Privacy policy

Who is responsible for your data

The controller of personal data on this site is Spruce Productions, a sole proprietorship (obrt) owned by Petar Jelušić, Croatia. For anything related to your data, write to info@spruceaudio.eu.

What I collect and why

Request form. When you send a request I receive your name, email address, the service and package you chose, the deadline, a link to your files if you add one and your message. I use this only to reply to you, prepare a quote and, if we agree, do the work. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

Reviews. If you leave a review I receive your name, the artist, studio or company you add, the service, your rating, your review and, if you add it, your email. I publish the review with your name only with your consent, never your email. You can ask me to remove it at any time.

Email. If you write to me directly, I receive your email address and whatever you write, and use it the same way.

Visit statistics. I use Umami to see how many people visit the site, which pages they open and which buttons they click (for example the price calculator or the request form). Umami does not use cookies, does not store your IP address and does not identify you. The legal basis is my legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).

Invoices. If we work together, I issue an invoice with the details required by law. That is handled outside this site.

Cookies and browser storage

This site does not set its own cookies. It saves two small settings in your browser: the language you chose and light or dark mode, so the site looks the same next time. They never leave your device and you can delete them by clearing your browser data.

Services I use

Some data is processed by providers that make the site work:

• Netlify hosts the site and receives form requests. Like every server, it briefly logs technical data such as your IP address.
• Web3Forms forwards form requests to my email.
• Spacemail (Spaceship) delivers and stores email sent to info@spruceaudio.eu.
• Umami counts visits, as described above.
• Google Fonts delivers the fonts used on the site, so your browser connects to Google servers.
• SoundCloud, Spotify, Steam and Dropbox provide the music players, the game widget and the video. When they load, these services receive your IP address and may set their own cookies under their own privacy policies.

Some of these providers are based outside the European Union. In that case data is transferred with the safeguards required by the GDPR, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

How long I keep it

Requests and emails are kept as long as needed to reply and to work together. If we don't end up working together, I delete them within two years. Invoices and related records are kept for as long as Croatian law requires (11 years).

I never

I never sell your data, never add you to a newsletter without asking and never use your data for anything other than what is written here.

Your rights

You can ask me at any time to see the data I have about you, correct it, delete it, limit how I use it or send it to you in a usable format. You can also object to processing based on legitimate interest. Write to info@spruceaudio.eu and I will reply within 30 days.

If you think your data is not handled properly, you can file a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.

Changes

If anything here changes, I will update this page and the date at the top.