We, Simba Express a trading name of Simba Solution Limited ("Simba Express"), take the protection of your privacy and your personal data very seriously. We therefore attach great importance to ensuring that your data is secure, and that data processing complies with the applicable data protection regulations, in particular the UK`s Data Protection ACT 2018 (DPA), the General Data Protection Regulation (GDPR). Furthermore, we ensure through technical and organisational measures that your data is optimally protected against unauthorised access by third parties.
This data protection notice applies to the online offer of Simba Express and our IOS and Android mobile application.
Personal data
Personal data is personal information that allows a conclusion to your identity. This includes, for example, information such as your name, address, telephone number or e-mail address, but also information about your surfing behaviour, insofar as this information can be directly or indirectly assigned to you.
In principle, you can use the Simba Express website without disclosing your personal data. When you however for example want to send a parcel, you will be asked to enter the sender and recipient. Furthermore, you can log in with your Simba Express account if you wish to enjoy certain advantages when using the Simba Express service.
Collection of protocol data
Each time the Simba Express website is accessed, certain data of the calling end device is automatically collected by our web servers and temporarily stored. The following data is collected:
This data is collected exclusively to ensure the functionality of the website. Furthermore, the data serves to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Provision of the app and creation of log files
The legal basis for the processing of your personal data in the context of the provision of the app and the creation of log files is our legitimate interest. The temporary storage of your personal data by us is necessary to enable delivery of the App's functionality. For this purpose, your personal data must be stored for the duration of the session. Data that may be collected when using the App, i.e. IP address, IP location, Geolocation, type and version of the end device used, information on the mobile network used, time zone settings, operating system and platform. The storage of your personal data in log files is done to ensure the functionality of the App. In addition, we use your personal data to optimise the App and to ensure the security of our information technology systems. Your personal data is not processed in any other way.
Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of your personal data for the provision of the App, this is given as soon as you close the App. In the case of storage of your personal data in log files, these are deleted after 30 days at the latest. If the data is stored beyond this period, your personal data will be anonymised so that it can no longer be assigned. The collection of your personal data for the provision of the App and the storage of your personal data in log files is absolutely necessary for the operation of the App. Consequently, there is no possibility for you to object.
General technical organisational measures
Simba Express has taken a variety of security measures to protect personal information to an appropriate extent and adequately. All information held by Simba Express is protected by physical, technical, and procedural measures that limit access to the information to specifically authorised persons in accordance with this Privacy Policy.
The Simba Express website is behind a software firewall to prevent access from other networks connected to the Internet. In addition, only employees who need the information to perform a specific job are granted access to personally identifiable information. These employees are trained in security and privacy practices and treat your information confidentially.
Secure transfer of your data
In order to best protect the data, we store against accidental or intentional manipulation, loss, destruction or access by unauthorised persons, we use appropriate technical and organisational security measures. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.
The exchange of data to and from our website is always encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols.
In addition, we offer our users content encryption as part of the contact forms and for applications. The decryption of this data is only possible for us. In addition, there is the option of using alternative communication channels (e.g., the postal service).
Transmission and disclosure of personal data
In the course of our processing of personal data, it may happen that the data is transmitted to other bodies, companies, legally independent organisational units or persons or that it is disclosed to them. Recipients of this data may include, for example, payment institutions in the context of payment transactions, service providers commissioned with IT tasks or providers of services and content that are integrated into a web site. In such cases, we observe the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.
Data processing in third countries
If we process data in a third country (i.e., outside the United Kingdom) or the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, this will only be done in accordance with the legal requirements.
Subject to express consent or contractually or legally required transfer, we only process or have data processed in third countries with a recognised level of data protection, contractual obligation through so-called standard contractual clauses, in the presence of certifications or binding internal data protection regulations.
Economic analyses and market research
For business reasons and in order to be able to recognise market trends, wishes of contractual partners and users, we analyse the data we have on business transactions, contracts, inquiries, etc., whereby the group of persons concerned may include contractual partners, interested parties, customers, visitors and users of our website.
