Privacy Policy

This Privacy Policy describes how Ozvena ("we," "us," or "our") collects, uses, stores, shares, and protects your personal data when you access or use our website at www.luxiapp.com (the "Website") and any related services, applications, or products (collectively, the "Services"). We are committed to protecting your privacy and processing your personal data in a transparent, fair, and lawful manner.

Please read this Privacy Policy carefully before using our Services. By accessing or using our Website and Services, you acknowledge that you have read, understood, and agree to the terms described herein. If you do not agree with this Privacy Policy, please discontinue use of our Services immediately.

1. Identity and Contact Details of the Data Controller

For the purposes of applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Act No. 18/2018 Coll. on Personal Data Protection (Zákon o ochrane osobných údajov), as amended, the data controller responsible for your personal data is:

If you have any questions, concerns, or requests regarding how we process your personal data, you are welcome to contact us at any time using the contact details provided above.

2. Legal Framework

Our data processing practices are governed by the following legal instruments:

• Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR), which sets the framework for data protection across the European Union and European Economic Area.
• Act No. 18/2018 Coll. — Slovak Act on Personal Data Protection (Zákon č. 18/2018 Z. z. o ochrane osobných údajov), which implements and supplements the GDPR at the national level in Slovakia.
• Act No. 452/2021 Coll. — Slovak Act on Electronic Communications (Zákon o elektronických komunikáciách), relevant to cookies and online tracking.
• ePrivacy Directive 2002/58/EC — As implemented in Slovak law, governing electronic privacy.
• Any other applicable Slovak or European Union legislation concerning data protection and privacy.

3. Data We Collect

We collect various types of personal data depending on how you interact with our Website and Services. The categories of data we may collect include:

3.1 Personal Identification Information

When you create an account, fill in a contact form, subscribe to a newsletter, make a purchase, or otherwise engage with our Services, we may collect:

• Full name
• Email address
• Phone number
• Postal address and billing address
• Username and password (stored in encrypted form)
• Date of birth or age verification data
• Profile photograph or avatar (if provided)
• Any other information you voluntarily provide to us

3.2 Payment and Transaction Data

If you make a purchase through our Services, we or our payment processing partners may collect:

• Payment card information (processed securely by third-party providers — we do not store full card numbers)
• Transaction amounts and currency
• Purchase history and order details
• Billing information

3.3 Usage Data and Interaction Data

We automatically collect certain information about how you interact with our Website and Services, including:

• Pages visited, links clicked, and features used
• Time spent on pages and navigation paths
• Search queries entered on the Website
• Content viewed or downloaded
• Timestamps of your visits and activities

3.4 Device and Technical Information

We may collect technical information about the device and software you use to access our Services:

• IP address
• Browser type and version
• Operating system and version
• Device type (desktop, mobile, tablet)
• Screen resolution and language settings
• Referring URL (the website that directed you to ours)
• Internet service provider (ISP)

3.5 Cookie and Tracking Data

We use cookies and similar tracking technologies to collect data about your browsing behavior. Please refer to Section 8 of this Privacy Policy for detailed information about our cookie practices.

3.6 Communications Data

If you contact us via email, contact form, live chat, or other means, we may collect and retain:

• The content of your message or inquiry
• Your contact details
• Records of correspondence
• Feedback and survey responses

3.7 Data from Third-Party Sources

We may receive information about you from third parties in certain circumstances, such as:

• Social media platforms when you use social login features
• Analytics providers and advertising networks
• Business partners and affiliates
• Publicly available sources

4. How We Use Your Personal Data

We process your personal data only when we have a valid legal basis to do so under the GDPR and Slovak law. The purposes for which we use your data, along with the corresponding legal bases, are described below:

4.1 Service Provision and Account Management

Legal Basis: Performance of a Contract (Article 6(1)(b) GDPR)

We use your personal data to provide, maintain, and improve our Services, including:

• Creating and managing your user account
• Processing your orders, transactions, and payments
• Delivering products, content, or services you have requested
• Providing customer support and responding to your inquiries
• Sending transactional notifications such as order confirmations and service updates

4.2 Analytics and Service Improvement

Legal Basis: Legitimate Interests (Article 6(1)(f) GDPR)

We analyze usage patterns and technical data to understand how our Services are used and to improve their functionality, performance, and user experience. Our legitimate interest is in operating and improving our business effectively.

