DATA PROTECTION

We hereby provide you with information regarding the processing of your personal data when you use our website. Personal data means any information relating to an identified or identifiable natural person.

A. Who is responsible for the processing of your personal data?

The controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:

SPH International GmbH

Philipp-Krämer-Ring 13

D-67098 Bad Dürkheim Germany

Registered in the Commercial Register maintained by the Local Court (Amtsgericht) of Ludwigshafen under registration number HRB 67451, legally represented by its Managing Directors, Dipl.-Ing. Christian Schmidhuber and Dr. Martin Schmidhuber.

Contact details:

Email: info@sph-international.com Telephone: +49 (0) 6322 94980-0

B. Processing of personal data when visiting our website

(1) Server Log Data

When you access our website, certain information automatically transmitted by your computer or other device to our web server is processed and recorded in server log files.

The web server access logs record which pages have been accessed and at what time. These logs contain the following personal data:

IP address of the requesting device;
Date and time of access;
Time zone settings;
Browser type and version;
Operating system used;
Volume of data transmitted;
HTTP status code;
Website from which you accessed our website (referrer URL);
Pages accessed on our website.

The legal basis for such processing is Article 6(1), first sentence, point (f) GDPR.

We have a legitimate interest in ensuring that our website is displayed in a manner compatible with the technical requirements of your device and browser, as well as in detecting, investigating and tracing attacks against our IT infrastructure.

The processing of this data is therefore technically necessary to make our website available to you and to ensure its stability and security.

This data is not combined with data from other sources, nor is it analysed or otherwise used for marketing purposes.

IP addresses are stored in anonymised form. In the case of IPv4 addresses, the final octet is removed or masked. For example, the IP address 127.0.0.1 is converted into 127.0.0.*. IPv6 addresses are anonymised in an equivalent manner.

Anonymised IP addresses are retained for a maximum period of 12 months. All other data referred to above is deleted as soon as it is no longer required for the purposes for which it was processed.

(2) Use of Cookies

We use cookies on our website. Some cookies are strictly necessary to ensure the proper functioning of the website. Other cookies enable us to analyse website usage, personalise content or evaluate marketing activities.

The processing of personal data through non-essential cookies is carried out exclusively on the basis of your consent pursuant to Article 6(1), first sentence, point (a) GDPR and Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG).

Strictly necessary cookies are used on the basis of Section 25(2), no. 2 TTDSG in conjunction with Article 6(1), first sentence, point (f) GDPR.

We use the Usercentrics consent management platform to manage your consent preferences.

When you access our website, a cookie consent banner is displayed, allowing you to grant, refuse or modify your consent to individual categories of cookies and other technologies at any time.

Provider of the consent management platform:

Usercentrics GmbH

Sendlinger Straße 7

80331 Munich Germany

Usercentrics records and stores your consent preferences in order to ensure compliance with applicable statutory documentation and accountability requirements.

For this purpose, information including your consent or withdrawal of consent, your IP address (which may be truncated), details of your browser and device, and the date and time of your consent is processed.

The legal basis for storing this information is Article 6(1), first sentence, point (c) GDPR, insofar as such processing is necessary for compliance with our legal obligations, and Article 6(1), first sentence, point (f) GDPR, insofar as it serves our legitimate interest in maintaining legally compliant records of consent.

You may modify your cookie preferences or withdraw your consent at any time by using the fingerprint icon provided on our website.

(3) Contact Enquiries

You may contact us by various means, including email.

If you contact us, we will store and process the personal data you provide, such as your first name, surname and email address, together with the content of your enquiry or communication, for the purpose of handling and responding to your request.

We will not disclose this data to third parties without your consent.

Where you contact us in connection with an existing contractual relationship or prior to entering into a contract, for example to obtain information about our products or services, the personal data and information you provide will be processed for the purpose of handling and responding to your enquiry pursuant to Article 6(1), first sentence, point (b) GDPR.

In all other cases, the legal basis for processing is Article 6(1), first sentence, point (f) GDPR. Our legitimate interest consists in being able to respond appropriately and effectively to your enquiries.

The personal data you provide will be retained for as long as necessary to fulfil the purpose for which it was collected and processed, for example until your enquiry has been fully addressed, or until you request its deletion.

Mandatory statutory provisions, particularly statutory retention obligations, shall remain unaffected.

(4) Use of Social Media Buttons

Our website contains buttons and links to social networking platforms, such as LinkedIn.

When you click on one of these buttons, you will be redirected either to the login page of the relevant social networking platform, if you are not already logged in, or directly to our corporate profile on that platform.

If you are already logged into the relevant social networking platform when you click the button, the platform may collect additional information about you as a result of that interaction. In particular, it may identify the website from which you were redirected.

No personal data is transmitted to the social networking platform before you actively click the relevant button.

If you do not wish a social networking platform to collect information about you in the manner described above, you should log out of the relevant platform before clicking any social media button on our website.

The legal basis for this processing is Article 6(1), first sentence, point (f) GDPR (legitimate interests).

Our legitimate interest lies in providing you with a convenient and user-friendly means of accessing our corporate social media profiles.

Once you click a social media button and are redirected to the relevant platform, any subsequent processing of your personal data is carried out by the respective platform provider.

The relevant social networking platform is solely responsible for such processing, which takes place outside our sphere of control.

C. To whom is personal data disclosed?

As a general principle, we do not disclose your personal data to third parties unless such disclosure is permitted by applicable law.

