Kros Systems
← Back to Home

Privacy Policy

Last updated: April 9, 2026

1. Data Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR), Art. 4 No. 7, is:

Kros Systems
Ran Zhang
Maiglöckchenweg 9
06122 Halle (Saale)
Germany
Email: contact@krossys.com

We process personal data only to the extent necessary and on the following legal bases:

  • Art. 6(1)(b) GDPR — Contract performance / pre-contractual measures: When you contact us via email, we process the data you provide (name, email address, message content) to respond to your inquiry.
  • Art. 6(1)(f) GDPR — Legitimate interest: We have a legitimate interest in the technically secure and efficient provision of our website. For this purpose, technically necessary data is processed when you visit our website (see “Server Log Files” below).

3. Data Retention

Personal data provided by email will be retained for as long as the respective conversation or business relationship requires. After the purpose has been fulfilled, the data will be deleted unless statutory retention obligations (e.g., under commercial or tax law) require longer storage. Server log files are deleted automatically after 30 days.

4. Recipients and Processors

Your personal data will not be shared with third parties except as described below. We use the following processor:

Cloudflare, Inc. — for hosting and content delivery (see Section 8 below).

No other processors or third-party recipients are used.

5. Third-Country Transfers — Cloudflare Disclosure

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When you access this website, technically necessary data (IP address, browser type and version, time of access, requested URL, amount of data transferred) is transmitted to Cloudflare and briefly processed there for the purpose of delivering content and protecting against attacks. This processing is based on our legitimate interest in a technically secure and fast provision of our website (Art. 6(1)(f) GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Cloudflare. Since Cloudflare may also process data in the USA, we have concluded the EU Commission’s Standard Contractual Clauses (SCC) with Cloudflare pursuant to Art. 46(2)(c) GDPR. Further information on data protection at Cloudflare can be found at https://www.cloudflare.com/privacypolicy/.

6. Data Subject Rights

Under the GDPR, you have the following rights with regard to your personal data. To exercise any of these rights, please contact us at contact@krossys.com.

  • Right of access (Art. 15 GDPR): You have the right to request information about the personal data we hold about you.
  • Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data.
  • Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided no statutory retention obligations apply.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of your personal data under certain conditions.
  • Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data based on legitimate interests at any time, for reasons arising from your particular situation.
  • Right to withdraw consent (Art. 7(3) GDPR): If processing is based on consent, you have the right to withdraw that consent at any time. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. The competent supervisory authority for our business is:

Landesbeauftragter für den Datenschutz Sachsen-Anhalt
Leiterstraße 9
39104 Magdeburg
Germany
Website: https://datenschutz.sachsen-anhalt.de

8. Server Log Files

When you visit this website, Cloudflare Pages automatically collects and stores information in server log files that your browser transmits. This includes:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URL
  • Time of the server request
  • Amount of data transferred

This data is used solely for the purpose of delivering the website content and ensuring its security. It is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure website operation).

9. Fonts

Fonts are served locally from the server. No connection to Google Fonts or other external font CDNs takes place.

10. Cookies

This website does not use cookies and does not employ tracking technologies.

11. Contact by Email

If you contact us by email at contact@krossys.com, we will process the personal data provided by you (email address, name if stated, message content) solely for the purpose of handling your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures initiated by the data subject) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Your data will be deleted once the inquiry has been fully resolved, unless statutory retention obligations apply.