GDPR · Privacy · plain language

Privacy Policy without the legal jargon.

What we collect, why, for how long and what your rights are. In plain terms — not 40 pages of „compliance theatre“.

Lumík pointing at the GDPR rules

Legal disclaimer

The information published on this website is provided solely for general informational purposes and does not constitute legal, financial or professional advice. We strive to keep the content up to date and accurate, but we do not guarantee its completeness, reliability or suitability for any particular use. Any use of information from this website is entirely at the visitor's own risk.

Who we are

This website is operated by LUMA Creative, Slatinská 28, 821 07 Bratislava, Slovak Republic. Contact: peter.kapusnik@lumacreative.online.

What data we collect

We process only the data you voluntarily provide in our forms (contact form, newsletter, AI brief generator). Specifically, this means your name, email and optionally company and phone number, along with the message you send us.

When you visit the website, we collect anonymized technical data through tools such as Google Analytics 4 (visits, sources, country, browser). This data is used solely to improve our content and UX. We ask for consent to this collection via a consent banner in line with GDPR and ePrivacy.

Why we process data (legal basis)

  • Performance of a contract / pre-contractual measures — when you send us an enquiry through the contact form or order a service.
  • Consent — for newsletter sign-ups and optional cookies (analytics, remarketing).
  • Legitimate interest — for protecting the website, preventing spam and keeping internal traffic statistics.

How long we keep data

We keep contact enquiries for 24 months from the last contact. Newsletter contacts are kept until you unsubscribe (with a single click in the footer of every newsletter). Accounting documents are kept for 10 years as required by law. Anonymized analytics are kept for 14 months (GA4 default).

Who we share data with

We do not share your data with third parties for marketing purposes. The only processors involved are the services we use to run our operations (Google Workspace for email, SendGrid or an SMTP provider for sending, Vercel / hosting, Google Analytics). We have a data processing agreement (DPA) in place with each of them.

Your rights under GDPR

  • The right to access your data
  • The right to rectify inaccurate data
  • The right to erasure (the „right to be forgotten")
  • The right to restrict processing
  • The right to data portability
  • The right to object to processing
  • The right to lodge a complaint with a supervisory authority (the Office for Personal Data Protection of the Slovak Republic)

You can exercise any of these rights by emailing us at peter.kapusnik@lumacreative.online. We respond within 30 days, in most cases sooner.

Cookies and analytics tools

The website uses essential cookies (for the correct functioning of the site) and optional analytics cookies (Google Analytics 4). We activate optional cookies only with your consent via the consent banner. You can withdraw your consent at any time.

Security

The website runs over HTTPS, the forms are protected against spam, and the server receives regular security updates. Even so, no solution is 100% bulletproof — we recommend that you never send sensitive data (passwords, card numbers) through ordinary forms.

Changes to this policy

We may update this policy from time to time to reflect changes in legislation or technical tools. The current version is always published on this page with the date of the last update.

Last updated: 2 May 2026