PROTECTING YOUR PRIVACY IS IMPORTANT TO US

We take it for granted that we handle your personal data responsibly when you use our websites and communicate with us electronically. We take all necessary measures to protect the personal data you provide and to comply with applicable national and European data protection regulations.
In this privacy policy, we inform you about how Spicetech GmbH (SPICETECH) processes your personal data.

WHAT DATA IS COLLECTED AND HOW IS IT COLLECTED WHEN YOU VISIT THIS WEBSITE?

We only collect personal data that you choose to provide to us or that is necessary for us to provide our service to you. When you visit our website, our web servers automatically store, amongst other things, details of the browser and operating system you are using, the website from which you are visiting us, the pages you visit on our site, the date of your visit, and, for security reasons, e.g. to detect attacks on our websites, and, for a period of seven days, the Internet Protocol (IP) address assigned to you by your Internet Service Provider. With the exception of the IP address, personal data is only stored if you provide it to us voluntarily. For example, you may provide us with your email address, name, postal address, telephone number and, where applicable, further details in order to receive information about our products and services, take part in surveys, purchase products or services, or simply to stay up to date with the products and services that interest you.

When you visit our website and enter text into free-text fields or, for example, post a comment, our systems store your Internet Protocol (IP) address and the data you have entered. We require this information for security reasons, to prevent misuse and for other security purposes.

SECURITY

SPICETECH employs technical and organisational security measures to protect the data we manage against tampering, loss, destruction and unauthorised access. Our security measures are continuously improved in line with technological developments.

Only authorised staff have access to your personal data. This may also include authorised staff of our service providers who process the data on behalf of SPICETECH or have access to it. In such cases, we have entered into a so-called “data processing agreement” with the service provider.

FOR WHAT PURPOSES DO WE USE YOUR PERSONAL DATA?

We use your personal data for the purposes of technical administration of the website, customer management, responding to your enquiries, product and service surveys, processing your job application, and for marketing purposes, but only to the extent necessary in each case. We use your personal data only for the purposes for which you have provided it to us.

If you have given us your consent to process your personal data, this data will also be used for the purposes specified in the relevant consent form, e.g. to retain your application for a longer period. You may withdraw your consent at any time with future effect.

TRANSFER OF YOUR DATA TO THIRD PARTIES AND TO OTHER COUNTRIES

We do not share your personal data with other companies that wish to use it for direct marketing purposes, unless you have given us your consent to do so. Furthermore, we share your personal data with the following other organisations on a strictly limited basis:

• Our service providers, so that they can assist us, for example, with the management of our website. We have contractually obliged these companies to implement the same security measures as we do with regard to personal data, to maintain the confidentiality of the data, and to process it only on our express instructions.
• Personal data is only disclosed to government bodies and authorities where required by applicable legislation.

Your personal data may be transferred to other countries if a service provider we use is based abroad. In such cases, we enter into a so-called “data processing agreement” with the service provider to ensure that the same level of data protection and data security applies as in Germany. Where personal data is processed in a country outside the EU and the EEA, we ensure an adequate level of data protection by concluding the standard contract prescribed by the EU for this purpose, or by relying on an adequacy decision issued by the European Commission for the country in question.

LEGAL BASIS

We process your personal data on the basis of consent you have actively given, for example as part of the application process.

When you contact us (e.g. via the contact form or by email), personal data is collected. The specific data collected via the contact form is indicated on the form itself. This data is stored and used solely for the purpose of responding to your enquiry, establishing contact, and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your enquiry has been fully processed; this is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that there are no conflicting statutory retention obligations.

RIGHTS OF DATA SUBJECTS

We have listed your rights regarding your personal data below:

The right of access, rectification, erasure, restriction of processing, objection to processing, and the right to data portability.

You also have the right to withdraw your consent to the processing of your personal data at any time with effect for the future.

To exercise these rights, please contact us using the details provided in the website’s legal notice.

Unfortunately, it is not possible to provide information about your personal data over the phone due to the lack of clear identification.

Furthermore, there is a right to lodge a complaint with a data protection supervisory authority.

COOKIES

By using our website, you consent to the use and storage of cookies on your device. However, you can also view our website without cookies. Most browsers accept cookies automatically. You can prevent cookies from being stored on your device by selecting “do not accept cookies” in your browser settings. You can delete cookies already stored on your device at any time. For detailed instructions, please refer to your browser’s or device manufacturer’s instructions. If you use different computers in different locations, you must ensure that each browser is configured according to your cookie preferences.

Cookies are small text files that are stored on your device. The session cookie we use for user sessions on our SPICETECH websites is deleted after the browser session ends, provided you log out.

We use cookies to collect information such as browser type and operating system, the page being visited, the path to the website, etc., and to understand how this website is used. Cookies help us to tailor our SPICETECH website to the needs of our customers and to offer certain services and features, such as personalized information.

Personal data can be stored in cookies if you have given your consent or if this is technically necessary, e.g. to enable a secure login.

Technical cookies:

Cookie(s)	Purpose
cookie_notice_accepted cookiebar	This cookie indicates that you understand the use of technical cookies on our website. It is set when you close the notification layer by clicking “understood”. The specific cookie used depends on the service we offer.
JSESSIONID	This cookie serves to protect session information from unauthorized reading and, for example, for caching the page.
_redmine_session	This cookie serves to protect session information from unauthorized reading and, for example, for caching the page.
KC_RESTART AUTH_SESSION_ID	This cookie, containing both session IDs, is set by our OAUTH2 authentication service Keycloak and is used to manage the user’s session.

HOW LONG DO WE STORE YOUR DATA?

We store your personal data, which you submit to us via our websites, in our databases. This data is stored for as long as necessary for the purpose for which you submitted it or to comply with legal requirements (e.g., statutory retention obligations). For example, this means that the data is stored until we have responded to your inquiry. If you have given us your consent to store your personal data for marketing purposes, this means that your data will be stored for the duration of our marketing activities or until you withdraw your consent. You can revoke any consent you may have given to receive advertising at any time with effect for the future.

As of January 2021