Schmidt Embedded Systems
    Back to home

    Privacy Policy

    Last updated: 5 September 2026

    This privacy policy explains which personal data is processed when you visit our website or contact us. The relevant rules include the GDPR, the German Federal Data Protection Act and, where information is stored on or read from your device, the German Telecommunications Digital Services Data Protection Act (TDDDG).

    Controller within the meaning of GDPR

    Schmidt Embedded Systems GmbH Auf der Grube 9 35041 Marburg Germany Email: info@schmidt-embedded-systems.de Phone: +49 176 39270895

    Contact for privacy questions

    Please direct questions about the processing of your personal data to: Schmidt Embedded Systems GmbH Email: info@schmidt-embedded-systems.de

    Data Collection and Processing

    We collect and process various personal data only to the extent necessary and exclusively for the stated purposes.

    When Visiting the Website

    When you access the website, technically necessary connection data is processed. This may include your IP address, date and time, requested URL, referrer, browser, operating system and access status.

    This processing is necessary to deliver the website, maintain its stability and prevent misuse. Server and security logs are retained only for as long as they are needed for these purposes.

    The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

    Contacting us

    Our website does not contain a contact form. If you contact us by email, telephone or through appointment booking, we process the contact details and content you provide in order to respond to your enquiry.

    Processing is necessary to take steps before entering into a contract or to perform a contract under Art. 6(1)(b) GDPR. For other enquiries, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is responding to your enquiry.

    Internal reach measurement

    After you have given consent, the website sends the page path, section identifier, event type, any UTM campaign parameters and a randomly generated session identifier to our API at checkout.ses-intern.de when individual page sections enter the viewport. The identifier is not stored permanently on your device. The server also records the IP address and time. We use this data only to understand which content is viewed.

    The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time through the cookie settings with effect for the future.

    Local Data Storage

    Your separate choices for internal analytics and advertising are stored with a timestamp and version number in your browser's localStorage for 180 days. We ask again when processing purposes change. You can change or withdraw your choices at any time through the cookie settings. Withdrawal also applies in other open tabs of this website. You can also remove the selection through your browser settings.

    This storage is necessary to manage the consent choice you made (section 25(2)(2) TDDDG). Where personal data is processed, the legal basis is Art. 6(1)(f) GDPR.

    External Services

    Transfers outside the European Economic Area

    Google including YouTube, LinkedIn, Calendly and Vercel may process data in the USA and other countries outside the EEA. For transfers to certified US entities, the providers rely on the EU-US Data Privacy Framework adequacy decision. Where no applicable adequacy decision exists, their published terms provide safeguards including EU Standard Contractual Clauses. Details of the safeguards and contractual terms are available here: https://policies.google.com/privacy/frameworks https://www.linkedin.com/legal/privacy/eu https://calendly.com/legal/data-processing-addendum https://vercel.com/legal/dpa

    Hosting by Vercel

    The website is delivered through Vercel Inc., USA. Vercel processes connection data needed to deliver and secure the website on our behalf. Runtime logs under our Vercel Pro plan are retained for no more than one day. Processing in the USA or other third countries may occur. Vercel provides safeguards including the EU Standard Contractual Clauses. More information: https://vercel.com/legal/privacy-notice and https://vercel.com/legal/dpa

    Appointment booking through Calendly

    The appointment buttons link to Calendly, a service provided by Calendly LLC, USA. No Calendly content is loaded on our website. Only after you follow the link does Calendly process technical data and the details you enter to book the appointment. The details required for the appointment are shared with us. More information: https://calendly.com/legal/privacy-notice

    Embedded YouTube videos

    Video previews are loaded from our own server. Only when you play a video is a connection established with YouTube through the enhanced privacy domain youtube-nocookie.com. Google Ireland Limited may then receive your IP address, device and browser data and the page you visited, and may store or access information on your device. The legal basis is your choice to play the video in conjunction with Art. 6(1)(a) GDPR and section 25(1) TDDDG. More information: https://policies.google.com/privacy

    Social Media Links

    Our website contains links to LinkedIn. Merely visiting our website does not load content from LinkedIn. Only after you follow a link does LinkedIn process data under its own privacy terms: https://www.linkedin.com/legal/privacy-policy

    Google Tag Manager

    After you consent to advertising, we load Google Tag Manager from Google Ireland Limited. It manages our Google Ads and LinkedIn tags. Connection data is transmitted to Google. Consent to internal analytics alone does not load Tag Manager.

    The legal basis is your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG. You may withdraw it at any time through the cookie settings.

    Google Ads

    After you consent to advertising, we use Google Ads from Google Ireland Limited to measure page views and conversions and for remarketing. Google may process your IP address, full page URL, device and browser data, and cookie and advertising-click identifiers as soon as you view a page. A click on appointment booking in the contact section is additionally reported as a conversion. We receive aggregated information about advertising effectiveness. More information: https://policies.google.com/technologies/partner-sites

    The legal basis is your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG.

    LinkedIn Insight Tag

    After you consent to advertising, we use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company for conversion measurement, aggregated audience reports and retargeting. LinkedIn processes the data as an independent controller. The URL, referrer, IP address, device and browser characteristics and time are transmitted. Depending on your region and browser, cookies such as li_fat_id (30 days) or li_sugr (90 days) may be set. LinkedIn states that it removes direct identifiers within seven days and deletes the remaining pseudonymised data within 180 days. More information: https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/l/cookie-table

    The legal basis is your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG.

    Conversion Linker

    After you have given consent, Conversion Linker stores information about an advertising click in first-party cookies with the _gcl_ prefix and in browser storage under _gcl_ls. These identifiers are retained for up to 90 days. This enables Google Ads to associate a later click on the appointment booking button with the advertising click.

    The legal basis is your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG.

    Data Security

    The website is transmitted through an encrypted HTTPS connection. We also use appropriate technical and organisational measures to protect personal data against loss, alteration and unauthorised access.

    Data Retention

    We store your personal data only for as long as is necessary for the stated purposes or as required by legal retention periods:

    • Cookie consent (localStorage): 180 days
    • Vercel runtime logs: no more than 1 day
    • Contact and appointment data: until the enquiry has been completed and then only for applicable statutory retention periods
    • Internal reach measurement: until the data is no longer required to evaluate which content was viewed
    • Google Ads identifiers (_gcl_ cookies and _gcl_ls browser storage): no more than 90 days
    • LinkedIn Insight Tag: pseudonymised data for no more than 180 days according to the provider
    • Google advertising logs: Google states that it anonymises IP addresses after 9 months and cookie information after 18 months. This is not complete deletion of all data. More information: https://policies.google.com/technologies/ads
    • Other Google and YouTube data: Retention depends on the data type and your account and deletion settings. Some data remains until you remove it or delete your account. Security and legal requirements may require longer retention. More information: https://policies.google.com/technologies/retention
    • Calendly booking data: Retention depends on appointment handling, contractual obligations and statutory retention and limitation periods. For data processed on our behalf, Calendly provides for deletion on our instruction or after the contract ends, unless retention is legally required. More information: https://calendly.com/legal/data-processing-addendum

    Your Rights

    Regarding your personal data stored with us, you have the following rights:

    • Right to information (Art. 15 GDPR)
    • Right to rectification (Art. 16 GDPR)
    • Right to erasure (Art. 17 GDPR)
    • Right to restriction of processing (Art. 18 GDPR)
    • Right to data portability (Art. 20 GDPR)
    • Right to withdraw consent (Art. 7(3) GDPR)
    • Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
    • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
    Back to home