Privacy Policy

I. Scope of Application

The protection of Personal Data (as defined in Art. 4 GDPR) is very important to Spryker. This Notice describes how Spryker is handling Personal Data in connection with its website, available at www.spryker.com. 
II. Data Controller

Personal Data is being processed by Spryker Systems GmbH, Heidestraße 9-10, 10557 Berlin, Germany (“Spryker”) as the Controller (as defined in Art. 4 GDPR). Spryker can be reached via email at legal@spryker.com. 
III. Data Protection Officer

Spryker has appointed MARAIT Rechtsanwaltsgesellschaft mbH as its external DPO, with postal address at Neuer Wall 75, 20354 Hamburg, Germany. The DPO can be reached at mail@marait.de.

Please contact Spryker’s internal Privacy Team at any time with any questions or suggestions regarding data protection at legal@spryker.com.
IV. Processing Activities, Purpose and Legal Basis
IV.I Making the website available

If you use the website we collect personal data that your browser transmits to our server. We collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

  • IP address,
  • date and time of the visit,
  • content of the requested page,
  • access status/HTTP status code,
  • data volume,
  • browser,
  • operating system,
  • interface (resolution),
  • language, and
  • browser version.

When using this data and information, we do not draw conclusions about you and do not collate your data with other personal data of yours. Rather, this information is needed in order to:

  • Ensure our website content is delivered correctly to you.
  • Optimize our website content and related advertising.
  • Maintain the long-term functionality of our IT and website technology.
  • Provide necessary information to law enforcement in the event of a cyber attack.

This anonymously collected data is statistically evaluated to improve data protection and security within our company, ultimately ensuring an optimal level of protection for the personal data we process.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case after one month at the latest.

The legal basis is Art. 6 I 1 f GDPR. The aforementioned purposes also constitute the legitimate interest in this processing of personal data. Insofar as data is collected to the extent described, this is essential for the security and operation of the website so the processing cannot be objected to.

IV.II Using a contact form

We offer several contact forms on the website (e.g. “Get in Touch”, Request a Demo”, and others). If you use one of these contact forms, we process all or some of the following personal data:

  • First and last name,
  • Email address,
  • Company you work for,
  • Country of operation,
  • Phone number
  • Topic you want to talk to us about,
  • A date that would work for you for a first chat, and
  • potentially other information, depending on what the contact form is about.

We collect these details so we can get back to you and respond to your request. 

The legal basis is Art. 6 I 1 f GDPR. Our legitimate interest is to enable the conversation with you and, if of interest to you as well, to start making business together.

IV.III Newsletter

If you subscribe to a Spryker newsletter via our website, we process the following personal data of you:

  • Email address, and
  • the information that you agree to receive the newsletter.

Further data will not be collected or only on a voluntary basis. We use this data exclusively for the dispatch of the requested newsletter type and do not pass it on to third parties without your consent.

The legal basis for this is your consent (Art. 6 I 1 a GDPR). You can withdraw your consent at any time, for example, via the “Unsubscribe” link in each newsletter. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

IV.IV Google AdWords

Spryker uses Google AdWords to promote its website through interest-based advertising. When users reach our website via a Google ad, a conversion cookie is stored, allowing Google to generate visit statistics for us to optimize our ad campaigns. Personal data, including IP address, is transferred to and stored by Google in the USA. Google may share this data with third parties. Users can prevent cookie storage via browser settings or delete existing cookies. Users can also object to interest-based advertising by adjusting Google ad settings. We have a data processing agreement with Google based on EU standard contract clauses. More information is available at https://www.google.de/intl/de/policies/privacy/.

IV.V Cookies and Social Media Plug-ins

Details on how we process your personal data with cookie technology can be found in our cookie banner, accessible via our website footer (“Cookie Settings”).

IV.VI Career

Details on how we handle applications, including those you may send to us via our website, are described in our Applicant Privacy Notice.
V. Special Categories of Personal Data

Spryker does not intentionally or knowingly collect or process personal data that are considered special categories of personal data within the meaning of Art. 9 GDPR on the website.
VI. Automated Decision-making

Spryker does not use your personal data for automated decision-making.
VII. Data Retention

Spryker deletes personal data as soon as it is no longer necessary for the above-mentioned purposes and there are no legal documentation or record keeping requirements or retention periods to be met. 
VIII. Recipients

Spryker may use data processors for the described purposes and share your personal data with them (e.g. the website hosting provider). Such sharing of personal data is always covered by a data processing agreement between Spryker and the data processor.

Spryker may also share personal data with its other entities to the extent to administer the application for employment. Such transfer is covered by intra-group data protection agreements.

In addition to that, Spryker may share personal data with further recipients depending on your cookie settings.

Spryker may also share personal data with third parties where necessary, e.g. where required to seek legal advice externally or they act as data processors on Spryker’s behalf.

To the extent Spryker forwards Personal Data to countries outside the European Economic Area, Spryker will take the necessary steps to ensure that an appropriate level of data protection is maintained according to Article 44 et seq. GDPR. 
IX. Data Subjects’ Rights
You have the following rights according to the GDPR:
  • Right to withdraw consent at any time (Art. 7)
  • Right of access (Art. 15);
  • Right of rectification (Art. 16);
  • Right of erasure (Art. 17);
  • Right of restriction of data processing (Art. 18);
  • Right to data portability (Art. 20);
  • Right to object (Art. 21).

If you want to withdraw your consent or have any other concerns with regard to Spryker’s processing of your personal data, please reach out to Spryker using legal@spryker.com.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement if you consider the processing of personal data relating to you to be infringing the GDPR.