Data Protection Policy | Spika Solutions
Talk to Spika

Explore Spika

Talk to Spika

Data Protection

Legal information from Spika Group d.o.o.

Last Updated: 16.06.2025

Introduction

Spika Group d.o.o., doing business as Spika Solutions, is committed to

  • providing a superior business experience for everyone we work with. To
  • ensure we maintain high-quality standards and comply with data

protection laws, we gather and process personal information responsibly.

  • This policy explains how we collect, handle, and store personal data in
  • accordance with the EU General Data Protection Regulation (GDPR) and the

Data Protection Act 2018.

Why This Policy Exists

This policy ensures that Spika Solutions:

  • Complies with data protection law and follows best practices
  • Protects the rights of customers, affiliates, employees, and partners
  • Is transparent about how data is collected and used
  • Protects itself from the risk of a data breach

1. Policy Statement

  • Spika Solutions receives, uses, and stores personal data daily. We
  • handle such data lawfully and in line with applicable regulations. We

take these responsibilities seriously to uphold the trust placed in us.

2. About This Policy

  • This policy outlines how we collect and process personal data. It is not

part of any employment contract and may be amended.

Responsibility for compliance lies with the company as a whole.

  • Questions should be directed to our Data Protection Officer at

[email protected].

3. What Is Personal Data?

  • Personal data refers to any information relating to an identifiable

person, including name, address, contact information, and more.

  • Processing includes obtaining, storing, amending, using, sharing, or

deleting data.

  • Sensitive personal data includes IP addresses, session activity,

location data, etc., and must be handled under strict conditions.

4. Data Protection Principles

We follow these key GDPR principles:

  • Process data lawfully, fairly, and transparently
  • Collect only for specific, lawful purposes
  • Ensure relevance and minimize collection
  • Keep data accurate and updated
  • Retain only as long as needed
  • Process securely and respect data subject rights
  • Avoid international transfers without safeguards

5. Fair and Lawful Processing

We process personal data under lawful bases such as:

  • Consent
  • Contractual necessity
  • Legal obligation
  • Legitimate interest

Collection of Information

We collect:

  • Information you provide: name, address, contact details, payment info,

etc.

  • Automatically collected data: device IDs, IP address, browser type,

session activity, cookies, etc.

Use of Information

We use data to:

  • Provide and personalize our services
  • Communicate with users
  • Analyze usage for improvements
  • Manage billing and account activity

6. Processing for Limited Purposes

  • Data is collected for specific purposes and may include inputs from

business partners and systems integrations.

7. Notifying Individuals

When we collect data, we inform individuals of:

  • Purpose and legal basis
  • Third-party disclosures
  • International transfers
  • Retention period
  • Rights of access, correction, and erasure
  • How to withdraw consent
  • Right to file a complaint

8. Adequate, Relevant, and Non-Excessive Processing

We collect only the data necessary for intended purposes.

9. Accurate Data

We ensure data is accurate and kept up to date.

10. Timely Processing

We delete or anonymize data when it is no longer needed.

11. Rights of Data Subjects

Individuals have the right to:

  • Confirm whether data is processed
  • Access personal data
  • Rectify or erase data
  • Restrict or object to processing
  • Data portability
  • Avoid automated decision-making

12. Data Security

Security measures include:

  • Access control and monitoring
  • Encryption and pseudonymisation
  • Secure disposal of digital and physical media
  • Confidentiality agreements

13. International Transfers

We may transfer data outside the EEA under one of the following:

  • Adequacy decisions
  • Informed consent
  • Contractual necessity
  • Legal obligation
  • Approved safeguards (e.g., Standard Contractual Clauses)

14. Disclosure and Sharing

  • We may share data within our group or with approved processors and

partners.

15. Subject Access Requests

  • Individuals may request access to data by contacting us. Identity

verification may be required.

16. Changes to This Policy

  • We may update this policy and will notify users of significant changes

through email or the Services.

Contact Information

Spika Group d.o.o.

Ulica Gračansko borje 5C

10000 Zagreb, Croatia

Email: [email protected]