ScreenPixl
Privacy notice
How we handle the data of visitors, business contacts and ScreenPixl portal users.
1. Controller and contact
The ScreenPixl service provider is the data controller. Its full legal name, address and contact details for questions, objections and rights requests are provided in the linked “Provider and orders” section of the terms of business. This notice covers the website and the provider’s own business processing. Customer playback content is processed on the customer’s instructions under a separate data processing agreement.
2. Data, purposes and legal bases
| Processing | Data and purpose | Legal basis |
|---|---|---|
| Enquiries | Name, company, email, message, language and date, to reply, prepare an offer and follow up. | GDPR Article 6(1)(f): legitimate interest in business communication; 6(1)(b) for steps requested by an individual for their own contract. |
| Subscription and billing | Contact and billing details, access records, accepted agreements and payments. | Contract (6(1)(b)), legal duties (6(1)(c)), and legitimate interest in managing organisational business contacts (6(1)(f)). |
| Security and operation | IP, time, requested path, response status and browser information in server logs; sign-in and device events. | Legitimate interest (6(1)(f)) in preventing abuse, protecting accounts and resolving faults. |
| Form protection | Short-lived token and pseudonymous keys for attempt limits and duplicate prevention. | Legitimate interest (6(1)(f)) in preventing automated abuse. |
| Google Analytics 4 | Public website views and use, browser, device, approximate location and a random cookie identifier, to understand traffic and improve the website. The connection exposes the IP to Google; Google states that GA4 does not log or store it. | Consent (GDPR 6(1)(a)); no Google tag or measurement requests before consent. |
3. Required information
Required form fields are needed to understand and answer the business enquiry. Without them the form cannot be submitted. Do not send passwords, medical information or unnecessary third-party data. Submitting a form does not subscribe you to a newsletter or consent to advertising. We do not carry out marketing profiling or automated decisions with legal effects.
4. Recipients and locations
Authorised provider personnel access data as needed. We use Hetzner Online GmbH in the EU for hosting and email. Authorised accounting or professional providers may assist with contracts and billing; authorities receive information where legally required. We do not sell data.
With your analytics consent we use Google Analytics 4 provided by Google Ireland Limited. Google LLC and subprocessors may be involved, including in the US. Google provides data processing terms and applicable transfer mechanisms, including standard contractual clauses where required; links appear below. Fonts and images are self-hosted. Google Signals and advertising personalisation are disabled. Analytics is used on the public website, not the sign-in portal.
5. Retention
Enquiries are retained until the response and agreed follow-up are complete. If a business relationship results, the necessary information becomes contractual documentation. Evidence for an actual claim or dispute is kept until final resolution or the relevant limitation period. Unnecessary enquiries are not used as a permanent marketing database; retention is reviewed when handling is complete.
Invoices and legally required records are retained for the applicable tax or accounting obligation. Active account data is retained during use, then only as needed for retrieval, erasure, legal duties or specific claims. Customer content follows the separate processing agreement.
Public web-server access logs rotate daily, retaining up to 14 archives and the current log. Relevant incident evidence may be preserved separately until investigation ends. Contact-form security tokens last up to 30 minutes. Browser storage periods appear in the cookie notice.
Your analytics choice is valid for at most 180 days, after which we ask again. Analytics cookies are configured for at most 180 days without automatic renewal on every visit. Event and user-data retention in Google Analytics is a separate service setting. You can withdraw at any time using the cookie icon; withdrawal stops future measurement without affecting the lawfulness of earlier processing. Contact the controller for access to or erasure of previously collected data.
6. Your rights
Subject to GDPR conditions you may request access, correction, erasure, restriction and portability. You may object to legitimate-interest processing based on your situation. Any consent-based processing may be withdrawn prospectively. Legally required records cannot always be erased immediately.
Contact the controller to make a request. Identity checks are proportionate to risk; we normally reply within one month and notify you of any lawful extension. You may complain to the Slovenian Information Commissioner or another competent supervisory authority.
Save this document using your browser’s Save Page command, or print it with Ctrl/Cmd + P. The document version is shown beside the heading.