Privacy Policy

Spirala Izvrsnosti d.o.o., OIB: 17841809416, with its business unit in Zagreb, Nežićeva Street 2C, as the data controller of your personal data, uses and protects all information that users provide when using the website https://spiralaizvrsnosti.hr and other services, particularly regarding personal data processing in the provision of its services.

What is Personal Data?

Personal data is any information related to a specific individual or an individual who can be identified. Specifically, personal data includes any information used to establish a user’s identity (e.g., full name, email address, etc.).

Personal data processing refers to any action or set of actions performed on personal data, whether by automated means or not, such as collection, recording, organization, storage, adaptation or modification, retrieval, access, use, disclosure by transmission, publication, or otherwise making it available, classification or combination, blocking, deletion, or destruction, as well as conducting logical, mathematical, and other operations on that data.

How Do We Collect Personal Data?

Spirala Izvrsnosti d.o.o. collects your personal data in the following cases, among others:

• If you contact us directly through any Spirala Izvrsnosti d.o.o. website or social network to request information or an offer for our services via our contact form.
• If you purchase a service directly from us.
• If you respond to our direct marketing campaigns, such as filling out a contact form on our website.
• If you are under 16 years old, please do not provide any personal data without parental or guardian consent.

For internal purposes, Spirala Izvrsnosti d.o.o. uses additional software solutions to optimize advertising investments and revenue attribution. Through this software, we collect, store, and further process certain personal data you provide while visiting our website and using the available tools (e.g., the inquiry form). Specifically, the following personal data is collected: name, phone number, and email address.

The data processor handles personal data processing as instructed by Spirala Izvrsnosti d.o.o., in accordance with all applicable laws. We guarantee that your personal data will be treated as strictly confidential and will be protected with adequate security measures. Neither we nor the data processor will transfer your data to third parties. While the software solution is connected to analytical tools (e.g., Google Analytics), these tools do not receive your personal or identifiable data—only data related to transaction amounts and the type of service involved.

How Can Your Data Be Used?

The use of personal data in accordance with data protection regulations must be justified based on a legal basis. Spirala Izvrsnosti d.o.o. determines the legal basis for each type of personal data processing.

Legitimate bases for data processing include:

• Legitimate interest (e.g., promoting and providing information about our services).
• Contractual obligation (e.g., processing service-related data).
• Legal requirement (e.g., compliance with laws and regulations).
• Consent (e.g., when you explicitly agree to data processing).

For legitimate interest, Spirala Izvrsnosti d.o.o. processes personal data to maintain high standards in offering its services. This includes collecting contact details, service history, warranty details, and technical support requests for customers using our services.

How Do We Protect Your Data?

We implement various security measures to protect and maintain the security, integrity, and availability of your data.

These include:

• Strictly restricted personal access to your data based on the “need-to-know” principle.
• Secure transmission of collected data.
• Continuous monitoring of IT systems to detect and prevent data breaches.

All your data is stored on secure servers and accessed in accordance with our security rules and standards. We ensure long-term privacy protection and take all necessary measures to safeguard your personal data against unauthorized processing or loss.

Your Consent

By registering or filling out a contact form on https://spiralaizvrsnosti.hr, you give explicit consent for us to process your personal data for a specific purpose.

We are committed to protecting your personal data in compliance with:

• General Data Protection Regulation (GDPR 679/2016 EU)
• Croatian Data Protection Act (NN 42/2018)
• Other applicable regulations

We do not and will not misuse your personal data or share it with third parties without your explicit consent, except when legally required or necessary to fulfill contractual obligations.

Who Has Access to Your Data?

All user data is strictly protected and available only to employees who need it to perform their job. All employees of Spirala Izvrsnosti d.o.o. and business partners are responsible for adhering to data privacy principles.

Automatically collected data (e.g., IP address, browser type, visit frequency, time spent on the website) is used only for website traffic analysis and content improvement, not for personal identification.

We are committed to:

• Collecting only necessary data for a legitimate purpose.
• Not sharing data without prior consent.
• Not transferring data to non-EU countries unless they provide adequate data protection.
• Ensuring secure data storage and processing.
• Allowing data processing only for the required period and purpose.
• Implementing appropriate security measures to prevent unauthorized access or data loss.

If you no longer wish for your data to be processed, or if you want your data deleted, corrected, or transferred, please contact us via email at info@spiralaizvrsnosti.hr or phone at +385 91 6008 922.

Spirala Izvrsnosti d.o.o. may contact users to verify the authenticity of data deletion requests.

How Long Do We Store Your Data?

Your personal data is stored for as long as communication remains open for establishing business cooperation, as well as throughout the duration of our contractual relationship. Afterward, data is deleted unless we are legally required to retain it for a longer period.

Unnecessary personal data is either permanently anonymized or securely destroyed.

Your Rights

As an individual, you can request Spirala Izvrsnosti d.o.o. to:

• Provide access to stored personal data.
• Confirm whether we process your data and allow you to review and copy it.
• Transfer your personal data if required.
• List third parties with whom your data has been shared.
• Explain the purpose and method of data processing.
• Clarify automated decision-making processes, if applicable.

If you have any complaints regarding how Spirala Izvrsnosti d.o.o. processes your data, you may file a complaint with the relevant national data protection authority, in accordance with GDPR and Croatian data protection laws.

You are free to contact us via email to request the removal of your personal data from our database. We are obligated to delete all your personal data within 15 days of receiving your request and will notify you once the process is complete.

We emphasize that providing personal data on Spirala Izvrsnosti d.o.o. websites is entirely voluntary, without any form of coercion.