Obligation to inform data subjects


Sump & Stammer GmbH realizes the importance of protecting personal data.

We process your personal data in accordance with the applicable statutory data protection requirements for the purposes listed below.

Personal data, in the context of the data protection information presented here, includes all data with reference to your person. This covers, in particular, contractual data including your contact data, your settlement data, plus details on communication with you (“personal data”).

Information on the controller

The following party is responsible as controller for processing your personal data:

Sump & Stammer GmbH

International Food Supply
Afrikastraße 1
20457 Hamburg – Germany
Phone +49 40 78 09 48 0
Fax +49 40 78 09 48 20

Information for Applicants and Employees

Information on data processing
Before joining our company, your personal data shall be processed by us exclusively for the purpose of establishing a contractual relationship to the extent necessary.
During the period of your employment and beyond, we shall process your personal data in order to execute and/or end the contractual relationship.
After the respective purpose has been fulfilled, your data shall be deleted under observance of the statutory periods of retention, usually 6/10 years or 30 years and more with respect to different data categories such as occupational pension scheme.

Legal basis for processing
The legal basis for processing your personal data includes in particular:

  1. 6 (1)(a) on the basis of consent given by you whereby, in principle, none is required in order to conclude a contract or proceed with an existing contract,
  2. 6 (1)(b) to establish, execute and end a contractual relationship,
  3. 6 (1)(c) to fulfil a legal obligation,
  4. 6 (1)(f) to preserve a legitimate interest

Our legitimate interests in this regard include e.g. the:

  • Implementation of electronic access controls,
  • Optimisation of personnel planning,
  • Safeguarding of compliance with safety regulations, requirements, industry standards and contractual obligations,
  • Establishment, exercise or defence of legal claims,
  • Avoidance of prejudice and/or liability of the company through corresponding measures.

Data collected by third parties
We use the ELSTAM procedure to collect data for payroll, provided to us by financial administration, to ensure correct settlement processes.
This affects the data for payroll accounting specified below in particular.

Types of data processed by us
The following personal data is processed:

  • Applicant data; name, date of birth, CV, nationality/work permit, etc. for selection and recruitment procedures, onboarding and offboarding management;
  • Private contact data; address, telephone number, email (for the purpose of making contact);
  • Business contact details;g. telephone number, email, place of work, job title, photo (if applicable);
  • Identification/payment details; identity card details, place of birth, civil status, tax ID number, health insurance membership, income tax bracket, allowances, denomination for church tax, account number (for the purpose of payroll accounting and for the fulfilment of social insurance, tax and statutory obligations);
  • Health data, e.g. in the context of payroll accounting, for the purpose of settling accounts with health insurance funds or professional associations or in the context of statutory obligations as an employer, such as e.g. operational integration management or fulfilment of duties in the protection of the severely handicapped or in the context of operational self-regulation, such as e.g. occupational safety or occupational investigations;
  • Time recording and access data, vacation time, working time accounts, shift plans (if applicable), closing times or access protocols, etc.;
  • Data in the context of staff screening (e.g. clearance certificate, reliability check);
  • Data for suitability and performance/behavioural monitoring; information on training and further education, data for the purpose of measuring goal attainment, e.g. for variable salary components;
  • Other data in personnel management: ownership of driving licence, attachment of salary

Recipient categories

  • Banking service providers, (if applicable) service providers for calculating pension provisions
  • Service providers for settling remuneration (tax consultants), auditors
  • Sickness insurance organisations, social insurance agencies, accident insurance institutions, other insurance companies
  • Authorities such as e.g. financial authorities, social security funds, employment agencies, (if applicable) security, health and other authorities
  • Company medical services
  • Legally affiliated companies (group companies) with joint controllership:
    the important contents of task regulation in relation to the rights of those affected can be requested at the address below,
    pursuant to Art. 26(3) of the GDPR, however, these rights can be claimed by affected parties in all companies involved.
  • Business partners and customers (business contact details)

We do not use the personal data provided by you to make automated decisions relevant to you.

The servers for the Human Resources Management system as wess as for Payroll are operated by the Tansgourmet Group.
This has submitted to contractually corresponding guarantees for the security of your data and the fulfillment of your rights as data subject.
You can read or obtain a copy of the relevant aspects of this contract in the HR department. 

