The SPS Group ("SPS," "we," or "us") is a service provider in the field of document management and business process outsourcing. As a service provider, we process data from customers and applicants. We also process information on behalf of our customers that may contain personal data of their end customers. Furthermore, we process data collected when visiting this website (from representatives of our customers or website users). For more information about SPS, please see "About us."
The protection of your personal data is very important to us. We therefore treat your personal data with great care and in accordance with the relevant legal data protection regulations. In this privacy policy, we explain what personal data we process, for what purpose it is collected, how we process this personal data, and what rights you have in this regard.
1. Contact Us
Unless otherwise specified in individual cases, the following entity is responsible for data processing in connection with this website:
SPS Holding AG
Pfingstweidstrasse 60b
P.O. Box
8080 Switzerland
You can contact us regarding your data protection concerns and to exercise your rights as follows:
Compliance Department
Data Protection Advisor
Pfingstweidstrasse 60b
P.O. Box
8080 Switzerland
Email [email protected]
Or you can contact our UK&I Data Protection Officer via the UK Compliance Team: [email protected]
2. Collection and processing of personal data
(1) We primarily process personal data that we receive from our customers and other business partners in the course of our business relationship with them and other persons involved, or that we collect from users when operating our websites, apps, and other applications. To the extent permitted, we also obtain certain data from publicly available sources (e.g., debt collection registers, land registers, commercial registers, the media, the Internet) or receive such data from other companies within the SPS Group or from authorities and other third parties.
(2) In the course of our business activities, we process the following categories of personal data:
Information relating to your professional functions and activities, Information about you in correspondence and meetings, so that we can conclude and execute contracts with you or your organisation,
Information from public registers,
Information we obtain in connection with administrative and judicial proceedings.
Information on compliance with legal requirements such as anti-money laundering and export restrictions,
Information from banks, insurance companies, distributors, and other contractual partners of ours regarding the use or provision of services, such as payments made,
Information from applicants who are interested in working for us. This includes information that you provide to us yourself, as well as information that we may additionally obtain about you, e.g., from professional social networks, the internet, the media, and—with your consent—from references. Since we have to comply with strict and rigid requirements from our customers in our core business, this information may also include extracts from the criminal record or the debt collection register, with your consent.
(3) When providing our services in the area of outsourcing innovative services in business processing and data management for our customers, we process personal data as their contract processor. Depending on the service, this may include personal data in addition to your master data, such as bank details, financial data, insurance, insurance data, and health data. We have entered into contractual agreements with our customers that regulate which categories of personal data our customers provide to us in the context of order processing.
(4) We collect data in connection with the use of the website, such as IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location information.
3. Purposes of data processing
(1) We use the personal data we collect primarily to conclude and fulfil our contracts with our customers and business partners, in particular in the context of our services in the area of outsourcing innovative services in business processing and data management, the purchase of products and services from our suppliers, and to comply with our legal obligations at home and abroad. If you work for one of our customers or business partners, we may process personal data relating to you.
(2) In the course of providing our services to our customers in the area of outsourcing innovative services in business processing and data management, we process personal data of end customers or our customers or other natural persons that is provided to us by customers for order processing.
(3) In addition, we also process personal data relating to you and other individuals, to the extent permitted, for the following purposes, in which we have a legitimate interest corresponding to the purpose:
Offering and further developing our offers, services, websites, apps, and other platforms on which we are present;
Communication with third parties and processing of their inquiries and applications;
Reviewing and optimising procedures for needs analysis for the purpose of direct customer contact and collecting personal data from publicly available sources for the purpose of customer acquisition;
Advertising and marketing, including the organisation of events, provided that you have not objected to the use of your data for these purposes. If we send you advertising, you can object to this at any time and we will then place you on a block list;
Market and opinion research, media monitoring;
Assertion of legal claims and defense in connection with legal disputes and official proceedings;
Prevention and investigation of criminal offenses and other misconduct, such as conducting internal investigations, data analysis for fraud prevention;
Ensuring the operation of our business, in particular our IT systems, websites, apps, and other platforms;
Video surveillance to protect our property rights and other measures for IT, building, and facility security and the protection of our employees and other persons and assets belonging to us or entrusted to us (such as access controls, visitor lists, network and mail scanners, telephone recordings);
Information in connection with a job application and the implementation of the application process.
