The SPS Group ("SPS," "we," or "us") is a service provider in the field of document management and business process outsourcing. As a service provider, we process data from customers and applicants. We also process information on behalf of our customers that may contain personal data of their end customers. Furthermore, we process data collected when visiting this website (from representatives of our customers or website users). For more information about SPS, please see "About us."
The protection of your personal data is very important to us. We therefore treat your personal data with great care and in accordance with the relevant legal data protection regulations. In this privacy policy, we explain what personal data we process, for what purpose it is collected, how we process this personal data, and what rights you have in this regard.
1. Contact
Unless otherwise specified in individual cases, the following entity is responsible for data processing in connection with this website:
SPS Holding AG
Pfingstweidstrasse 60b
P.O. Box
8080 Switzerland
You can contact us regarding your data protection concerns and to exercise your rights as follows:
Compliance Department
Data Protection Advisor
Pfingstweidstrasse 60b
P.O. Box
8080 Switzerland
Email global.sps@spsglobal.com
2. Collection and processing of personal data
(1) We primarily process personal data that we receive from our customers and other business partners in the course of our business relationship with them and other persons involved, or that we collect from users when operating our websites, apps, and other applications. To the extent permitted, we also obtain certain data from publicly available sources (e.g., debt collection registers, land registers, commercial registers, the press, the Internet) or receive such data from other companies within the SPS Group or from authorities and other third parties.
(2) In the course of our business activities, we process the following categories of personal data:
- Information relating to your professional functions and activities, Information about you in correspondence and meetings, so that we can conclude and execute contracts with you or your organization,
- Information from public registers,
- Information we obtain in connection with administrative and judicial proceedings.
- Information on compliance with legal requirements such as anti-money laundering and export restrictions,
- Information from banks, insurance companies, distributors, and other contractual partners of ours regarding the use or provision of services, such as payments made,
- Information from applicants who are interested in working for us. This includes information that you provide to us yourself, as well as information that we may additionally obtain about you, e.g., from professional social networks, the internet, the media, and—with your consent—from references. Since we have to comply with strict and rigid requirements from our customers in our core business, this information may also include extracts from the criminal record or the debt collection register, with your consent.
(3) When providing our services in the area of outsourcing innovative services in business processing and data management for our customers, we process personal data as their contract processor. Depending on the service, this may include personal data in addition to your master data, such as bank details, financial data, insurance, insurance data, and health data. We have entered into contractual agreements with our customers that regulate which categories of personal data our customers provide to us in the context of order processing.
(4) We collect data in connection with the use of the website, such as IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location information.
3. Purposes of data processing
(1) We use the personal data we collect primarily to conclude and fulfill our contracts with our customers and business partners, in particular in the context of our services in the area of outsourcing innovative services in business processing and data management, the purchase of products and services from our suppliers, and to comply with our legal obligations at home and abroad. If you work for one of our customers or business partners, we may process personal data relating to you.
(2) In the course of providing our services to our customers in the area of outsourcing innovative services in business processing and data management, we process personal data of end customers or our customers or other natural persons that is provided to us by customers for order processing.
(3) In addition, we also process personal data relating to you and other individuals, to the extent permitted, for the following purposes, in which we have a legitimate interest corresponding to the purpose:
- Offering and further developing our offers, services, websites, apps, and other platforms on which we are present;
- Communication with third parties and processing of their inquiries and applications;
- Reviewing and optimizing procedures for needs analysis for the purpose of direct customer contact and collecting personal data from publicly available sources for the purpose of customer acquisition;
- Advertising and marketing, including the organization of events, provided that you have not objected to the use of your data for these purposes. If we send you advertising, you can object to this at any time and we will then place you on a block list;
- Market and opinion research, media monitoring;
- Assertion of legal claims and defense in connection with legal disputes and official proceedings;
- Prevention and investigation of criminal offenses and other misconduct, such as conducting internal investigations, data analysis for fraud prevention;
- Ensuring the operation of our business, in particular our IT systems, websites, apps, and other platforms;
- Video surveillance to protect our property rights and other measures for IT, building, and facility security and the protection of our employees and other persons and assets belonging to us or entrusted to us (such as access controls, visitor lists, network and mail scanners, telephone recordings);
- Information in connection with a job application and the implementation of the application process.
