LEGAL
Privacy Policy
LAST UPDATED: JULY 25, 2026
How Lurevex collects, uses and protects the personal data you share with us through this website.
1. Who we are
Lurevex (“we”, “us”) is a digital marketing studio operated by Lurevex s.r.o. (in registration), with its registered office at Berlínska 1, 040 13 Košice, Slovakia. We are the controller of the personal data obtained through the lurevex.com website.
2. What data we collect
We collect only what we genuinely need:
- Contact details — your name, email address, phone number (if you give one), the way you would like us to reach you, the services you are interested in, the text of your message, the date and time of submission, and a record of the statement you saw when you sent it (its wording, its language and the version of the documents). Alongside the record we store an irreversible fingerprint (hash) of your email address — used solely so we can find your records quickly when you exercise your rights.
- Technical data — your IP address and browser type. We use the IP address to limit how many times the form can be submitted from one device, to protect the site against spam and abuse; for that purpose we keep it for a matter of minutes. It also appears in our hosting provider’s operational and security logs. We use no analytics and no tracking tools. We store two values in your browser — your language choice and an acknowledgement that you have seen our notice (see our Cookie Policy).
- Client project data — information you provide to us over the course of our work together.
3. What we use it for
To answer your enquiry, to prepare and perform a contract for the services you order from us, and to protect this site against spam and abuse. We do not sell personal data, and we do not send you marketing messages without your explicit consent.
4. Legal bases for processing
We process contact-form data on the basis of Article 6(1)(b) GDPR — these are steps taken at your request before entering into a contract — or on our legitimate interest under Article 6(1)(f) GDPR, that interest being to answer an enquiry you sent us yourself and to keep a record of it for any follow-up. We process your IP address on the legitimate interest of protecting the site against spam and abuse. If you become a client, we process data to perform the contract (Article 6(1)(b)) and to meet our legal obligations, chiefly tax and accounting (Article 6(1)(c)). We use consent as a legal basis only where we ask you for it expressly. The items we store in your browser are necessary and do not require consent.
5. Sharing your data
We disclose personal data only to providers who process it for us and on our instructions — Cloudflare, Inc. (website hosting and storage of form submissions), Resend (sending the email notification about your enquiry) and Google (Google Workspace — the company mailbox your message arrives in and in which we correspond with you). These providers may use their own sub-processors for strictly defined technical tasks (for example delivering mail and handling bounced messages); we will send you their current list on request. We use no analytics or advertising tools, and we never share your data for third-party advertising purposes.
6. Transfers outside the European Economic Area
The providers listed above are established in the United States and may process your personal data on servers outside the European Economic Area. We will tell you free of charge, on request, what safeguards apply to the transfer to each of those providers — just write to the email address given under Contact.
7. How long we keep it
We keep a message submitted through the form in our enquiry database (Cloudflare) for 24 months from the day you send it; after that it is deleted automatically. The same message also arrives in our company mailbox (Google Workspace) and stays there together with any further correspondence — we delete that mail no later than 24 months after our last contact with you. Resend keeps its email delivery records under its own retention periods. Our hosting provider’s operational and security logs, which contain your IP address, are kept for a matter of days and do not contain the content of your message. If an enquiry becomes an engagement, we keep contract, invoicing and accounting data for the period required by tax and accounting law.
8. Your rights
At any time you may ask for access to your data, for its correction, erasure or transfer to another controller, and you may ask us to restrict the processing. Where we base processing on your consent, you may withdraw it at any time by email; withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn. We will deal with your request within one month at the latest and will carry the erasure through every copy we hold — in our enquiry database and in our mailbox. You also have the right to lodge a complaint with a supervisory authority — in Slovakia this is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.
We draw this to your attention separately: you may object at any time, at the address given under Contact, to any processing we base on legitimate interest. If we ever process your data for direct marketing, we will stop doing so immediately and unconditionally once you object.
9. Providing your data
Providing your data is voluntary — it is neither a statutory nor a contractual requirement. We do need your name and email address in order to reply, so those two fields are mandatory in the form; a phone number is mandatory only if you choose the telephone as the way we should reach you. All other fields are optional. Without these details the form cannot be submitted and we will not be able to respond to your enquiry; you can also write to us directly at the address given under Contact.
10. Automated decision-making
We do not use your data for automated individual decision-making or profiling within the meaning of Article 22 GDPR. Submissions pass an automated anti-spam check — a hidden field and a limit on the number of submissions from a single IP address. That check does not evaluate you as a person and has no legal or similarly significant effect on you; if it ever stops you sending a message, write to us directly at the address given under Contact.
11. Security
The site runs exclusively over an encrypted connection (HTTPS) and we send the browser security headers that limit what the page may load and who may embed it in a frame. Enquiries stored with our hosting provider are reachable only with the credentials for our account, and once the period given above expires they are deleted automatically — independently of anyone remembering to do it. We do not write the content of your message into operational logs. No measure is absolute, however; should a personal data breach occur that is likely to result in a high risk to you, we will inform you about it.
12. Changes to this policy
We will publish any changes on this page and update the date shown in its header.
13. Contact
Questions about your data? Write to us at info@lurevex.com.
This English text is a convenience translation. Lurevex is a Slovak company and the Slovak version of this document is the legally binding one — in the event of any discrepancy, the Slovak version prevails.