Data protection

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data that can be used to personally identify you. Detailed information on data protection can be found in our data privacy statement below.

Data collection on our website

Who is responsible for data collection on this website?

The data controller for data processing on this website is:

Systec & Solutions GmbH
Phone: +49 (0)721 66351 0
E-mail: [email protected]

The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing of personal data (e.g. names, e-mail addresses, etc.).

How do we collect your data?

On the one hand, your data is collected by you providing it to us. This may be data that you enter in a contact form, for example.

Other data is collected automatically when you visit our website through our IT systems. This is primarily technical data (e.g. Internet browser, operating system, or time of page retrieval). This data is collected automatically as soon as you access our website.

What do we use your data for?

Some of the data is collected to ensure the website is displayed error-free. Other data can be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right to obtain information about the origin, recipients, and purpose of your stored personal data at any time free of charge. You also have the right to demand that this data be rectified, blocked, or erased. You can contact us at any time regarding this and other questions on the subject of data protection at the address specified in section 2 "General information and mandatory information". You also have the right to lodge a complaint to the responsible supervisory authority.

In addition, you have the right to demand that processing of your personal data be restricted in certain circumstances. Details of this can be found in the data privacy statement under "Right to restriction of processing".

Analysis tools and tools from third-party providers

Your browsing behavior may be statistically evaluated when you visit our website. This is primarily done using cookies and analysis programs. Analysis of your browsing behavior is usually anonymous; the browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Details on this can be found in our data privacy statement.

2. General information and mandatory information

Data protection

Systec & Solutions GmbH as the data controller within the meaning of data protection law takes the protection of your privacy and your personal data very seriously. We treat your personal data as confidential in line with data protection legislation as well as this data privacy statement.

A range of personal data is collected when you use this website. Personal data is data that can be used to personally identify you. This data privacy statement explains what data we collect and what we use it for. It also explains how and for what purpose this occurs.

Please note that the transfer of data on the Internet (e.g. communicating via e-mail) may involve security vulnerabilities. Complete protection of your data from access by third parties is impossible.

Information on the data controller

The data controller for data processing on this website is:

Systec & Solutions GmbH
Phone: +49 (0)721 66351 0
E-mail: [email protected]

The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing of personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to data processing

Many data processing activities are only possible with your express consent. You can revoke your consent at any time. You can simply send us an informal message by e-mail to do so. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of objection to data collection in special cases and against direct advertising (Art. 21 GDPR)

YOU SHALL HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOU PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON POINT (E) OR (F) OF ARTICLE 6(1) GDPR, INCLUDING PROFILING BASED ON THOSE PROVISIONS. THE RESPECTIVE LEGAL BASIS USED AS THE FOUNDATION FOR PROCESSING CAN BE FOUND IN THIS DATA PRIVACY STATEMENT. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING, WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU SHALL HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA SHALL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the responsible supervisory authority

In the event of violations of data protection legislation, the data subject shall have the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for issues relating to data protection regulation is the state data protection officer of the federal state in which our company is based. You can find a list of data protection officers and their contact details under the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_node.html.

Right to data portability

You shall have the right to have data which we process by automated means based on your consent or based on a contract transmitted to you or a third party in a commonly used and machine-readable format. If you request direct transfer of the data to another data controller, this will only take place insofar as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as a site operator, this site uses SSL or TLS encryption. An encrypted connection can be recognized by the browser address bar switching from "http://" to "https://" and by the padlock symbol in your browser line.

If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Access, erasure, and rectification

Within the scope of the applicable legal provisions, you have the right of access free of charge to information about your stored personal data, its origin and recipients, and the purpose of data processing and, if necessary, a right to rectification, blocking, or erasure of this data. You can contact us at any time regarding this and other questions on the subject of personal data at the address in section 2 "General information and mandatory information".

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address in section 2 "General information and mandatory information". The right to restrict processing exists in the following cases:

If you contest the accuracy of your personal data stored by us, we usually need time to verify this. You have the right to request restriction of the processing of your personal data for the duration of this verification process.

If the processing of your personal data has been or is unlawful, you can request that the data processing be restricted instead of erasure.
If we no longer need your personal data, but you require it to exercise, defend, or establish legal claims, you have the right to request that the data processing be restricted instead of erasure.

