PRIVACY NOTICE FOR SPRYKER’S CUSTOMERS

MARAIT Rechtsanwaltsgesellschaft mbH
Neuer Wall 75
20354 Hamburg
Germany
mail@marait.de

Spryker communicates with its Customers on various occasions, including, but not limited to, regular customer success meetings, contract negotiations, support cases. The data subjects whose personal data Spryker processes in that context are Customer’s employees that serve as the respective contact person. Spryker processes the following personal data in that context:

• Name and Surname, 
• Email address, 
• Phone number,
• Role at Customer’s company, 
• Information about the concern or request, 
• Outcome of the conversation.

Spryker may get the above information either from the data subject directly or from another person within Customer’s company. 

The purpose of this processing is to provide Customers the best assistance possible. 

This processing of personal data is required to fulfill contractual obligations between Spryker and the respective Customer and it is in both parties’ mutual interest to have the respective conversations. Since the data subjects are not directly contracting with Spryker, the legal basis for this processing is Art. 6 (1) (f) GDPR.

For information about additional data processing in cases where Spryker asks meeting participants for permission to record the meeting, Spryker will provide a respective additional privacy notice. 

From time to time, Spryker needs to use personal data to administer the customer relationship  to, including, but not limited to, send information about renewal conditions or termination letters.

The data subjects whose personal data Spryker processes in that context are Customer’s employees that serve as the respective contact person. Spryker processes the following personal data in that context:

• Name and Surname, 
• Email address, 
• Phone number,
• Role at Customer’s company, 
• Information about the concern or request, 
• Outcome of the conversation.

Spryker may get the above information either from the data subject directly or from another person within Customer’s company. 

The purpose of this processing is to provide Customers the best assistance possible. 

This processing of personal data is required to fulfill contractual obligations between Spryker and the respective Customer and it is in both parties’ mutual interest to have the respective conversations. Since the data subjects are not directly contracting with Spryker, the legal basis for this processing is Art. 6 (1) (f) GDPR.

Spryker may reach out to Customers via email or other means of communication with regard to the following topics:

• Product Release Notes
• Spryker Product Roadmap updates
• Security Updates & Important Maintenance Notifications
• Surveys
• Information on new content
• Questions about your roadmap and business details

The legal basis for this processing is Art. 6 (1) (f) GDPR and the purpose of this processing is to ensure Customers have all the relevant Spryker-related news at hand. The recipients of such update mailings can opt out from receiving such communication any time, e.g. if their role does not require them to be informed accordingly.

Customers’ employees can access Spryker’s Customer Success Hub to interact with Spryker more easily. For information on Spryker’s processing of personal data in connection with  the Customer Success Hub, please see the dedicated privacy notice in the Customer Success Hub. 

Customers’ employees can access Spryker’s learning platform (Spryker Safari) via the Spryker Customer Success Hub. For information on Spryker’s processing of personal data in the Spryker Safari, please see the dedicated privacy notice in the Spryker Safari. 

Customers can access the Spryker’s Support Portal and create support tickets easily. Spryker processes the following personal data in that context:

• Name and Surname, 
• Email address, 
• Phone number,
• Role at Customer’s company, 
• Information about the concern or request, 
• Ticket ID,
• Documented solution for the ticked.

This processing of personal data is required to fulfill contractual obligations between Spryker and the respective Customer and it is in both parties’ mutual interest to have the respective conversations. Since the data subjects are not directly contracting with Spryker, the legal basis for this processing is Art. 6 (1) (f) GDPR.

Customer’s employees have multiple opportunities to share feedback and suggestions, such as reporting an issue, or suggesting a topic for Roadmap Update calls. Personal data will be collected for Spryker to process the feedback. Spryker also may contact the respective person at Customer’s company to clarify any open questions regarding feedback or suggestions shared.

This processing of personal data is required to fulfill contractual obligations between Spryker and the respective Customer and it is in both parties’ mutual interest to have the respective conversations. Since the data subjects are not directly contracting with Spryker, the legal basis for this processing is Art. 6 (1) (f) GDPR.

Customer can access CommerceQuest, Spryker’s community platform. In order to provide a smooth experience, Spryker forwards user-related information between its CRM and CommerceQuest. For information on Spryker’s processing of personal data in connection with CommerceQuest, please see the dedicated privacy notice in CommerceQuest.

Spryker will retain personal data only as long as necessary to attain the purpose of their processing. Personal data will be deleted afterwards unless Spryker is legally obliged or entitled to retain them further.

Spryker does not use your personal data for automated decision-making purposes.

Spryker may share personal data with vendors to the extent it uses their services to carry out the above processing activities, e.g. for its CRM.

You have the following rights under the GDPR:

• under Art. 15 GDPR, the right to be informed about your personal data we are processing, including the purposes of that processing,
• under Art. 16 GDPR, the right to have incorrect personal data corrected,
• under Art. 17 GDPR, the right to have your personal data erased ("right to be forgotten"),
• under Art. 18 GDPR, the right to have the processing of your personal data restricted,
• under Art. 20 GDPR, the right to receive a copy of your personal data in a structured, commonly used and machine-readable format if their processing is based on your consent or that data are processed with regard to a contractual relation with you ("right to data portability").
• the right under Art. 21 GDPR to lodge an objection against any kind of processing based on Art. 6 (1) (e) or( f) GDPR, and
• the right under Art. 7 (3) GDPR to withdraw at any time your consent on which a processing of your personal data is based.

Those rights can be asserted by sending an email to dataprotection@spryker.com or by post to Spryker’s above postal address. To the extent applicable, each data subject can also reach out using these means of communication to be provided with Standard Contractual Clauses protecting specific onward transfers.

Data subjects also have the right to file a complaint with a data protection authority about Spryker’s processing of their personal data. We would highly appreciate everyone reaching out to us personally before so we can help.