Skip to main content
    SpectraEYE

    General Data Protection Regulation

    Last updated: 24.06.2026

    # SpectraEYE GDPR Notice #

    Last updated: PLACEHOLDER_effective_date

    This GDPR Notice explains how SpectraEYE approaches the General Data Protection Regulation and related European privacy requirements. It should be read together with the Privacy Policy, Data Protection page, Terms, and Cookie Settings.

    This document is an implementation-ready draft and should receive final legal review before production publication.

    ## 1. Controller

    Data controller: PLACEHOLDER_company_name

    Registration number: PLACEHOLDER_registration_number

    Address: PLACEHOLDER_address

    Country: PLACEHOLDER_country

    Representative: PLACEHOLDER_representative

    Privacy contact: privacy@spectraeye.app

    No formal Data Protection Officer is appointed unless this notice is later updated. GDPR requests should be sent to privacy@spectraeye.app.

    ## 2. GDPR position

    SpectraEYE is operated from the European Union/Romania context and uses GDPR/ePrivacy as the primary privacy baseline for website visitors and users. Where services are offered globally, SpectraEYE also aims to provide clear privacy choices to international users.

    ## 3. Lawful bases

    SpectraEYE may rely on:

    - consent for optional analytics, marketing communications, support chat category storage, newsletter preferences, and non-essential cookies/storage;

    - contract or pre-contractual steps for responding to requests and providing requested communications or services;

    - legitimate interests for security, fraud prevention, abuse prevention, diagnostics, and essential operational logs;

    - legal obligation for records required by applicable law.

    ## 4. ePrivacy and cookies

    Strictly necessary storage is used without optional consent because it is required for security, consent proof, and core service operation.

    Optional storage and tracking are disabled by default and require a choice from the user. The current categories are:

    - Functional;

    - Analytics;

    - Marketing and Communications;

    - Support Chat.

    Users may accept all, reject all, customize preferences, save preferences, or withdraw optional consent from Cookie Settings.

    ## 5. Consent audit

    SpectraEYE stores consent audit records to demonstrate when and how privacy choices were made. These records may include:

    - consent version;

    - action and source;

    - selected categories;

    - timestamp;

    - visitor/session identifiers where available;

    - IP address stored securely and displayed hashed by default in admin;

    - user-agent summary;

    - page path.

    Full IP reveal in admin should be limited to explicit actions and audited.

    ## 6. Data subject rights

    Where GDPR applies, you may request:

    - access to your data;

    - rectification of inaccurate data;

    - erasure;

    - restriction of processing;

    - portability;

    - objection to processing based on legitimate interests;

    - withdrawal of consent;

    - information about safeguards for international transfers.

    Requests should be sent to privacy@spectraeye.app. We may need to verify your identity before acting on a request.

    ## 7. Response timing

    GDPR requests are normally handled within one month, subject to legally permitted extensions for complex or multiple requests.

    ## 8. Processors and transfers

    SpectraEYE uses SendGrid for outbound email campaigns/newsletters and inbound email parse. Additional infrastructure, hosting, storage, security, or monitoring providers may also process data. Where data is transferred outside the EEA, SpectraEYE relies on appropriate safeguards where required.

    ## 9. Complaints

    EU/EEA users may lodge a complaint with their local data protection authority. Romanian users may contact the Romanian supervisory authority where applicable. We encourage you to contact privacy@spectraeye.app first so we can try to resolve the issue.

    ## 10. Updates

    This notice may change when SpectraEYE features, processing activities, legal requirements, or processors change.

    ## 11. Reference materials

    This notice was prepared with reference to the following public legal and regulatory materials. These references support drafting and review, but they are not legal advice and do not replace final legal review before production publication.

    - Regulation (EU) 2016/679 (General Data Protection Regulation), official EUR-Lex text: https://eur-lex.europa.eu/eli/reg/2016/679/oj

    - Directive 2002/58/EC (ePrivacy Directive), official EUR-Lex text: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32002L0058

    - European Data Protection Board, Guidelines 05/2020 on consent under Regulation 2016/679: https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf

    - European Commission, data protection rules for business and organisations: https://commission.europa.eu/law/law-topic/data-protection/rules-business-and-organisations_en

    - European Commission, Standard Contractual Clauses for international data transfers: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

    - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): https://www.dataprotection.ro/

    - UK Information Commissioner's Office, UK GDPR guidance and resources: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/

    - California Department of Justice, CCPA information: https://oag.ca.gov/privacy/ccpa