Privacy Policy
The protection of your personal data is important to us. Below we inform you about the processing of personal data when visiting this website.
1. Controller
AMA Systems GmbH
Lotzbeckstraße 12
77933 Lahr/Schwarzwald, Germany
Phone: +49 (0) 7821 5490311
Email: info@ama-systems.eu
Managing Director: Mihai Andronic
Commercial Register: HRB 733022 (Amtsgericht Freiburg)
VAT ID: DE 454303907
2. Hosting, Content Delivery and Server Logs
This website is served via Cloudflare infrastructure. When accessing pages, connection data is automatically processed, including IP address, date and time of access, URL, user agent, and where applicable error codes. Processing serves the technical provision, stability and security of the website. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in secure and efficient content delivery.
Provider: Cloudflare, Inc. / Cloudflare Ltd. For more information, please refer to Cloudflare's privacy policy at cloudflare.com/privacypolicy.
3. Cookies and Consent
This website uses a self-built consent banner to obtain your consent for services that are not required to operate the website. On your first visit, you will be asked which categories you wish to allow. "Required only" and "Accept all" are offered with equal weight on the first layer; the "Settings" dialog shows provider, purpose and retention period for each category.
Your decision (consent or refusal per category) is stored as a yes/no value together with the time of your decision, but without any identifier, in your browser (localStorage, key "ama-cookie-consent"). After 12 months we ask again.
To document how we obtain consent, we additionally log each decision in a Cloudflare database stored in the EU (see section 2): time, version of the consent banner, chosen categories, where the decision was made (banner, settings or map placeholder), language and page visited. Neither your IP address nor your browser identifier nor any identifier is stored; no conclusions about your person are possible. Your IP address is only used transiently to prevent overload from automated requests. Entries are deleted after 3 years. The legal basis is our obligation to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR) and our legitimate interest in documenting the consent process (Art. 6(1)(f) GDPR).
We distinguish the following categories:
- Required: Necessary to operate the website and cannot be disabled. We store your consent selection (localStorage, 12 months) and, where applicable, a draft of a started inspection request (sessionStorage, until the tab is closed). Nothing is transmitted to third parties.
- External maps (Google Maps): Display of the directions map (see section 5). Without your consent, the map is not loaded.
- Marketing (Google Ads conversion tracking): Measures whether an enquiry followed a click on one of our Google ads (see section 6). Without your consent, no Google code is loaded and no connection to Google is established.
There is no category for analytics cookies: our reach measurement works without cookies (see section 4).
You can change your settings or withdraw your consent with effect for the future at any time via the "Cookie Settings" link in the footer. The legal basis for storing information on, or accessing information from, your device is your consent (Section 25(1) TDDDG), and for the subsequent processing Art. 6(1)(a) GDPR. Required storage falls under Section 25(2) no. 2 TDDDG; the legal basis for that processing is our legitimate interest in a functioning website and in being able to demonstrate your consent (Art. 6(1)(f) GDPR).
4. Web Analytics with Plausible
For reach measurement we use Plausible Analytics, a privacy-friendly web analytics service. Plausible works without cookies and without storing information on your device; there is no cross-device or cross-site tracking. Your IP address is not stored; it is only processed transiently to derive coarse location data (country, region, city) and, together with your browser identifier (user agent), hashed with a daily rotating key that is deleted after 24 hours, so page views can only be grouped within the same day. The script is served via our own domain.
We record pages visited, the referrer, browser, operating system and device type, scroll depth and time on page, and interactions such as clicks on phone numbers and links or the submission of forms. The contents of your form entries are not transmitted to Plausible. All data is processed exclusively on servers within the European Union (hosting by Hetzner in Germany).
Provider: Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. The legal basis is our legitimate interest in privacy-friendly analysis of website usage (Art. 6(1)(f) GDPR). Plausible does not set cookies and does not store any information on your device. You may object to this processing at any time (see section 11). More information: plausible.io/data-policy.
5. Google Maps
In the contact section, a Google Maps map may be embedded to help you find directions. The map is only loaded after you have enabled the "External maps (Google Maps)" category in the cookie settings or via the "Load map" button in the placeholder. Until then only a placeholder with a link to Google Maps is shown, and no data is transmitted to Google.
When the map is loaded, personal data (in particular your IP address) is transmitted to the provider, and cookies or similar technologies may be used.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to third countries (in particular the USA). The legal basis is your consent (Art. 6(1)(a) GDPR). For more information, please refer to Google's privacy policy at policies.google.com/privacy.