Information for social media users

This website uses plugins which are provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”) which can be identified by the LinkedIn logo of the “Share”-Button. If you access a page on our website that includes this plugin, your browser sets up a direct connection to LinkedIn’s servers. Thereby LinkedIn receives the information that you and your IP address have accessed this website. If you click on the LinkedIn „Share“-Button while you are logged into you LinkedIn account, you can link the content of this website on your LinkedIn-Profile which enables LinkedIn to allocate the visit to our website to your LinkedIn account. We as the website operator do not know the content of the data transferred to LinkedIn or how LinkedIn uses such data. For information on the purpose and extent of data collection, the further processing and use of such data by LinkedIn, as well as your rights in this regard and your setting options for the protection of your privacy, please refer to LinkedIn’s privacy policy:

Our web site uses the social plug-in of the social network Xing, operated by Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany (“Xing”). When you visit a web page that contains such a button, the browser establishes a direct connection to Twitter’s servers. The contents of the Xing plug-in is transmitted by Xing directly its browser, which will embed the latter into the website. Therefore, Hamburg Marketing GmbH has no influence on the amount of data that Xing collects via the plug-in. According to Xing, personal data will not be collected when not clicking the button. Only with members logged in, such data, including the IP address, will be collected and stored.

Information for Website Users

With this privacy policy we would like to inform you about our collection and use of personal data on our website .

Personal data and its use
Personal data includes information such as e.g. your name and your email-address. We only collect personal data that you provided to us, e.g. by contacting us or submitting an order, and only to the extent necessary for its purpose. If we commission third parties to provide certain services for us, such third parties will only have limited access to personal data insofar as this is necessary to provide such services.

Cookies are small files that enable us to store information related to you, the user, on your personal computer or other terminal device while you visit our website and use our services. For example, cookies help us to ascertain the frequency of use and the number of our website’s visitors in order to design our offers and services as comfortable, efficient and interesting for you as possible. In your browser settings you can deactivate the storage of cookies, restrict the storage of cookies to defined websites or you can set the browser to inform you as soon as a cookie will be placed. You can also delete cookies from your hard drive at any time. However, please note that the use of certain services may not be possible if your browser does not allow session cookies. While visiting our website, third-party providers may also store cookies on your computer or other terminal device. You have the option to not accept such cookies by deactivating the acceptance of third-party cookies in your browser settings.

Cookie preferences

Contact possibility via the website
The website of Sump & Stammer GmbH contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.

Google Analytics
In order to optimize this website, we use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how you use this website. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. If the IP anonymization is activated on this website, your IP address will previously be truncated by Google within the EU member states or EEA member states. Only in exceptional cases will the IP address be transferred to Google on a server in the United States and thereafter be truncated. On behalf of the website operator, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The IP address that was transmitted by your browser will not be combined by Google with any other data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You may also prevent the collection of the data that was generated by the cookie and that is related to the use of the website (including your IP address) as well as its processing by Google by downloading and installing a browser plugin that is available under the following link:
As an alternative to the browser plugin or for browsers on mobile devices, please click this link in order to prevent the collection of data that is related to the use of this website by Google Analytics (this opt-out only works for this browser and this domain). An opt-out cookie will then be placed on your device. If you delete the cookies in this browser, you need to click this link again.
Additional information thereto is available at and (general information on Google Analytics and privacy). This website uses Google Analytics with its extension code “gat._anonymizeIp()“ so that IP addresses will therefore only be processed in an anonymized form.

Google Maps
This website uses the Google Maps API in order to display maps and to create route maps. Google Maps is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you use Google Maps, information on your use of this website (including your IP address) may be transferred to and stored on Google’s servers in the USA. Additional information on how Google processes data is available in Google’s privacy policy:
You can also deactivate Google Maps and thereby prevent the transfer of data to Google by deactivating JavaScript in your browser. Please note that you cannot use the display of maps in this case.

You are entitled to obtain information about your personal data that we have stored at any time and without giving reasons. You are also entitled to revoke any consent previously given with effect for the future at any time. You can address the revocation and any request for information via mail to the following address:
Sump & Stammer GmbH – International Food Supply, Beim Schröderschen Hof 3, 21109 Hamburg, Germany
or via email to at any time.

