Last updated: April 2025
As the Sustainable Procurement Pledge Community (“Sustainable Procurement Pledge”, “SPP”, “we”, “us”, or “our”) we are committed to protecting your personal information and your right to privacy. Compliance with data protection laws is not only a legal obligation for SPP, but also an important factor of trust. With the following data privacy provisions, we would like to inform you transparently about the type, scope and purpose of your personal data processed and about your rights. Personal data is all data that can be directly or indirectly attributed to you (or another natural person). We will treat this data confidentially and in accordance with applicable data protection laws. Such legal provisions are in particular Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR“), the German Federal Data Protection Act (“BDSG“) and the Telecommunications Digital Services Data Protection Act (“TDDDG“).
This privacy policy is for your information in accordance with Articles 13 and 14 GDPR. It applies to all information collected through our websites (www.spp.earth), CRM, Social Media platforms and/or any other related services, communication, sales, marketing or events.
Please read this privacy policy carefully as it will help you make informed decisions about sharing your personal information with us.
Sustainable Procurement Pledge gGmbH, Kittelbachstrasse 61, 40489 Düsseldorf, Germany is the controller pursuant to Article 4 No. 7 GDPR. If you have any questions, you can contact us via the e-mail address ambassador@spp.earth.
We may process the following categories of personal data from you or other persons when you visit our website, make use of our services and/or cooperate with us:
In course of your engagement with us as volunteer and in the SPP Champions Program, we may process and publish your headshot photo that you have shared with us at the beginning of your engagement. In case your photo comprises information about your health status, your racial or ethnic origin, political opinions or religion, your photo might be categorized as special category of personal data, including health data.
We process your data to the extent described below, for the purposes stated in each case and on the legal basis stated in each case. Processing may be based on several legal bases. If one of the legal bases no longer applies, e.g., because you withdraw your consent or object to the processing of personal data, the processing of your personal data may still be lawful in these cases because it is still based on another legal basis.
You are not obliged to provide us with your personal data. However, if you decide not to provide us with your data, or only to provide us with part of it, you will unfortunately not be able to (fully) use our services.
When you access our website, the following digital data is automatically transmitted to SPP for technical reasons: the time and date of your visit to the website, your IP address, the type and version of your browser and the time zone setting. This data is processed for technical reasons to provide our services and to ensure system security and stability. We also use your data to monitor the proper functioning of the website and information about its use, and to further develop it to ensure that content from the website is displayed as efficiently as possible for you and your device.
Our legitimate interest in carrying out the processing is the provision of the functionalities of our services, their proper implementation and system stability and security. The legal basis in this respect is Article 6 para 1 lit. f GDPR.
We offer you the opportunity to make use of our services, e.g., to take part in our events, to engage with us in our programs or as a volunteer and stay informed about our activities. When you use our services, we process the contact details you provide.
We collect this data in order to be able to provide you with our services. The processing takes place for the execution of the contract with you, Article 6 para 1 lit. b GDPR, and, if applicable, on the basis of your consent, Article 6 para 1 lit. a GDPR.
In course of your engagement as volunteer or in the SPP Champions Program, we process the personal data you share with us at the beginning of your engagement. We may publish your contact and business detail and your headshot photo on our website. Your headshot photo may contain information about your health status, your racial or ethnic origin, political opinions or religion. Therefore, your photo might be categorized as special category of personal data according to Article 9 para 1 GDPR.
We collect these data in course of our cooperation. The processing is carried out to fulfill the agreement with you, Article 6 para 1 lit. b GDPR, and, if applicable, based on your consent, Article 6 para 1 lit. a GDPR, Article 9 para 2 lit. a GDPR.
You have the option of registering on this website in order to have access to our engagement opportunities. We use the personal data you enter only for the purpose of using the respective offer or service for which you have registered. The information we request during registration must be entered in full. Otherwise, registration will not be possible.
In order to inform you about important changes to our services or in the event of technical changes, we will use the e-mail address you provided during registration.
We process the data entered during registration for the performance of the contract with you, Article 6 para 1 lit. b GDPR, and, where applicable, on the basis of your consent, Article 6 para 1 lit. a GDPR.
If you send us e-mail inquiries (e.g., about support matters or our services) or contact our support team by telephone, we will use the data you provide to receive and process your inquiry, Article 6 para 1 lit. b and lit. f GDPR.