The analyses are carried out for the purpose of business evaluations, marketing and market research (e.g., to determine customer groups with different characteristics). In doing so, we may, if available, take into account the profiles of registered users together with their details, e.g., regarding services used. The analyses serve us alone and are not disclosed externally, unless they are anonymous analyses with summarised, i.e., anonymised values. Furthermore, we take the privacy of the users into consideration and process the data for the analysis purposes as pseudonymously as possible and, if feasible, anonymously (e.g., as summarised data).
Processing of personal data when using the offered services
Personal data will be collected, processed or used ("used") in connection with the services offered. This is always done in compliance with the provisions of the DPA and the GDPR. Insofar as we use your personal data for a purpose that requires your consent according to the legal provisions, we will always ask for your express consent.
Administration, financial accounting, office organisation, contact management
We process data in the context of administrative tasks as well as organisation of our operations, financial accounting and compliance with legal obligations, such as archiving. In this regard, we process the same data that we process in the course of providing our contractual services. The processing bases are Article 6 (1) (c) GDPR, Article 6 (1) (f) GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organisation, archiving of data, i.e., tasks that serve the maintenance of our business activities, performance of our tasks and provision of our services. The deletion of data with regard to contractual services and contractual communication corresponds to the data mentioned in these processing activities.
In this context, we disclose or transfer data to the tax authorities, consultants, such as tax advisors or auditors, as well as other fee offices and payment service providers.
Furthermore, based on our business interests, we store information on suppliers, event organisers and other business partners, e.g., for the purpose of contacting them at a later date. This data, most of which is company-related, is generally stored permanently.
Your Simba Express account
You have the option of logging in with your Simba Express account ("Simba Express account") or registering for it. To register, we ask you to provide your name, and e-mail address. Furthermore, you can optionally provide additional data.
We process the personal data collected within the scope of the Simba Express account in order to provide you with the aforementioned functionalities.
The legal basis for data processing in connection with the www.simba-express.com account is Art. 6 Para. 1 lit. b GDPR and, if you have given us your consent for the processing of your personal data, Art. 6 Para. 1 lit. a GDPR. Furthermore, the individualisation of our online presence (website and newsletter) is processed on the basis of Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest lies in the improvement of our online presence and services.
If you wish to delete your Simba Express account completely, you can do so easily in your Simba Express account via the Simba Express App or at www.simba-express.com. You can also delete your data yourself here. You can also correct your data yourself here.
Shipment tracking and requested delivery
To use the shipment tracking function at www.simba-express.com, you can enter the order number, shipment number or receipt number of the respective shipment. If the number entered is known in the Simba Express system, information on the progress of the shipment will be displayed. To protect your privacy, no specific sender or recipient data will be displayed without further identification.
You can also use the Simba Express delivery request service at www.simba-express.com, for example, to specify a preferred neighbour or a preferred delivery location for your parcel. We use this data exclusively to provide you with the requested services and delete it as soon as its storage is no longer necessary for the provision of the respective service and, if applicable, the statutory limitation periods have expired.
The legal basis for the collection and processing of data in this context is Article 6 (1) (b) of the GDPR and, if you provide personal data in the context of the requested delivery that is not absolutely necessary for the delivery of the item (e.g., e-mail address), Article 6 (1) (a) of the GDPR.
Parcel notification and digital notification
You will receive a parcel notification and a digital notification card from us by e-mail, provided that your e-mail address has been legitimately transmitted to us for this purpose. If you no longer wish to receive both from Simba Express, you can unsubscribe directly using the "Unsubscribe" link. Alternatively, you can unsubscribe directly here. Please note that we will then not be able to inform you if we have delivered a shipment to a neighbour, for example.
Simba Express Newsletter
If you have registered for this, we will occasionally send you the Simba Express newsletter with many interesting offers and information by e-mail. The legal basis for the data processing is Art. 6 Para. 1 lit. a GDPR and, if applicable, Art. 6 Para. 1 lit. f GDPR.