4.3 Marketing and Promotional Communications

Legal Basis: Consent (Article 6(1)(a) GDPR) or Legitimate Interests (Article 6(1)(f) GDPR)

With your consent, or where permitted under applicable law, we may use your contact information to:

• Send you newsletters, promotional emails, and special offers
• Inform you about new products, features, or events
• Display personalized advertisements on our Website or third-party platforms

You may withdraw your consent or opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at contact@luxiapp.com.

4.4 Legal Compliance and Obligations

Legal Basis: Legal Obligation (Article 6(1)(c) GDPR)

We may process your data to comply with applicable Slovak and EU legal obligations, including tax and accounting requirements, anti-money laundering regulations, and responses to lawful requests by public authorities.

4.5 Security and Fraud Prevention

Legal Basis: Legitimate Interests (Article 6(1)(f) GDPR)

We process certain data to protect the security and integrity of our Services, detect and prevent fraud, abuse, and unauthorized access, and to protect the rights and safety of our users and our business.

5. Data Sharing with Third Parties

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we may share your data with trusted third parties in the following circumstances:

5.1 Service Providers and Data Processors

We engage third-party companies and individuals to perform services on our behalf, such as:

• Cloud hosting and infrastructure providers
• Payment processing companies
• Email delivery and communication platforms
• Analytics and performance monitoring tools
• Customer support software providers
• Marketing and advertising platforms

These service providers act as data processors and are only permitted to process your personal data in accordance with our instructions and are bound by appropriate data processing agreements pursuant to Article 28 of the GDPR.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities, including Slovak courts, the Slovak Police (Policajný zbor SR), tax authorities (Finančná správa), or other competent authorities, in accordance with applicable Slovak and EU legislation.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Website before your personal data is transferred and becomes subject to a different privacy policy.

5.4 Protection of Rights

We may disclose your data when we believe in good faith that disclosure is necessary to protect our rights, enforce our Terms of Service, investigate fraud, or protect the safety of our users and the public.

5.5 With Your Consent

We may share your data with other third parties when you have given us your explicit consent to do so.

6. Data Security Measures

We take the protection of your personal data seriously and implement appropriate technical and organizational measures to safeguard your information against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: Data transmitted between your browser and our servers is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology. Sensitive data, including passwords, is stored using strong hashing algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel who require it for legitimate business purposes. We enforce role-based access controls and regular access reviews.
• Firewalls and Intrusion Detection: Our systems are protected by firewalls and intrusion detection and prevention systems to guard against unauthorized access.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing to identify and address potential risks.
• Data Minimization: We collect and retain only the personal data that is necessary for the purposes described in this Privacy Policy.
• Staff Training: Our staff who handle personal data receive appropriate training on data protection obligations and best practices.
• Incident Response: We maintain a data breach response procedure. In the event of a personal data breach, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with Article 33 and 34 of the GDPR.

While we strive to use commercially acceptable means to protect your personal data, please be aware that no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights as a Data Subject

Under the GDPR and Slovak Act No. 18/2018 Coll. on Personal Data Protection, you have the following rights regarding your personal data. You may exercise any of these rights by contacting us at contact@luxiapp.com.

7.1 Right of Access (Article 15 GDPR)

You have the right to request a copy of the personal data we hold about you and information about how it is processed. We will provide this information free of charge within one month of receiving your request.

7.2 Right to Rectification (Article 16 GDPR)

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. You may also update your account information directly through your user account settings where available.

7.3 Right to Erasure / Right to be Forgotten (Article 17 GDPR)

You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected, when you withdraw consent, or when the data has been unlawfully processed. Please note that this right is not absolute and may be subject to legal retention obligations.

