1. Controller
The controller responsible for the processing of personal data is:
SP Services GmbH
Kanalstraße 2
63785 Obernburg a. Main
Germany
Phone: +49 6022 6520336
Email: datenschutz@sp-services-gmbh.de
2. Website operation and server logs
Our website and email communication using our domain are operated through ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
When the website is accessed, technically required connection and server log data is processed, in particular IP address, time of access, requested resource, referrer, browser and operating system information and status and transfer data.
Processing is carried out to provide the website securely and reliably and to detect and prevent technical attacks on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the secure operation of our website and technical systems.
ALL-INKL.COM processes data in this context as a processor.
3. Contact
If you contact us by email, telephone or through another communication channel provided by us, we process the data you provide in order to handle your enquiry and communicate with you.
Depending on the content of the enquiry, processing is based on Article 6(1)(b) GDPR for pre-contractual measures or an existing contract or on Article 6(1)(f) GDPR. Our legitimate interest is the handling of enquiries addressed to us.
When WeChat is used, personal data is additionally processed by the relevant WeChat/Tencent service. Processing outside the European Union or European Economic Area may occur. The privacy information of the relevant provider applies additionally to this processing.
4. Digital products and CopeCart
Digital products may be offered at shop.sp-services-gmbh.de, shop.ki-praxispilot.de and on other product or offer pages operated by us. Purchases are processed through the external CopeCart ordering platform. CopeCart GmbH acts as reseller and contractual partner of the end customer. CopeCart's privacy policy applies to the checkout.
4.1 Practice Kit orders
For Practice Kit orders, CopeCart provides SP Services GmbH with order, product and customer data.
This includes:
- order ID;
- product name;
- status or payment status;
- amount;
- affiliate information where applicable;
- company name;
- first and last name;
- email address;
- country;
- city;
- address;
- postal code.
The source of this data is CopeCart GmbH.
We process this data for allocation and documentation of the order, product-related delivery and required support and to comply with statutory obligations.
4.2 Academy purchases
For Academy purchases, CopeCart transmits the buyer, product, order and transaction data required to activate and manage purchased access to the SP Provisioning Gateway.
This includes in particular:
- email address;
- CopeCart buyer identifier;
- product identifier;
- order identifier;
- event type;
- for payment events, the transaction identifier.
Depending on the CopeCart event, first and last name, payment status, payment method or payment plan, amount, currency and instalment, subscription or cancellation information may also be processed.
The source of this data is CopeCart GmbH.
Only the data required for the user account and course access is forwarded to Moodle:
- first name;
- last name;
- email address;
- internal technical identifiers;
- language;
- user and course assignment;
- participant role;
- access start;
- access end;
- blocking status where applicable.
CopeCart order ID, CopeCart transaction ID, amount, currency, payment method, payment plan and instalment, subscription and cancellation information are not transferred to Moodle.
Where SP Services GmbH processes personal data solely on behalf of CopeCart to fulfil a contract concluded between CopeCart and the end customer, processing is carried out under a data processing arrangement pursuant to Article 28 GDPR.
Where SP Services GmbH processes data to comply with its own statutory obligations, the legal basis is Article 6(1)(c) GDPR. For the security and administration of our own systems, the legal basis is Article 6(1)(f) GDPR.
Customer data received from CopeCart is not used for direct marketing without a separate lawful basis.
5. SP Services Academy
At academy.sp-services-gmbh.de we provide activated digital learning and practice offers.
For the user account and course access, Moodle processes the data required for these purposes, in particular first name, last name, email address, internal technical identifiers, language, user and course assignment, participant role, access start, access end and blocking status where applicable.
Technically required login, session and server log data is also processed when operating the Academy. Technically necessary cookies or comparable storage mechanisms are used for login and session management.
When practice functions are used, Moodle processes the inputs technically required for the relevant function. This processing serves to provide the practice function requested by the user.
The Academy is operated on infrastructure provided by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. ALL-INKL.COM processes data in this context as a processor.
Where access purchased through CopeCart is provided on behalf of CopeCart, Article 28 GDPR applies. Where SP Services GmbH administers and secures the Academy systems under its own responsibility, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and proper operation of the Academy.
6. Retention
Personal data is retained only for as long as required for the relevant processing purpose or where statutory retention obligations apply.
Server log data is retained only for as long as required for technical operation and security.
Contact and communication data is retained for the duration of handling the enquiry and, where a contractual or project relationship follows, in accordance with the applicable statutory retention periods.
Order and product-related data is retained for the duration of processing and afterwards in accordance with applicable statutory retention and documentation obligations.
Academy account and access data is retained for the period of the relevant access entitlement and afterwards only for as long as required for technical processing, support, security or statutory obligations.
7. Your rights
Subject to the statutory requirements, you have the right to:
- access your personal data;
- rectification of inaccurate data;
- erasure;
- restriction of processing;
- data portability;
- object to processing based on Article 6(1)(f) GDPR.
To exercise your rights, contact:
datenschutz@sp-services-gmbh.de
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
For private companies based in Bavaria, the competent authority is generally:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 981 180093-0
Website: https://www.lda.bayern.de/
Version: September 2026