Privacy Policy

Controller

The controller responsible for processing personal data through this website is:

Controller

Spasar e.U., proprietor Mihai Veliche

Address

Schönbrunner Straße 102/42
1050 Vienna
Austria

Email and data-protection contact

hello@spasar.com

Spasar e.U. has not appointed a data protection officer. Data-protection enquiries may be sent to the email address above.

Website access and server logs

When you access this website, technical information may be processed automatically to deliver the requested content and protect the website against errors, attacks and misuse.

This information may include:

• your IP address;
• the date and time of access;
• the requested page or resource;
• the referring page, if transmitted;
• the response status and transferred data volume; and
• browser, operating-system and device information.

Purposes: delivery of the website, maintenance of technical functionality, operational security, error diagnosis and prevention of misuse.

Legal basis: Article 6(1)(f) GDPR. Spasar e.U. has a legitimate interest in providing a reliable and secure website.

Retention: Server-log information is retained for no longer than 14 days unless a longer period is necessary to investigate a security incident, prevent misuse or establish, exercise or defend legal claims.

Contact and project enquiries

If you contact Spasar e.U. by email or through the contact form, the information you provide will be processed. This may include your name, company, email address, telephone number and the contents of your enquiry.

Purposes: reviewing and responding to your enquiry, arranging a discussion, preparing a proposal and, where applicable, taking steps before entering into a contract.

Legal basis: Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract. For general business communications, processing is based on the legitimate interests of Spasar e.U. in answering and managing enquiries under Article 6(1)(f) GDPR.

Retention: Enquiries that do not result in a business relationship are normally deleted no later than six months after the enquiry has been conclusively resolved. Information may be retained longer where necessary to establish, exercise or defend legal claims.

If an enquiry results in a contract, relevant information may be transferred to the corresponding customer, contractual and accounting records. Records subject to statutory Austrian accounting or tax-retention obligations are generally retained for seven years and may be retained longer where required in connection with pending proceedings.

Fields identified as required must be completed so that the enquiry can be processed. If the required information is not provided, Spasar e.U. may be unable to respond.

Please do not include confidential, export-controlled, security-sensitive or customer-proprietary information in an initial enquiry.

Cookies and tracking

This website does not use analytics services, advertising trackers or non-essential marketing cookies.

The contact form uses a short-lived, first-party session cookie to generate and validate a security token and limit automated misuse. The cookie is technically necessary for the secure operation of the contact form and expires when the browser session ends.

The legal basis for processing required to operate and secure the contact form is Article 6(1)(f) GDPR. Access to information that is strictly necessary to provide the requested website functionality does not require separate cookie consent.

No cookie-consent banner is displayed because no non-essential cookies or comparable tracking technologies are currently used. This must be reassessed before adding analytics, advertising, embedded third-party content or other optional services.

Recipients and international transfers

Personal data may be disclosed to service providers acting on behalf of Spasar e.U. where this is necessary to operate the website, deliver email or handle an enquiry.

The relevant categories of recipients are:

• the website hosting and infrastructure provider;
• the email hosting or delivery provider; and
• technical service providers used to maintain and secure the website.

Service providers that process personal data on behalf of Spasar e.U. are required to process it only in accordance with documented instructions and applicable data-protection law.

If personal data is transferred outside the European Economic Area, Spasar e.U. will ensure that an applicable transfer mechanism is in place, such as an adequacy decision or the European Commission’s standard contractual clauses, together with supplementary safeguards where necessary.

Spasar e.U. does not sell contact information or use it for unrelated advertising.

Automated decision-making

Personal data collected through this website is not used for automated decision-making or profiling within the meaning of Article 22 GDPR.

Your data-protection rights

Subject to the applicable legal conditions and limitations, you have the right to:

• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of your personal data;
• request restriction of processing;
• receive certain personal data in a structured, commonly used and machine-readable format;
• object to processing based on legitimate interests;
• withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing; and
• lodge a complaint with a competent data-protection supervisory authority.

Requests may be sent to hello@spasar.com . Additional information may be requested where reasonably necessary to verify the identity of the requester.

Austrian supervisory authority

Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

Effective date and updates

Effective date: 8 September 2026

This Privacy Policy may be updated if the website, processing activities, service providers or applicable legal requirements change. The current version will be published on this page.