Legal

Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a straightforward overview of what happens to your personal data when you visit our website.

Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy set out below this text.

Analysis Tools and Third-Party Tools

When you visit our website, your browsing behaviour may be analysed statistically. This is done above all by means of cookies and so-called analysis programmes. The analysis of your browsing behaviour is generally anonymous; the browsing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the privacy policy below. You may object to this analysis. We will inform you of the options for objecting in this privacy policy.

2. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and with this privacy policy.

When you use this website, various items of personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We point out that data transmission over the internet (for example when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Controller

The controller responsible for data processing on this website is:

ZMS GmbH, legally represented by its managing directors: Dominik Zillner, Horst Fischer.

Keltenring 15

82041 Oberhaching

Germany

Phone: +49 89 5880431-60

Email: info@zms-systems.com.

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (such as names, email addresses or the like).

You can reach our data protection officer at:
ZMS GmbH
Data Protection Officer: Dominik Zillner
Keltenring 15
82041 Oberhaching
Email: dz@zms-systems.com

Your Rights

Right of Access (Art. 15 GDPR)

You have the right to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of the processing.

Right to Rectification (Art. 16 GDPR)

You have the right to request the rectification of inaccurate data or the completion of incomplete data.

Right to Erasure (Art. 17 GDPR)

You have the right to request the erasure of your personal data, provided that the statutory requirements are met.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of the processing of your data.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the data processed by automated means on the basis of your consent or of a contract in a structured, commonly used and machine-readable format, or to have it transmitted to a third party.

Right to Object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR; you may object to direct marketing at any time.

Right to Withdraw Consent (Art. 7(3) GDPR)

Many data processing operations are possible only with your express consent. You may withdraw consent already given at any time with effect for the future. An informal message by email to the email address stated above is sufficient for this purpose. The lawfulness of the data processing carried out up to the withdrawal remains unaffected by the withdrawal.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority responsible for our company in data protection matters is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).

3. Data Collection on Our Website

Cookies

These web pages partly use so-called cookies. Cookies are small text files that are stored on the storage medium of your terminal device and by means of which certain information is passed to us as the entity setting the cookie. Cookies cannot execute programs or transmit viruses to your terminal device. Cookies serve to make our offering more user-friendly, more effective and more secure.

When you access our website, and at any time thereafter, you may choose whether to permit the setting of cookies in general and which individual additional functions you wish to select. You can make changes in your browser settings or via our consent manager.

This website uses the following types of cookies:

  • Transient cookies (session cookies): These cookies are deleted automatically when you close your web browser. They store a session ID by means of which different requests from your browser can be assigned to a common session and your terminal device can be recognised when you return.

  • Persistent cookies: These cookies are deleted automatically after a specified period, which may vary from cookie to cookie, and can be deleted at any time in the settings of your web browser.

The processing of personal data by the above cookies serves the following purposes:

  • Technically necessary cookies: The technical structure of our website requires the use of cookies. Without them, our website cannot be displayed in full or free of errors. These cookies are as a rule transient cookies which are deleted after the end of your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The legal basis is Art. 6(1)(f) GDPR, Section 25(2) no. 2 TDDDG.

  • Optional cookies (where you have given your consent): We set various cookies only after obtaining your consent, which you can select via the cookie banner on your first visit. These cookies serve in particular to analyse website visits and to improve the user experience and to display advertising. The legal basis is Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future via the consent manager, without affecting the lawfulness of the processing carried out up to the withdrawal.

You can configure the processing by cookies yourself by rejecting, for example, third-party cookies or cookies in general in the settings of your web browser. We point out that in this case you may not be able to use all functions of our website properly. You can also adjust your settings at any time via our consent manager.

Informational Use and Server Log Files

If you access our website without registering or otherwise providing us with information, we collect only the personal data that your web browser transmits automatically to our server. The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:

Browser type and browser version

operating system used

referrer URL

host name of the accessing computer

time of the server request

IP address

This data is not merged with other data sources.

We store the above data on servers of our hosting provider ALL-INKL.COM, with which we have concluded a data processing agreement pursuant to Art. 28 GDPR. This ensures that the standards and provisions of European data protection law are complied with.

The basis for the data processing is Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free delivery and the stability of the website and in IT security, in particular in order to detect and defend against server overloads as well as abusive access and attacks (for example DDoS). Insofar as the collection and storage of this data is strictly necessary for the operation of our website, there is no option to object.

The log files are stored for a maximum of 7 days and are then deleted; this does not apply to data whose retention is necessary in order to investigate a specific security incident.

Contact Form and Contact by Email

If you send us enquiries by means of the contact form, the details you provide in the enquiry form, including the contact data you enter there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. Mandatory information such as first name, surname, company name or email address is marked accordingly; further information is provided voluntarily. If you contact us by email, the personal data you transmit will likewise be stored. We do not pass this data on without your consent.

