Privacy Policy

1. Data controller

The controller responsible for processing personal data on this website is:

2. Contact details

Email: hello@spinoff-media.com
Telephone: [Telephone number]

3. General information on data processing

Personal data is processed only where necessary to operate the website securely, respond to enquiries, take steps prior to entering into a contract, or comply with legal obligations. The legal bases include Article 6(1)(b), (c) and (f) GDPR and, where consent is requested, Article 6(1)(a) GDPR.

4. Hosting and server log data

When you access this website, the hosting provider may process technically necessary data in server log files. This may include your IP address, date and time of access, requested page or file, referrer URL, browser type, operating system and access status. Processing is carried out to provide, stabilise and secure the website on the basis of legitimate interests under Article 6(1)(f) GDPR.

Hosting provider: [Enter name, address and country of the hosting provider]
Server-log retention period: [Enter the period or confirm it with the hosting provider]

5. Contact form and enquiries

When you contact us by form or email, we process the information you provide, particularly your name, email address, company where applicable, and the content of your message. Processing is necessary to handle your enquiry and communicate with you. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries and otherwise Article 6(1)(f) GDPR.

The data is deleted once the enquiry has been fully resolved, unless statutory retention duties or legitimate grounds require further storage.

Technical delivery of contact-form messages: [local server mail / enter email service provider]

Where the form includes a privacy checkbox, it confirms that the Privacy Policy has been acknowledged. It does not replace consent where processing is already necessary to respond to the enquiry.

6. Cookies and similar technologies

At present, this website does not use analytics, advertising or tracking cookies. Strictly necessary cookies may be used where required for essential website functions or security. If consent-based cookies or services are added in the future, they will be activated only after consent has been obtained.

7. Language preference in Local Storage

Your selected website language may be stored locally in your browser using the Local Storage entry spinoff-language. This information is generally not transmitted to us automatically and is used solely to restore your language preference on a later visit. You may remove the entry at any time through your browser settings.

8. Fonts and external content

[Select the applicable wording:] If fonts are hosted locally on the website server, no connection to an external font provider is made for this purpose. If Google Fonts or other external content is loaded directly from third-party servers, your IP address may be transmitted to the respective provider. For a privacy-friendly setup, fonts should preferably be hosted locally.

9. Encrypted transmission

This website should use TLS/SSL encryption. An encrypted connection can generally be recognised by “https://” in your browser’s address bar.

10. Recipients and processors

Personal data is shared with service providers only where necessary for hosting, technical maintenance, email communication or responding to your enquiry. Where required by law, data-processing agreements are concluded with these providers.

11. International data transfers

Personal data is transferred outside the European Economic Area only where a lawful basis and appropriate safeguards are in place. [Please review and complete this section if providers located, or operating servers, outside the EEA are used.]

12. Retention periods

Personal data is retained only for as long as necessary for the relevant purpose or as required by statutory retention obligations. It is then deleted or anonymised.

13. Your rights

• Access to your personal data
• Rectification of inaccurate data
• Erasure, unless legal grounds require continued storage
• Restriction of processing
• Data portability, where applicable
• Objection to processing based on legitimate interests
• Withdrawal of consent with effect for the future

14. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority. In Croatia, the competent authority is the Croatian Personal Data Protection Agency (AZOP).

15. Data security

Appropriate technical and organisational measures are used to protect personal data against loss, misuse, unauthorised access and unauthorised alteration.

16. Updates to this Privacy Policy

This Privacy Policy may be updated where the website, services used or legal requirements change.