Supplementary Data Privacy Information of the Sdui Group

Introduction

The Sdui Group, consisting of Sdui GmbH (Germany), FoxEducation Services GmbH (Austria), Additio App S.L. (Spain), and Pupil AG (Switzerland), follows a unified approach to processing personal data within group-wide processes. These supplementary notes apply in addition to the individual privacy policies of the respective company websites.

 

Central CRM and Communication Platform: Salesforce

To optimize our customer relationships, internal communication, and marketing activities, all companies in the Sdui Group use the cloud-based platform Salesforce. Salesforce is used as a jointly utilized Customer Relationship Management (CRM) system.

 

Processing of Personal Data

The following data categories can be processed via Salesforce:

• Contact details (e.g., name, email address, phone number)
• Communication contents (e.g., emails, support requests)
• Marketing preferences (e.g., newsletter opt-ins)
• Contract and customer data

These data are processed for the purposes of:

• Customer support and communication
• Handling inquiries
• Conducting marketing campaigns (only with prior opt-in)
• Sales management and analysis

Responsibilities within the Group

The data protection responsibility lies with the company you are in contact with. Processing via Salesforce is based on an intra-group data processing agreement in accordance with Art. 28 GDPR.

 

Data Transfer to Third Countries

Salesforce is a provider based in the USA. Data processing takes place on servers within the EU and – in certain cases – in the USA. The transfer of personal data to the USA is based on the EU Commission’s adequacy decision for the EU-U.S. Data Privacy Framework. Nevertheless, we continuously monitor the legal situation and take additional protective measures where necessary.

 

Your Rights

You have the right to access, rectify, delete, restrict processing, data portability, and object to the processing of your data at any time. For more information, please refer to the privacy policies of the respective companies.

 

Contact

If you have any questions about data protection within the Sdui Group, please contact:
datenschutz@sdui.de

 

Salesforce as Data Processor

Salesforce is used as a data processor in accordance with Art. 28 GDPR. Processing is based on a Data Processing Addendum (DPA). The data centers are located in Germany/EU. Data transfer to third countries only occurs in exceptional cases under the EU-U.S. Data Privacy Framework. The address of Salesforce Germany GmbH is: Erika-Mann-Straße 31, 80636 Munich, Germany.

For more information, please refer to the following links:

• Salesforce GDPR Compliance
• Salesforce Privacy Overview
• Salesforce Security and Privacy Measures