Privacy Policy

Privacy Policy / Terms of Use​

Information pursuant to Art. 13 and 14 GDPR

In accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data collected about you and your related data protection rights. To ensure that you are fully informed about the processing of your personal data, please take note of the following information.

1. Controller and Data Protection Officer

The controller within the meaning of the GDPR for the processing of your personal data is

SysEleven GmbH
Boxhagener Straße 80
10245 Berlin

For questions or complaints regarding data protection, you can also contact our Data Protection Officer at:
datenschutz@syseleven.de

2. Processing Activities

The following explanations describe which data we process for which purpose and the legal basis on which the processing is based.

Data processing in the log file when visiting our website

When you visit our website, the browser you use automatically transmits the following information to our website's server, which is temporarily stored in a so-called "log file":

• IP address of the requesting computer
• Name of the requested file
• Date and time of the request
• Access methods/functions requested by the requesting computer
• Access status of the web server
• The URL from which the file was requested, and
• Operating system and browser type or browser settings.

We process this data for the purpose of administratively maintaining the website with regard to connection setup and system security and stability. The stored data is used exclusively for the purpose of identifying and tracing unauthorized access attempts/access to the web server, as well as for statistical evaluations such as visitor numbers and page popularity. We have a legitimate interest in this pursuant to Art. 6(1)(1)(f) GDPR. Please note that you may have a right to object. The data is deleted once the purpose has been achieved, which is generally the case after seven days.

Consent Manager

We use a consent manager to optimally record and manage the consents obtained from our users in connection with cookies and other tracking mechanisms. This involves collecting data such as the IP address, consent status, and device information. This uses so-called session cookies, text files that your browser automatically creates and stores on your device (PC, laptop, tablet, smartphone, etc.) when you visit our website.
The legal basis for using the consent manager is Art. 6(1)(1)(f) GDPR, as we have a legitimate interest in documenting and recording your consent in a data-protection-compliant manner and to the extent you desire.

Contact form and inquiries via email, phone, or fax

If you contact us by email, phone, or fax, your inquiry, including all personal data arising from it (name, inquiry), is stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.

If you contact us via our website's contact form, we store your message along with the IP address and the date and time your message was sent. We also store the following personal data as mandatory fields (marked with an "*"): first name, last name, email, phone number, postal code (address), and your message.
This data is processed on the basis of Art. 6(1)(1)(b) GDPR, provided your inquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(1)(f) GDPR) or on your consent (Art. 6(1)(1)(a) GDPR), if such consent was requested.

The data you send us in connection with your request remains with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., once your request has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Creating a user or trial account

If you create a user or trial account for use, we process information to ensure use of and contact with you. During the registration process on our website and the use of the respective account, various data is collected (divided into voluntary and mandatory information). Depending on user behavior, this generally includes the following data categories: name, company name, email, phone number, postal code (address), message texts, IP address, and date and time of registration, tax number/VAT ID, payment method, and payment information. When using the account, information regarding requested and created offers, the history, and information about any credit balance provided is processed.

This data is processed on the basis of Art. 6(1)(1)(b) GDPR, provided your inquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(1)(f) GDPR) or on your consent (Art. 6(1)(1)(a) GDPR), if such consent was requested.

The data you send us in connection with your request remains with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., deletion of your account by the user). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Web analytics services

To ensure the needs-based design and continuous optimization of our website and to adapt to the technical circumstances of our users, we use analytics tools. These collect information such as user behavior on our website as well as technical details, e.g., the proportion of new technology usage and the reach of our offerings. This allows us to evaluate website usage in order to compile reports on website activity and to provide other services related to website and internet usage for market research purposes and needs-based design of these websites.