- Purchase and sale of business areas, companies or parts of companies and other corporate transactions and the associated transfer of personal data
- Measures for business management and compliance with legal and regulatory obligations as well as internal SPS regulations.
(4) If you have given us your consent to process your personal data for specific purposes (e.g., when you register to receive newsletters or undergo a background check), we will only process your personal data within the scope of and based on this consent, unless we have other grounds for doing so. Consent can be revoked at any time, but this will not affect data processing that has already taken place.
(5) When you contact us by email or via a contact form on our website, we store the personal data you provide (your surname, first name, company name, and email address) in order to respond to your questions.
4. Collection of personal data when visiting our website
(1) When you use the website for informational purposes only, i.e. if you do not provide us with any other information (e.g. via the contact form), we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following personal data, which is technically necessary for us to display our website to you and to ensure stability and security:
- Date and time of access
- Referrer
- URL of the website from which our offer was accessed
- IP address of the accessing computer
- Type and version of browser used
- Amount of data transferred
- Success or error when loading
(2) In addition to the aforementioned personal data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (see b)
- Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. The session ID does not store your name, IP address, or similar data. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after 12 months. You can delete cookies at any time in your browser's security settings.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the functions of this website.
e) If we use cookies from third-party service providers (so-called third-party cookies), we will inform you of this in advance.
In addition to the distinction between transient and persistent cookies described above, a distinction is made between necessary and alternative cookies.
The use of alternative cookies (e.g., functional or advertising cookies) is based on your consent, which you give us via our cookie consent function before the cookie is activated and which you can revoke at any time without giving reasons.
5. Our newsletter
By subscribing to our newsletter, you agree to receive it and to the procedures described. We only send newsletters and other electronic notifications containing advertising (hereinafter "newsletters") with your consent. To subscribe to the newsletter, simply enter your name, title, company, and email address. Registration for our newsletter is based on the so-called double opt-in procedure: After registering, you will receive an email from us asking you to confirm your registration. This confirmation is necessary to ensure that no third party can register with your email address. Newsletter registrations are logged in order to be able to verify the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation. Changes to your data stored by the mailing service provider are also logged.
The newsletter is sent on the basis of the recipient's consent. Our interest is in using a user-friendly and secure newsletter system that serves our business interests, meets user expectations, and allows us to verify consent.
Unsubscribing from the newsletter
You can unsubscribe from our newsletter at any time, i.e., revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter. We may store the unsubscribed email addresses for up to one year based on our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this personal data is limited to the purpose of a possible defense against claims. An individual request for deletion is also possible at any time.
Our newsletter service provider
The newsletter is sent using Eloqua, a service provided by Oracle Corporation, 500 Oracle Parkway Redwood City, California, USA. You can view Oracle's privacy policy here: oracle.com/de/legal/privacy
In the case of order data processing, we use our service provider on the basis of an order processing agreement. In order for you to receive the newsletter at all and for personal data to be disclosed to the service provider in this context, you must consent to receiving the newsletter. The service provider may use the personal data of recipients in pseudonymous form, i.e., without assigning it to a user, to optimize and improve its own services, e.g., for technical optimization of the dispatch and presentation of the newsletter or for statistical purposes. However, it does not use the personal data of our newsletter recipients to write to them itself or to pass the data on to third parties.
6. Web analysis services and tracking tools
Google Analytics
We use Google Analytics to analyze and statistically evaluate website usage. The personal data obtained from this is used to optimize our website and advertising measures.
