Privacy Policy for systec.com
Last updated: August 24, 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
systec POS-Technology GmbH
Lindberghstr. 8
82178 Puchheim
Germany
Phone: +49 89 800 04-0
Email: info@systec.com
Website: www.systec.com
2. Data Protection Officer
You can reach our Data Protection Officer via:
Data Protection Officer of systec POS-Technology GmbH
c/o systec POS-Technology GmbH
Lindberghstr. 8
82178 Puchheim
Germany
Email: info@systec.com
Please include "Data Protection" in the subject line of any inquiries directed to the Data Protection Officer.
3. General Information on Data Processing
3.1 Scope of Processing
We process personal data only to the extent necessary to provide our website, process inquiries, ensure the security of our systems, or—subject to your consent—analyze the use of our website and provide external content.
Personal data refers to any information relating to an identified or identifiable natural person. This may include, in particular, names, contact details, online identifiers, IP addresses, and information regarding the use of a website.
3.2 Legal Bases
We process personal data primarily on the basis of the following legal grounds:
Art. 6(1)(a) GDPR, where you have given your consent;
Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or to take steps prior to entering into a contract;
Art. 6(1)(c) GDPR, where processing is necessary for compliance with a legal obligation;
Art. 6(1)(f) GDPR, where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
To the extent that information is stored on or accessed from your terminal equipment, this is additionally governed by Section 25 of the Telecommunications and Telemedia Data Protection Act (TDDDG). For cookies and comparable technologies that are not technically necessary, we generally obtain your consent in accordance with Section 25(1) TDDDG. Technically necessary operations are based on Section 25(2) No. 2 TDDDG.
3.3 Retention Period
We retain personal data only for as long as necessary to achieve the respective purpose. Afterward, we erase or anonymize the data, unless statutory retention obligations, legitimate reasons for further retention, or differing service-specific retention periods apply.
4. Provision and Hosting of the Website
This website is created and hosted using the website platform Framer. The provider is:
Framer B.V.
Rozengracht 207B
1016 LZ Amsterdam
The Netherlands
When you access our website, technically necessary connection and log data are processed. This may include, in particular:
IP address of the requesting device;
Date and time of access;
Page or file accessed;
Amount of data transferred and access status;
Referrer URL;
Browser type, browser version, and operating system;
Device and network information;
Security, error, and abuse indicators.
Processing is necessary to deliver the website, ensure its stability and security, detect technical errors, and defend against attacks or abusive access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable, and user-friendly operation of our website.
Framer utilizes Amazon Web Services, among others, for its hosting infrastructure. In this context, the processing of personal data outside the European Economic Area, particularly in the United States, cannot be ruled out. Insofar as data is transferred to a third country, this is carried out, according to the provider, on the basis of an adequacy decision, in particular the EU-U.S. Data Privacy Framework, provided the respective recipient is appropriately certified, or on the basis of the standard contractual clauses of the European Commission and, where necessary, supplementary safeguards.
For further information, please refer to the Framer Privacy Policy and the Framer Data Processing Addendum.
5. Consent Management and Cookie Settings
We use Framer's consent management features to provide you with information regarding services that require consent, to obtain your choices, and to technically implement your selected settings.
In this context, the following information in particular may be processed:
Consent status and selected categories;
Timestamp of your selection;
Browser and device information used;
Technically necessary identifiers to store your selection.
Insofar as storing your selection is technically necessary, it is carried out in accordance with Section 25(2) No. 2 TDDDG. The processing of consent information serves to verify and manage your decision. The legal bases are Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR, as well as supplementary Art. 6(1)(f) GDPR. Our legitimate interest lies in the legally compliant and user-friendly management of consent.
You can change or revoke your selection at any time with effect for the future via the "Cookie Settings" link in the website footer. Revoking consent does not affect the lawfulness of processing carried out on the basis of consent prior to its revocation.
6. Framer Analytics
We use Framer Analytics, the privacy-focused audience measurement tool integrated into Framer. According to Framer, this service does not track, collect, or store any information that can identify an individual, nor does it use cookies to recognize individual visitors.
Framer Analytics provides us with aggregated information about the use of our website, such as page views, frequently visited pages, approximate geographic regions, or technical categories. We do not receive any personal visitor profiles from this.
Insofar as this form of audience measurement processes exclusively anonymous or effectively anonymized data, the GDPR does not apply to this evaluation. The independent processing of technically necessary connection data by Framer is described in Section 4.
For further information, please refer to Framer's Privacy and Cookie Notices.
7. Google Analytics 4
Provided you have consented under the "Analytics" category, we use Google Analytics 4, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics helps us understand how visitors interact with our website, how they find our content, and which pages or features are particularly relevant. For this purpose, the following data in particular may be processed:
Pages and content accessed;
Time, duration, and approximate sequence of visits;
Interactions with the website;
Referrer and campaign information;
Approximate geographic region;
Browser, device, screen, and operating system information;
Truncated or temporarily processed IP address;
Cookie or device identifiers;
Consent and session information.