If you have raised an objection pursuant to Art. 21(1) GDPR, a balance must be made between your and our interests. As long as it has not yet been established whose interests prevail, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data may (except for its storage) only be processed with your consent or to establish, exercise, or defend legal claims or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a member state.

Objection to advertising mails

An objection is raised to the use of contact data published as part of the duty to provide site information for sending not expressly solicited advertising and information material. The operators of these web pages expressly reserve the right to take legal action in the event of unsolicited mailing of advertising information, e.g. spam mails.

Change in our data protection regulations

We reserve the right to change our security and data protection measures if this is required due to technological developments. In these cases, we will also adjust our information on data protection accordingly. Therefore, please take note of the currently valid version of our data privacy statement.

3. Statutory data protection officer

We have appointed a data protection officer for our company.

Data protection officer:
Thomas Heimhalt, DATENSCHUTZ perfect e.K., Karlsruhe
E-mail: [email protected]

4. Personal data

Personal data is information concerning your identity. This includes information such as name, address, phone number, or e-mail address. It is not required to reveal your personal data to use our website. But in certain cases, we require your name and your address as well as other information to provide the desired services.

The same is true, for example, of answering individual questions. Where this is required, we will point this out accordingly. In addition, we store and process only data which you provide us with on a voluntary basis and data if required which we automatically collect when visiting our website.

If you use the services, as a rule we only collect the data required to provide such services. If we ask you for more in-depth data, this is voluntary information. Processing personal data is done exclusively to provide the service requested and to protect one's own justifiable business interests.

As a rule, using our website is possible without providing personal data. Insofar as personal data is collected on our website (e.g. name, address, or e-mail addresses), this always takes place on a voluntary basis as far as possible. Your personal data will only be disclosed to third parties with your express consent or to our sales partners, in particular, in order to answer inquiries sent to us.

Purpose of personal data

Generally, we use the personal data provided by you to answer your inquiries, to process your orders, or to give you access to certain information or offers. Moreover, to maintain customer relationships, we or a service company commissioned by us may need to use this personal data for informing you about product offers or for carrying out online surveys, thus better addressing the tasks and requirements of our customers.

Of course, if you choose not to have your personal data used by us to support our customer relationship (especially for direct marketing or market research purposes), we will respect your choice. We will neither sell your personal data to third parties nor market it in any other way.

Intended use

We will collect, process, and use the personal data provided by you via the contact form, support form, and e-mail to [email protected] only for the purposes communicated to you. Your personal data will only be disclosed to third parties with your express consent or to our sales partners, in particular, in order to answer inquiries sent to us.

Personal data shall only be collected and passed on to state institutions or authorities entitled to receive such information within the framework of the relevant laws or where we have been obliged to do so by court order. Our employees and the service companies commissioned by us are obliged by us to maintain discretion and to comply with the provisions of the German Data Protection Act.

Children and juveniles

Persons under 18 years of age should not transmit any personal data to us without the consent of their parents or those having parental authority. We request no personal data from children or juveniles, do not collect such data or pass it on to third parties.

5. Data collection on our website

Cookies

Our websites use so-called “cookies”. Cookies are small text files and do not damage your terminal device. They are either stored temporarily on your terminal device for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted once your visit has finished. Persistent cookies remain stored on your terminal device until you delete them yourself or your web browser automatically deletes them.
In some cases, third-party cookies may also be stored on your terminal device when you access our website (third-party cookies). These enable us or you to use certain third-party services (e.g. cookies for processing payment services).
Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or displaying videos). Other cookies are used to evaluate user behavior or to display advertising.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping basket function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the storage of cookies in order to provide its services in a technically error-free and optimized manner. If corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively pursuant to Art. 6(1)(a) GDPR; consent can be revoked at any time.
You can set your browser so that you are informed about the placement of cookies and only allow cookies in individual cases, exclude accepting cookies for certain cases or in general as well as activate automatic deletion of cookies when closing the browser. Deactivating cookies may restrict the functionality of this website.
If cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the scope of this data privacy statement and, if necessary, request consent.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

• Browser type and browser version

• Operating system used

• Referrer URL

• Host name of the accessing computer

• Time of server request

• IP address

This data will not be merged with other data sources.

