Data protection of S+P Samson GmbH
1. Name and contact details of the person responsible for processing and the company’s data protection officer
This data protection information applies to the processing of data by: S+P Samson GmbH, Industriestr. 32, 86438 Kissing, Germany
Controller:
S+P Samson GmbH
Industriestraße 32
86438 Kissing
Germany
Tel. +49 8233 846-0
info@sp-samson.com
CEO: Dr. Christof M. Stotko
The Data Protection Officer of S+P Samson GmbH can be contacted as follows: datenschutz@sp-samson.com
2. Collection and storage of personal data, and the type and purpose of its use
a) When visiting the website
When you visit our website www.sp-samson.com the browser used on your terminal device will automatically send information to the server of our website. This information is stored temporarily in a log file. The following information will be recorded without your involvement and stored until it is deleted automatically:
- IP-address of the requesting computer
- Date and time of the access
- Name and URL of the accessed file
- Website from which the access takes place (referrer URL)
- Browser used and, if applicable, your computer’s operating system and the name of your access provider.
We will process the above data for the following purposes:
- To ensure that the connection is established without any problems,
- To ensure that the use of our website is comfortable,
- To evaluate system security and stability
- Other administrative purposes.
The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest ensues from the purposes of data collection listed above. We will never use the collected data for the purpose of identifying you as an individual.
b) When you use our contact form
For questions of any kind we offer you the option to contact us via a contact form that is provided on our website. This requires entering a valid email address so that we know who the enquiry is from and to enable us to reply. Any further information can be provided on a voluntary basis.
Data processing for the purpose of contacting us is in accordance with Article 6(1)(a) GDPR on the basis of your consent which you have given voluntarily.
The personal data collected by us in the course of using the contact form will be deleted automatically when the enquiry you made has been concluded.
c) Video conferences
When we invite you to a video conference we use Microsoft Teams. You can find the Microsoft privacy statement here: Microsoft Privacy Statement – Microsoft privacy
3. Passing on data
We will not pass your personal data to any third parties except for the purposes stated below.
We will only pass your personal data to third parties if:
- You have given your explicit consent in accordance with Article 6 (1)(a) GDPR,
- Passing on your data in accordance with Article 6 (1)(f) GDPR is required to assert, exercise or defend any legal rights and there is no reason to assume that you have an overriding protectable interest that would prevent us from passing on your data,
- There is a legal obligation in accordance with Article 6 (1)(c) GDPR to pass on your data, to the extent permitted by law, and if this is required in the course of our contractual relationship with you, in accordance with Article 6 (1)(b) GDPR.
4. Cookies
We use cookies on our website. Cookies are small files generated automatically by your browser and they will be stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage on your terminal device, they do not contain viruses, trojans or other malware.
The cookie is used to store information relating to the specific terminal device used. However, this does not mean that we will be able to obtain direct information about your identity.
We use cookies to make it more comfortable for you to use our website. For instance, we use what is referred to as session cookies to detect whether you have visited individual pages on our website before. They will be deleted automatically when you leave our website.
In addition, we use temporary cookies to optimise the ease of use, they will be stored on your terminal device for a defined period. If you are visiting our website again to use our services it will be detected automatically that you have already visited us as well as the entries and settings you made, so that you don’t have to enter them again.
We also use cookies to collect statistical data about the use of our website and to evaluate it to enable us to optimise our offer (refer to number 5). These cookies enable us to recognise automatically that you have already visited our website when you visit it again. These cookies will be deleted automatically after a defined period.
The data we process through cookies is required for the purposes stated to protect our legitimate interests as well as those of third parties in accordance with Article 6 (1)(f) GDPR.
Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to display an alert before a new cookie is created. Deactivating the use of cookies altogether, however, may mean that you will not be able to use all of the functions on our website.
| Name | Publisher | Expiry | Purpose |
|---|---|---|---|
| jylayout | www.sp-samson.com | End of browser session | Session cookie |
| style | www.sp-samson.com | End of browser session | Session cookie |
| oldstyle | www.sp-samson.com | End of browser session | Session cookie |
| random string | www.sp-samson.com | End of browser session | Session cookie |
5. Cookie Consent Tool - CCM19
Our website uses cookie consent technology by CCM19 – Cookie Consent Management to obtain your consent to the storage of certain cookies in your browser and to document these in a manner that complies with data protection regulations. The provider of this technology is CCM19 – Cookie Consent Management, Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany (referred to as CCM19 in the following).
When you visit our website, a CCM19 cookie (ccm_consent) is stored in your browser and the consent you have given or the withdrawal of this consent are stored in your browser. This data is not forwarded to the CCM19 provider. The captured data will be stored until you ask us to delete it and/or you delete the CCM19 cookie yourself or the purpose of the data storage is no longer applicable. Any mandatory statutory retention periods shall remain unaffected.