Google Analytics is a web analytics service operated and provided by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Type of personal data
The following information is collected during your visit to the website:
- Visitor-related data
- IP address (in abbreviated form, so that no unique assignment is possible)
- Origin (country and city)
- Language Operating system Device (PC, tablet PC, or smartphone)
- Browser and all add-ons used Computer resolution
- Traffic sources, source of origin of your visit (i.e., which website or advertising medium brought you to us)
User behavior
- Which videos were viewed?
- Where did the visitor go?
- Did they click on other pages of the portal or did they leave it completely?
- How long did the visitor stay?
Goal achievement
- Completion of newsletter subscription
- Download of files (e.g., white papers)
Google processes personal data relating to website use on our behalf and is contractually obliged to take measures to ensure the confidentiality of the data processed. Google also processes this personal data for its own purposes (e.g., for profiling or linking to any Google accounts). The data collected via cookies about your website usage is usually transferred to a Google server in the US for analysis and stored there.
Storage period
Google Analytics stores cookies in your web browser for a period of 14 months from your last visit. These cookies contain a randomly generated user ID that can be used to recognize you on future visits to the website.
The recorded personal data is stored together with a randomly generated user ID, which enables the evaluation of pseudonymous user profiles. We automatically delete this user-related data after 26 months.
Anonymize IP
IP anonymization (masking function "anonymizeIP") is used on this website. The IP address of users within the member states of Switzerland, the EU, and the European Economic Area is truncated and only transmitted in anonymized form. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.
Revocation/objection
You can prevent this processing by taking the following measures:
It is possible to set your browser so that no "cookies" are stored. However, this may mean that our website is not fully functional.
It is also possible to prevent data collection by using a browser add-on from Google. The add-on can be found here: https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser add-on, for example if you use a smartphone or tablet, you can prevent data collection by Google Analytics by clicking here. This sets a cookie that prevents the collection of personal data. If you visit our website again with a different device or browser, or if you have deleted your cookies, you will need to set the cookie again.
You can also revoke your activation of Google Analytics at any time in the "Privacy settings" area (at the bottom of the page) with effect for the future.
As an American company, Google is subject to the CLOUD Act. Under certain conditions, this allows American government authorities to access data stored by Google.
Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=de
Eloqua
We use Eloqua to evaluate the use of our website. Eloqua is a service provided by Oracle Corporation, 500 Oracle Parkway Redwood City, California, USA. Eloqua also serves as our website metrics service and website personalization service.
Eloqua places a persistent cookie on the respective login page, unless an Eloqua cookie is already present on your device. If you have already used a website that uses Eloqua, you may already have an Eloqua cookie. The cookies set by the Eloqua server can only be read by Eloqua and cannot access, read, or modify any other personal data on your computer. The cookies themselves do not contain any personal information. We do not link the information stored in cookies to personal data that you submit on our website.
SPS may use the Eloqua cookie to analyze the use of our website so that we can continuously improve it. If you subscribe to our newsletter to receive marketing information by email, the emails sent via Eloqua contain a tracking pixel for opening emails. Clicks from these emails are also tracked.
As a visitor to our website, you have control over whether your personal data can be used for this service. The cookie is only played and personal data about you is only collected if you agree to its use and the associated improved user experience.
Regardless of this, we manage, store, edit, or delete our CRM (customer relationship management) data not only using our own systems but also via the Eloqua service, which is integrated as a contract data processor.
reCAPTCHA
To protect your contact requests via the internet form, we use the reCAPTCHA service provided by Google LLC. (Google), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The query serves to distinguish whether the input is made by a human or abusively by automated, machine processing. This query includes the transmission of your IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and reused there. Since IP anonymization is activated on our site, your IP address will be truncated by Google within Switzerland, member states of the European Union, or other contracting states of the Agreement on the European Economic Area. Google evaluates this information on our behalf for the purpose of qualifying your input. The IP address transmitted by your browser as part of reCaptcha will not be merged with other personal data held by Google.
Privacy Policy: policies.google.com/privacy
7. YouTube videos
Our website contains videos that we have published on YouTube. YouTube (YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA) is a service provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you watch a video on our website, a connection to YouTube's servers is established and the video is displayed. This also transmits information to the servers of this platform that you have visited our website.
If you are logged in to YouTube as a member, YouTube will also assign this information to your personal user account. The personal data collected about you will be processed by YouTube and, if necessary, transferred to countries outside Switzerland, the EU, or the EEA. We have no influence on the type and scope of personal data processed by the provider, the type of processing and use, or the transfer of this personal data to third parties, in particular to countries outside Switzerland and the European Economic Area.
You can prevent this assignment by logging out of your respective user account before using our website and deleting the corresponding cookies.
Further information can be found in the privacy policy: policies.google.com/privacy.
Regardless of the data processing on our homepage, you also have the option of opting out at Google, see policies.google.com/privacy, and the option of deleting your own data, see policies.google// infodelete .
These options are subject to Google's sovereignty, over which we have no influence. We only transmit personal data once you have actively selected the video to play it. This constitutes consent to the use of the video service and thus to the necessary data transmission.
8. If you want to share our site
We use interactive elements on our website, known as share buttons from
- LinkedIn (small "in")
- Twitter (X)
- Email (envelope icon)
to simplify the recommendation process, so that users of our site can make recommendations without much effort and our company can become better known in this way. The plugins of these services are used for this purpose. To protect your personal data and privacy, we use the two-click method for recommendations on social networks. By using this method, our websites contain inactive buttons that do not transfer any personal data to these providers. However, you have the option of activating the buttons manually and thus establishing a connection to your preferred network (= first click). After you have logged in there, you can submit your recommendation in a second step (= second click). If you are already logged in to the social network in question, it can immediately assign your visit to our website to your profile after the second click. The post will be made visible in your user account according to your privacy settings for the service, e.g., only to a specific group of people in the network or publicly.
When you access the respective networks and platforms, the terms and conditions and data processing guidelines of the respective services apply in order to be able to offer personalized advertising, to inform other users of the social network about your activities on our website, and to tailor the service to your needs.
If you do not want the respective operator of the above-mentioned networks to directly assign the data collected via our website to your profile, you must log out before visiting our website.
Responsibility for data protection-compliant operation must be ensured by the respective providers:
LinkedIn: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Privacy policy linkedin.com/legal/privacy-policy,
Opt-out: linkedin.com/psettings/guest-controls/retargeting-opt-out,
Twitter: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, is responsible for data processing for individuals living outside the United States.
Twitter privacy policy: twitter.com/privacy
Opt-out: twitter.com/account/settings
Further information on opting out: twitter.com/en/rules-and-policies/twitter-cookies
Facebook: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Overview of Facebook plugins: developers.facebook.com/docs/plugins
Facebook privacy policy: facebook.com/about/privacy
You can also prevent Facebook plugins from loading and thus the data processing described above in the future by using add-ons for your browser, e.g., the script blocker noscript .
9. Our company pages on social media
From our website, you can click on the respective icon to visit our company pages on
- Slideshare
- YouTube
. There we communicate with our customers, interested parties, and users in order to inform them about our services. We would like to point out that users' personal data may be processed outside the European Economic Area. This may pose risks for users, as it could make it more difficult for them to enforce their rights, for example.
Furthermore, users' personal data is generally processed by social media service providers for market research and advertising purposes. For example, usage profiles can be created based on users' usage behavior and resulting interests. The user profiles can in turn be used, for example, to place advertisements within and outside the platforms that are presumed to correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, personal data can also be stored in the usage profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
In the case of requests for information and the assertion of user rights, we would like to point out that these can be most effectively asserted with the providers. Only the providers have access to the personal data of users and can take appropriate measures and provide information directly. However, if you need help, you can contact us.
For a detailed description of the respective processing and the options for objection (opt-out), we refer you to the information provided by the providers linked below. This data processing is not our responsibility and we have no influence over it.
