Software infrastructure for the physical precious metals business

Privacy Policy

KTsys Solutions GmbH
Am Sonnenhang 14
94539 Grafling
Germany

Phone: +49 (0)991 / 2009 2185 0
Fax: +49 (0)991 / 2009 2185 9
Email: info@kt-solutions.de

This privacy policy was last updated in November 2026.

I. General information and mandatory information

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

On this website we collect personal data (for example a name or an email address) only when you give it to us yourself, for example in a form, or where it is technically necessary to run the website. We pass it on only to the service providers named in section III, who process it on our behalf; otherwise only with your consent or where we are legally obliged to.

Please note that data transmitted over the internet (for example when communicating by email) may be subject to security gaps. Complete protection of data against access by third parties is not possible.

Controller

The party responsible for data processing on this website (the controller) is named in the imprint. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (for example names, email addresses or the like).

Your rights

You have the right at any time to information about your stored personal data (Art. 15 GDPR), to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). For this and any other questions about personal data, you can reach us at the address given in the imprint.

Right to object

Where processing is based on our legitimate interest (Art. 6 (1) (f) GDPR), you may object to it at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data, unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Withdrawal of your consent

Where processing is based on your consent, you can withdraw it at any time with effect for the future. An informal message to us by email is sufficient. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of your browser changing from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Objection to advertising emails

We hereby object to the use of the contact data published under the imprint obligation for sending advertising and information material that has not been expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam emails.

Changes to this privacy policy

We reserve the right to change this privacy policy at any time in compliance with the statutory requirements.

II. Data collection on our website

Hosting

This website runs on a server of Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. Contabo processes the data that arises when the website is visited on our behalf, on the basis of a data processing agreement (Art. 28 GDPR).

Server log files

With every request, the web server stores the following in log files:

  • date and time of the request
  • the address requested
  • the status code and the amount of data transferred
  • the page visited before (referrer)
  • browser and operating system (user agent)

We do not store your IP address in these files. The log files are limited in size; older entries are continuously overwritten. They serve the secure and stable operation of the website; the legal basis is Art. 6 (1) (f) GDPR.

Country of the request

To show content, prices and currency suited to the country a request comes from, our server determines the country from your IP address when a page is opened. It uses a database on our own server (DB-IP “IP to Country Lite”); your IP address is not passed on to any other service and is not stored. Only the country (for example “DE”) is returned to your browser. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is to show visitors content for their region and in their currency.

Language of the website and storage in your browser

This website does not set cookies. To show the website in a suitable language, it reads your browser’s language setting and, in some browsers, whether your keyboard has keys for umlauts. This happens only in your browser; the information is not transmitted to us and not stored.

If you choose a language with the EN/DE switch, your browser stores this choice in its local storage (key “ktsys-lang”, value “de” or “en”), so that the website appears in your language on your next visit. This information stays on your device, is not transmitted to us and remains stored until you delete your browser data. The legal basis is Section 25 (2) no. 2 TDDDG, because the storage is strictly necessary for the function you have requested.

Contact form and demo request

If you write to us using the contact form or the demo request, we process your details (name, business email address, company, topic of the request and, if you enter one, your message) to answer your request. The details are not stored on the web server; they are sent as an email via Microsoft 365 to our mailbox (see section III). The legal basis is Art. 6 (1) (b) GDPR where your request aims at a contract, otherwise Art. 6 (1) (f) GDPR; our legitimate interest is to answer your request. We delete your details once the request has been dealt with conclusively and no statutory retention obligations apply.

Protection against misuse of the forms

To protect the forms against automatically sent requests, we use several methods that work without cookies and without third-party services: a field that people do not see; the time from opening the page to sending; a small arithmetic task that your browser solves in the background when the page opens and that our server checks (a method after the open-source project ALTCHA, on our own server); and a limit of five requests per internet connection in ten minutes.

For this limit, we store a checksum of your IP address formed with a secret key, together with the times of the requests; without the key, the checksum cannot be traced back to your IP address. Only the last ten minutes are evaluated, and the data is deleted whenever the server restarts. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is protection against misuse.

Processing of customer and contract data

We collect, process and use personal data only insofar as it is necessary for the establishment, content or modification of the legal relationship (inventory data). We collect, process and use personal data about the use of our website (usage data) pursuant to Art. 6 (1) sentence 1 (b) GDPR only insofar as this is necessary to enable the user to use the service or to bill it.

III. Service providers and third-party services

Microsoft 365

For email we use Microsoft 365 of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Requests from our forms are sent via Microsoft 365 to our mailbox and stored there. Microsoft processes the data on our behalf on the basis of a data processing agreement (Art. 28 GDPR). A transfer to Microsoft Corporation in the USA cannot be ruled out; it is based on the EU-U.S. Data Privacy Framework, under which Microsoft is certified, and on the standard contractual clauses of the European Commission.

No analytics or tracking

We do not use analytics, tracking or advertising services on this website, and we do not embed content from third parties such as fonts, maps or videos. The fonts are on our own server; the map on the “About us” page is an image.

Links to other websites

This website contains links to websites of other providers, for example to sources. Only when you click such a link does your browser connect to the other website; the respective provider is responsible for its data processing.