Privacy Policy

1. Data Controller

Zima Systems GmbH
Schmiedstrasse 3
78259 Mühlhausen
Germany

Responsible party under data protection law, including the EU General Data Protection Regulation (GDPR):
Dipl. Inf.(FH) Robert J. Zima

2. Your Rights

You may exercise the following rights at any time by contacting our data protection officer:

  • Right to information about your stored data and its processing
  • Right to correction of incorrect personal data
  • Right to deletion of your stored data
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability

If you have provided consent, you may withdraw it at any time with future effect. You may also file a complaint with the regulatory authority responsible for you. A list of supervisory authorities (for the non-public sector) can be found at: https://www.bfdi.bund.de

3. Purposes of Data Processing

We process your personal data only for the purposes stated in this privacy policy. Your data is not transmitted to third parties for other purposes. We only pass on your data to third parties if:

  • You have given your express consent
  • Processing is necessary for contract fulfillment
  • Processing is required by law
  • Processing is necessary to protect legitimate interests and you do not have a overriding legitimate interest in non-disclosure

4. Deletion / Blocking of Data

We adhere to the principles of data avoidance and data minimization. Your personal data is stored only as long as necessary for the stated purposes or as required by statutory retention periods. After the purpose no longer applies or the period expires, the relevant data is routinely blocked or deleted in accordance with legal requirements.

5. Server Log Files

When you visit this website, the following information is collected automatically via server log files: browser type/version, operating system, referrer URL, IP address, time of request, and amount of data transferred. These are anonymous information that do not allow conclusions about your identity.

These are technically necessary to correctly deliver requested content. They are processed for: reliable website connection, smooth usage, system security and stability analysis, and administrative purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

6. Consent and the consent banner (Cookie settings)

When you visit our website for the first time, a consent banner is displayed. It offers the categories "Necessary" (always active and cannot be disabled), "Web fonts (Google Fonts)", and, when technically configured, "Web analytics (Google Analytics, Matomo)". The web fonts and web analytics categories are displayed only if they are technically configured. You can choose between the equally prominent options "Necessary only" (reject) and "Accept all" (accept), without a forced second click. Via "Choose categories" you can make a granular selection and confirm it with "Save selection".

The legal basis for processing that is based on consent is Art. 6(1)(a) GDPR. Your consent decision is stored locally in your browser via localStorage. It is not sent to us, it is not a cookie, and it does not follow you across devices. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer. If a new category is added later, fresh consent will be requested.

7. Cookies

We use so-called "cookies" — small text files stored on your device. They help us automatically collect data such as IP address, browser, operating system, and your internet connection. Cookies cannot be used to run programs or spread viruses.

You can disable cookies in your browser settings. Note that some website features may not function properly without cookies. We do not pass your collected data to third parties without your consent.

In addition, web fonts and web analytics services may set cookies and process usage data - but only after your explicit consent via the consent banner (see section 6). Without your consent, these services are not activated.

8. SSL/TLS Encryption

To protect your data during transmission, we use SSL/TLS encryption (HTTPS).

9. Web Analytics (Google Analytics and Matomo)

Google Analytics: Google Analytics is a web analytics service of Google LLC, USA. It is currently not active (no tracking ID configured). It is only active after your explicit consent and only if/when enabled. If it is enabled in the future, it will use cookies and process usage data and your IP address (anonymized). The legal basis is Art. 6(1)(a) GDPR. In accordance with Art. 13(1)(f) GDPR, we disclose that data is transmitted to the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF), which serves as the adequacy basis. You can find the European Commission adequacy decision here and Google's privacy policy here.

Matomo: Matomo (formerly Piwik) is open-source web analytics self-hosted on our own server in the EU (Germany). It is currently not active. It is only active after your explicit consent and only if/when enabled. If it is enabled in the future, it will use cookies and process usage data; the IP address is anonymized before storage. No data is transferred to a third country. The legal basis is Art. 6(1)(a) GDPR.

10. Web Fonts (Google Fonts)

This website uses the "Inter" font from Google Fonts. Google Fonts is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The font CSS and font files are fetched by your browser from Google's servers (fonts.googleapis.com / fonts.gstatic.com) only after you give consent via the consent banner. Without your consent, these files are not loaded from Google.

When the font is loaded, your IP address is transmitted to Google in the United States. The legal basis is your consent under Art. 6(1)(a) GDPR. In accordance with Art. 13(1)(f) GDPR, we disclose that data is transmitted to the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF), which serves as the adequacy basis. You can find the European Commission adequacy decision here and Google's privacy policy here.

11. Social Media Presence

We maintain profiles on social media platforms (e.g., LinkedIn, Facebook). When you visit our pages, data may be transmitted to the respective platform's servers. We have no influence on the data collected by these platforms. For details, see the respective privacy policies of the platforms.

12. Contact

If you have questions about data protection, please email us or contact the person responsible for data protection at our organization:

Dipl. Inf.(FH) Robert J. Zima
info@zima-systems.de