Purchase and sale of business areas, companies or parts of companies and other corporate transactions and the associated transfer of personal data
Measures for business management and compliance with legal and regulatory obligations as well as internal SPS regulations.
(4) If you have given us your consent to process your personal data for specific purposes (e.g., when you register to receive newsletters or undergo a background check), we will only process your personal data within the scope of and based on this consent, unless we have other grounds for doing so. Consent can be revoked at any time, but this will not affect data processing that has already taken place.
(5) When you contact us by email or via a contact form on our website, we store the personal data you provide (your surname, first name, company name, and email addrss) in order to respond to your questions.
4. Collection of personal data when visiting our website
(1) When you use the website for informational purposes only, i.e. if you do not provide us with any other information (e.g. via the contact form), we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following personal data, which is technically necessary for us to display our website to you and to ensure stability and security:
Date and time of access
Referrer
URL of the website from which our offer was accessed
IP address of the accessing computer
Type and version of browser used
Amount of data transferred
Success or error when loading
(2) In addition to the aforementioned personal data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies (see b)
Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. The session ID does not store your name, IP address, or similar data. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after 12 months. You can delete cookies at any time in your browser's security settings.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the functions of this website. You can also change your preferences by clicking on the cookie icon at the foot of the website page.
e) If we use cookies from third-party service providers (so-called third-party cookies), we will inform you of this in advance.
In addition to the distinction between transient and persistent cookies described above, a distinction is made between necessary and alternative cookies.
The use of alternative cookies (e.g., functional or advertising cookies) is based on your consent, which you give us via our cookie consent function before the cookie is activated and which you can revoke at any time without giving reasons.
5. Web analysis services and tracking tools
Google Analytics
We use Google Analytics to analyze and statistically evaluate website usage. The personal data obtained from this is used to optimize our website and advertising measures.
Google Analytics is a web analytics service operated and provided by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Type of personal data
The following information is collected during your visit to the website:
Visitor-related data
IP address (in abbreviated form, so that no unique assignment is possible)
Origin (country and city)
Language Operating system Device (PC, tablet PC, or smartphone)
Browser and all add-ons used Computer resolution
Traffic sources, source of origin of your visit (i.e., which website or advertising medium brought you to us)
User behaviour
Which videos were viewed?
Where did the visitor go?
Did they click on other pages of the portal or did they leave it completely?
How long did the visitor stay?
Goal achievement
Completion of newsletter subscription
Download of files (e.g., white papers)
Google processes personal data relating to website use on our behalf and is contractually obliged to take measures to ensure the confidentiality of the data processed. Google also processes this personal data for its own purposes (e.g., for profiling or linking to any Google accounts). The data collected via cookies about your website usage is usually transferred to a Google server in the US for analysis and stored there.
Storage period
Google Analytics stores cookies in your web browser for a period of 14 months from your last visit. These cookies contain a randomly generated user ID that can be used to recognize you on future visits to the website.
The recorded personal data is stored together with a randomly generated user ID, which enables the evaluation of pseudonymous user profiles. We automatically delete this user-related data after 26 months.
Revocation/objection
You can prevent this processing by taking the following measures:
It is possible to set your browser so that no "cookies" are stored. However, this may mean that our website is not fully functional. Please use the cookie icon to change your preferences.
It is also possible to prevent data collection by using a browser add-on from Google. The add-on can be found here: https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser add-on, for example if you use a smartphone or tablet, you can prevent data collection by Google Analytics by clicking here. This sets a cookie that prevents the collection of personal data. If you visit our website again with a different device or browser, or if you have deleted your cookies, you will need to set the cookie again.
You can also revoke your activation of Google Analytics at any time in the "Privacy settings" area (at the bottom of the page) with effect for the future.
As an American company, Google is subject to the CLOUD Act. Under certain conditions, this allows American government authorities to access data stored by Google.
Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=de
6. YouTube videos
Our website contains videos that we have published on YouTube. YouTube (YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA) is a service provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you watch a video on our website, a connection to YouTube's servers is established and the video is displayed. This also transmits information to the servers of this platform that you have visited our website.
