| Company | GSS Analytics Ltd |
| Trading as | SimBalkan |
| Address | 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom |
| Company Number | 15429646 |
| Registered in | England & Wales |
| info@simbalkan.com |
This notice explains which data we process when you buy an eSIM, why we do so and what rights you have.
The controller is the company named above, GSS Analytics Ltd, trading as SimBalkan, reachable at the address and e-mail address above. We are not required to appoint a data protection officer.
Your e-mail address, the order data (destination, plan, amount, time, language) and the technical identifier of the eSIM issued to you. In addition, whatever you write to us in a support request. Payment details such as card numbers never reach us — they are handled solely by our payment provider. As with any web server, connection data occurs when you open the site (IP address, time, page requested).
To perform the contract (Art. 6(1)(b) GDPR): process the order, deliver the eSIM, send usage notices, provide support. On the basis of legitimate interest (f): secure operation of the site, fraud and abuse prevention, accounting. On the basis of your consent (a), where you give it: audience measurement and measurement of advertising performance.
Stripe processes the payment. To issue the eSIM we pass the order to the respective network wholesaler — without your name, using a technical identifier only. E-mail is sent through IONOS. For audience and advertising measurement we use Google Analytics and Google Ads. There are no other recipients. We do not sell data and do not pass it to third parties for advertising.
Strictly necessary cookies keep your session and basket. The cookie sb_ref remembers for up to 30 days which partner link you arrived through, so that commission is attributed correctly. The cookie sb_gcl stores the click identifier of a Google ad so a purchase can be attributed to the right ad. Analytics and advertising cookies are set only with your consent.
Order and invoice data are kept for as long as commercial and tax law requires. Support requests are deleted once they are resolved and no follow-up is expected. Web server connection data is deleted or shortened after a short period.
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Consent once given can be withdrawn at any time with effect for the future. An e-mail to the address above is enough. You may also lodge a complaint with a data protection supervisory authority.