Privacy Policy

1. Controller

SPS network
SPS network
Ante Starčevića 14
HR-51000 Rijeka
Croatia
Swiss branch: SPS network
Birmensdorferstrasse 55
CH-8004 Zürich
Switzerland
Email: info@sps-shop.info

2. Data collected

We process order data, account data, contact enquiries and – in the case of supplier registration – supplier data. Processing is carried out to perform the contract (Art. 6(1)(b) GDPR) and to meet legal obligations (lit. c).

3. Server logs and our own analytics

We operate our own analytics without external services (no Google Analytics, no tracking pixel). IP addresses are stored only as a hash (SHA-256 with a key that changes daily) and cannot be traced back to a person. The legal basis is our legitimate interest in providing the shop securely (Art. 6(1)(f) GDPR).

4. Cookies

We use only technically necessary session and language cookies. No cookies are used to recognise you for advertising purposes.

5. PayPal

If you choose PayPal, the data required for payment processing is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A. The purpose is payment processing, legal basis Art. 6(1)(b) GDPR.

6. Transfer to partner suppliers

If an order contains items from partner suppliers, the data required for shipping (name, delivery address, order item) is transmitted to the respective partner.

7. Hosting / processing

The shop is operated at a professional web hosting provider. A data processing agreement (DPA) under Art. 28 GDPR is in place with the host.

8. Retention period

We store data only for as long as necessary for the stated purposes or due to statutory retention periods.

9. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority. The Croatian data protection authority AZOP is competent, among others. For the Swiss branch, Swiss data protection law (revFADP) also applies.