Data Privacy Notice

Protecting the security and privacy of your personal data is important to Siemens Postal Parcel & Airport Logistics GmbH. Therefore, SPPAL and their affiliated companies processes personal data in compliance with applicable laws on data protection and data security.

1. Processing of personal data related to your use of our websites, applications and online platforms

Categories of personal data processed, purpose of the processing and legal basis

When visiting SPPAL’ websites, applications or online tools (each a “SPPAL Online Offering”), SPPAL may process the following personal data about you:

  • Personal data that you actively and voluntarily provide via the SPPAL Online Offering (e.g., when registering, contacting us with your inquiries or participating in surveys, etc.), including name, e-mail address, telephone number, information submitted as part of a support request, comments or forum posts, etc.; and
  • Information that is automatically sent to us by your web browser or device, such as your IP-address, device type, browser type, referring site, sites accessed during your visit, the date and time of each visitor request.

We process your personal data for the following purposes:

  • To provide the SPPAL Online Offering’s services and functions and to administer your use of the SPPAL Online Offering;
  • To verify your identity (if you registered to SPPAL Online Offering);
  • To answer and fulfill your specific requests; and
  • As reasonably necessary to enforce the applicable terms of use, to establish or preserve a legal claim or defense, to prevent fraud or other illegal activities, including attacks on SPPAL’s information technology systems.

The processing of your personal data is necessary to meet the aforementioned purposes. Unless indicated otherwise at the time of collection, our legal basis for the processing of the personal data is that:

  • You have given your explicit consent to the processing of your personal data (Article 6 (1) (a) General Data Protection Regulation);
  • Processing is necessary for the performance of a contractual relationship with you (Article 6 (1) (b) General Data Protection Regulation); or
  • Processing is otherwise necessary for the efficient performance or management of your use of the SPPAL Online Offerings (Article 6 (1) (f) General Data Protection Regulation).
Cookies

We may use cookies within SPPAL Online Offerings. You can find information on SPPAL’s use of cookies in our Cookie Policy. The Cookie Policy also provides information on how to block and object to the use of cookies and the processing of data collected by cookies.

Links to other websites

This Privacy Policy applies only to SPPAL Online Offerings and not to other websites or applications operated by third parties. We may provide links to other websites and applications which we believe may be of interest to you. SPPAL is not responsible for the privacy practices of such other websites or applications.

2. Processing of personal data related to your business relationship with SPPAL

Categories of personal data processed, purpose of the processing and legal basis

In the context of the business relationship with SPPAL, SPPAL may process the following categories of personal data of current and future contact persons at our customers, suppliers, vendors and partners (each a “Business Partner”):

  • Contact information, such as full name, work address, work telephone number, work mobile phone number, work fax number and work email address;
  • Payment data, such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information;
  • Further information necessarily processed in a project or contractual relationship with SPPAL or voluntarily provided by the Business Partner, such as personal data relating to orders placed, payments made, requests, and project milestones;
  • Personal data collected from publicly available resources, integrity data bases and credit agencies; and
  • If legally required for Business Partner compliance screenings: date of birth, ID numbers, identity cards and information about relevant and significant litigation or other legal proceedings against Business Partners.

SPPAL may process the personal data for the following purposes:

  • Communicating with Business Partners about products, services and projects of SPPAL or Business Partners, e.g. by responding to inquiries or requests or providing you with technical information about purchased products;
  • Planning, performing and managing the (contractual) relationship with Business Partners; e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services;
  • Administrating and performing customer surveys, marketing campaigns, market analysis, sweepstakes, contests, or other promotional activities or events;
  • Maintaining and protecting the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities;
  • Ensuring compliance with legal obligations (such as record keeping obligations), export control and customs, Business Partner compliance screening obligations (to prevent white-collar or money laundering crimes), and SPPAL policies or industry standards; and
  • Solving disputes, enforce our contractual agreements and to establish, exercise or defend legal claims.