The CCM19 cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.
6. Tracking tool - Matomo
This website uses the Matomo open source web analytics service.
Matomo enables us to capture and analyse data about the use of our website by visitors to the website. This includes finding out which pages were accessed and when, and from which region. We also capture various log files (e.g. IP address, referrer, browsers and operating systems used) and may measure whether the visitors to our website perform specific actions (e.g. clicks, purchases and similar).
The legal basis for the use of this analytics tool is Art. 6(1)(f) GDPR. The website operator has a legitimate interest to analyse user behaviour to enable him to optimise both his web offering and his advertising. If the corresponding consent has been requested, processing will be exclusively on the basis of Art. 6(1)(a) GDPR and Art. 25(1) TTDSG (German Telecommunications-Telemedia Data Protection Act), to the extent that this includes the consent for storing cookies or accessing information on the user’s terminal device (e.g. device fingerprinting) in accordance with the TTDSG. The consent can be withdrawn at any time.
IP anonymisation:
We use IP anonymisation for Matomo analyses. This involves shortening your IP address prior to the analysis so that it can no longer be attributed to your specific address.
Hosting:
Hosting is provided by Matomo servers.
If you do not wish to use Matomo web analytics, please tick this box:
7. Rights of the data subject
You have the right,
- in accordance with Article 15 GDPR, to request information about your personal data that we process. The information you can request includes, but is not limited to the purposes of data processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which your data will be stored, the existence of the right to request rectification, erasure, restriction of processing or to object to such processing, the source of the data if the data was not collected by us as well as the existence of automated decision-making including profiling and any meaningful information about its details;
- in accordance with Article 16 GDPR, to request the rectification of incorrect or incomplete personal data stored by us without undue delay;
- in accordance with Article 17 GDPR, to request the erasure of your personal data we store, unless the processing of this data is required to exercise the right of freedom of expression and information, to comply with a legal obligation, on the grounds of public interest or to assert, exercise or defend a claim;
- in accordance with Article 18 GDPR, to request the restriction of processing your personal data where you contest the accuracy of the data, where processing is unlawful, but you contest their erasure and where we no longer require the data, but you require them to assert, exercise or defend a claim or, if you have objected to processing in accordance with Article 21 GDPR;
- in accordance with Article 20 GDPR, to receive your personal data you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller;
- in accordance with Article 7 (3) GDPR, to withdraw your consent at any time. This means that we must not continue the data processing which was based on this consent in the future, and
- in accordance with Article77 GDPR, to file a complaint with regulatory authority. As a rule, you can contact the regulatory authority near your residence or workplace, or near our registered office.
8. Right to object
Where your personal data is processed on the basis of legitimate interest, in accordance with Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, on grounds relating to your particular situation or if the objection is against processing for direct marketing purposes. With the latter, you have a general right to object and this will be implemented by us without requiring a particular situation.
If you would like to exercise your right to withdraw your consent or your right to object, an email to info@sp-samson.com.
9. Data security
Within the visit to the website we use the widely used SSL (Secure Socket Layer) method, combined with the highest encryption level your browser supports. As a rule, this will be 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can see from the locked padlock (and/or key) symbol in your browser’s status bar whether the transmission of individual pages of our website is encrypted.
We used appropriate technical organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction and unauthorised access by third parties. We are improving our security measures continuously in line with technological developments.
10. Data protection for job applications
You can find further details in our privacy statement and information for employees and job applicants which can be downloaded via the link below.
11. OpenStreetMap
We use the open source map service “OpenStreetMaps” on our contact page. This is provided by OpenStreetMap Foundation CLG, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.
OSM is used to provide an interactive map on our website. The use of OSM requires storing the IP address of your terminal device, and the maps will be loaded from an external server.
We use OSM to enable us to present our online offering in an appealing manner and to make it easier to find the locations we give on our website; this constitutes a legitimate interest as defined by Art. 6(1)(f) GDPR (legitimate interest for data processing).
12. Friendly Captcha
Our website uses the „Friendly Captcha“ service.
This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany.
Friendly Captcha is a new solution that makes it more difficult for automated programmes and scripts (also referred to as “bots”) to use our website while respecting data protection.
This includes the integration of a programme code for our contact forms to enable the visitor’s terminal device to establish a connection to the Friendly Captcha servers to receive an arithmetic task from Friendly Captcha. The visitor’s terminal device solves the arithmetic task using certain system resources and sends the result to our web server. Our web server then contacts the Friendly Captcha server via an interface and receives a reply confirming whether the puzzle task was solved correctly by the terminal device. Depending on the result, we may apply safety rules to enquiries received via our website and may, for instance, continue to process them or reject them.