Information on Customers and other data subjects

Information on data processing
If you are a customer and/or an interested party, we primarily process your personal data for the establishment and fulfilment of a contractual relationship concluded with you.

Purposes of data processing
Furthermore, we process your personal data in order to achieve the following purposes:

  • Fulfilment of contracts
  • Solicitation of existing customers, usage as a selection criterion for direct marketing in order to be able to offer you a individually tailored services
  • Dealer support
  • Credit check
  • Management of our supplier relationships
  • Customer service
  • Quality management
  • Improvement and development of intelligent and innovative services
  • Customer analysis for market and opinion research
  • Handling our logistics/materials management

Furthermore, we process your data only with your express declaration of consent.

Legal basis for processing
We process the following personal data in particular:

  1. 6 (1)(a) on the basis of consent given by you whereby, in principle, none is required in order to conclude a contract or proceed with an existing contract
  2. 6 (1)(b) to establish, execute and end a contractual relationship,
  3. 6 (1)(c) to fulfil a legal obligation,
  4. 6 (1)(f) to preserve a legitimate interest

Here, our legitimate interests include the achievement of the purposes specified above and in addition to that, for example, the:

  • Appreciation of our business interest, including that of direct marketing
  • Safeguarding of compliance with safety regulations, requirements, industry standards and contractual obligations,
  • Establishment, exercise or defence of legal claims,
  • Avoidance of prejudice and/or liability of the company through corresponding measures

Data collected by third parties
Data may be provided to us by third parties, e.g. in the form of recommendations. In such cases, this is usually contact information plus details relating to specific product or service requirements.

Types of data processed by us
The following personal data is processed:

  • Private contact details; name, address, telephone number
  • Business contact details; telephone number, email, contact persons, place of work, job title, photo (if applicable)
  • Identification/payment details; account number, VAT no.
  • Ordering data: Volume, sales, intervals
  • Geodata: Addresses, delivery conditions
  • Business information: Industry

Recipient categories

  • Banking service providers
  • Logistics companies
  • Print service providers
  • Call centres
  • Specialist craft companies
  • Service Providers
  • Authorities such as e.g. financial authorities
  • Business partners and customers (business contact details)

In the event of a customer analysis, your data shall be processed anonymously or if anonymous processing is no longer possible or practical on objective grounds, this shall be done in pseudonymised form.

Information on your rights

You have the right

  • to request confirmation from us as to whether your personal information is being processed;
    if this is the case, you are entitled to obtain details about this personal data; you may also receive the information specified in Art. 15 of the GDPR.
  • to request that we correct your data if it is deemed to be incorrect, inapplicable and/or incomplete. Such rectification of data also covers duties of completion through explanation or notification.
  • to request that we delete personal data relevant to you without delay
    if one of the reasons specified in Art. 17 of the GDPR applies.
    Unfortunately, we may not delete data that is subject to a legal retention period.
    If you would prefer that we never collect data from you or never contact you again in the future, we shall store such relevant contact details in a blacklist.
  • to revoke any consent given by you with future effect and without any negative consequences for you.
  • to request from us that processing be restricted if one of the prerequisites listed in Art. 18 of the GDPR is provided.
  • to object at any time to the processing of personal data relevant to you on grounds relating to your particular situation.
    We shall no longer process personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds to do so, which override your interests, rights and freedoms,
    or such processing is required for the establishment, exercise or defence of legal claims (Art. 21 of the GDPR).
  • to request that the data relevant to you be issued in a commonly used electronic and machine-readable format. This also covers the issuance (if possible) to another responsible party specified by you directly. (Art. 20 of the GDPR)
  • without prejudice to another administrative or judicial remedy and if you believe that
    the processing of your personal data is in breach of the GDPR, to file a complaint with

    • our data protection officer: or by post (see information on the controller )
    • to assert claims vis-à-vis the supervisory authority in the member state of your place of stay, your place of work or the location where the alleged violation took place.
      The following supervisory authority is responsible for us: ______________

If you have any questions or comments on data protection (for example, with regard to information about/updating your personal data), please send them to the following email address or by post (see information on the controller) using the keywords “Data Protection”.


Changes to this Privacy Policy

We reserve the right to change or update this Privacy Policy at any time in accordance with the applicable data protection regulations. This Privacy Policy as amended from time to time and is available on our website.