Google Analytics is activated only after your consent has been given. The legal bases are Art. 6(1)(a) GDPR and—to the extent that information is stored on or retrieved from your terminal device—Section 25(1) TDDDG.
We use Google Analytics exclusively for audience and usage analysis. Google Signals, personalized advertising features, remarketing, and custom User ID tracking are deactivated. The retention period for user- and event-level data is set to 14 months. Aggregated reports may be retained longer, provided they no longer contain personal data.
Google processes IP addresses to derive approximate location and technical information. According to Google, individual IP addresses are neither logged nor stored in Google Analytics 4.
Recipients of the data may include Google Ireland Limited, other Google Group entities, and service providers engaged by Google. Processing in the United States and other countries outside the European Economic Area cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework. Where an adequacy decision does not apply, Google states that it relies on the standard contractual clauses of the European Commission for third-country transfers.
You can revoke your consent at any time with effect for the future via "Cookie Settings". Furthermore, Google provides a browser add-on to opt out of Google Analytics.
For further information, please refer to the Google Privacy Policy, the Information on Data Use in Google Analytics, and the Google Data Processing Terms.
8. DataFast
Provided you have consented under the "Analytics" category, we use DataFast, an analytics service provided by JustShipIt Pte. Ltd. DataFast enables us to analyze basic website and campaign metrics.
We utilize DataFast in a data-minimized configuration. Depending on the technical implementation, either the cookieless variant without a persistent visitor ID or—following your consent to analytics—the standard variant is deployed. In the cookieless variant, no cookies are placed to permanently recognize visitors; short-lived technical identifiers may be used for aggregated audience measurement. The standard variant may use cookies or comparable identifiers to attribute return visits and usage patterns.
In this context, the following information in particular may be processed:
Pages accessed and timestamps;
Referrer and campaign parameters;
Events and interactions on the website;
Browser, device, and operating system information;
Approximate country or region;
IP address and technical connection data;
Cookie or visitor identifiers in the standard variant.
We do not transmit any details from contact forms or any directly identifying information such as name, email address, or phone number to DataFast.
To the extent that DataFast is deployed with cookies or comparable identifiers following your consent, the legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Where the cookieless variant is used without accessing information on your terminal equipment, the data-minimized, aggregated audience measurement is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in measuring reach and optimizing our website. You may object at any time to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation.
Processing outside the European Economic Area cannot be ruled out. Where no adequacy decision exists, appropriate safeguards, in particular the European Commission's standard contractual clauses, are implemented.
You can revoke any granted consent at any time via "Cookie Settings" with effect for the future. For more information, please see the DataFast Cookieless Privacy Information and the DataFast Data Processing Agreement.
9. Contact Form with Tally
We use the form service Tally for our contact form. The provider is:
Tally BV
Sint-Pietersnieuwstraat 11
9000 Ghent
Belgium
When you use our contact form, we process the information you enter. This may include, in particular:
Name;
Company;
Email address;
Phone number;
Country or region;
Content of your message;
Timestamp of submission;
Technically necessary connection and form data.
Tally stores the form submissions in our Tally account and sends us an email notification. The data is also automatically transferred to our self-hosted Twenty CRM.
We process your information to respond to your inquiry, provide the requested information, identify the appropriate contact person, and, if applicable, take further pre-contractual or business steps.
If your inquiry is aimed at entering into or performing a contract, the legal basis is Art. 6(1)(b) GDPR. For general business inquiries, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient, traceable processing of incoming requests and the cultivation of business relationships. Where processing is necessary for compliance with legal obligations, Art. 6(1)(c) GDPR additionally applies.
Tally processes form data within the European Union and states that it encrypts data in transit and at rest. For further information, please refer to the Tally Privacy Policy and the Tally GDPR Documentation.
Retention Period for Contact Inquiries
We generally retain contact inquiries until processing is complete. Extended storage occurs only insofar as necessary for initiating or managing a business relationship, for the establishment, exercise, or defense of legal claims, or due to statutory retention requirements. Once the purpose of processing ceases to apply and no retention obligations or other legitimate grounds remain, the data will be deleted.
Please do not submit any special categories of personal data within the meaning of Art. 9 GDPR, confidential credentials, payment details, or similarly sensitive information via the general contact form.
10. Twenty CRM
To ensure the structured processing and documentation of contact and business inquiries, we use the open-source software Twenty CRM. The system is operated by us on our own servers located within the European Union. Stored data is encrypted and accessible only to authorized personnel.
The CRM may store data received via the contact form or throughout the further progression of an inquiry, such as contact details, company affiliation, communication contents, assigned responsibilities, and processing status.
Depending on the subject matter of the inquiry, processing is carried out on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient, secure, and traceable management of customer, prospect, and business contacts.
Data is deleted as soon as it is no longer required for processing and documenting the respective inquiry, provided no statutory retention obligations or legitimate grounds for further retention exist.
11. YouTube Videos
Videos from the YouTube platform may be embedded on our website. The provider for users within the European Economic Area and Switzerland is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
We load the YouTube player only after you have given your consent under the category for external media or YouTube. The integration utilizes the privacy-enhanced mode via youtube-nocookie.com. No connection to the YouTube player is established prior to your consent.
