

3. Contact (email or contact form)

If you contact me, I process the following data:

  • Name
  • Email address
  • Content of your message

This data is used solely to respond to your request.

Legal basis:

  • Art. 6(1)(b) GDPR (pre-contractual communication), and/or
  • Art. 6(1)(f) GDPR (legitimate interest in communication)

Data is stored only as long as necessary to handle your request, unless legal retention requirements apply.

4. Customer accounts, orders and course access

If you create an account or buy a course, I process your name, email address, password (stored hashed), the billing details you enter (address and phone are optional), order and invoice data, and your course progress. Purpose: creating your account, delivering the course, processing payment and issuing invoices. Legal basis: Art. 6(1)(b) GDPR. Invoices are kept as required by tax law (Art. 6(1)(c) GDPR), currently 8 years. Other account data is deleted when you ask me to close your account. Payments are processed by Stripe Payments Europe, Ltd. (Ireland). Course videos are delivered by bunny.net (BunnyWay d.o.o., Slovenia), which receives your IP address when a video plays.

5. WizeROM online demo

When you use the demo at demo.simwize.com, I process your email address, a one-time verification code, your IP address, timestamps, the number of models you built, the CSV files you upload and the resulting model. Purpose: providing the demo you requested and preventing misuse (limit of 5 models per email). Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (protection against misuse). Uploaded CSV files are processed in memory only, are never saved to disk, and are discarded when your session ends. The model is deleted after 24 hours. I also store the time and version of your acceptance of the demo terms. Your email address, IP address, model counter and this acceptance record are deleted after 12 months, unless you subscribed to marketing emails (see section 7). Server access logs are kept for a maximum of 30 days. Database backups are kept for a maximum of 14 days, so deleted data may remain in a backup for up to that period. Please do not upload confidential or personal data.

6. WizeROM license verification

If you buy a WizeROM license, I store your email address together with your license key, the sales channel, the issue date and a revocation status. When you use the software, it sends your license key and a hashed device identifier to my license server (api.simwize.com) to check that the license is valid. The device identifier is a one-way hash computed on your computer from hardware and system details. The underlying details are not transmitted. The server stores the hashed device identifier, the time of first activation and the time of the last check. Like any internet request, your IP address is visible to the server and is stored in server log files for up to 30 days. Purpose: performing the contract and preventing unauthorized use. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR. This data is stored for the license period and afterwards only as required by law.

7. Marketing emails

I send occasional news and offers about Simwize courses, tools and services by email only if you consent (Art. 6(1)(a) GDPR). You give consent by ticking the optional checkbox at the demo signup and confirming via the link in a confirmation email. To prove your consent, I store your email address, the time and IP address of your request and confirmation, and the text you agreed to. This data is stored until you withdraw consent. You can withdraw consent at any time via the unsubscribe link in every email or at contact@simwize.com. After withdrawal, your email address is kept only on a block list so that you receive no further emails (Art. 6(1)(f) GDPR). Withdrawal does not affect earlier processing.

8. Cookies and analytics

This website uses cookies required for technical operation and consent management.

This website currently does not use Google Analytics or advertising cookies. If analytics tools are added later, they will only be activated after consent through the cookie banner.


You may change or withdraw your cookie consent at any time through the cookie settings on this website.

9. Data recipients

Data is shared only with service providers needed to operate the website, courses, payments and demo: Namecheap (hosting), Stripe (payments), bunny.net (video delivery) and netcup GmbH, Karlsruhe, Germany (demo server, hosted in Nuremberg). netcup uses Anexia Cloud Solutions GmbH and Anexia Holding GmbH (Austria) for infrastructure and support services. They process data under contracts or their own data protection terms. Where data is transferred outside the EU/EEA, appropriate safeguards such as Standard Contractual Clauses are applied.

10. Data security

Appropriate technical and organizational measures are in place to protect personal data, including SSL/TLS encryption.

11. Your rights

You have the following rights under GDPR:

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Objection

Where processing is based on consent, you can withdraw it at any time. You also have the right to lodge a complaint with a supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

12. Changes

This Privacy Policy may be updated to reflect legal or technical changes. The current version is always available on this website.

Scroll to Top