The processing of your above personal data serves solely to deal with your enquiry. This also constitutes our legitimate interest in the processing. Insofar as you have given us consent for this purpose, the legal basis is Art. 6(1)(a) GDPR. Insofar as your enquiry is directed at the conclusion of a contract, or serves the performance or settlement of a contractual relationship existing between you and us, Art. 6(1)(b) GDPR constitutes an additional legal basis. In all other respects, the legal basis is Art. 6(1)(f) GDPR.

Subject to differing statutory retention periods, the data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. This is as a rule the case once we have conclusively dealt with your enquiry.

You may withdraw consent given to us at any time. An informal message by email to us is sufficient for this purpose. The lawfulness of the data processing operations carried out up to the withdrawal remains unaffected by the withdrawal. Details of the withdrawal can be found in the section “General Information and Mandatory Disclosures”. If you contact us by email, you may object to the storage of your data at any time; in this case your enquiry cannot be processed further. You may declare the withdrawal or objection informally by email to the email address stated above.

4. Social Media

LinkedIn

We maintain a presence on the social media platform LinkedIn (operator in the EU: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; US parent company: LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA; privacy policy: https://de.linkedin.com/legal/privacy-policy).

No LinkedIn plugins are integrated on our website itself; no data is transmitted to LinkedIn merely by visiting our website.

We point out that you use our LinkedIn presence and its functions on your own responsibility. This applies in particular to the use of the interactive functions (for example commenting, sharing, rating). When you visit our presence, LinkedIn may record, among other things, your IP address and further information held on your terminal device in the form of cookies.

The data collected about you is processed by LinkedIn and may in this connection be transferred to countries outside the European Union, in particular the USA. Insofar as LinkedIn is certified under the EU-U.S. Data Privacy Framework, any data transfers take place on the basis of the adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR). In all other respects, we have concluded standard contractual clauses with LinkedIn as a precaution.

We are not aware of the manner in which LinkedIn uses the data from your visit to our account for its own purposes, how long this data is stored, or whether data is passed on to third parties. When the account is accessed, the IP address assigned to your terminal device is transmitted to LinkedIn. If you are currently logged in as a user, a cookie on your terminal device may be used to trace how you have moved around the internet and to assign your visit to your profile. If you wish to avoid this, you should log out or deactivate the “stay signed in” function, delete the cookies held on your device and restart your browser.

The legal basis for the processing of your data on the social media platform is Art. 6(1)(f) GDPR. Insofar as you have given us consent for this purpose, the legal basis is Art. 6(1)(a) GDPR. Insofar as your interaction is directed at the conclusion of a contract, Art. 6(1)(b) GDPR constitutes an additional legal basis.

In order to exercise your data subject rights, you may contact either us or LinkedIn. For questions concerning profiling and data processing in connection with the use of the platform, please contact LinkedIn directly. For questions concerning the processing of your interaction with us, please write to us using the contact details stated above.

5. Analysis Tools and Advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. “Google Analytics” is a web analytics service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) (hereinafter “Google”).

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is as a rule transmitted to a Google server in Ireland and stored there.

If IP anonymisation is activated on the website, your IP address will be truncated beforehand by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf in order to evaluate your use of the website, to compile reports on website activity and to provide further services connected with the use of the website. Pseudonymous usage profiles may be created from the processed data. The IP address transmitted by your browser in the context of Google Analytics is not merged with other data held by Google. We use Google Analytics only with IP anonymisation activated. Your IP address is therefore processed further by Google in truncated form only. Further information on this is available at: https://support.google.com/analytics/answer/12017362?hl=de.

We use Google Analytics for the purpose of analysing the use of our website and continuously improving individual functions and the user experience. This data processing takes place only if you have given us your prior consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You may prevent the storage of the cookies generated by Google Analytics by adjusting the settings of your web browser accordingly; we point out that in this case you may not be able to use all functions of this website in full. You may also prevent the collection by Google of the data generated by the cookie and relating to your use of the website (including your IP address), and the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. Data at user and event level that is linked to cookies, user identifiers (such as user IDs) and advertising IDs is deleted at the latest 14 months after its collection.

In order to oblige Google to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection provisions, we have concluded a data processing agreement with Google pursuant to Art. 28 GDPR.

Even though Google Ireland Limited is responsible for the European area, we point out that it cannot be entirely ruled out that Google Analytics may also process personal data outside the EU or the EEA through the parent company Google LLC. Insofar as Google processes personal data in the USA, data transfers take place on the basis of the adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR). Google has submitted to the EU-U.S. Data Privacy Framework and has certified itself. Further information is available at: https://www.dataprivacyframework.gov/list.

Further information on the use of data by Google is available at:

Further information on the use of data by Google is available at: