1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
SPMA Spezialmaschinen GmbH
Bodenäckerstr. 11
73266 Bissingen
Germany
Telephone: +49 (0) 7023 / 7 49 720
Fax: +49 (0) 7023 / 7 42 745
Email: kontakt@spma.de
Managing Directors:
Martin Schweizer and Robert Häußler
2. General Information on Data Processing
We process personal data of visitors to our website only insofar as this is necessary to provide a functional website, respond to enquiries, or use specific services.
Depending on the respective processing activity, processing is based in particular on:
- Art. 6(1)(a) GDPR – consent,
- Art. 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract,
- Art. 6(1)(c) GDPR – compliance with a legal obligation,
- Art. 6(1)(f) GDPR – legitimate interests.
Where consent is required for storing information on your terminal device or accessing information already stored there, processing is additionally based on Section 25(1) TDDDG.
3. Hosting and Server Log Files
This website is hosted by Domainfactory GmbH, c/o WeWork, Neuturmstr. 5, 80331 Munich, Germany.
When this website is accessed, the web server may process in particular the following data:
- IP address,
- date and time of the request,
- page or file accessed,
- referrer URL,
- browser type and browser version,
- operating system used,
- host name of the accessing computer.
This processing is necessary in order to provide the website technically, ensure its stability and security, and detect technical errors.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically error-free provision of our website.
This data is not merged with other data sources unless a separate legal basis exists.
4. Contact by Email, Telephone or Fax
If you contact us by email, telephone or fax, we process the data you provide in order to handle your enquiry.
This may include in particular:
- name,
- contact details,
- content of your enquiry,
- any additional information you provide.
If your enquiry is aimed at entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR.
In all other cases, processing is based on our legitimate interest in appropriately handling incoming enquiries pursuant to Art. 6(1)(f) GDPR.
The data will be deleted as soon as it is no longer required to process your enquiry and no statutory retention obligations apply.
5. Applications
Vacancies may be published on our website. Applications may, among other things, be submitted electronically to the contact person indicated there.
If you apply to us, we process the application data you provide exclusively for the purpose of carrying out the application process.
The legal basis is Section 26 BDSG in conjunction with Art. 6(1)(b) GDPR.
If no employment relationship is established, your application documents will be deleted after completion of the application process, unless statutory retention requirements or legitimate interests justify longer storage.
6. Cookies and Consent Management with Real Cookie Banner
We use Real Cookie Banner, a consent management plugin for WordPress.
Real Cookie Banner is used to obtain, manage and document consent for the use of optional services, cookies and comparable technologies.
Among other things, information about your consent decision is stored. The documentation is stored in the database of our WordPress website.
Real Cookie Banner uses technically necessary cookies or comparable storage technologies in order to store your consent decision and to load or block the services you have selected accordingly.
Processing is based on Art. 6(1)(c) GDPR insofar as it serves to fulfil our legal obligations to obtain and document consent, and additionally on Art. 6(1)(f) GDPR.
Where technically necessary information is stored on or accessed from your terminal device, this is based on Section 25(2) TDDDG.
You may change or withdraw your consent at any time with effect for the future via the privacy settings on this website.
7. Google Tag Manager
We use Google Tag Manager provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland.
Google Tag Manager is used to centrally manage and deploy technical tags and services on our website.
The Tag Manager itself primarily serves as a technical management platform. The further data processed depends on which services are integrated through it.
When Google Tag Manager is loaded, in particular the IP address and technical information relating to the browser and terminal device may be transmitted to Google.
Google Tag Manager is loaded on our website only after you have given your prior consent.
The legal basis is Art. 6(1)(a) GDPR. Where information on your terminal device is accessed, Section 25(1) TDDDG also applies.
Google may also process data in third countries, in particular the United States. Google is certified under the EU-US Data Privacy Framework; standard contractual clauses may also be used.
Further information is available at:
https://business.safety.google/privacy/
You may withdraw your consent at any time via our privacy settings.
8. Google Consent Mode
We use Google Consent Mode in order to transmit the consent decisions you make in our cookie banner to compatible Google services.
In particular, consent states for advertising services may be processed. Without the corresponding consent, the relevant optional services are not regularly loaded on our website.
We have configured the service so that no additional information is collected via URL parameters and optional Google services are not loaded as fully active services without prior consent.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and, where required, Section 25(1) TDDDG.
9. YouTube
This website contains videos embedded from YouTube. The provider for users in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland.
YouTube videos are initially blocked on our website by means of a content blocker.