The basis for data processing is Art. 6(1)(b) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – the server log files must be recorded for this purpose.

Contact form/support form/manual and driver form

If you send us inquiries using the contact form/support form/manual and driver form, your information from the inquiry form including the contact data given by you there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. Your personal data will only be disclosed to third parties with your express consent or to our sales partners, in particular, in order to answer inquiries sent to us.

The data entered in the form is therefore processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. You can simply send us an informal message by e-mail to do so. The legality of the data processing activities carried out until the revocation remains unaffected by the revocation.

We will retain the data you enter in the contact form until you request that we erase it, withdraw your consent for storage, or the purpose for data storage no longer exists (e.g. after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Processing of data (customer and contractual data)

We collect, process, and use personal data only insofar as it is necessary for the establishment, content-related design, or modification of the legal relationship (personal data). This is done on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We only collect, process, and use personal data about the use of our website (usage data) insofar as this is necessary to enable the user to use the service.

The customer data collected will be erased after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Publication of job ads

Your application data is collected and processed by us electronically for the purpose of processing the application procedure. If an employment contract is concluded following your application, your transferred data can be kept by us in your personnel records for the usual organization and administration process purposes with due regard to the relevant legal regulations. If your job application is rejected, the data transferred by you will be automatically deleted two months after the announcement of the rejection. This will not apply if there are legal requirements (such as the burden of proof under the German General Act on Equal Treatment) necessitating a longer storage period or if you expressly agreed to a longer storage period in our database of all those interested.

Security

We have taken technical and organizational security measures to protect your personal data from loss, destruction, manipulation, and unauthorized access. All our employees and all persons involved in data processing are obliged to comply with the provisions of the German Data Protection Act and other relevant data protection legislation, and to handle personal data in the strictest confidence.

In the event of personal data being collected and processed, the information is transferred in encrypted form to prevent misuse of data by third parties. Our security measures are constantly being updated in line with technological developments.

6. Analysis tools and advertising

Use of Google Analytics with anonymization function

This website uses functions of the web analysis service Google Analytics. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files stored on your computer allowing you to analyze the use of the website. The information produced by the cookie through your use of this website is transferred as a rule to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization feature on this website. Your IP address is therefore shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases is the complete IP address transferred to a server from Google in the USA and shortened there. On behalf of the operator of this website, Google uses this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with the website use and Internet use. The IP address transferred by your browser within the scope of Google Analytics is not brought together with other data from Google.

Browser plugin

You can prevent the cookies from being stored by means of an appropriate setting of your browser software; please note in this case that you may not be able to use all the functions of this website completely. In addition, you can prevent Google collecting data produced by the cookie and relating to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the available browser plugin via the following link: tools.google.com/dlpage/gaoptout.

Objection to data collection

You can prevent data from being collected by Google Analytics by clicking on the following link. An opt-out cookie will be placed to prevent your data from being collected on future visits to this website

Please note that on this website the "anonymizeIp" code has been added to Google Analytics to ensure an anonymous collection of IP addresses.

Further information on the handling of user data at Google Analytics can be found in Google's privacy policy: support.google.com/analytics/answer/6004245.

Order data processing

We have concluded a contract for order data processing with Google and fully implement the stringent requirements of the German data protection authorities when using Google Analytics.

Google Adwords

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display adverts in the Google search engine or on third-party websites if the user enters certain search terms into Google (keyword targeting). Targeted adverts can also be shown on the basis of the user data available to Google (e.g. location data and interests) (target group targeting). As a website operator, we can evaluate this data quantitatively, for example by analyzing which search terms have led to our adverts being displayed and how many adverts have resulted in corresponding clicks.

The use of this service takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.

Data transmission to the USA is based on the EU Commission's standard contractual clauses. You can find details here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company has certification in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Every company certified according to the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

Google conversion tracking

This website uses Google conversion tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google and we can use Google conversion tracking to see whether the user has performed certain actions. For example, we can evaluate which buttons on our website are clicked on how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who clicked on our adverts and what actions they performed. We do not receive any information that we can use to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of this service takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.

For more information on Google conversion tracking, refer to Google's Privacy Policy: https://policies.google.com/privacy?hl=en.

HubSpot CRM

We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (hereinafter referred to as Hubspot CRM).

