Privacy policy

Below, we provide information about the collection of personal data when using our website. Personal data is data that can be related to you personally, for example, name, address, email addresses, user behavior. If we use contract service providers for individual functions of our website or wish to use your data for commercial purposes, we will inform you in detail about the respective processes below. We will also specify the criteria for the storage period.

1. Name and contact details of the controller and the company data protection controller

The controller responsible for data processing within the meaning of Art. 4 No. 7 GDPR is:

AIM Systems GmbH
Dr. Stefan Böttger
Kaiserstraße 170-174
66386 St. Ingbert

Tel.: +49 6894 38823-0
Fax.: +49 6894 38823-19
E-Mail: info@aimsys.de

Homepage: https://aimsys.de/

AIM Systems GmbH does not have a dedicated data protection controller.

2. Contact via E-mail of contact form

When you contact us by email or via a contact form, we store the data you provide (your email address, your name, your telephone number, or any other data you provide) in order to answer your questions. We delete the data collected in this context once storage is no longer necessary, or restrict processing if there are legal retention requirements.

3. Collection and storage of personal data, as well as the nature and purpose of its use When you visit our website, personal data is collected and stored. The browser on your device automatically sends messages to our website’s server when you visit this website. We temporarily store the following information about you automatically without your involvement in a so-called log file:

IP address of the requesting computer,
Date and time of the request,
Time zone difference from Greenwich Mean Time (GMT),
Content of the requirements (specific page),
Access status/HTTP status code,
amount of data transferred in each case,
Website from which the request originates,
Browser,
Operating system
Language and version of the browsing software.

The data is stored for 7 days until it is automatically deleted by Logrotate. The data is processed for the following purposes:

Ensuring the website connects properly,
Ensuring the comfortable use of our website,
Evaluation of system security and stability, as well as
for other administrative purposes.

Processing is carried out on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in collecting and processing data. This follows from the purposes listed above. Data processing or collection for the purpose of drawing conclusions about your person does not take place under any circumstances.

4. Transfer of data

We only transfer your personal data to third parties in the following cases:

You have given your express consent to this.
The disclosure is necessary to assert or exercise claims against you or to defend ourselves, and there is no overriding interest worthy of protection in not disclosing the information.
We are legally obliged to pass on the data.
The transfer is necessary for the performance of the contract with you.

5. Your rights as a data subject under the GDPR

You have the right:

Information about your personal data processed by us, including the right to information about the purposes of processing, categories of personal data, categories of recipients of your data, planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details;
immediate correction of inaccurate personal data stored by us or completion of your personal data;
to have your personal data stored by us deleted, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
Restriction of processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR, as long as it is not yet clear whether the legitimate grounds of the controller outweigh yours. exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR, as long as it is not yet clear whether the legitimate reasons of the controller outweigh yours;
to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to have it transferred to another controller;
to revoke your consent at any time, with the consequence that we may no longer continue the data processing based on this consent in the future, and
by lodging a complaint with a data protection supervisory authority of your choice. As a rule, you can contact the supervisory authority of your usual place of residence or our company for this purpose.

6. Right of objection

In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of your personal data on the basis of Art. 6 (1) (e) or (f) GDPR, provided that your reasons for objection arise from your particular situation. If you object to direct marketing, you have a general right of objection, which we will implement without you having to specify a particular situation.

To exercise your right of withdrawal or objection, simply send an email to info@aimsys.de.

7. Data security

(1) We use the widely used SSL/TLS (Secure Socket Layer/Transport Layer Security) protocol for our website in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether the transmission is encrypted by the “https://” address line of your browser or by the closed display of the key or lock symbol in the lower status bar of your browser.

(2) We also use appropriate technical and organizational security measures to protect your data against manipulation, unauthorized access, loss, or destruction.

8. Cookies

In addition to the data mentioned in section 3, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the entity that sets the cookies (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.

