Data Protection Notice

Data Protection Notice

Last updated: 14 January 2026
This Data Protection Notice provides detailed information on how personal data are processed in connection with the Velim platform and related services operated by SKVID d.o.o., Jalševečka cesta 40, 10040 Zagreb, Croatia ("SKVID"). It is intended to supplement the Privacy Policy and to inform users in accordance with Articles 13 and 14 of the GDPR.

1. Roles and responsibilities

• Controller: SKVID d.o.o. acts as the data controller for account, billing, support, security, and service-related data processed for operating the Velim platform.
• Processor: For communications and content exchanged by end users within the Velim platform on behalf of SKVID’s customers (subscribers), SKVID acts as a data processor and processes such data strictly in accordance with customers’ instructions and applicable data protection laws.

2. Categories of personal data

Depending on the services used, SKVID may process the following categories of personal data:

• Account and contact data: name, email address, phone number, role, organization.
• Authentication and security data: login credentials, access tokens, security logs, IP address, device identifiers.
• Service usage data: timestamps, feature usage, interaction metadata, technical logs.
• Communications data (processor role): messages, attachments, call metadata, tickets, and related content exchanged via the platform on behalf of customers.

SKVID does not use communications content for its own purposes and does not access such content except where technically necessary to provide the service or where required by law.

3. Purposes of processing
Personal data are processed for the following purposes:

• providing and maintaining the Velim platform;
• user authentication and account management;
• customer support and service communications;
• ensuring security, integrity, and availability of the platform;
• complying with legal obligations;
• improving and developing platform features (in aggregated or anonymized form).

4. Legal bases
Personal data are processed on one or more of the following legal bases:

• Contract performance (GDPR Art. 6(1)(b));
• Legal obligation (GDPR Art. 6(1)(c));
• Legitimate interests related to operating, securing, and improving the platform (GDPR Art. 6(1)(f));
• Consent, where required (GDPR Art. 6(1)(a)).

5. Data retention
Personal data are retained only for as long as necessary to fulfill the purposes for which they were collected, to provide the contracted services, or to comply with legal obligations.

Where SKVID acts as a processor, data are retained in accordance with customers’ instructions and contractual arrangements.

6. Data recipients and transfers
Personal data may be accessed by authorized SKVID personnel and by trusted service providers acting as processors under appropriate contractual safeguards.

Data are primarily processed within the European Economic Area (EEA). If personal data are transferred outside the EEA, appropriate safeguards in accordance with the GDPR are applied.

7. Security measure
SKVID implements appropriate technical and organizational measures to protect personal data, including role-based access controls, logging and monitoring, and staff confidentiality obligations.

Personal data processed within the Velim platform are protected using encryption in transit and at rest, where appropriate. Communications between client applications and backend services are secured using industry-standard transport encryption (e.g., TLS). Stored data are protected using strong encryption mechanisms and managed through controlled key management processes.

Access to encrypted data is limited to authorized processes and personnel strictly on a need-to-know basis. Encryption does not prevent processing necessary to provide the service or comply with legal obligations, but it significantly reduces the risk of unauthorized access.

8. Rights of data subjects
Data subjects have the right to:

• access their personal data;
• request rectification or erasure;
• restrict or object to processing;
• data portability, where applicable;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with a supervisory authority.

Requests may be submitted using the contact details below.

9. Contact
For questions or requests regarding personal data processing, please contact:

Email: zastitapodataka@skvid.hr
Postal address:
SKVID d.o.o.
Jalševečka cesta 40
10040 Zagreb, Croatia
(with the note: “For the Data Protection Officer”)

This Data Protection Notice may be updated from time to time. The current version is always available via the Velim Help Center.