If you are logged in to YouTube as a member, YouTube will also assign this information to your personal user account. The personal data collected about you will be processed by YouTube and, if necessary, transferred to countries outside Switzerland, the EU, or the EEA. We have no influence on the type and scope of personal data processed by the provider, the type of processing and use, or the transfer of this personal data to third parties, in particular to countries outside Switzerland and the European Economic Area.
You can prevent this assignment by logging out of your respective user account before using our website and deleting the corresponding cookies.
Further information can be found in the privacy policy: policies.google.com/privacy.
Regardless of the data processing on our homepage, you also have the option of opting out at Google, see policies.google.com/privacy, and the option of deleting your own data, see policies.google// infodelete .
These options are subject to Google's sovereignty, over which we have no influence. We only transmit personal data once you have actively selected the video to play it. This constitutes consent to the use of the video service and thus to the necessary data transmission.
7. Vimeo Videos
We use Vimeo to host and display videos on our website. Vimeo is a third-party video hosting service provided by Vimio.com, Inc.
When you view a page containing an embedded Vimeo video, Vimeo may collect information about your device, browser, IP address and interactions with the video. Vimeo may also use cookies of similar technologies in accordance with its own cookie policies. Further information can be found in Vimeo’s Privacy Policy.
8. If you want to share our site
We use interactive elements on our website, known as share buttons from
LinkedIn (small "in")
Twitter (X)
Email (envelope icon)
to simplify the recommendation process, so that users of our site can make recommendations without much effort and our company can become better known in this way. The plugins of these services are used for this purpose. To protect your personal data and privacy, we use the two-click method for recommendations on social networks. By using this method, our websites contain inactive buttons that do not transfer any personal data to these providers. However, you have the option of activating the buttons manually and thus establishing a connection to your preferred network (= first click). After you have logged in there, you can submit your recommendation in a second step (= second click). If you are already logged in to the social network in question, it can immediately assign your visit to our website to your profile after the second click. The post will be made visible in your user account according to your privacy settings for the service, e.g., only to a specific group of people in the network or publicly.
When you access the respective networks and platforms, the terms and conditions and data processing guidelines of the respective services apply in order to be able to offer personalized advertising, to inform other users of the social network about your activities on our website, and to tailor the service to your needs.
If you do not want the respective operator of the above-mentioned networks to directly assign the data collected via our website to your profile, you must log out before visiting our website.
Responsibility for data protection-compliant operation must be ensured by the respective providers:
LinkedIn: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Privacy policy linkedin.com/legal/privacy-policy,
Opt-out: linkedin.com/psettings/guest-controls/retargeting-opt-out,
Twitter: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, is responsible for data processing for individuals living outside the United States.
Twitter privacy policy: twitter.com/privacy
Opt-out: twitter.com/account/settings
Further information on opting out: twitter.com/en/rules-and-policies/twitter-cookies
Facebook: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Overview of Facebook plugins: developers.facebook.com/docs/plugins
Facebook privacy policy: facebook.com/about/privacy
You can also prevent Facebook plugins from loading and thus the data processing described above in the future by using add-ons for your browser, e.g., the script blocker noscript .
9. Our company pages on social media
From our website, you can click on the respective icon to visit our company pages on
Facebook
LinkedIn
YouTube
X
Vimeo
Instagram
There we communicate with our customers, interested parties, and users in order to inform them about our services. We would like to point out that users' personal data may be processed outside the European Economic Area. This may pose risks for users, as it could make it more difficult for them to enforce their rights, for example.
Furthermore, users' personal data is generally processed by social media service providers for market research and advertising purposes. For example, usage profiles can be created based on users' usage behaviour and resulting interests. The user profiles can in turn be used, for example, to place advertisements within and outside the platforms that are presumed to correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, personal data can also be stored in the usage profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
In the case of requests for information and the assertion of user rights, we would like to point out that these can be most effectively asserted with the providers. Only the providers have access to the personal data of users and can take appropriate measures and provide information directly. However, if you need help, you can contact us.
For a detailed description of the respective processing and the options for objection (opt-out), we refer you to the information provided by the providers linked below. This data processing is not our responsibility, and we have no influence over it.
