Controller within the meaning of the GDPR:
ZERYON Systems, owner Predrag Gasic
Flehingerstraße 22, 75038 Oberderdingen, Germany
Email: office@zeryon-systems.com · Phone: 07045 522 99 34
Website and blog are hosted by netcup GmbH, Karlsruhe, Germany. netcup processes data on our behalf under a data processing agreement (Art. 28 GDPR). Legal basis: legitimate interest in secure, efficient operation (Art. 6 (1)(f) GDPR).
When pages are accessed, the server automatically records IP address, date and time, the file requested, browser and operating system, and the referring page. This serves delivery, defence against attacks and stability. To protect the blog, a security plugin logs failed login attempts and blocked requests including the IP address. Legal basis: Art. 6 (1)(f) GDPR. Server log retention: 7 to 14 days.
If you contact us via the contact form, the project calculator, a licence order request or a download request, we process the details you enter (such as name, email, company, message or project details) to handle your request. The data is stored on our server at netcup and not passed on to third parties. Legal basis: pre-contractual measures (Art. 6 (1)(b) GDPR) or our legitimate interest in responding (lit. f). We delete the data once it is no longer required, at the latest after 6 months, unless statutory retention obligations apply.
You arrange appointments through our own booking application on zeryon-systems.com. Your details (name, email, slot) are processed on our server at netcup. Legal basis: pre-contractual and contractual measures (Art. 6 (1)(b) GDPR). We delete the data once it is no longer needed for the appointment, unless retention obligations apply.
Paid appointments are paid via Stripe, provided by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. For payment, the Stripe script (js.stripe.com) is loaded together with the booking window. Stripe receives technical data about your device and your IP address and sets cookies for fraud prevention (see section 8). Payment details such as card numbers are entered directly with Stripe and processed by Stripe; we do not receive them. Transfer to Stripe, Inc. in the USA is possible; Stripe is certified under the EU-US Data Privacy Framework. Legal basis: performance of a contract (Art. 6 (1)(b) GDPR) and our legitimate interest in secure payment processing (lit. f). Stripe privacy notice: stripe.com/privacy.
We hold calls via Zoom, provided by Zoom Communications, Inc., 55 Almaden Boulevard, San José, CA 95113, USA. Processed are name, email address, call data (time, duration, participants), technical data about your device and, if you switch them on, video and audio. We do not record calls. A data processing agreement (Art. 28 GDPR) is in place with Zoom. Data may be transferred to the USA; Zoom is certified under the EU-US Data Privacy Framework. Legal basis: pre-contractual and contractual measures (Art. 6 (1)(b) GDPR). Zoom privacy notice: explore.zoom.us/en/privacy.
We run the newsletter with our own application on our server; the sign-up form is loaded from our own domain. To sign up we need your email address. After submitting, you receive an email with a confirmation link (double opt-in); we only add you once you confirm. As proof of consent we store the time and IP address of sign-up and confirmation. Legal basis: your consent (Art. 6 (1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every issue or by email. After unsubscribing we delete your address; we keep the proof of your earlier consent for as long as claims arising from it can be asserted. Emails are sent via our own mail server.
We do not set any cookies ourselves. In your browser's local storage we keep your language choice and your selection in the cookie notice. Legal basis: § 25 (2) no. 2 TDDDG (strictly necessary). Stripe sets its own cookies when the booking window loads:
On the blog we measure page views with our own analytics plugin on our server. It sets no cookies and stores nothing on your device. The IP address is shortened before storage; no recognition across websites takes place. The data does not leave our server and is deleted after 365 days. Legal basis: legitimate interest in improving our offering (Art. 6 (1)(f) GDPR).
For security, this site uses TLS encryption (recognisable by "https://").
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and to withdraw consent with effect for the future. Please contact the address above.
You have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
Last updated: November 2026.