GONG Call Recordings - Spryker Privacy Notice according to article 13 GDPR

MARAIT Rechtsanwaltsgesellschaft mbH
Neuer Wall 75
20354 Hamburg
Germany
mail@marait.de

Understanding your business needs is our top priority. Provided you have consented accordingly, Spryker will record the meeting you will join and create a transcript and call summary.

We do this to (i) be able to focus on your needs and expectations instead of having to take notes and (ii) to coach our team to provide you with a better experience with us. Where applicable, recordings, transcripts and call summaries may also be reviewed by external service providers or contractors supporting Spryker with sales, marketing, content creation or related business activities. It also may help you to forward recorded demos internally.

The published recording will include your name, as well as the content of the conversation in the video and audio.

If you or another participant of the meeting requests to be provided with the call recording, we will share it with you and log your email address for verification of your identity.

The processing of personal data described above is based on Art. 6 para. 1 lit. a GDPR (your consent).

Spryker may share your personal data with the following recipients:

• GONG.io, which we use as our service provider;

• Spryker’s affiliates to the extent access is required in connection with our business relationship with you;

• external service providers and contractors supporting Spryker with sales, marketing, content creation or related business activities, to the extent access to the relevant recording, transcript or call summary is required for the provision of such services;

• other meeting participants or your colleagues if you forward a recorded demo; and

• authorities if needed.

If data is transferred to a third country, Spryker relies on the receiving company being certified under the EU-US Data Privacy Framework or uses standard contractual clauses to protect such transfer.

With regard to the retention of personal data, we distinguish between sales opportunities that result in a concluded deal and those that do not. For opportunities that result in a concluded deal, we retain personal data for as long as reasonably necessary for the purposes described above, taking into account the duration of our business relationship and any applicable statutory retention requirements or limitation periods. Once the relevant retention purposes cease to apply, the personal data will be deleted or irreversibly anonymised within a reasonable period, unless a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims. For opportunities that do not result in a concluded deal, we delete or irreversibly anonymise the personal data six months after the last call

Data subjects have the following rights according to the GDPR:

• Right to withdraw consent at any time (Art. 7 GDPR);
• Right of access (Art. 15 GDPR);
• Right of rectification (Art. 16 GDPR);
• Right of erasure (Art. 17 GDPR);
• Right of restriction of data processing (Art. 18 GDPR);
• Right to data portability (Art. 20 GDPR); and
• Right to object (Art. 21 GDPR).

If you want to contact Spryker with regard to Spryker’s processing of your personal data, please reach out to Spryker using legal@spryker.com.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement, if you consider the processing of personal data relating to you to be infringing the GDPR.