The processing of personal data is necessary to meet the aforementioned purposes. Unless indicated otherwise at the time of collection, our legal basis for the processing of the personal data is that:

  • You have given your explicit consent to the processing of your personal data (Article 6 (1) (a) General Data Protection Regulation);
  • Processing is necessary for the performance of the contractual relationship with you (Article 6 (1) (b) General Data Protection Regulation); or

Processing is otherwise necessary for the efficient performance or management of our business relationship with you (Article 6 (1) (f) General Data Protection Regulation).

3. Transfer and disclosure of personal data

SPPAL may transfer personal data to other Siemens companies or third parties, but only if and to the extent such transfer is required for the purposes mentioned above.

If legally permitted to do so, SPPAL may transfer personal data to courts, law enforcement authorities, regulators or attorneys if necessary to comply with the law or for the establishment, exercise or defense of legal claims.

SPPAL commissions service providers (so-called data processors), such as hosting or IT maintenance service providers, which only act upon instructions of SPPAL and are contractually bound to act in compliance with applicable data protection law.

Recipients of personal data may possibly be located in countries outside of the European Economic Area (“third countries”), in which applicable laws do not offer the same level of data protection as the laws of the respective individual’s home country.

In such cases, SPPAL takes measures to implement appropriate and suitable safeguards for the protection of personal data by other means.

  • We share personal data with Siemens companies in third countries only if they have implemented the SPPAL Binding Corporate Rules („BCR“) for the protection of personal data. Further information about the SPPAL BCR can be found here.
  • We transfer personal data to external recipients in third countries only in case the respective recipient (i) entered into EU Standard Contractual Clauses with SPPAL, (ii) implemented Binding Corporate Rules in its organization or (iii) – in case of US recipients – the recipient is certified under the Privacy Shield. Affected individuals may request further information and copies of the safeguards by contacting SPPAL.

Personal data published by you on SPPAL Online Offerings (such as chat rooms or forums) may be globally accessible to other registered user of the respective SPPAL Online Offering. 

4. Retention Periods

Unless explicitly indicated otherwise at the time of collecting personal data (e.g. by a consent form accepted by you), we erase personal data if the retention of the personal data is no longer necessary for the purposes for which they were collected or otherwise processed and no statutory retention obligations under applicable law (such as tax or commercial law) require us to further retain personal data.

5. Right to withdraw consent

In case you declared your consent for the processing of certain personal data by SPPAL, you have the right to withdraw the consent at any time with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. In case consent is withdrawn, SPPAL may only further process the personal data where there is another legal ground for the processing.

6. Right of access to and rectification or erasure of personal data, restriction of processing, right to object to processing and right to data portability

Under applicable data protection law you may – provided that the relevant legal requirements are met – have the right to:

  • Obtain from Siemens confirmation as to whether or not personal data concerning you are being processed, and where that is the case, access to the personal data;
  • Obtain from SPPAL the rectification of inaccurate personal data concerning you;
  • Obtain from SPPAL the erasure of your personal data;
  • Obtain from SPPAL restriction of processing regarding your personal data;
  • Data portability concerning personal data, which you actively provided; and
  • Object, on grounds relating to your particular situation, to processing of personal data concerning you.

7. Data Privacy Contact

The SPPAL Data Protection Organization provides support with any data privacy related questions, comments, concerns or complaints or in case you wish to exercise any of your data privacy related rights. The SPPAL Data Privacy Organization may be contacted at: dataprivacy@siemens-logistics.com.

The responsible Data Privacy Officer of SPPAL is:

Katharina von Koeding
Siemens Postal, Parcel & Airport Logistics GmbH
Legal and Compliance
PPAL LC CO
Colmberger Str. 2
90451 Nuremberg, Germany

The SPPAL Data Privacy Organization will always use best efforts to address and settle any requests or complaints you bring to its attention. Besides contacting the SPPAL Data Privacy Organization, you always have the right to approach the competent data protection authority with your request or complaint.

The data protection authority competent for SPPAL, Germany is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Königstrasse 10 a
70173 Stuttgart, Germany
Web: www.baden-wuerttemberg.datenschutz.de

A list of national data protection authorities is available here.