PRIVACY NOTICE FOR SPRYKER’S CUSTOMERS

This Privacy Notice provides information on Spryker’s processing of its Customers’ personal data. Spryker processes only very limited personal data of its Customers as a controller. This Privacy Notice does not cover processing activities carried out by Spryker on behalf of a Customer as a processor.
Content

1. Name and Address of the Controller

Spryker Systems GmbH („Spryker“)
Heidestraße 9-10
10557 Berlin
Germany
dataprotection@spryker.com

2. Name and Address of Spryker’s external Data Protection Officer

MARAIT Rechtsanwaltsgesellschaft mbH
Neuer Wall 75
20354 Hamburg
Germany
mail@marait.de

3. Type of Personal Data, Purposes of the Processing, Legal Basis

3.1 Conversations

Spryker communicates with its Customers on various occasions, including, but not limited to, regular customer success meetings, contract negotiations, support cases. The data subjects whose personal data Spryker processes in that context are Customer’s employees that serve as the respective contact person. Spryker processes the following personal data in that context:

  • Name and Surname, 
  • Email address, 
  • Phone number,
  • Role at Customer’s company, 
  • Information about the concern or request, 
  • Outcome of the conversation.

Spryker may get the above information either from the data subject directly or from another person within Customer’s company. 

The purpose of this processing is to provide Customers the best assistance possible. 

This processing of personal data is required to fulfill contractual obligations between Spryker and the respective Customer and it is in both parties’ mutual interest to have the respective conversations. Since the data subjects are not directly contracting with Spryker, the legal basis for this processing is Art. 6 (1) (f) GDPR.

For information about additional data processing in cases where Spryker asks meeting participants for permission to record the meeting, Spryker will provide a respective additional privacy notice. 

3.2 Customer Contract Administration

From time to time, Spryker needs to use personal data to administer the customer relationship  to, including, but not limited to, send information about renewal conditions or termination letters.

The data subjects whose personal data Spryker processes in that context are Customer’s employees that serve as the respective contact person. Spryker processes the following personal data in that context:

  • Name and Surname, 
  • Email address, 
  • Phone number,
  • Role at Customer’s company, 
  • Information about the concern or request, 
  • Outcome of the conversation.

Spryker may get the above information either from the data subject directly or from another person within Customer’s company. 

The purpose of this processing is to provide Customers the best assistance possible. 

This processing of personal data is required to fulfill contractual obligations between Spryker and the respective Customer and it is in both parties’ mutual interest to have the respective conversations. Since the data subjects are not directly contracting with Spryker, the legal basis for this processing is Art. 6 (1) (f) GDPR.

3.3 Product Updates

Spryker may reach out to Customers via email or other means of communication with regard to the following topics:

  • Product Release Notes
  • Spryker Product Roadmap updates
  • Security Updates & Important Maintenance Notifications
  • Surveys
  • Information on new content
  • Questions about your roadmap and business details

The legal basis for this processing is Art. 6 (1) (f) GDPR and the purpose of this processing is to ensure Customers have all the relevant Spryker-related news at hand. The recipients of such update mailings can opt out from receiving such communication any time, e.g. if their role does not require them to be informed accordingly.

3.4 Customer Success Hub

Customers’ employees can access Spryker’s Customer Success Hub to interact with Spryker more easily. For information on Spryker’s processing of personal data in connection with  the Customer Success Hub, please see the dedicated privacy notice in the Customer Success Hub. 

3.5 Using Spryker Safari

Customers’ employees can access Spryker’s learning platform (Spryker Safari) via the Spryker Customer Success Hub. For information on Spryker’s processing of personal data in the Spryker Safari, please see the dedicated privacy notice in the Spryker Safari. 

3.6 Support Portal

Customers can access the Spryker’s Support Portal and create support tickets easily. Spryker processes the following personal data in that context:

  • Name and Surname, 
  • Email address, 
  • Phone number,
  • Role at Customer’s company, 
  • Information about the concern or request, 
  • Ticket ID,
  • Documented solution for the ticked.

This processing of personal data is required to fulfill contractual obligations between Spryker and the respective Customer and it is in both parties’ mutual interest to have the respective conversations. Since the data subjects are not directly contracting with Spryker, the legal basis for this processing is Art. 6 (1) (f) GDPR.

3.7 Feedback

Customer’s employees have multiple opportunities to share feedback and suggestions, such as reporting an issue, or suggesting a topic for Roadmap Update calls. Personal data will be collected for Spryker to process the feedback. Spryker also may contact the respective person at Customer’s company to clarify any open questions regarding feedback or suggestions shared.

This processing of personal data is required to fulfill contractual obligations between Spryker and the respective Customer and it is in both parties’ mutual interest to have the respective conversations. Since the data subjects are not directly contracting with Spryker, the legal basis for this processing is Art. 6 (1) (f) GDPR.

3.8 CommerceQuest

Customer can access CommerceQuest, Spryker’s community platform. In order to provide a smooth experience, Spryker forwards user-related information between its CRM and CommerceQuest. For information on Spryker’s processing of personal data in connection with CommerceQuest, please see the dedicated privacy notice in CommerceQuest.

4. Data Retention

Spryker will retain personal data only as long as necessary to attain the purpose of their processing. Personal data will be deleted afterwards unless Spryker is legally obliged or entitled to retain them further.

5. No Automated Decision-making

Spryker does not use your personal data for automated decision-making purposes.

6. Recipients

Spryker may share personal data with vendors to the extent it uses their services to carry out the above processing activities, e.g. for its CRM.

7. Your Data Subject Rights

You have the following rights under the GDPR:

  • under Art. 15 GDPR, the right to be informed about your personal data we are processing, including the purposes of that processing,
  • under Art. 16 GDPR, the right to have incorrect personal data corrected,
  • under Art. 17 GDPR, the right to have your personal data erased ("right to be forgotten"),
  • under Art. 18 GDPR, the right to have the processing of your personal data restricted,
  • under Art. 20 GDPR, the right to receive a copy of your personal data in a structured, commonly used and machine-readable format if their processing is based on your consent or that data are processed with regard to a contractual relation with you ("right to data portability").
  • the right under Art. 21 GDPR to lodge an objection against any kind of processing based on Art. 6 (1) (e) or( f) GDPR, and
  • the right under Art. 7 (3) GDPR to withdraw at any time your consent on which a processing of your personal data is based.

Those rights can be asserted by sending an email to dataprotection@spryker.com or by post to Spryker’s above postal address. To the extent applicable, each data subject can also reach out using these means of communication to be provided with Standard Contractual Clauses protecting specific onward transfers.

Data subjects also have the right to file a complaint with a data protection authority about Spryker’s processing of their personal data. We would highly appreciate everyone reaching out to us personally before so we can help. 

About Spryker

Spryker is the leading global composable commerce platform for enterprises with sophisticated business models to enable growth, innovation, and differentiation. Designed specifically for sophisticated transactional businesses, Spryker’s easy-to-use, headless, API-first model offers a best-of-breed approach that provides businesses the flexibility to adapt, scale, and quickly go to market while facilitating faster time-to-value throughout their digital transformation journey. As a global platform leader for B2B and B2C Enterprise Marketplaces, IoT Commerce, and Unified Commerce, Spryker has empowered 150+ global enterprise customers worldwide and is trusted by brands such as ALDI, Siemens, ZF Friedrichshafen, and Ricoh. Spryker is a privately held technology company headquartered in Berlin and New York backed by world class investors such as TCV, One Peak, Project A, Cherry Ventures, and Maverick Capital. Learn more at spryker.com.

Spryker Website