HubSpot CRM enables us to manage existing and potential customers as well as customer contacts, among other things. Using Hubspot CRM, we are able to record, sort, and analyze customer interactions via e-mail, social media, or telephone across different channels. The personal data collected in this manner can be evaluated and used for communication with the potential customer or for marketing activities (e.g. mailing newsletters). With Hubspot CRM, we are also able to record and analyze the user behavior of our contacts on our website.

Hubspot CRM is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring that customer management and customer communication is as efficient as possible. If corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, provided that consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) pursuant to TDDDG. Consent can be revoked at any time.

For details, refer to Hubspot's data privacy statement: https://legal.hubspot.com/privacy-policy.

Data transmission to the USA is based on the EU Commission's standard contractual clauses. You can find details here: https://legal.hubspot.com/dp-eu-data-transfers.

Order processing

We have concluded a contract on order processing for the use of the above-mentioned service. This is a contract required by data protection law that ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with GDPR.

7. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require from you an e-mail address as well as information allowing us to check whether you are the owner of the e-mail address stated and agree to receive the newsletter. Further data will not be collected or will only be collected on a voluntary basis. We will only use this data for sending the requested information and will not forward it to third parties.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can cancel the consent given in respect of storage of the data, the e-mail address as well as its use for sending the newsletter at any time, for example, via the "Unsubscribe" link in the newsletter. The legality of the data processing activities already carried out remains unaffected by the revocation.

Your data stored for the purpose of receiving the newsletter from us will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected by this.

After you have been removed from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist in order to prevent future mailings. The data from the blacklist is only used for this purpose and is not combined with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest pursuant to Art. 6(1)(f) GDPR). Storage in the blacklist is not time-limited. You can object to storage insofar as your interests override our legitimate interest.

Rapidmail

This website uses Rapidmail to send newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.

Rapidmail is a service that can be used to organize and analyze the sending of newsletters, among other things. The data you enter for the purpose of receiving the newsletter will be stored on Rapidmail's servers in Germany.

If you do not want analysis by Rapidmail, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose. You can also unsubscribe from the newsletter directly on the website.

Data analysis by Rapidmail

The e-mails sent with Rapidmail contain a so-called “tracking pixel” that connects to Rapidmail servers when the e-mail is opened for the purpose of analysis. This enables it to be determined whether a newsletter message has been opened.

Furthermore, Rapidmail can be used to determine whether and which links are clicked on in the newsletter message. All links in the e-mail are so-called tracking links that can be used to count your clicks.

For further details on the analysis functions of Rapidmail, please refer to the following link: de.rapidmail.wiki/categories/Statistics/.

Legal basis

Data processing takes place on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. The legality of the data processing activities already carried out remains unaffected by the revocation.

Storage duration

For further details, refer to the data security information from Rapidmail at: www.rapidmail.de/datensicherheit.

Conclusion of a contract for order data processing

We have concluded a contract with Rapidmail which obliges Rapidmail to protect our customers' data and not pass it on to third parties. You can view this contract under the following link: https://de.rapidmail.wiki/files/adv/muster-auftragsdatenverarbeitung.pdf.

8. Plugins and tools

YouTube with enhanced data protection

This website incorporates YouTube videos. The operator of this website is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

A connection to the YouTube servers is established when you start a YouTube video on this website. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can save various cookies on your terminal device once a video has started. YouTube can obtain information about visitors to this website using these cookies. This information is used, among other things, to record video statistics, improve user-friendliness, and prevent attempted fraud. The cookies remain on your terminal device until you delete them.

Further data processing activities over which we have no influence may be triggered when you start a YouTube video.

YouTube is used in the interest of ensuring our online presence is appealing. This represents a legitimate interest pursuant to Art. 6(1)(f) GDPR. If corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively pursuant to Art. 6(1)(a) GDPR; consent can be revoked at any time.

Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?Hl=de.

Questions, suggestions, complaints

If you have questions about our information on data protection or the processing of your personal data, you can contact our data protection officer directly. They are also available to you as a contact if you request information or in case of suggestions or complaints.

Data protection officer:

Thomas Heimhalt
Systec & Solutions GmbH
Wilhelm-Schickard-Str. 9
76131 Karlsruhe, Germany
Phone: +49 721 66351 0
E-mail: [email protected]