Privacy notice for the flexikasse

This privacy notice of bsys GmbH concerns its software solutions, in particular the flexikasse. How this website itself handles your data is set out in thewebsite privacy policy. This English text is a translation for information; theGerman version is binding.

1. Controller

2. Processing of personal data

We process personal data exclusively in accordance with the GDPR and the Austrian Data Protection Act (DSG).

Processing serves:

• the provision of our software solutions (cash register systems, SaaS)
• the performance of contracts
• the technical operation of our services
• communication with customers

3. Roles under the GDPR

Depending on the context, different data protection roles apply:

• Website: controller (Art. 4 GDPR)
• SaaS/cash register system: processor (Art. 28 GDPR)
• Payment processing: external payment service providers as independent controllers

4. Payment providers

To process payments we use external payment service providers (e.g. PAYNT or comparable providers). They act as independent controllers within the meaning of the GDPR.

We have no influence on the data processing by these providers. The privacy terms of the respective payment service provider apply.

5. Legal bases

Processing is based on:

• Art. 6(1)(b) GDPR (performance of a contract)
• Art. 6(1)(c) GDPR (legal obligation)
• Art. 6(1)(f) GDPR (legitimate interest)

6. Server log files

When you visit our website, the following data is processed automatically:

• IP address
• date and time
• browser type and version
• operating system

This data serves system security and error analysis.

7. Hosting

Our website is operated by an external hosting provider, which processes data under a data processing agreement.

8. Retention

Personal data is stored only for as long as is necessary for the respective purposes or statutory obligations.

9. Transfers to third countries

Data is transferred to third countries only where appropriate safeguards under Art. 44 et seq. GDPR exist (e.g. standard contractual clauses).

10. Rights of data subjects

Data subjects have the following rights:

• access
• rectification
• erasure
• restriction
• data portability
• objection

Complaints can be lodged with the Austrian Data Protection Authority (Datenschutzbehörde).

11. IT security

We use appropriate technical and organisational measures in accordance with Art. 32 GDPR. Absolute data security cannot, however, be guaranteed.

12. Cookies

Our website uses cookies. Cookies that are not technically necessary are set only after consent via the cookie banner. Consent can be withdrawn at any time.