Last updated: 07.08.2026
This Privacy Policy explains how we collect, use and protect your personal data when you visit luculus.com or contact us.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection of the Slovak Republic.
1. Who we are
Data controller:
[LEGAL COMPANY NAME] [REGISTERED ADDRESS] IČO: [COMPANY REGISTRATION NUMBER] DIČ: [TAX ID, if applicable]
Contact: Email: info@luculus.com Phone: +421 917 931 068
Our gelaterias:
- Hviezdoslavovo námestie 16, 811 02 Bratislava
- Hviezdoslavovo námestie 24, 811 02 Bratislava
- Panská 29, 811 01 Bratislava
- Račianske mýto 5, 831 02 Bratislava
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR.
2. What data we collect
2.1 Data you give us
When you use the contact form on our website, we collect:
- Full name
- Email address
- Phone number
- The content of your message
We collect this data only when you choose to send it.
2.2 Data collected automatically
When you visit our website, the following may be collected:
- IP address (anonymised)
- Browser type and version
- Device type and operating system
- Pages visited, time spent, and referring website
- Approximate location (country or city level)
2.3 Data we do not collect
We do not collect special categories of personal data (health data, religious beliefs, political opinions, biometric data). We do not knowingly collect data from children under 16.
We do not process payment data through this website. Payments in our gelaterias are handled directly by our payment providers and are not linked to this site.
3. Why we process your data and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to your enquiry | Name, email, phone, message | Art. 6(1)(b) GDPR – steps prior to a contract, or Art. 6(1)(f) – legitimate interest in answering enquiries |
| Website security and stability | IP address, technical data | Art. 6(1)(f) GDPR – legitimate interest |
| Website analytics | Anonymised usage data | Art. 6(1)(a) GDPR – your consent |
| Meeting legal obligations | As required by law | Art. 6(1)(c) GDPR – legal obligation |
You may withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.
4. Cookies and similar technologies
Cookies are small text files stored on your device.
Necessary cookies keep the site working (session handling, security, your cookie preferences). These are set without consent, as the site cannot function without them.
Analytics cookies help us understand how visitors use the site. These are set only with your consent. We use Google Analytics 4 with IP anonymisation enabled.
You can change or withdraw your cookie preferences at any time through the cookie settings on our website, or by clearing cookies in your browser settings.
5. Who we share your data with
We do not sell your personal data.
We share data only with service providers who process it on our behalf under a data processing agreement:
| Provider | Purpose | Location |
|---|---|---|
| [HOSTING PROVIDER] | Website hosting | [COUNTRY] |
| Google Ireland Limited | Website analytics (Google Analytics 4) | EU / USA |
Where data is transferred outside the European Economic Area, the transfer is protected by the European Commission’s Standard Contractual Clauses or an adequacy decision.
We may disclose data to public authorities where we are legally required to do so.
6. How long we keep your data
| Data | Retention period |
|---|---|
| Contact form enquiries | 12 months after our last correspondence |
| Analytics data | 14 months |
| Server logs | 6 months |
| Data kept under a legal obligation | For the period required by law |
Once the retention period ends, data is deleted or irreversibly anonymised.
7. Your rights
Under GDPR you have the right to:
- Access – obtain confirmation of whether we process your data and receive a copy
- Rectification – have inaccurate data corrected
- Erasure – have your data deleted, where no legal ground requires us to keep it
- Restriction – limit how we process your data
- Data portability – receive your data in a structured, machine-readable format
- Object – object to processing based on legitimate interest
- Withdraw consent – at any time, where processing is based on consent
To exercise any of these rights, write to info@luculus.com. We will respond within one month. This period may be extended by two further months for complex requests, in which case we will tell you.
If you believe we have handled your data unlawfully, you may lodge a complaint with:
Úrad na ochranu osobných údajov Slovenskej republiky Hraničná 12, 820 07 Bratislava 27 Website: dataprotection.gov.sk
8. How we protect your data
We use HTTPS encryption across the website, restrict access to personal data to staff who need it, and keep our systems updated. No method of transmission over the internet is entirely secure, so we cannot guarantee absolute security.
9. External links and social media
Our website links to our profiles on Instagram and Facebook. These platforms are operated by third parties and process your data under their own privacy policies. We are not responsible for their practices. We recommend reviewing their policies before interacting with our profiles.
10. Changes to this policy
We may update this Privacy Policy. The current version is always available on this page, with the date of the last update shown at the top. Material changes will be announced on the website.
11. Contact
Questions about this policy or about how we handle your data:
Email: contact@luculus.com Phone: +421 917 931 068 Post: [REGISTERED ADDRESS]