Following your consent or upon playing a video, the following data in particular may be transferred to Google:
IP address;
Page accessed and referrer information;
Browser, device, and operating system information;
Timestamp and duration of playback;
Interactions with the video;
Cookie and account information, particularly if you are signed in to a Google service.
Google may link this information with other data from your Google account if you are signed in. We have no influence over further processing by Google.
The legal bases are your consent pursuant to Art. 6(1)(a) GDPR and—to the extent that information is stored on or read from your terminal equipment—Section 25(1) TDDDG. You can revoke your consent at any time via "Cookie Settings" with effect for the future.
Processing in the United States and other third countries cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework. Where an adequacy decision does not apply, Google states that it relies on the standard contractual clauses of the European Commission for third-country transfers.
For further information, please refer to the Google Privacy Policy and the YouTube Privacy-Enhanced Mode Guidelines.
12. Web Fonts
The fonts used on our website are hosted locally or delivered via the website infrastructure provided by Framer. When accessing the page, no separate connection to Google Fonts or Adobe Fonts is established.
Insofar as font files are loaded via Framer's website infrastructure, the information regarding the processing of technically necessary connection data in Section 4 applies.
13. Careers Section and HR WORKS
Our website links to an external application portal operated using HR WORKS. The provider is:
HRworks GmbH
Waldkircher Straße 28
79106 Freiburg
Germany
No application documents are collected directly on systec.com via this link, nor are they automatically transferred to HR WORKS. You leave our website only when you click the link to the application portal. In doing so, technically necessary connection data, in particular your IP address and, if applicable, the previously visited page, are transmitted to the operator of the application portal.
Processing on systec.com is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing interested parties with direct access to our job postings and our application portal.
The privacy notice provided on the external portal applies to the subsequent processing of your application data there. For further information, please refer to the HR WORKS Privacy Policy and the HR WORKS Security and Privacy Guidelines.
14. External Links
Our website may contain links to third-party websites. When you click on such a link, you leave our sphere of responsibility. The respective operator is fundamentally responsible for the processing of personal data on linked websites. Please refer to the privacy information provided on those platforms.
15. Recipients of Personal Data
Within our company, only those departments and entities that require access to personal data for the respective purposes are granted access. Furthermore, we may engage carefully selected service providers, particularly in the areas of hosting, website operations, forms, IT, communications, and analytics.
We also disclose personal data if we are legally obligated to do so, if it is necessary for the enforcement or defense of legal claims, or if another statutory legal basis permits such disclosure.
Any further disclosure, in particular the sale of personal data, does not take place.
16. Third-Country Transfers
Some of the providers or their subcontractors utilized on this website may process data outside the European Union or the European Economic Area.
A transfer occurs only if the requirements of Art. 44 et seq. GDPR are met. This may be the case, in particular, if:
An adequacy decision of the European Commission applies to the recipient country or the recipient;
A U.S. recipient is certified under the EU-U.S. Data Privacy Framework;
Standard contractual clauses of the European Commission have been agreed upon and, where necessary, supplementary safeguards are in place;
A statutory derogation under Art. 49 GDPR applies.
Further details can be found in the sections dedicated to the respective services. You can request copies or information regarding the implemented safeguards using the contact details provided in Section 1.
17. Your Data Protection Rights
Subject to statutory requirements, you are entitled to the following rights:
Right of access to personal data processed by us pursuant to Art. 15 GDPR;
Right to rectification of inaccurate data and completion of incomplete data pursuant to Art. 16 GDPR;
Right to erasure of your personal data pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to object to processing based on Art. 6(1)(e) or (f) GDPR pursuant to Art. 21 GDPR;
Right to withdraw consent with effect for the future pursuant to Art. 7(3) GDPR;
Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
To exercise your rights, you can contact info@systec.com.
Right to Object Pursuant to Art. 21 GDPR
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, you may object to this processing at any time without providing reasons.
18. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. In particular, you may contact the supervisory authority of your habitual residence, your place of work, the place of the alleged infringement, or the authority responsible for us:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de
19. Data Security
We take appropriate technical and organizational measures to safeguard personal data against loss, destruction, manipulation, unauthorized access, and unauthorized disclosure. Our website utilizes TLS encryption. You can generally recognize an encrypted connection by the address line in your browser starting with https://.
20. Automated Decision-Making
In connection with this website, we do not use exclusively automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
21. Obligation to Provide Data
The provision of personal data when visiting our website is generally neither legally nor contractually required. However, technically necessary connection data must be processed in order for the website to be delivered.
When submitting contact inquiries, you must provide the information necessary for processing. Without this information, we may not be able to process your inquiry, or only to a limited extent. Mandatory fields are identified accordingly within the form.
22. Updates to This Privacy Policy
We may update this Privacy Policy to reflect changes in legal requirements, our website, or the services utilized. The version published on this website at any given time shall apply.
Protect your profit
We provide professional advice on shopping cart accessories and merchandise protection.