Legal & Governance
Last Revised: September 2026 · LogicStackSystems
Controller: LogicStackSystems, 99752 Hauptstr. 85, Bleicherode, Germany. Email: [email protected].
1.1 Data Collection & Processing
LogicStackSystems collects and processes personal data solely for the purposes of delivering cybersecurity services, managing client relationships, fulfilling contractual obligations, and complying with applicable legal requirements. The categories of personal data processed include:
- • Contact information (name, email address, phone number, company affiliation)
- • Project and inquiry details submitted via our consultation forms
- • Technical metadata collected through essential platform cookies
- • Communication records related to service delivery and support
1.2 Legal Basis for Processing
Processing activities are conducted under the following legal bases as defined in Article 6 of Regulation (EU) 2016/679 (GDPR):
- • Contractual necessity: Processing required to perform or enter into a contract with the data controller.
- • Legitimate interest: Processing necessary for our legitimate interest in delivering and improving cybersecurity services, provided such interest is not overridden by the data subject's rights.
- • Consent: Where explicit consent is obtained, such as for marketing communications.
- • Legal obligation: Processing required to comply with applicable laws, regulations, or judicial orders.
1.3 Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable statute of limitations. Contract-related data is retained for a minimum of six (6) years following the conclusion of the business relationship in compliance with German commercial record-keeping obligations.
1.4 Data Sharing & Third Parties
LogicStackSystems does not sell, rent, or commercially distribute personal data to unauthorized third parties. Data may be shared with the following categories of recipients where strictly necessary:
- • Cloud infrastructure providers operating under Data Processing Agreements (DPAs)
- • Legal and tax advisors bound by professional confidentiality obligations
- • Regulatory authorities where disclosure is legally mandated
- • Sub-processors engaged for specific service delivery components, subject to prior notification
1.5 International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), LogicStackSystems ensures appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent transfer mechanisms compliant with Chapter V of the GDPR.
1.6 Data Subject Rights
Under the GDPR, data subjects have the following rights regarding their personal data:
- • Right of access (Article 15)
- • Right to rectification (Article 16)
- • Right to erasure / "right to be forgotten" (Article 17)
- • Right to restriction of processing (Article 18)
- • Right to data portability (Article 20)
- • Right to object to processing (Article 21)
- • Right not to be subject to automated decision-making (Article 22)
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receipt.
1.7 Data Security
LogicStackSystems implements appropriate technical and organizational measures to protect personal data, including but not limited to: AES-256 encryption at rest, TLS 1.3 encryption in transit, multi-factor authentication for system access, regular penetration testing, and ISO/IEC 27001-aligned security management practices.
1.8 Right to Lodge a Complaint
Data subjects have the right to lodge a complaint with the competent supervisory authority. The relevant authority for LogicStackSystems is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Thüringen (TLFDI), Germany.
Provider: LogicStackSystems, 99752 Hauptstr. 85, Bleicherode, Germany.
2.1 Scope of Services
LogicStackSystems provides enterprise cybersecurity services including, but not limited to, vulnerability assessments, cloud perimeter defense protocols, penetration testing, continuous security monitoring, incident response, compliance auditing, threat intelligence, security awareness training, and managed detection and response (MDR). All services are delivered as described in individual Statements of Work (SOWs) and engagement agreements executed between LogicStackSystems and the client.
2.2 Engagement Terms
Services commence upon mutual execution of the applicable SOW and receipt of the initial payment or retainer deposit as specified therein. All pricing is denominated in US Dollars (USD) unless explicitly stated otherwise in the engagement agreement. LogicStackSystems reserves the right to adjust pricing for recurring services with 30 days' prior written notice.
2.3 Intellectual Property
Upon complete settlement of all agreed commercial invoices, LogicStackSystems assigns all worldwide intellectual property rights in client-specific deliverables—including reports, custom tooling, detection rules, and documentation—directly to the client. LogicStackSystems retains ownership of its proprietary methodologies, frameworks, reusable tooling, and pre-existing intellectual property.
2.4 Confidentiality
Both parties agree to maintain the strict confidentiality of all proprietary information exchanged during the engagement. This obligation survives termination of the business relationship for a period of five (5) years. LogicStackSystems personnel are bound by contractual non-disclosure agreements applicable to all client engagements.
2.5 Limitation of Liability
LogicStackSystems' aggregate liability under any engagement shall not exceed the total fees paid by the client for the specific service giving rise to the claim during the twelve (12) months preceding the incident. LogicStackSystems shall not be liable for indirect, incidental, consequential, or punitive damages. Nothing in these terms excludes or limits liability for fraud, willful misconduct, or gross negligence.
2.6 Termination
Either party may terminate an engagement with 30 days' written notice. In the event of termination, the client shall pay for all services rendered and expenses incurred up to the effective date of termination. Urgent incident response engagements are subject to a minimum 48-hour commitment and are non-cancellable during active containment operations.
2.7 Governing Law
These Terms of Service are governed by the laws of the Federal Republic of Germany. Any disputes arising from or relating to these terms or the services provided shall be submitted to the exclusive jurisdiction of the courts of Nordhausen, Thüringen, Germany.
Provider: LogicStackSystems, 99752 Hauptstr. 85, Bleicherode, Germany.
4.1 General Refund Terms
LogicStackSystems is committed to delivering high-quality cybersecurity services. Refund eligibility is assessed on a case-by-case basis in accordance with the following terms. All refund requests must be submitted in writing to [email protected].
4.2 Pre-Engagement Cancellations
If a client cancels a booked engagement prior to commencement, the following cancellation terms apply:
- • 14+ days before start: Full refund of any prepaid amounts
- • 7–13 days before start: 50% refund of prepaid amounts
- • Less than 7 days before start: No refund; credit may be applied to future engagements
4.3 Service Delivery Disputes
If a client believes that delivered services do not conform to the specifications defined in the applicable Statement of Work, the client must notify LogicStackSystems within 14 days of deliverable receipt. LogicStackSystems will conduct a quality review and, at its discretion, either:
- • Remediate the non-conforming deliverable at no additional charge within 10 business days
- • Provide a partial or full refund proportional to the scope of non-conformance
4.4 Monthly Retainer Services
Monthly retainer services (including SOC monitoring and MDR subscriptions) may be cancelled with 30 days' written notice. No refund is provided for the current billing period. Recurring charges cease at the beginning of the next billing cycle following the notice period.
4.5 Non-Refundable Items
The following are explicitly non-refundable:
- • Completed and delivered vulnerability assessment reports
- • Incident response services rendered during active breach containment
- • Third-party tool licensing costs incurred on behalf of the client
- • Travel and accommodation expenses pre-approved by the client
4.6 Refund Processing
Approved refunds are processed within 14 business days to the original payment method. LogicStackSystems reserves the right to issue account credit in lieu of monetary refund where the service engagement permits. Clients will receive written confirmation of refund approval and processing timeline.