Privacy Policy

How Lurevex collects, uses and protects the personal data you share with us through this website.

1. Who we are

Lurevex (“we”, “us”) is a digital marketing studio based at Berlínska 1, 040 13 Košice, Slovakia. We are the controller of the personal data obtained through the lurevex.com website.

2. What data we collect

We collect only what we genuinely need:

• Contact details — your name, email address, phone number (if you give one), the way you would like us to reach you, the services you are interested in, the text of your message, the date and time of submission, and a record of the statement you saw when you sent it (its wording, its language and the version of the documents). Alongside the record we store an irreversible fingerprint (hash) of your email address — used solely so we can find your records quickly when you exercise your rights.
• Technical data — your IP address and browser type. We use the IP address to limit how many times the form can be submitted from one device, to protect the site against spam and abuse; for that purpose we keep it for a matter of minutes. Together with the address of the page requested, the address of the referring page and the browser identification string, it also appears in the operational and security request logs our hosting provider keeps for every visit; we use them to run the site and to find faults. We measure traffic only in aggregate: when our server delivers a page to a browser, it adds it to daily totals by date, page visited, language version, source of the visit (Google, Bing, DuckDuckGo, ChatGPT, Perplexity, Claude, Gemini, Copilot, Facebook, Instagram, LinkedIn, X, direct, another page on lurevex.com, or other — derived from the address of the referring page or a campaign tag), country (the two-letter code Cloudflare derives from the connection) and device type (mobile, tablet or desktop — derived from the browser’s identification string). We likewise count form submissions per day in each language version. Visits by bots and browser prefetches are not counted. The counter itself stores only these totals — not your IP address, the browser identification string, the full address of the referring page or any identifier. For this purpose nothing is stored in your browser and no code is run in it (no cookies, scripts or tracking pixels) — we work only with what your browser itself sends with each request for a page. We do not track you across other websites and we build no profile of you. We store two values in your browser — your language choice and an acknowledgement that you have seen our notice (see our Cookie Policy).
• Client project data — information you provide to us over the course of our work together.

3. What we use it for

To answer your enquiry, to prepare and perform a contract for the services you order from us, to protect this site against spam and abuse, and to keep aggregate visit statistics that show us which pages and sources bring us visitors and enquiries, so we can improve the site. We do not sell personal data, and we do not send you marketing messages without your explicit consent.

4. Legal bases for processing

We process contact-form data on the basis of Article 6(1)(b) GDPR — these are steps taken at your request before entering into a contract — or on our legitimate interest under Article 6(1)(f) GDPR, that interest being to answer an enquiry you sent us yourself and to keep a record of it for any follow-up. We process your IP address on the legitimate interest of protecting the site against spam and abuse. We use data from your browser’s request (the page address, the referring page or campaign tag, the country and the browser identification string) to add the visit to the daily totals — none of it is stored in the totals themselves; we do so on our legitimate interest under Article 6(1)(f) GDPR in knowing which pages and sources bring us visitors and enquiries, and in improving the site accordingly. The stored daily totals contain nothing by which we could identify you, and we do not use them to work out who visited the site. We also process the request logs kept by our hosting provider on our legitimate interest in running and securing the site. If you become a client, we process data to perform the contract (Article 6(1)(b)) and to meet our legal obligations, chiefly tax and accounting (Article 6(1)(c)). We use consent as a legal basis only where we ask you for it expressly. The items we store in your browser are necessary and do not require consent.

5. Sharing your data

We disclose personal data only to providers who process it for us and on our instructions — Cloudflare, Inc. (website hosting and storage of form submissions), Resend (sending the email notification about your enquiry) and Google (Google Workspace — the company mailbox your message arrives in and in which we correspond with you). These providers may use their own sub-processors for strictly defined technical tasks (for example delivering mail and handling bounced messages); we will send you their current list on request. We use no advertising tools and no third-party analytics tools, and we never share your data for third-party advertising purposes. The daily visit totals are kept with Cloudflare, only we can see them, on a password-protected page, and we share them with no one.

6. Transfers outside the European Economic Area

The providers listed above are established in the United States and may process your personal data on servers outside the European Economic Area. We will tell you free of charge, on request, what safeguards apply to the transfer to each of those providers — just write to the email address given under Contact.

7. How long we keep it

We keep a message submitted through the form in our enquiry database (Cloudflare) for 24 months from the day you send it; after that it is deleted automatically. The same message also arrives in our company mailbox (Google Workspace) and stays there together with any further correspondence — we delete that mail no later than 24 months after our last contact with you. Resend keeps its email delivery records under its own retention periods. Our hosting provider’s operational and security logs, which contain your IP address and other details of the request (the page address, the referring page and the browser identification string), are kept for a matter of days and do not contain the content of your message. Daily visit totals are kept for 13 months and then deleted automatically. If an enquiry becomes an engagement, we keep contract, invoicing and accounting data for the period required by tax and accounting law.

8. Your rights

At any time you may ask for access to your data, for its correction, erasure or transfer to another controller, and you may ask us to restrict the processing. Where we base processing on your consent, you may withdraw it at any time by email; withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn. We will deal with your request within one month at the latest and will carry the erasure through every copy we hold — in our enquiry database and in our mailbox. You also have the right to lodge a complaint with a supervisory authority — in Slovakia this is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.

We draw this to your attention separately: you may object at any time, at the address given under Contact, to any processing we base on legitimate interest. If we ever process your data for direct marketing, we will stop doing so immediately and unconditionally once you object.

9. Providing your data

Providing your data is voluntary — it is neither a statutory nor a contractual requirement. We do need your name and email address in order to reply, so those two fields are mandatory in the form; a phone number is mandatory only if you choose the telephone as the way we should reach you. All other fields are optional. Without these details the form cannot be submitted and we will not be able to respond to your enquiry; you can also write to us directly at the address given under Contact.

10. Automated decision-making

We do not use your data for automated individual decision-making or profiling within the meaning of Article 22 GDPR. Submissions pass an automated anti-spam check — a hidden field and a limit on the number of submissions from a single IP address. That check does not evaluate you as a person and has no legal or similarly significant effect on you; if it ever stops you sending a message, write to us directly at the address given under Contact.

11. Security

The site runs exclusively over an encrypted connection (HTTPS) and we send the browser security headers that limit what the page may load and who may embed it in a frame. Enquiries stored with our hosting provider are reachable only with the credentials for our account, and once the period given above expires they are deleted automatically — independently of anyone remembering to do it. We do not write the content of your message into operational logs. No measure is absolute, however; should a personal data breach occur that is likely to result in a high risk to you, we will inform you about it.

12. Changes to this policy

We will publish any changes on this page and update the date shown in its header.

13. Contact

Questions about your data? Write to us at info@lurevex.com.

This English text is a convenience translation. Lurevex is based in Slovakia and the Slovak version of this document is the legally binding one — in the event of any discrepancy, the Slovak version prevails.