Twitter privacy policy: https://twitter.com/privacy
Opt-out: twitter.com/account/settings
Facebook: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy policy: facebook.com/about/privacy
Opt-out: facebook.com/login and youronlinechoices.com
YouTube: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA is a service provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy policy: policies.google.com/privacy
Opt-out: policies.google.com/privacy
10. Who do we share your data with?
In the course of our business activities, we are required to pass on personal data to third parties in order to achieve the purposes set out in section 3. These recipients may be our contract processors or they may process this data as controllers for their own purposes. These recipients may include, in particular:
SPS Group companies that provide services for the Group or specifically for us;
Service providers who process personal data on our behalf, such as IT providers or other specialised service providers, our subcontractors;
Service providers who process personal data on our behalf as controllers, such as banks and insurance companies;
Customers;
Domestic and foreign authorities, government agencies, or courts;
Media;
Competitors, industry organisations, associations, organisations, and other bodies;
Acquirers or parties interested in acquiring business areas, companies, or other parts of the SPS Group;
Parties in potential or actual legal proceedings;
11. Do we disclose your data abroad?
The aforementioned recipients of personal data may be located both in the UK and overseas. We generally process personal data in all countries in which we do business and maintain a presence (group companies, branches), such as the US and Vietnam in particular. In addition, we also transfer personal data to other countries in the EEA or to the US, where the service providers we use are located.
If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with the applicable data protection regulations. If the recipient is not subject to a legally recognised set of rules for ensuring data protection and we cannot rely on an exception, the transfer is based on the revised standard contractual clauses, including an appendix in accordance with the requirements of the Federal Data Protection and Information Commissioner (Swiss Addendum) and UK Data Protection Laws.
12. Retention period
We process and store your personal data for as long as it is necessary to achieve the purposes pursued, in particular to fulfil our contractual and legal obligations. We are subject to statutory retention and documentation obligations. In addition, we store personal data for as long as claims against us can be asserted in connection with it. As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as far as possible. For operational data (e.g., system logs), shorter retention periods of twelve months or less generally apply.
13. Data security
We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse and review these measures regularly.
14. Your rights
(1) You have the right to request information about the processing of your personal data (right to information). You may also request that we correct or supplement inaccurate or incomplete personal data (right to rectification). You may also object to processing for specific purposes or withdraw your consent (in each case with effect for the future). You may also request that we delete certain personal data.
(2) Please note that the above rights may be subject to exceptions and restrictions (e.g., to protect overriding interests or those of third parties or trade secrets). If you wish to exercise your rights against us, please contact us in writing and enclose a legible copy of your ID for identification purposes and to prevent abuse.
(4) If we process your personal data as a processor for one of our customers, we ask that you exercise your rights directly with the customer concerned. If you submit requests to us, we will forward them to the customer concerned without delay.
15. Revocation of consent or objection to the processing of your data
(1) If you have given your consent to the processing of your personal data, you can revoke this consent at any time. We will no longer process your personal data after receiving your revocation. Data processing that took place before the revocation remains unaffected by the revocation.
(2) You may object to the processing of your personal data at any time. However, we must reserve the right to continue processing the data despite your objection if we can assert a justification, in particular an overriding interest.
(3) You can, of course, object to the processing of your personal data for marketing and data analysis purposes at any time. You can inform us of your objection to marketing by opting out. This can be found at the bottom of our marketing emails.
16. How to raise a concern
Our business operations require the collection and processing of personal data. Where personal data is collected and processed, data protection and data security must be guaranteed.
For us, this is not only a legal requirement, but also a matter of fundamental concern.
If you have any queries about this privacy notice or believe we have mishandled your personal data or failed to uphold your data protection rights, please let us know.
We will acknowledge your request as soon as possible and respond to your concern with in 30 days. If your concern requires more investigation and we are unable to respond within the timescale, we will let you know.
You can do this by contacting the Data Protection Officer at our SPS UK&I compliance team email address noted in section 1 of this notice.
If you remain unhappy with the response, you can raise a complaint to the Information Commissioners Office.
This privacy policy was last updated on: October 27, 2026.
Get in touch to get started!
Call our team 0800 046 8081, or contact us.
We'll be happy to help.