You can unsubscribe at any time, for example by clicking on the link provided at the bottom of the newsletter, in the Simba Express App or on www.simba-express.com. After unsubscribing, your personal data transmitted in this context will be blocked immediately and deleted after expiry of the statutory storage periods.
To send the Simba Express newsletter, we use external service providers who also process your data for us for these purposes and with whom we have concluded an agreement on order processing. Your data will not be used for other purposes or passed on to third parties.
Our newsletter may contain so-called tracking pixels, which enable an evaluation of the user reach. The evaluation is automated and anonymised, so that no personal reference is made. If you have created a Simba Express account, the newsletter may also contain individual content based on your Simba Express account data (parcel classes used, number of parcels received, last login). The legal basis for data processing in this context, insofar as this is necessary, is Art. 6 Para. 1 lit. f. GDPR. Our legitimate interest for the processing lies in the measurement of the effectiveness of our advertising measures and thus of our invested capital as well as in the improvement of our online presence and services.
Use of cookies and other technologies
The Simba Express website uses cookies. By clicking on the "OK" button of the cookie banner or by selecting the settings individually, you consent to Simba Express storing data on your terminal device (e.g., by setting cookies) or retrieving data from your terminal device. Cookies are small text files that can be stored in the internet browser or by the internet browser on the user's end device. Cookies regularly contain a characteristic string of characters that enables the browser or terminal device to be uniquely identified when the website is called up again. For more information, please refer to our Cookie Policy.
Google Maps
We use Google Maps to enable you to search for the location of our partners in your vicinity and to view, for example, opening hours and other parcel shop services. Google Maps is a web service for displaying interactive maps in order to visually present geographical information. The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). The duration of storage depends on your Google settings. Further information can be found here: https://support.google.com/maps/answer/6258979
Recipients or categories of recipients
Personal data will be disclosed in case of legal obligations (e.g., to investigating authorities). Furthermore, certain services on this website (e.g., statistical data analysis or newsletter dispatch) are provided by IT service providers who collect data for these purposes or to whom we forward data for these purposes. The personal data concerned is processed by our external service providers exclusively on our behalf in accordance with strict contractual criteria - including criteria for confidentiality. The service providers also provide sufficient guarantees that appropriate technical and organisational measures are implemented in such a way that the processing is carried out in accordance with the requirements of the GDPR.
Contacting us
If you contact us via a contact form, by telephone, or e-mail, the personal data you provide will be collected and stored. If you contact us by telephone, we may also ask you for your consent to record the conversation for training purposes.
We use the data collected exclusively for the purpose of answering your enquiry and for other purposes stated when collecting the data. If this is necessary to answer your enquiry, we will also transfer the data to the Simba Express partner concerned.
We delete the data accruing in this context after the storage is no longer necessary for the purpose of the contact, or - in the case of statutory retention obligations - restrict the processing.
The legal basis for data processing is Art. 6 Para. 1 lit. b GDPR if the contact is made in connection with the Simba Express account, a parcel label created or is otherwise contractually related. If we record your conversation with our customer service for training purposes with your consent, the legal basis is Article 6 (1) (a) of the GDPR. Otherwise, the legal basis is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest in processing data is to be able to respond to contact enquiries.
If the processing of your personal data in connection with your contact request was based on our legitimate interests, you have the right to object to the processing of your personal data at any time. In the event of an objection, correspondence cannot be continued. All personal data collected in this context will be deleted in the event of a justified objection.
If you have given us your consent to record the telephone conversation for training purposes, you can revoke this consent at any time with effect for the future.
Online Payment, Secure data transmission and Credit card information
The transmission of your personal information during an order transaction is encrypted using industry standard Secure Socket Layer ("SSL") technology, (SSL encryption version 3). Any credit card information you provide will not be stored by us but will be encrypted and collected directly from our payment service provider via hypertext transfer protocol secure ("https"). We may share information with our payment service providers, and you may need to provide credit or debit card information directly to the provider in order to process payment details and authorise payment following a secure link. The information which you supply to in such cases is not within our control and is subject to our payment service provider’s own Privacy Notice and Terms and Conditions.
