Privacy Policy

1. Visiting our website

a. Data collected

When you visit the SSP website, some information is automatically collected by the computer with which the website is accessed (hereinafter referred to as “access data”). This access data includes server log files, which usually consist of information about the browser type and version, the operating system, the Internet service provider, the date and time, the use of the website, the websites previously visited and websites newly accessed via the website and the IP address of the computer. Except for the IP address, the server log files are not personally identifiable. An IP address is personally identifiable if it is permanently assigned when the internet connection is used and the internet provider can assign it to a person. Server log files are automatically collected when the website is visited and stored on the web server. The IP address as part of the server log files is deleted after 7 days at the latest. The server log files are not stored in connection with other data.

b. Use of cookies

Cookies are used on this website. Cookies are small text files that are stored on your computer when you visit a website. The stored cookies are assigned to the browser you are using. If the corresponding website is called up again, the web browser sends back the content of the cookies and thus enables the user to be recognised. Certain cookies are deleted when you log out or end the browser session (so-called “transient cookies”). Other cookies are stored for a specified time or permanently (so-called “temporary cookies” or “persistent cookies”). These cookies are automatically deleted after a defined period of time. You can delete cookies at any time in the security settings of your browser and configure the use of cookies according to your wishes.
In principle, cookies are an online identifier without personal reference. Cookies only become personal if the information generated by the cookies is combined with further data. A distinction can be made between cookies that are required for the provision of the website and cookies that are required for further purposes such as range measurement, web analysis and market research.
SSP does not use cookies or only uses cookies that are necessary for the provision of the website.
Cookies that go beyond this, such as analysis cookies, which serve to record and statistically evaluate user behaviour, contradict our business philosophy, and are not used by us. If you have any suggestions for improvement in connection with the user experience on our website, we trust that you will contact us personally to let us know.

c. Purpose of the data processing

The processing of technical data collected on our website in connection with visits to our website results from technical as well as legal requirements and serves the provision of the website and ensures technical security, to rectify technical errors and to ensure that unauthorised persons do not gain access to the website systems. The processing of any personal data obtained in this context is based on our legitimate interest in ensuring the functionality of the website on a permanent basis (Art. 6 para. 1 lit. f GDPR).

2. Contact via email, telephone, post, fax and other means of communication

a. Data collected

SSP’s contact information is provided on the website. If you take the opportunity to contact us via one of the specified communication channels or if the communication has been initiated by other means, we collect and store the personal information shared with us in this context. This includes in particular your name, your contact information, if applicable your position in the company for which you are working, as well as information related to your request and the information you shared with us.
After your request has been processed and there is no reason for further communication, in particular if we no longer consider you to be an active business partner, we delete your contact information. This does not apply if the processing of your request is related to a client relationship or has accounting relevance. In these cases, legal retention periods, for example in accordance with § 147 of the Fiscal Code of Germany (AO), must be respected beyond the fulfilment of contractual and legal obligations (currently 6 to 10 years).

b. Purpose of data processing

The processing of the data specified in section 2a of this privacy policy serves to process your request or subsequent or general communication with you and is in our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If the communication with us is for the purpose of concluding a mandate agreement or if the communication stands in connection with an active mandate relationship with SSP, the legal basis for the processing of the personal data collected by us in this context is Art. 6 para. 1 lit. b GDPR.

3. Right to object

You have the right to object to the processing of your data (server log files as well as personal data in connection with communication with us) at any time, insofar as there are reasons for doing so which arise from your particular situation. Please feel free to contact us for this purpose at the address given at the beginning of this privacy policy.

4. Who receives my data?

Within SSP, only those persons who need your data to fulfil the purposes outlined above will have access to it. Service providers employed by the company may also receive access to your data (so-called “data processors”, e.g. email providers or our website designer). Data processing agreements ensure that the data processors only handle your data in accordance with our instructions, confidentially and maintain a sufficient level of data security in doing so.

Data is not passed on to third parties such as advertising partners or providers of social media services.

5. Third country transfer

Service providers used to provide technical services (e.g. Microsoft Office) may be located outside the European Union or the European Economic Area (“EU” or “EEA”). By concluding standard contractual clauses or within the framework of an applicable adequacy decision, it is ensured that the European level of data protection is guaranteed in the case of third country transfers to service providers used. You can request a copy of such guarantees from us using the contact details provided in the introductory section of this privacy policy.

6. Your data protection rights

You have the right to obtain information about your personal data stored by us at any time. If data about you is incorrect or out of date, you have the right to request that it will be corrected. You have the right to demand the deletion or restriction of the processing of your data in accordance with Art. 17 or Art. 18 GDPR. You also have the right to receive the data you have provided in a common and machine-readable format (Right to data portability).
If you have given your consent to the processing of personal data for certain purposes, you can revoke this consent at any time with effect for the future. The revocation must be sent to SSP using the contact details stated in the introductory section to this privacy policy.
In accordance with Art. 21 GDPR, you also have the right to object at any time to the processing of your personal data on the legal basis of Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation. You also have the right to object at any time to the processing of your personal data for the purpose of direct marketing. The same applies to the automated procedures when individual cookies are used, unless they are absolutely necessary for the provision of the website.

In addition, you have the option of contacting a data protection authority and filing a complaint there. The state commissioner responsible for SSP is:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin

T +49 30 13889-0
F +49 30 2155050
mailbox@datenschutz-berlin.de

You can also contact the data protection authority responsible for your place of residence.

Within the scope of our data processing, neither automatic decision-making nor so-called profiling takes place.