Legal information
Last updated: 4 September 2026
This document describes how personal data is handled by r-system-by-salus.com, and by that site alone. It supplements the SALUS group privacy notice, which covers the other sites, commercial relationships, warranties and events.
Where the two differ on a point specific to this site, this document prevails.
For the purposes of the General Data Protection Regulation, SALUS Controls GmbH is the controller of all personal data collected through this site.
The SALUS group has appointed a data protection officer. This is the person to contact with any question, or to exercise your rights.
This site sets no trackers without your agreement.
The site uses Google Tag Manager, a tag manager, to understand how visitors use the page, how many of them send us a contact request, and which advertising campaigns brought them here. Neither the tag manager nor the tags it carries are loaded until you accept, through the banner shown on your first visit: before your agreement, no request is sent to Google. Declining is as easy as accepting, and you can change your choice at any time through the "Cookie settings" link in the footer. Your answer is kept for six months in your browser, after which you are asked again.
If you accept, the following trackers are set:
| Name | Purpose | Duration | Issued by |
|---|---|---|---|
| _ga | Google Analytics audience measurement: telling visitors apart. | 13 months | Google Ireland Ltd |
| _ga_ followed by an identifier | Google Analytics audience measurement: following the course of a visit. | 13 months | Google Ireland Ltd |
The measurement data collected this way is kept for fourteen months, with no extension if you come back: the detail is in the record of processing, further down.
We advertise on Google Ads to bring installers to this site. No Google Ads tag is placed on the site, and no social media pixel. Campaign measurement runs through the audience measurement described above: when a contact request is sent, Google Analytics passes that fact to Google Ads, which links the request to the click on the ad. This transmission is subject to the same agreement as everything else and sets no additional cookie. No advertising audience is built from your visits and no personalised advertising is served to you on that basis. Should we add an advertising tag, it will be subject to the same prior agreement and this document will be updated before it goes live.
If you accept and you arrive from an ad, the click identifier in the page address is kept for 90 days in your browser and sent with your contact request, to link the request to the campaign that produced it. Once our teams have handled your request, the fact that it led to a commercial exchange may be sent back to Google Ads with that same identifier, without your contact details, to measure the quality of the campaigns and not only their volume. If you decline, the identifier is neither kept, nor sent, nor sent back.
The rest of the site is unchanged: fonts, images and libraries are hosted with the site, there are no social media buttons and no third-party bot detection service.
This site collects data only when you provide it, with a single exception: the host's technical logs, which any server needs to operate.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Contact form | First name, surname, work email address, telephone, reply language and, if you accepted trackers, the Google Ads click identifier. Used to handle your enquiry, reply to it and follow it up. | Legitimate interest: answering a professional enquiry addressed to us. | Three years from our last exchange. |
| Marketing | The same contact details, used to send you commercial information about our products — only where you have consented, that consent being collected during our exchanges. | Consent. Without consent, your details are used only to handle your enquiry. | Until you withdraw consent, and at most three years without an exchange. |
| Technical logs | IP address, timestamp, page requested, browser type. Generated by the host to keep the site running, secure and protected against abuse. | Legitimate interest: security and proper operation of the service. | Period set by the host, in the order of a few weeks. |
| Audience measurement | A visit identifier drawn from the cookies described above, the pages viewed, the actions followed (opening the form, sending a request, using the configurator), the language, and the browser, device type and country inferred from the IP address, which Google truncates before storing. Used to know which parts of the page are useful and how many visitors send us a request. | Consent, collected through the banner. Without agreement, none of this data is collected. | Fourteen months, with no extension on a return visit. |
| Advertising campaign measurement | The Google Ads click identifier carried by the landing address, the fact that a contact request was sent and, once the request has been handled, the fact that it led to a commercial exchange, sent back to Google Ads from our CRM with that same identifier. Neither your contact details nor the content of your request are passed to Google. Used to know which campaigns and which keywords produce requests, and then useful requests. No advertising audience is built and no personalised advertising is served to you on that basis. | Consent, collected through the banner. Without agreement, the click identifier is not read and nothing is passed to Google Ads. | 90 days in your browser. Fourteen months at Google for the audience measurement the conversion comes from; the Google Ads reports derived from it are aggregated by campaign and carry no individual identifier. The link between your request and the click identifier is kept with the request, three years. |
| Configurator | No data. The configurator runs entirely in your browser: nothing is sent, nothing is stored, not even locally. | Not applicable. | Not applicable. |
No field on the form is required apart from surname and email address, without which we could not reply to you. Everything else is optional.
Your data is available to the sales and technical teams of SALUS Controls GmbH and its French establishment, only so far as needed to handle your enquiry.
It is also entrusted to the following suppliers, acting as processors on our instructions and with no right to use it for their own purposes:
| Supplier | Role | Location |
|---|---|---|
| Netlify, Inc. | Hosting the site. | United States |
| Zoho | Receiving contact enquiries and following them up in Zoho CRM. It is from the CRM that the status of an enquiry that came from an ad is sent back to Google Ads. | European Union |
| Google Ireland Ltd | Audience measurement for the site and Google Ads campaign measurement, only if you accepted trackers. | Ireland, with possible transfers to the United States |
Your data is never sold, rented or passed to third parties for advertising purposes. What Google Ads receives is limited to what section 4 describes.
The site's host, Netlify, Inc., is established in the United States, so the technical logs are processed outside the European Union. Contact form data stays in the European Union, with Zoho. If you accepted trackers, audience and campaign measurement data may be transferred to the United States by Google, under the Data Privacy Framework.
This transfer is covered by the data processing agreement in place with that supplier, which incorporates the standard contractual clauses adopted by the European Commission.
You can obtain a copy of the safeguards that apply by writing to the data protection officer.
Retention periods are set out in the record above. After those periods, data is deleted or anonymised.
An enquiry that leads to a commercial relationship falls outside this document: it is then governed by the group privacy notice and by the applicable legal, accounting and tax obligations.
Subject to the conditions set by the Regulation, you have the right to:
These rights are exercised through the data protection officer, whose details appear in section 3. You will receive a reply within one month.
If you believe your data is not being handled properly, you can complain to the competent data protection authority: that of your country of residence, your place of work, or the place where the alleged infringement occurred.
In France this is the Commission nationale de l'informatique et des libertés. As the publisher is established in Hesse, its own supervisory authority is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit.
This site is neither intended for nor directed at people under 18. The publisher does not knowingly collect data about them.
The site is served over HTTPS only and loads no resource from a third-party domain, with the sole exception of the tag manager described in section 4, loaded only after your agreement, which reduces the exposure of your data accordingly.
No electronic transmission is entirely secure, however. We apply appropriate technical and organisational measures without being able to guarantee absolute security.
This document may change. Any change is published on this page, and the last update date appears at the top of the document.
