Privacy policy

1. Controller

The controller for data processing on this website is:

Data protection officer

BS-Systeme GmbH employs fewer than 20 people in continuous automated processing of personal data. A statutory data protection officer is therefore not appointed (§ 38 BDSG, German Federal Data Protection Act). For data protection questions, please contact the Managing Director directly.

2. General notes and legal basis

Personal data is any information relating to an identified or identifiable natural person — name, address, email, IP address, usage behavior, and similar.

We process personal data on the following legal bases:

• Article 6 (1)(a) GDPR — where consent has been given
• Article 6 (1)(b) GDPR — to fulfill a contract or pre-contractual measures
• Article 6 (1)(c) GDPR — to comply with legal obligations (e.g. retention duties)
• Article 6 (1)(f) GDPR — to safeguard legitimate interests (e.g. secure website operation)

3. Hosting and server log files

Our website is hosted by Netlify. Content delivery runs through the Netlify edge network with locations inside the European Union, so when the website is accessed no personal data is transferred to third countries. A data processing agreement under Article 28 GDPR is in place with Netlify.

When the website is accessed, technically necessary data is recorded in server log files:

• IP address of the requesting device (anonymized)
• Date and time of the request
• Accessed URL and HTTP status code
• Transferred data volume
• User agent (browser and operating system)

This data is technically required to deliver the website and to protect against misuse (Article 6 (1)(f) GDPR). It is automatically deleted no later than 14 days after collection.

4. Cookies and web storage

Our website currently uses only technically necessary cookies and web storage entries — for example to save your cookie preferences. These do not require consent under § 25 (2) No. 2 TTDSG (German Telecommunications and Telemedia Data Protection Act).

We do not currently use marketing or tracking cookies. Should that change, we will obtain your consent in advance through a consent banner. You can withdraw your consent at any time via the "Cookie settings" link in the footer.

5. Embedded services

5.1 Zoho Bookings (appointment booking)

For booking discovery calls, we use Zoho Bookings. Data processing takes place in Zoho's European data center (Zoho Corporation B.V., Netherlands), so no personal data is transferred to third countries. A data processing agreement under Article 28 GDPR is in place with Zoho.

When the booking widget at booking.bs-systeme.de or bookings.nimbuspop.com is loaded, technical connection data is transferred to Zoho. When you book an appointment, Zoho additionally processes your name, email address, and the appointment slot you select.

The legal basis is Article 6 (1)(b) GDPR (pre-contractual measures). Details are available in the Zoho privacy policy.

5.2 Fonts (self-hosted)

We use the DM Sans typeface exclusively self-hosted — on our own server. No connection is made to Google Fonts servers. Your IP address is not transferred to third parties when fonts are delivered.

5.3 Structured data (Schema.org)

We embed Schema.org JSON-LD markup in our pages so that search engines and AI models can interpret our content. This markup is delivered statically in the HTML — no external connections are made, no cookies are set, and no data is transferred to third parties.

6. Contact via email

When you contact us by email, the data you provide (email address, name, message content) is stored to respond to your inquiry (Article 6 (1)(b) and (f) GDPR). We do not share this data without your consent.

We delete inquiries once the matter is resolved and no statutory retention obligations apply — typically within three years.

7. Job applications

Applications reach us via email to babel@bs-systeme.de. We process the submitted data (CV, cover letter, references, contact details) exclusively to conduct the application process (Article 6 (1)(b) GDPR in conjunction with § 26 BDSG).

If no employment relationship is established, we delete the application documents no later than six months after the process ends — unless you explicitly consent to longer storage (e.g. inclusion in a talent pool).

8. Your rights

As a data subject, you have the following rights under GDPR:

• Access (Article 15 GDPR) — which data we process about you
• Rectification (Article 16 GDPR) — for inaccurate data
• Erasure (Article 17 GDPR) — if no retention obligation applies
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR) — handover in a machine-readable format
• Objection to processing (Article 21 GDPR)
• Withdrawal of consent (Article 7 (3) GDPR)
• Complaint to a supervisory authority (Article 77 GDPR)

To exercise any of these rights, a simple email to babel@bs-systeme.de is sufficient.

9. Supervisory authority

The competent supervisory authority for data protection is:

10. Updates and changes to this policy

This privacy policy is current as of 15 May 2026. We update it whenever our data processing changes materially or the legal framework changes. You can find the latest version at www.bs-systeme.de/en/privacy/.