For this purpose, we use service providers who may combine data from their own other sources with your data and, in some cases, expressly reserve the right to further process it for their own purposes. In such a case, we have no influence on the specific use and deletion of your data by the third-party provider. You can prevent this by not consenting to the transfer of data to such tools using the consent manager we have installed, as the collection of your data for web analytics purposes is carried out exclusively on the basis of consent given by you pursuant to Art. 6(1)(1)(a) GDPR. You can withdraw consent once given at any time with effect for the future by accessing the consent manager again and rejecting all tracking technologies (cookies, etc.). The service providers we use are etracker GmbH, Bartholomäusstraße 8, 20095 Hamburg (etracker) and HubSpot Inc., 2 Canal Park, Cambridge, MA 02141, USA (HubSpot). When using HubSpot, data may be transferred to the USA; HubSpot has committed to complying with the EU-U.S. Data Privacy Framework and/or provides guarantees in the form of EU Standard Contractual Clauses pursuant to Art. 46 GDPR. If you generally do not want cookies to be used, you can prevent this through the appropriate settings on your device.

Marketing

To display advertising tailored to your interests, we use cookies and tracking technologies on our website and on the websites of our marketing and social media partners. These tracking and advertising technologies can, for example, use cookies to detect that a user clicked on our ad, was redirected to this page, and may have taken advantage of an offer from us (so-called "conversion"). Further information, such as statistics on the total number of conversions, can also be viewed using these technologies. Your data is collected for marketing purposes exclusively on the basis of consent given by you pursuant to Art. 6(1)(1)(a) GDPR and by service providers who process such data on our behalf. You can withdraw consent once given at any time with effect for the future by accessing the consent manager again and rejecting all tracking technologies (cookies, etc.). The service providers we have selected are Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (Microsoft Advertising), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 (Google Ads Conversion Tracking), and LinkedIn Ireland Limited, 77 Sir John Rogerson's Quay, Dublin 2, Ireland (LinkedIn Plugin). Some of these transmit data to servers in the USA, a third country for which an adequacy decision by the EU Commission exists. The respective service providers are registered under the EU-US Data Privacy Framework, so a guarantee of a comparable level of data protection pursuant to Art. 45 GDPR is given. Some tools we use expressly reserve the right to further process data for their own purposes. In such a case, we have no influence on the specific use and deletion of your data by the third-party provider. You can prevent this by not consenting to the transfer of data to such tools using the consent manager we have installed.

Newsletter

If you would like to register for our newsletter, you thereby give us express consent to collect the email address you provide during registration. When registering for the newsletter, the data from the input form is transmitted to us. The following data is also collected during registration: IP address of the accessing computer and date and time of registration.
To verify your identity, we use the so-called "double opt-in" procedure, meaning that after receiving your email address, we send an automated email to the address provided, containing a confirmation link. The registration process is only complete once you have confirmed your email address. We do not collect any further data beyond the email address and the information required to confirm registration. Please note that you can withdraw your consent at any time. 
The purpose of the data processing is solely to send the newsletter you requested. The legal basis for this is Art. 6(1)(1)(a) GDPR (consent) and Art. 6(1)(1)(b) GDPR (contract performance). If you unsubscribe from the newsletter, we will delete your registered data, subject to any statutory obligations or rights. Other personal data collected during the registration process is generally deleted after a period of seven days.

HubSpot

For marketing purposes (including the chat function and newsletter) and customer relationship management, we use the service provider HubSpot Inc., 25 First St 2nd Floor, Cambridge, MA, USA, and/or 1 Sir John Rogerson's Quay, Dublin 2, Ireland (HubSpot).
HubSpot processes personal data on our behalf. The same principles described above under marketing and newsletter apply. Processing therefore only takes place if you have given us consent using the consent manager. You can withdraw consent once given at any time with effect for the future by accessing the consent manager again and rejecting all tracking technologies (cookies, etc.).