A connection to Google or YouTube servers is established and the video is loaded only after you have consented to the use of YouTube.
The following data may be processed in this context, among other things:
- IP address,
- browser and device information,
- website accessed,
- interactions with the video,
- cookies or comparable technologies, where applicable.
If you are logged into a Google or YouTube account, the processed data may under certain circumstances be associated with your user account.
Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Google may also process data in the United States or other third countries. Google is certified under the EU-US Data Privacy Framework.
Further information:
https://business.safety.google/privacy/
You may withdraw your consent at any time via the privacy settings on this website.
10. Google Ads Conversion Tracking and Remarketing
We use Google Ads Conversion Tracking and, where applicable, remarketing functions provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland.
Google Ads enables us to measure whether users perform certain actions on our website after clicking on a Google advertisement. This allows us to evaluate the effectiveness of our advertising measures.
Cookies or comparable identifiers may be used for this purpose. The following data may be processed in particular:
- IP address,
- browser and device information,
- information about pages accessed,
- information about interactions with advertisements,
- conversion data,
- advertising and device identifiers.
Google may, where applicable, link this data with other information, in particular if you are logged into a Google account.
For Google Ads, we use the following consent types:
ad_storage,ad_user_data,ad_personalization.
The service is activated only after you have given your prior consent.
The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Google may also process data in the United States or other third countries. Google is certified under the EU-US Data Privacy Framework; standard contractual clauses may also be used.
Further information:
https://business.safety.google/privacy/
You may withdraw your consent at any time via the privacy settings on this website.
11. Visable Website Leads
We use the Website Leads service provided by:
Visable GmbH
ABC-Straße 21
20354 Hamburg
Germany
Telephone: +49 (0)40 25440-0
Email: datenschutz@visable.com
Website Leads is used to analyse the use of our website and to support our B2B marketing and sales activities.
For this purpose, pixel technology is used. Data may be collected, processed and stored in order to create at least pseudonymised and, where possible and appropriate, fully anonymised usage profiles.
The data collected may initially also include personal data, in particular the IP address of the internet connection used.
According to Visable, individual visitors to our website are not personally identified. IP addresses identified as personal data are, according to the provider, deleted without undue delay.
Website Leads enables us in particular to identify which companies have visited our website and to use this information to analyse our target groups and for marketing and sales measures.
The service is loaded on our website only after you have given your explicit consent.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
Where information on your terminal device is accessed, Section 25(1) TDDDG also applies.
You may withdraw your consent at any time with effect for the future via the privacy settings on our website.
Further information on data processing by Visable:
https://www.visable.com/de_de/datenschutz
12. Locally Hosted Fonts
The web fonts and Material Icons used on this website are hosted locally on our own server.
Accordingly, no connection to Google Fonts is established when these fonts are loaded.
Your IP address is therefore not transmitted to Google solely for the purpose of displaying fonts.
13. External Links
Our website contains links to external third-party websites.
If you follow such a link, you leave our website. The respective operator of the external website is generally responsible for the processing of personal data on that website.
No data is transferred to the linked provider merely by displaying an external link.
14. SSL/TLS Encryption
For security reasons, this website uses SSL/TLS encryption.
You can recognise an encrypted connection in particular by the fact that the browser address bar begins with https:// and a padlock symbol is displayed.
Encryption helps prevent data you transmit to us from being read by unauthorised third parties.
15. Storage Period
Unless a more specific storage period is stated in this Privacy Policy, we process personal data only for as long as necessary for the respective purpose.
Statutory retention periods may require data to be stored for longer.
Once the purpose of processing ceases to apply or a statutory retention period expires, the relevant data will be deleted unless another legal basis permits continued processing.
16. Your Rights
Subject to the applicable statutory requirements, you have in particular the following rights:
- right of access pursuant to Art. 15 GDPR,
- right to rectification pursuant to Art. 16 GDPR,
- right to erasure pursuant to Art. 17 GDPR,
- right to restriction of processing pursuant to Art. 18 GDPR,
- right to data portability pursuant to Art. 20 GDPR,
- right to object pursuant to Art. 21 GDPR,
- right to withdraw consent pursuant to Art. 7(3) GDPR.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
17. Right to Object to Processing Based on Legitimate Interests
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object at any time to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time without stating specific grounds.
18. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
You may in particular contact the supervisory authority responsible for our registered office or a supervisory authority at your place of residence or work.
19. Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy if our website, the services used or the legal requirements change.
Last updated: October 2026