6. Google Ads and Conversion Tracking
We use Google Ads to advertise our services on external websites. To measure the success of our ads, we use Google Ads conversion tracking, exclusively with your consent to the "Marketing" category.
Without this consent, the Google tag (gtag.js) is not loaded: no Google code is executed, no cookie is set and no connection to Google servers is established.
After you consent, your browser loads the Google tag. In particular your IP address, the page visited, browser and device data and, where applicable, the click ID of a Google ad (gclid) are transmitted to Google. The cookie "_gcl_au" and possibly further "_gcl_" cookies (e.g. "_gcl_aw" after an ad click) are set on this website, each with a retention of 90 days. Google may additionally set or read cookies on its own domains (e.g. googleadservices.com, google.com, doubleclick.net), such as "ar_debug" (90 days), "NID" (6 months from last use) or "AID" (up to 13 months in the EEA). If you reach us via a Google ad and then submit an enquiry, this is recorded as a "conversion". We only receive aggregated statistics, no information about individual persons.
We do not use conversion tracking for personalised advertising or remarketing; the corresponding signal ("ad_personalization") is always transmitted as denied. We use Google Consent Mode (v2) to communicate your decision to Google.
How Google uses data from this service: business.safety.google/privacy. Overview of cookies used by Google Ads: business.safety.google/adscookies.
If you withdraw your consent via "Cookie Settings", Google is immediately informed that cookies may no longer be used, and the Google cookies set by this website (e.g. "_gcl_au") are deleted. The website cannot technically delete cookies on Google domains; you can remove them in your browser.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to third countries (in particular the USA, see section 10). The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). For more information, please visit policies.google.com/technologies/ads.
7. Contact Requests and Email Storage
If you contact us by email or use the contact form, we process the data you provide (e.g. name, email address, phone number, content of your message) in order to handle and respond to your enquiry. Your email is stored on our own server (VPS).
For sending contact requests by email, we use the Mailgun service in the EU region. Mailgun acts as a data processor. Processing is carried out solely for the purpose of delivering your message. Provider: Mailgun (EU region). For more information, please refer to the provider's privacy policy at mailgun.com/legal/privacy-policy.
The legal basis is, depending on the enquiry, the performance of pre-contractual measures or the fulfilment of a contract (Art. 6(1)(b) GDPR) and, where no contractual relationship exists, our legitimate interest in the efficient handling of enquiries (Art. 6(1)(f) GDPR).
We do not process any further personal data for marketing or profiling purposes. No data is shared with third parties for advertising purposes.
8. Categories of Data and Retention Period
- Usage data / log data (e.g. IP address, timestamp) when visiting the website via Cloudflare: processed to ensure operation and to defend against attacks, and stored in accordance with the respective retention periods of the provider.
- Consent selection (localStorage in your browser): 12 months, then you are asked again; you can delete it at any time in your browser settings.
- Consent log (without IP address and without identifier, see section 3): 3 years.
- Google Ads cookies "_gcl_au"/"_gcl_aw" (only with consent): 90 days or until withdrawal.
- Communication data (name, email, phone number, message content) when contacting us: stored for the handling and follow-up of your enquiry and subsequently deleted, unless statutory retention obligations apply.
9. Recipients and Data Processors
For the provision and security of this website, we use Cloudflare as a technical service provider. Insofar as Cloudflare processes data on our behalf, a data processing agreement exists (Art. 28 GDPR).
For sending contact request emails, we use Mailgun (EU region) as a data processor. Processing is carried out solely for the transmission of the content you have submitted.
For cookieless web analytics, we use Plausible Insights OÜ (Estonia, EU hosting) as a data processor (see section 4).
10. Third-Country Transfers
When using Cloudflare, Google Maps and Google Ads, data may be transferred to third countries (in particular the USA). Cloudflare, Inc. and Google LLC are certified under the EU-US Data Privacy Framework (European Commission adequacy decision); in addition, the EU Standard Contractual Clauses form part of the providers' data processing or data protection terms.
Web analytics with Plausible is operated entirely on servers within the EU; no third-country transfer takes place in this respect.
For email delivery, we use Mailgun in the EU region. A third-country transfer is not intended. Should a transfer to third countries nevertheless occur in individual cases, it is based on appropriate safeguards (e.g. EU Standard Contractual Clauses) provided by the provider.
11. Your Rights
Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on Art. 6(1)(e) or (f) GDPR. You also have the right to withdraw consent at any time with effect for the future.
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is in particular the supervisory authority of your habitual residence or of our registered office.
12. No Obligation to Provide Data
The provision of personal data is generally not required to use the website. However, we do need the relevant contact details in order to process enquiries.
Last updated: October 2026