Slideshare is a service provided by LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy policy: linkedin.com/privacy-policy,
Opt-out: linkedin.com/guest-controls/retargeting-opt-out,
Xing XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany
Privacy policy/opt-out: https://privacy.xing.com/de/datenschutzerklaerung
Twitter: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, is responsible for data processing for individuals living outside the United States.
Twitter privacy policy: https://twitter.com/privacy
Opt-out: twitter.com/account/settings
Facebook: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy policy: facebook.com/about/privacy
Opt-out: facebook.com/login and youronlinechoices.com
YouTube: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA is a service provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy policy: policies.google.com/privacy
Opt-out: policies.google.com/privacy
10. Who do we share your data with?
In the course of our business activities, we are required to pass on personal data to third parties in order to achieve the purposes set out in section 3. These recipients may be our contract processors or they may process this data as controllers for their own purposes. These recipients may include, in particular:
- SPS Group companies that provide services for the Group or specifically for us;
- Service providers who process personal data on our behalf, such as IT providers or other specialized service providers, our subcontractors;
- Service providers who process personal data on our behalf as controllers, such as banks and insurance companies;
- Customers;
- Domestic and foreign authorities, government agencies, or courts;
- Media;
- Competitors, industry organizations, associations, organizations, and other bodies;
- Acquirers or parties interested in acquiring business areas, companies, or other parts of the SPS Group;
- Parties in potential or actual legal proceedings;
11. Do we disclose your data abroad?
The aforementioned recipients of personal data may be located both in Switzerland and abroad. We generally process personal data in all countries in which we do business and maintain a presence (group companies, branches), such as the US and Vietnam in particular. In addition, we also transfer personal data to other countries in the EEA or to the US, where the service providers we use are located.
If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with the applicable data protection regulations. If the recipient is not subject to a legally recognized set of rules for ensuring data protection and we cannot rely on an exception, the transfer is based on the revised standard contractual clauses of the European Commission, including an appendix in accordance with the requirements of the Federal Data Protection and Information Commissioner (Swiss Addendum).
12. Retention period We process and store your personal data for as long as it is necessary to achieve the purposes pursued, in particular to fulfill our contractual and legal obligations. We are subject to statutory retention and documentation obligations. In addition, we store personal data for as long as claims against us can be asserted in connection with it. As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as far as possible. For operational data (e.g., system logs), shorter retention periods of twelve months or less generally apply.
13. Data security
We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse and review these measures regularly.
14. Your rights
(1) You have the right to request information about the processing of your personal data (right to information). You may also request that we correct or supplement inaccurate or incomplete personal data (right to rectification). You may also object to processing for specific purposes or withdraw your consent (in each case with effect for the future). You may also request that we delete certain personal data.
(2) Please note that the above rights may be subject to exceptions and restrictions (e.g., to protect overriding interests or those of third parties or trade secrets). If you wish to exercise your rights against us, please contact us in writing and enclose a legible copy of your ID for identification purposes and to prevent abuse.
(4) If we process your personal data as a processor for one of our customers, we ask that you exercise your rights directly with the customer concerned. If you submit requests to us, we will forward them to the customer concerned without delay.
15. Revocation of consent or objection to the processing of your data
(1) If you have given your consent to the processing of your personal data, you can revoke this consent at any time. We will no longer process your personal data after receiving your revocation. Data processing that took place before the revocation remains unaffected by the revocation.
(2) You may object to the processing of your personal data at any time (cf. Art. 30 para. 2 lit. c DSG). However, we must reserve the right to continue processing the data despite your objection if we can assert a justification, in particular an overriding interest.
(3) You can, of course, object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details provided in section 1.
16. Concluding remarks
Our business operations require the collection and processing of personal data. Where personal data is collected and processed, data protection and data security must be guaranteed. For us, this is not only a legal requirement, but also a matter of fundamental concern. If you have any questions or suggestions regarding data protection in connection with our services, please do not hesitate to contact us using the contact details provided above (see section 1).
This privacy policy was last updated on: April 1, 2026.