7.4 Right to Restriction of Processing (Article 18 GDPR)

You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have disputed or while considering your objection to processing.

7.5 Right to Data Portability (Article 20 GDPR)

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller where technically feasible.

7.6 Right to Object (Article 21 GDPR)

You have the right to object at any time to the processing of your personal data based on our legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose without delay.

7.7 Right to Withdraw Consent (Article 7(3) GDPR)

Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7.8 Rights Related to Automated Decision-Making and Profiling (Article 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, unless such processing is necessary for a contract, authorized by law, or based on your explicit consent.

To exercise any of the above rights, please submit a written request to contact@luxiapp.com. We may need to verify your identity before processing your request. We will respond within one month; if the request is complex or we receive multiple requests, we may extend this period by a further two months, notifying you accordingly.

8. Cookie Policy (Summary)

Our Website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your experience, analyze usage, and support marketing activities.

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently, remember your preferences, and provide information to website owners.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can manage or withdraw your consent to non-essential cookies at any time through our cookie consent banner or your browser settings. Please note that disabling certain cookies may affect the functionality of our Website. For detailed information about the specific cookies we use, their duration, and your choices, please refer to our full Cookie Policy.

9. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, or reporting requirements. The specific retention periods are outlined below:

When personal data is no longer required, we will securely delete or anonymize it in accordance with our data retention procedures.

10. Children's Privacy

Our Services are intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect, process, or store personal data from children under the age of 18.

If you are under 18 years of age, please do not use our Website or Services or submit any personal data to us. If you are a parent or guardian and you believe that your child has provided us with personal data without your consent, please contact us immediately at contact@luxiapp.com so that we can take appropriate steps to identify and delete such data from our systems.

We reserve the right to request proof of age at any stage and to restrict or suspend access to our Services if we have reason to believe a user is under 18 years of age.

11. International Data Transfers

As a business based in Slovakia, which is a Member State of the European Union, your personal data is primarily processed within the European Economic Area (EEA), where a high level of data protection is guaranteed by the GDPR.

However, some of our third-party service providers may be located outside the EEA, including in countries such as the United States. When we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place to protect your data, in accordance with Chapter V of the GDPR. Such safeguards may include:

• Adequacy Decisions: Transfers to countries that the European Commission has recognized as providing an adequate level of data protection (Article 45 GDPR).
• Standard Contractual Clauses (SCCs): Use of the European Commission's approved Standard Contractual Clauses (also known as model clauses) with third-party recipients (Article 46(2)(c) GDPR).
• Binding Corporate Rules (BCRs): For intra-group transfers where applicable.
• Other Appropriate Safeguards: Certification mechanisms or codes of conduct approved under Article 40 or 42 GDPR.

You may request information about the specific safeguards applicable to international transfers of your personal data by contacting us at contact@luxiapp.com.

12. Links to Third-Party Websites

Our Website may contain links to third-party websites, applications, or services that are not operated by us. These links are provided for your convenience and information only. We have no control over the content, privacy practices, or policies of third-party websites.

We strongly encourage you to review the privacy policies of any third-party websites you visit. We are not responsible for the privacy practices or content of such external sites and we accept no liability in connection with them.

13. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post the revised Privacy Policy on this page.
• Notify you by email (if we hold a valid email address for you) or by displaying a prominent notice on our Website, where required by applicable law.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of our Services after the effective date of the revised Privacy Policy constitutes your acknowledgment of the changes.

14. How to File a Complaint with the Data Protection Authority

If you believe that we have processed your personal data in violation of applicable data protection law and you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority in Slovakia.

You also have the right to lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement if you are located in a Member State other than Slovakia.

We encourage you to contact us first at contact@luxiapp.com so that we have the opportunity to address your concerns directly before you approach a supervisory authority.

15. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests related to this Privacy Policy or our data processing practices, please do not hesitate to contact us:

We will respond to all legitimate privacy requests within 30 days of receipt. In complex cases, or where we receive a high volume of requests, this period may be extended by a further two months. In such cases, we will inform you of the extension and the reasons for it within the initial 30-day period.