We and/or our third party marketing partners may use your personal data you send to us for our marketing purposes, e.g. to inform you about our services or upcoming events. The legal basis in this respect is your consent in accordance with Article 6 para 1 lit. a GDPR.
In addition to your consent in accordance with Article 6 para 1 lit. a GDPR, legal basis is also our legitimate interest in addressing you personally in our marketing e-mails and ensuring the authenticity of the communication, Article 6 para 1 lit. f GDPR.
You can unsubscribe from our marketing e-mail list at any time by clicking on the unsubscribe link in the e-mails that we send or by contacting us using the details provided below. You will then be removed from the marketing e-mail list – however, we will still need to send you service-related e-mails that are necessary for the administration and use of your account. To otherwise opt-out, you may:
We process data about your use of our website and services, as well as your contact details if you have provided them as part of your support request, in order to improve our services. We may use your data for data analysis, identifying usage trends, determining the effectiveness of our campaigns and to evaluate our services, products, marketing and your experience. When we use your data for this purpose, we use it in aggregated or anonymized form (where possible).
The legal basis for the processing of personal data for this purpose is our legitimate interest in continuously improving our services, Article 6 para 1 lit. f GDPR.
Your personal data may also be used to prevent, deter or investigate misuse of our services or criminal offenses against us. Abuse includes, but is not limited to, fraud, sending spam, harassment and other actions that are prohibited by law.
The legal basis for the processing of personal data for this purpose is our legitimate interest in preventing and investigating the misuse of our services or criminal offenses against us and the fact that your interests, rights and freedoms, which require the protection of your personal data, do not prevail, Article 6 para 1 lit. f GDPR.
We also have to process your personal data if we are obliged to do so by law, by judgment or on the basis of official decisions.
The purpose of this processing of personal data is to ensure that we comply with our legal obligations. The legal basis for this is Article 6 para 1 lit. c GDPR.
Cookies are short pieces of information that the website stores on your end device. Cookies can be “persistent cookies” or “session cookies” from “first-party providers” or “third-party providers”. This website uses “cookies” to analyze the use of our website and to offer you the best possible user experience. Your web browser will notify you when you receive a cookie and let you decide whether or not to accept it.
Cookies that are strictly necessary for the proper functioning of this website or the services you have requested are always activated and do not require your consent. Other cookies are not strictly necessary and therefore require your consent. For these cookies (i.e. performance cookies), we ask for your consent (through the “Allow all cookies” button in our cookie banner or through our cookie settings or the cookie settings of your browser) before they are stored on your device.
If at any time you do not wish to give or withdraw your consent to non-essential cookies, you must change or delete your settings in the cookie settings and block or disable cookies via your browser settings. However, this may lead to functional restrictions or have a detrimental effect on the user-friendliness of our website.
We use the following categories of cookies when operating this website:
Strictly necessary cookies that are required for the website to function and cannot be switched off in our systems. These are usually stored in response to your actions that amount to a request for services, such as a setting in your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but if you do this some parts of the site will not work. These cookies do not store any identifiable personal data.
Performance cookies collect information about how visitors use a website, such as which pages visitors go to most often, how long they stay on the site, and whether they receive error messages from web pages. These cookies do not store any information that can identify you. All information collected by these cookies is anonymous and is only used to improve the operation of a website.
These are used to offer the website user needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 13 months.
These are used to improve the interactivity of our website with other services (e.g., social networks); sharing cookies are stored for a maximum of 13 months.
The legal basis for cookies that are strictly necessary to provide you with the expressly requested service is Article 6 para 1 lit. f GDPR, Section 25 para 2 sentence 2 TDDDG. Our legitimate interest lies in being able to provide you with information on the internet.
Any use of cookies that is not strictly technically necessary constitutes data processing that is only permitted with your express and active consent (Article 6 para 1 lit. a GDPR, Section 25 para 1 TDDDG). This applies, in particular, to the use of performance, advertising, targeting or sharing cookies. In addition, we will only pass on your personal data processed by cookies to third parties if you have given your express consent in accordance with Article 6 para 1 lit. a GDPR.
See our cookie policy for more infomration.
We use third-party services or software on our website, for example for advertising analysis. We may allow selected third parties to use tracking technology, which will enable them to collect data about how you interact with our services over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content and better understand online activity. These services may store cookies on your device.
For certain content on our website, we integrate content from third parties into our website (so-called plugins). The respective third parties are responsible for providing the plugins. The details of which plugin providers are involved will be displayed on our website in direct connection with the respective content.