• The data will only be used for the protection against spam and bots as described above.
• Friendly Captcha will not place or read out any cookies on the visitor’s terminal device.
• IP addresses will only be stored hashed, i.e. with one-way encryption and this will not allow us and Friendly Captcha to trace them back to any individuals.
• If any personal data is stored, this data will be deleted within 30 days.
The legal basis for processing are our legitimate interests to protect our website from improper access by bots and, therefore, to protect against spam and attacks such as bulk enquiries, as set out in Article 6(1)(f) (GDPR)
Further information on how your data is protected when using Friendly Captcha is available at https://friendlycaptcha.com/legal/privacy-end-users/
13. information and white paper delivery via CleverReach
When you request a whitepaper on our website, we collect personal data such as your name, e-mail address and optionally your company name. We use this data to send you the requested whitepaper by e-mail and to inform you by e-mail about products, services or promotions of S+P Samson GmbH. You can also contact us by e-mail.
For the registration process we use the service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is an email marketing service provider with whom we have concluded an order processing contract in accordance with Art. 28 GDPR. Data processing takes place exclusively in data centres within the EU.
The duration of the data collection is unlimited until the data processing contract is terminated by one of the contracting parties.
According to the data processing contract, CleverReach GmbH & Co. KG must delete all personal data or return it to S+P Samson GmbH upon termination of the contract.
CleverReach enables us to analyse the sending of e-mails. For example, we can analyse whether a message has been opened and which links have been clicked on. These analyses are used to improve our information service. The statistical analysis is pseudonymised and does not involve individual analysis.
The legal basis for the processing of the data is your consent in accordance with Art. 6 par. 1 lit. a GDPR, which you give by sending the form. You can revoke this consent at any time with effect for the future - for example by sending an email to info@sp-samson.com or by using the unsubscribe link in every advertising email.
Further information about CleverReach's data processing can be found at
Privacy Policy - CleverReach
14. Informationen about our chatbot (Botpress)
General informationen
Our chatbot is provided via the Botpress Cloud platform. The following personal data is automatically processed when using the chatbot:
- IP address
- Technical information about the device and browser used (user agent, operating system and screen resolution)
- approximate location data (based on the IP address)
- date and time of chatbot use
- interactions and messages within the chat history
- Session IDs for assigning chat histories
Purpose of processing
This data is processed for the following purposes:
- provision and functionality of the chatbot
- technical analysis and troubleshooting
- ensuring the security and stability of the service
- creation of anonymised statistics to improve the service
- protection against misuse and spam
Legal basis
Data processing by the chatbot is carried out exclusively on the basis of your consent, which can be revoked at any time for the future, in accordance with Art. 6 (1) (a) GDPR.
Right to object: You have the right to object to the processing at any time for reasons arising from your particular situation (Art. 21 GDPR). To do so, please contact us at info@sp-samson.com.
Recipients and order processing
Processing is carried out by our technical service provider:
Botpress Inc.
875 Boulevard Charest Ouest, Suite 200
Québec, QC G1N 2C9
Canada
This cooperation takes place within the framework of order processing, in accordance with Art. 28 GDPR. For Canada, the EU Commission has made an adequacy decision in accordance with Art. 45 GDPR, which guarantees an adequate level of data protection. Further information on data processing by Botpress can be found in their privacy policy.
Storage period
Personal data is only stored by Botpress for as long as is necessary to fulfil the aforementioned purposes. After that, it is anonymised or deleted. For more information, please refer to the privacy policy.
Voluntary contact details
If you voluntarily provide personal data for contact purposes in the chat history (e.g. name, email address, telephone number), this data will only be processed with your express consent.
Legal basis: Art. 6 (1) (a) GDPR (consent)
Purpose: Processing your enquiry and contacting you by our sales team
Storage period: The data will be deleted as soon as the purpose of processing no longer applies or you revoke your consent.
Withdrawal of consent: You can withdraw your consent at any time with effect for the future. To do so, please send an email to: info@sp-samson.com
Automated decision-making
The chatbot does not make any automated individual decisions within the meaning of Art. 22 GDPR that have legal effect on you or significantly affect you.
15. Current status and changes to this Privacy Statement
This Privacy Statement is currently valid and was last updated in May 2025. It may be necessary to make changes to this Privacy Statement from time to time, as we develop our website and our offering on the website further, and/or due to changes in legal and/or regulatory requirements. The current version of our Privacy Statement is available on our website at www.sp-samson.com/datenschutzwhere you can download and print if, if required.