Privacy at Spheros

For the usage of our website the following privacy policies apply.

Spheros Germany GmbH (Spheros), Friedrichshafener Straße 7, 82205 Gilching, Germany, is the controller within the meaning of art. 4 No. 7 of General Data Protection Regulation (GDPR).

For more informationen about us, please see our legal notice at our website. You can reach our Group Data Protection Officer (external) (GDPO) at datenschutz@atarax.com or by telephone on +49 (0) 8105 7721 0.

Spheros processes personal data in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Basically, you are not obliged to provide us any personal data. Please, however, note that certain personal data is required to, e.g., initiate and execute a contract in which you are interested. When you use our website, for security reasons and to ensure technical functionality, it is required that we process certain data such as your IP address, your browser and your operating system so that our site can be provided on every device you may use. Please note that without providing the data required in the respective context, the underlying process cannot be carried out, not immediately or not completely.

We generally collect your data from you personally, for example when you access our website, contact us or apply to us.

If you visit our website, the following data may be processed:

• IP-address
• Internet-Service-Provider
• Referrer-URL (previously visited website)
• Browser and operating system
• Amount of data, access and time of access.

For reasons of technical security (particularly with regard to attacks on our website), this data is stored for a period of seven days.

If you contact us through our website, the following data may be processed:

• Name and surname
• Appellation
• Postal address
• Your company, position and function
• E-Mail-address
• Any further data you may provide.

If you apply for a job with Spheros, the following data may be processed:

• Name andd surname
• Appellation
• Postal address
• E-Mail-address
• Information on trainings you received and on your professional career.
• Qualification data
• Any data you rpovide in addition

Ir you create a customer-account, the following data may be processed:

• Name and surname
• Appellation
• Your company
• E-Mail address
• Any further data you may provide.

We store your data for as long as we need your data for the respective processing purpose, if necessary, as long as you have given your effective consent. In addition, we may be subject to legal obligations that require storage beyond this period, such as tax law. Such periods can be up to ten years. The regular limitation period is three years; once the respective deadline has been reached, your data will be deleted.

Personal data may generally be processed to initiate and execute business transactions, to implement contractual and legal obligations, and to strengthen customer relationships (including direct advertising, if applicable). Examples of how your data may be processed include:

• Answering your questions
• Sending and administering invitations
• Sending an processing orders, invoices and credits
• Providing goods and services
• Creating and administering user-accounts
• Exchange of information on information requests, tenders, offers, projects, quality- and maintenance-issues
• Complying with legal obligations (such as, e.g. fraud prevention, anti-corruption, anti-terror-checks)
• Audit-requirements
• Executing polls and surveys

When you are visiting our website, your data may be processed for the following special purposes:

• Processing questions, comments and other requests you make when you contact us through the website
• Providing information
• Technical support
• Website administration including technical maintenance
• Identification of user-preferences and collection of usage-information

We generally process personal data to execute our commercial and/or contractual relationships.

We may also have a legitimate interest in processing personal data, for example to ensure that our website can be operated in a technically secure and functional manner or to establish a business relationship. In addition, we may be obliged to process personal data for contractual or legal reasons, e.g., in connection with tax or tax regulations.

In some cases, the processing of your personal data is based on your consent.

Please note that we provide specific data protection information in connection with consent-based processing separately.

Your data will only be transferred to third parties if we are entitled or obliged to do so. An entitlement to transfer your data to third parties may, for example, result from your consent or may be permissible if we order a third party to process the data and meet the necessary formal requirements. Legal obligations may apply if we transfer personal data as to authorities such as data protection supervisory authorities or law enforcement authorities.

Within our company, we also ensure that only those people, functions and areas who have an objective need to do so process your data. If service providers support us in processing data, we have entered into the required data protection contracts and/or provided other appropriate guarantees.

Your data will only be transferred outside the European Union or the European Economic Area if this is required by law, if we have obtained your consent to do so or if we are otherwise entitled to do so. In these cases, too, we implement appropriate data protection instruments to ensure that your data receives the same protection as within the EU.

Your data is currently not being transferred outside the EU/EEA unless we specifically point this out for individual processing operations.

Data security, confidentiality and integrity are our top priority - as is the resilience of the systems we use to process data. That is why we protect your data as best as possible against accidental or intentional manipulation, loss or access by unauthorized persons. To achieve this, we use state-of-the-art technical and organizational measures, which we continually review and adapt in cooperation with security experts. For example, data exchange with our website is encrypted by offering current transmission protocols that enable state-of-the-art encryption.

If you would like to use special encryption methods to transfer your data, please contact us. Alternatively, you can use offline communication channels such as surface mail.

As a data subject, you have, in accordance with data protection law, the right to information, deletion, correction, data portability, restriction of processing, objection to the processing of your data, and the right to revoke any consent you have given to data processing , as well as the right not to be subject to completely automated decisions (we do not take such decisions). To execute these rights, please contact us using the contact method listed at the beginning of this declaration, preferably by e-mail.

You also have the right to complain about the processing of your data to a data protection supervisory authority at your place of residence, usual place of residence, our place of business or the place of the alleged violation.

Please note the following regarding the right to object:

If we process your personal data for direct advertising purposes, you are entitled to object to this data processing at any time without providing reasons. This also applies to profiling insofar as it is related to direct advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, preferably by email to the contact address given at the beginning of this declaration.

If we process your data to protect legitimate interests, you can object to this processing at any time for reasons relating to your particular situation; This also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.