Reach measurement, statistical analyses, optimisation of the website
We process the necessary data to analyse how the entirety and/or large groups of our customers and interested parties use our website. This is necessary to create internal evaluations and reports, to adapt our web offer and to ensure an optimal user experience at all times. In this context, we process data on how you access our website as well as data on how you interact with our website and services.
The processing of your data in connection with the use of tracking technologies is based on various legal bases. Insofar as data processing takes place in order to be able to provide you with a service you have requested, this is based on Art. 6 (1) (b) GDPR. Insofar as the data processing is carried out in order to ensure the functionality of our website, to optimise our services, to determine characteristics about the use of the website and to enable correct commission accounting, this is based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR. Insofar as data processing is carried out in order to be able to show you optimised and personalised advertising and content, this is based on your prior consent in accordance with Art. 6 (1) lit. a GDPR.
When you send a data subject access request
The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of the data subject access request is both our legitimate interest and our legal obligation. The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfil the legally required accountability.
Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process. You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.
Legal defence and enforcement of our rights
The legal basis for the processing of your personal data in the context of legal defence and enforcement of our rights is our legitimate interest. The purpose of processing your personal data in the context of legal defence and enforcement of our rights is the defence against unjustified claims and the legal enforcement and assertion of claims and rights.
Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The processing of your personal data in the context of legal defence and enforcement is mandatory for legal defence and enforcement of our rights. Consequently, there is no possibility for you to object.
Social Media
The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc. are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is our legitimate interest. The data processing is carried out in the interest of our public relations and communication.
If you wish to object to certain data processing over which we have an influence, please contact us. We will then examine your objection. If you send us a request on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the response required. You always have the option of sending us confidential enquiries to our address stated in the imprint.
As already stated, where the social media platform provider gives us the opportunity, we take care to design our social media pages to be as data protection compliant as possible. With regard to statistics that the provider of the social media platform makes available to us, we can only influence these to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we can unfortunately hardly influence the web tracking methods of the social media platform. We cannot, for example, switch this off.
Please be aware: It cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.
Authorisations and Access
We may request access or permission to certain functions from your mobile device. The legal basis for data processing is our legitimate interest and the provision of contractual or pre-contractual measures. You can deactivate push notifications at any time via Settings/Messages (iOS) or Settings/Notifications/ (Android). Push notifications for advertising purposes will only be sent to you if you have given your prior consent. The legal basis for sending promotional push notifications is consent. Deactivation is also possible via Settings/Messages (iOS) or Settings/Apps/ (Android).
Uninstall
You can stop all information collection by our App by uninstalling it using the standard uninstall process for your device. If you uninstall the app from your mobile device, the unique identifier associated with your device will continue to be stored. If you re-install the application on the same mobile device, we will be able to re-associate this identifier to your previous transactions and activities.
Your rights
With regard to your personal data, you are generally entitled to the following rights vis-à-vis Simba Express:
You can exercise your right of revocation against the usage analyses and tracking measures described above at any time in accordance with the instructions above.
If you wish to have your personal data deleted, we may be required to store this data for a certain period due to legal retention obligations, for example for tax or accounting purposes. In this case, we will delete the data immediately after the storage period has expired.
If your personal data has been recorded incorrectly, you can have this corrected at any time. The quickest and easiest way to make the correction is directly in your Simba Express account.
Contact Details and Data Controller
If you have any questions about the collection, processing, or use of your personal data, or if you wish to request information, corrections, deletions, processing restrictions, objections or the transfer of your data, please contact:
Simba Express a trading name of Simba Solution Limited
71-75 Shelton Street,
Covet Garden,
London, WC2H 9JQ
United Kingdom
www.simba-express.com
info@simba-express.com
Please make sure to provide us with your full contact details (first name, last name and address) when submitting your enquiry. This is the only way we can clearly identify you and answer your enquiry.
Right to complain
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by Simba Express. The competent supervisory authority in connection with our services is The Information Commissioner’s Office (ICO) in the UK. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.