Legal basis for the use of cookies: The storage of information on your device or access to it shall only take place in accordance with Section 25 (1) TTDSG if you have given your consent or if its use is technically necessary to provide the expressly requested service. The legal basis for the subsequent processing of personal data is Art. 6 (1) lit. a GDPR (consent) or Art. 6 (1) lit. f GDPR (legitimate interest).
You can revoke your consent at any time using the tool provided in the cookie banner.
Use of cookies:
This website uses the following types of cookies, the scope and functionality of which are explained below:
1. Transient cookies:
  Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
2. Persistent cookies: Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.
3. Browser settings: You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.
4. Identification through cookies: We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again each time you visit.
5. HTML 5 cookies: We use HTML5 storage objects, which are stored on your device. These objects store the necessary data independently of the browser you use and do not have an automatic expiration date. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
6. Lead info: We use the lead generation service provided by Leadinfo B.V., Rotterdam, Netherlands. This service recognizes visits by companies to our website based on IP addresses and shows us publicly available information such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g., “leadinfo.com”) to correlate IP addresses with companies and improve its services. For more information, please visit www.leadinfo.com.
  Processing is based on Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the identification and qualification of business contacts. You can opt out on this page: www.leadinfo.com/en/opt-out. If you opt out, your data will no longer be collected by Leadinfo.
7. Google Analytics 4:We use Google Analytics 4 (“GA4”), a web analytics service provided by Google LLC or Google Ireland Limited (“Google”), on this website. GA4 enables us to evaluate the usage behavior of visitors to our website in order to optimize our offering both technically and in terms of content. Data that is processed:
  - Pages visited, length of stay, bounce rate
  - Referrer URL, device information (e.g., browser, operating system), device type
  - Interactions (e.g., clicks, scrolls)
  - (Recently activated) IP anonymization (e.g., AnonymizeIP), i.e., the IP address is truncated before transmission to reduce the direct personal reference
  Data processing is based on your consent in accordance with Art. 6 (1) (a) GDPR. Google Analytics will not be activated without your consent.
  We store the user data collected via Google Analytics for a period of 14 months and then delete it automatically. Google may also process the collected data for its own purposes, e.g. to improve its own services. We have no influence on this processing.
  The data is processed within the EU/European Economic Area. In certain cases, data may be transferred to Google servers outside the EEA (e.g., the US). In this case, we rely on standard contractual clauses (Article 46 GDPR).
  We have concluded a contract with Google for order processing (Data Processing Addendum), which ensures that Google only processes the data on our behalf and in accordance with our instructions.
  You can revoke your consent at any time, e.g., via the consent tool provided in the cookie banner.
  Google also offers a browser add-on to disable Google Analytics, which you can download to prevent tracking:
  https://tools.google.com/dlpage/gaoptout?hl=de
  Further information on data protection in Google Analytics and Google’s privacy policy can be found at:
  https://policies.google.com/privacy
  https://support.google.com/analytics/answer/6004245

9. Use of Procaptcha (Prosopo)

We use “Procaptcha” from Prosopo Limited (“Prosopo”) on this website as a CAPTCHA solution to prevent automated bots and misuse of forms. When a form is submitted, we send a token to Prosopo so that Prosopo can verify that it is a real user. This token is verified on the server side via the Prosopo API.

According to its own statement, Prosopo collects only minimal data and does not store any personal data centrally in order to protect data privacy.The processing serves to protect our website from spam, bots, and automated access (security measure). We base the use of Procaptcha on our legitimate interest (Art. 6 (1) (f) GDPR), namely the prevention of bot abuse on our forms.

According to Prosopo, no personal data is stored centrally. The recipient of the data is Prosopo Limited. For more information on data processing at Prosopo, please refer to their privacy policy.

Since only a token is transmitted and no personal data is permanently stored by Prosopo, the storage period is very limited (token verification). You have the usual GDPR rights (e.g., information, deletion, restriction, objection). If you have any questions about data processing by Prosopo, you can contact Prosopo directly.

10. Current status and changes to this privacy policy

This privacy policy was created in October 2025 and is currently valid. We reserve the right to amend this privacy policy in the event of changes to the legal situation or our data processing.