Disclosure may, in particular, be permitted in the following circumstances:

Where disclosure is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract (Article 6(1), first sentence, point (b) GDPR).
Where you have given your explicit consent to the disclosure (Article 6(1), first sentence, point (a) GDPR).
Where disclosure is necessary for the purposes of our legitimate interests and there are no grounds for assuming that your interests or fundamental rights and freedoms requiring the protection of your personal data override those interests (Article 6(1), first sentence, point (f) GDPR).
Where we are subject to a legal obligation requiring the disclosure of such data (Article 6(1), first sentence, point (c) GDPR).

Our website is hosted by an external service provider (hosting provider). Personal data collected through our website is stored on the hosting provider's servers.

Our hosting provider processes your personal data only to the extent necessary to fulfil its contractual obligations towards us and is required to comply with our instructions concerning the processing of your data.

The hosting provider is:

Wix.com Ltd. 40 Namal Tel Aviv St. Tel Aviv 6350671 Israel

(hereinafter referred to as "WIX").

WIX has entered into a data processing agreement with us pursuant to Article 28 GDPR, under which it has undertaken, among other obligations, to implement appropriate technical and organisational measures to ensure the security of personal data.

WIX places cookies in your browser that are necessary for the proper display of our website and for maintaining its security (strictly necessary cookies).

WIX also processes personal data outside the European Union (EU) and the European Economic Area (EEA), particularly in Israel. In addition, personal data may be stored on WIX servers located in the United States of America.

Further information can be found in WIX's Privacy Policy:

https://de.wix.com/about/privacy

Our use of WIX is based on our legitimate interest in ensuring the secure, reliable, fast and efficient provision of our website by a professional service provider, pursuant to Article 6(1), first sentence, point (f) GDPR.

In addition, your personal data is transferred to Usercentrics GmbH, Munich, Germany, as described above.

D. Is personal data transferred to third countries or international organisations?

Yes. WIX may transfer your personal data to third countries outside the EU/EEA and store such data on servers located in those countries.

With regard to transfers of personal data to Israel, the European Commission has adopted an adequacy decision pursuant to Article 45(3) GDPR.

The European Commission has also adopted an adequacy decision concerning the United States pursuant to Article 45(3) GDPR, under the EU-US Data Privacy Framework.

Wix.com Inc. is certified under this framework.

Nevertheless, in connection with transfers of personal data to the United States, it cannot be entirely ruled out that US public authorities may access, process, analyse or retain personal data stored on servers located in the United States for surveillance purposes.

Where personal data is transferred to other third countries, such transfers are carried out on the basis of the Standard Contractual Clauses adopted by the European Commission pursuant to Article 46(2), point (c) GDPR.

E. Obligation to Provide Personal Data

As a general rule, you are under no legal obligation to provide us with your personal data.

However, if you choose not to provide certain personal data, we may be unable to make all features and functions of our website available to you or to respond to your enquiries.

F. Does Automated Decision-Making (Including Profiling) Take Place?

No automated individual decision-making, including profiling, within the meaning of Article 22 GDPR takes place.

G. Your Rights as a Data Subject

Under the GDPR, you have the following rights, which you may exercise against us at any time, free of charge:

- Right of Access (Article 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed and, where that is the case, to request access to such personal data. This includes, in particular, information concerning the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your personal data has been or will be disclosed, the envisaged retention period, the existence of rights to rectification, erasure, restriction of processing or objection, the right to lodge a complaint with a supervisory authority, the source of the data where it was not collected directly from you, and the existence of automated decision-making, including profiling. Where applicable, you are also entitled to meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

- Right to Rectification (Article 16 GDPR): You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and the completion of incomplete personal data held by us.

- Right to Erasure (Article 17 GDPR): You have the right to request the erasure of personal data concerning you that is held by us, unless its continued processing is necessary for exercising the right of freedom of expression and information, complying with a legal obligation, reasons of public interest, or the establishment, exercise or defence of legal claims.

- Right to Restriction of Processing (Article 18 GDPR): You have the right to request the restriction of processing of your personal data where you contest the accuracy of the data, where the processing is unlawful but you oppose its erasure, where we no longer require the data but you need it for the establishment, exercise or defence of legal claims, or where you have objected to processing pursuant to Article 21 GDPR.

- Right to Data Portability (Article 20 GDPR): You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to request that such data be transmitted to another controller.

- Right to Withdraw Consent (Article 7(3) GDPR): Where you have given your consent to the processing of your personal data, you have the right to withdraw that consent at any time. Following such withdrawal, we will no longer be permitted to continue processing your personal data on the basis of that consent. The withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

- Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a competent data protection supervisory authority. As a general rule, you may contact the supervisory authority responsible for your habitual residence or for the location of our registered office.

The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)

Prof. Dr. Dieter Kugelmann

Hintere Bleiche 34

55116 Mainz Germany

Telephone: +49 (0) 6131 8920-0

Fax: +49 (0) 6131 8920-299

Email: poststelle@datenschutz.rlp.de

Right to Object

Where we process your personal data on the basis of legitimate interests pursuant to Article 6(1), first sentence, point (f) GDPR, you have the right, pursuant to Article 21 GDPR, to object to the processing of your personal data on grounds relating to your particular situation.

Where your objection relates to the processing of personal data for direct marketing purposes, you have an unconditional right to object to such processing at any time, without being required to provide grounds relating to your particular situation. We will comply with such an objection.

To exercise any of your rights, you may contact SPH International GmbH using the contact details provided in Section A above.

H. Validity and Amendments to this Privacy Policy

Last updated: 24 September 2026

We reserve the right to amend or update this Privacy Policy from time to time, in particular where changes occur in our processing of personal data or in the applicable statutory or regulatory requirements.

Please refer to the most recent version of this Privacy Policy, as published on our website.