We do not control third party websites, plug-ins and applications and are not responsible for their privacy statements and the data that they collect. We encourage you to read and be aware of the privacy policy and any other policies of any website you visit. Please note that this privacy policy applies solely to the information collected by SPP.
The legal basis for the data processing associated with the use of the web analysis service and plugins is your consent in accordance with Article 6 para 1 lit. a GDPR and Section 25 para 1 TDDDG.
Your personal data will not be disclosed to unspecified recipients. We will only disclose your personal data to third party recipients to the extent necessary to pursue our legitimate business objectives and as required by applicable law. Your personal data will only be disclosed in accordance with applicable laws and appropriate safeguards will be implemented through contractual agreements to protect your personal data. We only share your data to a limited extent with the following categories of recipients:
In connection with the use of data processors, your personal data may be transferred to third countries outside the European Economic Area. The same applies if you activate plugins on our website.
We will ensure that data processors or third-party providers are established in a country with an adequate level of data protection or provide appropriate safeguards to protect your personal data (especially in the case of transfers to the United States). If your personal data is transferred to a third country for which no adequacy decision has been issued by the European Commission, we will implement appropriate data transfer mechanisms (such as the EU standard contractual clauses) or other officially authorized data transfer mechanisms for cross-border data transfers to ensure an adequate level of data protection.
If, in addition, a data transfer to third countries is necessary in individual cases (e.g. because you live outside the European Economic Area or maintain your e-mail account with a provider outside the European Economic Area), this will only take place in the cases provided for in Article 49 GDPR.
We do not knowingly collect data from or market to children under 18 years of age. If you become aware of any data we have collected from children under age 18, please contact us at ambassador@spp.earth.
We keep your information for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
This section describes your rights as a user of our website and services. You can assert these rights at any time by contacting us, e.g., by e-mail at ambassador@spp.earth.
Under applicable law and subject to any legal restrictions, you may have the right to request the following from us:
You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the legitimacy of the processing carried out on the basis of the consent until the withdrawal, Article 7 para 3 GDPR.
You have the right to obtain information from us at any time upon request about the personal data relating to you that we process within the scope of Article 15 GDPR. To assert your aforementioned right, please contact us at the address given above. The information will then be provided in the form of an extract stating which personal data we process, the purposes for which we process the data, where the data comes from, to which third parties the data has been transferred and how long the data will be stored.
You have the right to request that we rectify your personal data without undue delay if it is incorrect. To do so, please contact us at the contact address given above, Article 16 GDPR.
You have the right to obtain from us the erasure of your personal data under the conditions described in Article 17 GDPR. In particular, these conditions provide for a right to erasure if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erase under Union law or the law of the Member State to which we are subject. To assert your aforementioned right, please contact us at the address given above.
You have the right to obtain from us restriction of processing in accordance with Article 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between you and us, for the period required to verify the accuracy, as well as if you request restricted processing instead of deletion in the case of an existing right to deletion; furthermore, in the event that the data is no longer required for the purposes pursued by us, but you need it for the assertion, exercise or defense of legal claims and if the successful exercise of an objection between us and you is still disputed. To exercise your above right, please contact us at the address given above.
In accordance with Article 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data relating to you which is based, inter alia, on Article 6 para 1 lit. e or lit. f GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate interests for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
You also have the same right in the case of direct advertising, without the need for special reasons. In this case, we will cease processing your personal data for direct marketing in any case upon your objection.
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format in accordance with Article 20 GDPR. To assert your above right, please contact us at the address given above.
If you have any questions or complaints about the processing of your personal data, you can contact us at any time. You also have the right to lodge a complaint with the competent supervisory authority, Article 77 GDPR. You can find the respective contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
If you are a resident of California, you are granted specific rights regarding access to your personal information. California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please contact us at ambassador@spp.earth.
If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below, and include the e-mail address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from our systems.
We may need to update or amend this privacy policy from time to time. If the changes are significant, we will inform you in an appropriate manner and ask you to take note of the changes made. The latest version of this privacy policy is always available on our website.
SPP is registered as a gGmbH, a non-profit company with limited liability.
Sustainable Procurement Pledge gGmbH
Kittelbachstr. 61
40489 Düsseldorf, Germany
Tax number: 105/5891/3141
SPP is registered as a gGmbH, a non-profit company with limited liability.
Sustainable Procurement Pledge gGmbH
Kittelbachstr. 61
40489 Düsseldorf, Germany
Tax number: 105/5891/3141
