Privacy Statement (EU)

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following:

1.1 Contact — Through phone, mail and email

For this purpose we use the following data:

• A first and last name
• An email address
• A telephone number
• The content of your message and any information you choose to provide

The basis on which we may process these data is:

Your request and our legitimate interest in answering it (Art. 6(1)(f) GDPR) or, where your request relates to a contract or the preparation of a contract, the performance of that contract (Art. 6(1)(b) GDPR).

Retention period

We retain this data for as long as is necessary to handle your request and for as long as statutory retention obligations require.

1.2 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

• A first and last name
• An email address
• A telephone number

The basis on which we may process these data is:

The performance of a contract or of pre-contractual measures (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).

Retention period

We retain this data until the service is terminated, and beyond that for as long as statutory retention obligations require.

1.3 Job applications — Through our careers page

If you apply through the form on our careers page, we process the information you enter in order to assess your application.

For this purpose we use the following data:

• A first and last name
• An email address
• A telephone number (optional)
• Your city (optional)
• The position you apply for
• Your education (optional)
• The URL of your LinkedIn profile (optional)
• Your personal note and your CV, if you upload one (optional)

Your application is sent by e-mail to our HR team (career [at] tagsystems.com) via our e-mail delivery service SMTP2GO (see section 2.3). The form data and your CV are not stored on our web server.

The basis on which we may process these data is:

The steps prior to entering into an employment contract (Art. 6(1)(b) GDPR). If you agree that we keep your application for future vacancies, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Retention period

We retain your application for the duration of the application process. If your application is unsuccessful, we delete your data no later than six months after the end of the process, unless you have agreed to a longer retention.

1.4 Operating and securing this website — Server log files

When you visit our website, our web server automatically records technical information that your browser transmits.

For this purpose we use the following data:

• IP Address
• Date and time of the request
• The page or file requested and the referring page
• Browser type, browser version and operating system

The basis on which we may process these data is:

Our legitimate interest in providing a secure and functioning website and in detecting and preventing misuse (Art. 6(1)(f) GDPR).

Retention period

Log files are deleted after a short period, unless they are needed to investigate a specific security incident.

We use the following service providers to run this website. They process personal data on our behalf and in accordance with our instructions.

2.1 Hosting

Our website is hosted on servers operated by or for TAG Systems AG. The hosting provider processes the data mentioned in section 1.4 in order to deliver the website.

2.2 Cloudflare

Our website is delivered through the network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA), which protects it against attacks and makes it load faster. To do so, Cloudflare processes your IP address and the technical data of your requests. The basis is our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework. For more information, see Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

2.3 SMTP2GO

Messages sent through the forms on our website are delivered by e-mail via SMTP2GO (SMTP2GO Ltd, New Zealand). SMTP2GO processes the content of the message, including any attachment, and the e-mail addresses involved in order to deliver it, and keeps delivery logs for a limited period. New Zealand is recognised by the European Commission as providing an adequate level of data protection. For more information, see SMTP2GO's privacy policy: https://www.smtp2go.com/privacy/

Our website does not use cookies for analytics, advertising or tracking, and it does not show a cookie banner because none is needed.

Cloudflare may set strictly necessary security cookies (for example __cf_bm or cf_clearance) to distinguish visitors from automated attacks. These cookies do not identify you personally and are deleted after a short time. The basis is our legitimate interest in protecting the website (Art. 6(1)(f) GDPR).

Our website includes videos hosted on YouTube, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The video is only loaded after you click play; until then, no connection to YouTube is established. When you start a video, data such as your IP address is transmitted to Google, and Google may set cookies. We use the privacy-enhanced mode (youtube-nocookie.com). The basis is your consent, given by clicking play (Art. 6(1)(a) GDPR). Google LLC is certified under the EU-U.S. Data Privacy Framework. For more information, see Google's privacy policy: https://policies.google.com/privacy

The fonts used on this website are hosted on our own server. No connection to third-party font services (such as Google Fonts) is established.

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

Some of the service providers mentioned above process data outside the European Economic Area and Switzerland. We only transfer personal data to such countries if the European Commission (and, for Switzerland, the Federal Council) has recognised an adequate level of data protection there, if the recipient is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework, or if appropriate safeguards such as the EU Standard Contractual Clauses are in place.

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use consist of:

• DKIM, SPF, DMARC and other specific DNS settings
• Encrypted transmission (HTTPS/TLS), HTTP Strict Transport Security and related Security Headers and Browser Policies
• Website Hardening: a static website without content management system or database, and spam and abuse protection on our forms
• Protection against attacks through Cloudflare

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority. In Liechtenstein, this is the Datenschutzstelle Liechtenstein (www.datenschutzstelle.li); you may also contact the supervisory authority of your country of residence.

TAG Systems AG
Pflugstrasse 22, 9490 Vaduz
Liechtenstein
Website: https://tagsystems.com
Email: info [at] tagsystems.com
Phone number: +423 376 50 80