In particular, the following cookies are set:

• __hstc – visitor tracking across multiple sessions (domain, identifier, timestamp of first/last/current visit, session count); duration: 6 months
• hubspotutk – unique visitor identifier; used to match/deduplicate contacts when a form is submitted; duration: 6 months
• __hssc – counts page views within a session and determines whether __hstc is updated; duration: 30 minutes
• __hssrc – detects whether the browser has been restarted; duration: session cookie

For more information on data processing by HubSpot, please see HubSpot's privacy policy at https://legal.hubspot.com/de/privacy-policy. A data processing agreement pursuant to Art. 28 GDPR is in place with HubSpot.

Social Media

On our website, social media offerings are only embedded as links to external pages. When the respective icon is clicked, you are redirected to the page of the respective social media service. After this redirection, personal data may be collected directly by the provider of the social media service. If you are logged into your account on the respective social media service at that time, the information about your visit to our page may be linked to your social media account. If you do not want this, you must log out of your social media profile before clicking the embedded link.
Web offerings from other providers linked from our website are provided by third parties. We therefore have no influence whatsoever on the functionality of these services. Please note that the third-party services we link to may install their own cookies on your device once you access the offering and leave our page. If in doubt, please inform yourself directly with the providers of the social media services beforehand.

Personio / Applicant data

If you would like to apply to us, please refer to the privacy policy for applicants

To the extent we have not already provided more specific information on the following topics, the following general processing principles apply:

3. Disclosure of personal data and categories of recipients

Beyond the cases explicitly mentioned in this privacy policy, we only disclose personal data internally and to third parties if this is necessary for the stated purposes or legally required. 
Categories of recipients: our own service providers (e.g., communication service providers, IT service providers, auditors, tax advisors, or judicial authorities), social security agencies, and tax authorities.

4. Transfer to third countries

We – or our service providers in the case of processing on our behalf – generally only process personal data in countries within the EU or the European Economic Area that are subject to the scope of the GDPR. In exceptional cases, personal data is transferred to other countries (so-called "third countries") if an adequate level of data protection is guaranteed pursuant to Art. 44 GDPR, for example

• where an "adequacy decision" by the European Commission exists,
• through the use of "EU Standard Contractual Clauses," or
• through other suitable safeguards to ensure an adequate level of data protection pursuant to Art. 46 GDPR.

For example, a transfer to a third country may take place pursuant to Art. 49(1)(1)(a) GDPR if you have expressly consented to the data transfer after being informed of the possible risks of such transfers in the absence of an adequacy decision and suitable safeguards.

5. Storage period and deletion of personal data

We delete your personal data as soon as the purpose of the data processing has been achieved.
Beyond that, we only store data if statutory exceptions and obligations exist, such as under Art. 17(3) GDPR. This is particularly relevant in connection with fulfilling statutory retention obligations (Art. 17(3)(b) GDPR) and the assertion, exercise, or defense of legal claims (Art. 17(3)(e) GDPR). Sector-specific regulations are observed. 
Statutory storage provisions arise in particular from the retention periods of the German Commercial Code (HGB) or the German Fiscal Code (AO). Under these, the retention period is between 6 and 10 years after completion of the matter.

6. Data Subject Rights

If we process personal data about you, you generally have the rights listed below, where applicable. If you wish to exercise any of these rights, you can contact our Data Protection Officer at any time using the contact details provided.

6.1 Right to information pursuant to Art. 15 GDPR
You have the right to receive, free of charge and at any time, information about the personal data we process about you.

6.2 Right to rectification pursuant to Art. 16 GDPR
You have the right to request that incorrect personal data concerning you be rectified without undue delay, or that it be completed.

6.3 Right to erasure pursuant to Art. 17 GDPR
You have the right to request that we delete personal data concerning you without undue delay.
As a rule, personal data is only stored for the duration of the purpose limitation period or to fulfill statutory retention periods.

6.4 Right to restriction of processing pursuant to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data at any time.

6.5 Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.

6.6 Right to object pursuant to Art. 21 GDPR
You have the right to object to processing in various situations (processing based on the legal grounds under Art. 6(1)(e) or (f) GDPR, profiling, or direct marketing).

6.7 Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority of your choice regarding the processing.

As of: July 2026