Privacy Statement

This privacy statement was last updated on 19 October 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via tagdc.tagsystems.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation, in particular the EU General Data Protection Regulation (GDPR) as applicable in Liechtenstein and the Swiss Federal Act on Data Protection. That means, among other things, that:

  • we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
  • we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
  • we first request your explicit consent to process your personal data in cases requiring your consent;
  • we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
  • we respect your right to access your personal data or have it corrected or deleted, at your request.

This website does not use advertising or tracking tools. We measure visits with cookieless, anonymised statistics (see section 4). We do not sell your personal data. If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following:

1.1 Contact — Through phone, mail, email and our contact form

For this purpose we use the following data:

  • A first and last name
  • An email address
  • A telephone number
  • The content of your message and any information you choose to provide

Messages sent through the contact form on our website (name, e-mail address and message) are delivered by e-mail to our team via our e-mail delivery service SMTP2GO (see section 2.3). They are not stored on our web server. To protect the form against spam, we use Cloudflare Turnstile (see section 2.2).

The basis on which we may process these data is:

Your request and our legitimate interest in answering it (Art. 6(1)(f) GDPR) or, where your request relates to a contract or the preparation of a contract, the performance of that contract (Art. 6(1)(b) GDPR).

Retention period

We retain this data for as long as is necessary to handle your request and for as long as statutory retention obligations require.

1.2 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

  • A first and last name
  • An email address
  • A telephone number

The basis on which we may process these data is:

The performance of a contract or of pre-contractual measures (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).

Retention period

We retain this data until the service is terminated, and beyond that for as long as statutory retention obligations require.

1.3 Operating and securing this website — Server log files

When you visit our website, our web server automatically records technical information that your browser transmits.

For this purpose we use the following data:

  • IP Address
  • Date and time of the request
  • The page or file requested and the referring page
  • Browser type, browser version and operating system

The basis on which we may process these data is:

Our legitimate interest in providing a secure and functioning website and in detecting and preventing misuse (Art. 6(1)(f) GDPR).

Retention period

Log files are deleted after a short period, unless they are needed to investigate a specific security incident.

2. Service providers

We use the following service providers to run this website. They process personal data on our behalf and in accordance with our instructions.

2.1 Hosting

Our website is hosted on servers operated by or for TAG Systems AG. The hosting provider processes the data mentioned in section 1.3 in order to deliver the website.

2.2 Cloudflare

Our website is delivered through the network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA), which protects it against attacks and makes it load faster. To do so, Cloudflare processes your IP address and the technical data of your requests. The basis is our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework. For more information, see Cloudflare's privacy policy: www.cloudflare.com/privacypolicy/

To protect our contact form against spam and abuse, we use Cloudflare Turnstile. When the form is displayed, Turnstile checks technical characteristics of your browser and your IP address to tell humans from bots; it does not use cookies for this purpose. The basis is our legitimate interest in protecting our website and our mailboxes (Art. 6(1)(f) GDPR).

2.3 SMTP2GO

Messages sent through the contact form on our website are delivered by e-mail via SMTP2GO (SMTP2GO Ltd, New Zealand). SMTP2GO processes the content of the message and the e-mail addresses involved in order to deliver it, and keeps delivery logs for a limited period. New Zealand is recognised by the European Commission as providing an adequate level of data protection. For more information, see SMTP2GO's privacy policy: www.smtp2go.com/privacy/

3. Cookies

Our website does not use cookies for analytics, advertising or tracking, and it does not show a cookie banner because none is needed.

Cloudflare may set strictly necessary security cookies (for example __cf_bm or cf_clearance) to distinguish visitors from automated attacks. These cookies do not identify you personally and are deleted after a short time. The basis is our legitimate interest in protecting the website (Art. 6(1)(f) GDPR).

4. Statistics (Matomo)

To understand how our website is used and to improve it, we use the web analytics service Matomo, operated for us by InnoCraft Ltd (Wellington, New Zealand) as Matomo Cloud. Matomo is configured without cookies, does not store anything on your device, and does not follow you across other websites.

For this purpose, Matomo processes your IP address in shortened (anonymised) form, the pages you visit, the referring website, the date and time of your visit, and technical information about your browser, device and operating system. We cannot identify you from these statistics and we do not combine them with other data.

The basis is our legitimate interest in an analysis of the use of our website (Art. 6(1)(f) GDPR). You can object to this processing at any time with the switch below. We also do not load Matomo if your browser sends "Do Not Track" or "Global Privacy Control". The statistics data is hosted in Germany and kept for about two years. New Zealand is recognised by the European Commission as providing an adequate level of data protection. For more information, see Matomo's privacy policy: matomo.org/privacy-policy/

5. Fonts

The fonts used on this website are hosted on our own server. No connection to third-party font services (such as Google Fonts) is established.

6. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

7. International data transfers

Some of the service providers mentioned above process data outside the European Economic Area and Switzerland. We only transfer personal data to such countries if the European Commission (and, for Switzerland, the Federal Council) has recognised an adequate level of data protection there, if the recipient is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework, or if appropriate safeguards such as the EU Standard Contractual Clauses are in place.

8. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use consist of:

  • DKIM, SPF, DMARC and other specific DNS settings
  • Encrypted transmission (HTTPS/TLS), HTTP Strict Transport Security and related Security Headers and Browser Policies
  • Website Hardening: a static website without content management system or database, and spam and abuse protection on our forms
  • Protection against attacks through Cloudflare

9. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

10. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

11. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

  • You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
  • Right of access: You have the right to access your personal data that is known to us.
  • Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
  • If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
  • Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
  • Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

12. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority. In Liechtenstein, this is the Datenschutzstelle Liechtenstein (www.datenschutzstelle.li); you may also contact the supervisory authority of your country of residence.

13. Contact details

TAG Systems AG
Pflugstrasse 22, 9490 Vaduz
Liechtenstein
Website: tagdc.tagsystems.com
Email: info@tagsystems.com
Phone number: +423 376 50 80