Legal
Privacy Statement
Last updated: 13 August 2026
Sprita iT Europe OÜ (“Sprita iT Europe”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Statement explains how we collect, use, disclose, retain and protect personal data when you visit spritaeurope.com, contact us, request information about our services, or otherwise interact with us through this website.
1. Data Controller
The controller responsible for the processing of personal data described in this Privacy Statement is:
Sprita iT Europe OÜ
Narva mnt 5, Kesklinna linnaosa
10117 Tallinn, Harju maakond, Estonia
Privacy contact: gchavez@sprita-it.com
2. Scope
This Privacy Statement applies to personal data processed through spritaeurope.com and communications initiated through this website.
Some links on our website may direct you to other websites, platforms or services. Those services may operate under their own privacy notices and terms. We encourage you to review the applicable privacy information before providing personal data to an external service.
3. Personal Data We May Collect
Depending on how you interact with us, we may collect the following categories of personal data.
Contact and business information
When you contact us through our website or communicate with us directly, we may collect:
- full name;
- business email address;
- company or organisation;
- job title or professional role, where provided;
- subject of your enquiry;
- content of your message;
- information voluntarily included in communications with us.
Technical and security information
When you access our website, our systems and infrastructure providers may process technical information such as:
- IP address;
- browser type and version;
- operating system;
- device information;
- date and time of access;
- requested pages or resources;
- server and security logs;
- information necessary to detect, prevent and investigate malicious activity or technical incidents.
Cookie and analytics information
Where you have provided consent, we may process information collected through optional cookies or similar technologies to understand how visitors use our website and improve its performance and usability. Further information is available in our Cookie Policy.
4. Why We Process Personal Data
We process personal data only where we have an appropriate legal basis under applicable data-protection law.
Responding to enquiries and requests
We process information submitted through our contact forms or direct communications to:
- respond to your enquiry;
- provide requested information;
- understand your business requirements;
- prepare or discuss potential services, assessments or proposals;
- arrange meetings or further communications.
The legal basis may be taking steps at your request before entering into a contract or our legitimate interest in responding to business enquiries.
Providing services and managing business relationships
Where you become a client, prospective client, partner, supplier or other business contact, we may process personal data to:
- prepare proposals and agreements;
- provide contracted services;
- manage our professional relationship;
- administer invoices and payments;
- provide support;
- maintain business records.
Processing may be necessary for the performance of a contract, taking steps before entering into a contract, compliance with legal obligations, or our legitimate business interests.
Website and information security
We may process technical information and security logs to:
- operate and maintain the website;
- protect our systems and infrastructure;
- prevent abuse, fraud and malicious activity;
- detect and investigate cybersecurity events;
- maintain availability and resilience.
We rely on our legitimate interest in protecting our systems, website, users and business operations.
Website analytics
Where analytics technologies require consent, we use them only after you have provided that consent. Analytics may help us understand, for example, which pages are visited, how visitors navigate the site and how the website performs. You may withdraw your consent at any time through Cookie Settings.
Marketing communications
Where permitted by applicable law, we may send information concerning Sprita iT Europe services to business contacts with whom we have an appropriate relationship. Where consent is required, we will send such communications only after obtaining consent. You may object to direct marketing or unsubscribe from marketing communications at any time.
5. Cookies and Similar Technologies
We use cookies and similar technologies in accordance with applicable European privacy and electronic communications requirements.
Cookies that are strictly necessary for the operation, security or functionality explicitly requested by the user may be used without optional consent. Optional technologies, including analytics, advertising or other non-essential tracking technologies, will not be activated unless and until the user provides the required consent.
You can review or modify your choices at any time through the Cookie Settings link available on our website. Please see our Cookie Policy for additional information.
6. Recipients and Service Providers
We may share personal data with service providers where necessary to operate our business and website. These may include providers of:
- website hosting and infrastructure;
- cybersecurity and website protection;
- email and communications;
- customer relationship management systems;
- analytics services, where consent has been provided;
- IT administration and technical support;
- professional, accounting or legal services.
Service providers acting on our behalf are expected to process personal data only for authorised purposes and subject to appropriate contractual and security requirements. We do not sell personal data.
7. International Data Transfers
Some technology or service providers may process personal data outside the European Economic Area (“EEA”). Where personal data is transferred outside the EEA, we take appropriate measures required by applicable data-protection law. Depending on the destination and provider, these measures may include:
- a European Commission adequacy decision;
- European Commission Standard Contractual Clauses;
- other safeguards permitted under Chapter V of the GDPR.
You may contact us if you would like further information regarding the safeguards applicable to a particular transfer.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal, accounting, contractual and security obligations. Retention periods are determined according to factors including:
- the nature and purpose of the processing;
- the duration of our business relationship;
- applicable contractual obligations;
- statutory limitation and record-keeping requirements;
- security and fraud-prevention requirements;
- whether information is necessary to establish, exercise or defend legal claims.
Information submitted through a general business enquiry that does not result in an ongoing relationship will normally be deleted or anonymised when it is no longer reasonably required for the enquiry or subsequent business discussions.
9. Your Data Protection Rights
Subject to the conditions and limitations established by applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- object at any time to processing for direct marketing;
- request portability of certain personal data;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a competent data protection supervisory authority.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. To exercise your rights, contact gchavez@sprita-it.com. We may request reasonable information to verify your identity before processing a request.
10. Supervisory Authority
As Sprita iT Europe OÜ is established in Estonia, you may contact the Estonian data protection supervisory authority: Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), Tallinn, Estonia. You may also have the right to lodge a complaint with the supervisory authority in the EU or EEA Member State of your habitual residence, place of work, or the place of the alleged infringement.
11. Automated Decision-Making
We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Website assessments, calculators, scores or informational tools, where offered, are intended to provide informational or advisory outputs and are not used through this website to make legally binding decisions about individuals.
12. Security
We implement appropriate technical and organisational measures designed to protect personal data against:
- unauthorised access;
- accidental or unlawful disclosure;
- alteration;
- loss;
- destruction;
- misuse.
Our measures are reviewed according to the nature of the information processed, applicable risks and available security practices. No internet-based service can guarantee absolute security.
13. Children
Our website and services are intended for organisations and business professionals and are not directed to children. We do not knowingly use this website to collect personal data from children for commercial purposes.
14. Changes to This Privacy Statement
We may update this Privacy Statement to reflect changes to our services, our website, technologies we use, legal or regulatory requirements, or our data-processing practices. The current version will always display its latest revision date.
15. Contact Us
For questions about this Privacy Statement, our processing of personal data, or the exercise of data-protection rights, contact:
Sprita iT Europe OÜ
Narva mnt 5, Kesklinna linnaosa
10117 Tallinn, Harju maakond, Estonia
Email: gchavez@sprita-it.com