Privacy & Cookie Policy
lavelmo.com
Document updated: August 1, 2026
Privacy & Cookie Policy
lavelmo.com
(“the Service”)
Dear Users!
The privacy of our service users is our priority. We want you to feel fully secure while using our Service and application. This document explains the rules under which we manage your personal data and how we use cookie technologies. The content of this policy has been prepared based on the requirements of the GDPR (General Data Protection Regulation).
1. Controller of Your Data
The entity responsible for processing personal data is:
KUISIM SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (limited liability company) with its registered office in Kraków (30-074), ul. Kazimierza Wielkiego 4/4, Poland. The company is registered by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register under number: 0001085998, Tax ID (NIP): 6772505950, Statistical ID (REGON): 527685056. Share capital: PLN 5,000.
For matters concerning privacy protection, you can contact us at: kontakt@lavelmo.com.
2. User Rights
In connection with the processing of personal data, you have the right to request:
- access to your personal data, including receiving a copy thereof (Art. 15 GDPR or – if applicable – Art. 13(1)(f) GDPR),
- rectification of your data when it is inaccurate or incomplete (Art. 16 GDPR),
- erasure of data, the so-called “right to be forgotten” (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability to another controller (Art. 20 GDPR).
Right to Object:
- At any time, you may object to the processing of your data based on the legitimate interest of the controller (Art. 6(1)(f) GDPR), including profiling – for reasons arising from your particular situation (Art. 21(1) GDPR).
- If your data is processed for direct marketing purposes, including profiling related to such marketing, you may object at any time, which results in the immediate cessation of such activities (Art. 21(2) GDPR).
Contact us if you wish to exercise any of the above rights. You can express your objection to the use of cookies (described later in this document) in particular through appropriate settings in your web browser.
If you believe that the processing of your data violates applicable regulations, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
3. Data Processing in Practice
Below we present detailed information about the processing of your data depending on the actions you take.
A. Provision of Paid Services and Membership
Purpose | |
|---|---|
Performance of the agreement for the provision of services available in the Service and application | |
Legal Basis | |
Necessity for the performance of a contract (Art. 6(1)(b) GDPR) | Obligations arising from legal provisions, particularly tax and accounting (Art. 6(1)(c) GDPR) |
Retention Period | |
For the duration of the agreement / account activity | Until the expiry of legal obligations incumbent on the controller (usually 5 years from the end of the tax year) |
Additionally, your data will be stored until the expiry of the limitation period for potential claims – both from your side and ours (see point 3G below) | |
What happens if you do not provide your data? | |
We will not be able to provide you with our services or enable you to use the application features | |
B. Contact and Inquiries
Purpose | |
|---|---|
Handling your inquiries, reports, and correspondence | |
Legal Basis | |
Performance of a contract or taking action at your request prior to its conclusion (Art. 6(1)(b) GDPR) – when the inquiry relates to a contract to which we are or may be a party | Our legitimate interest in communicating with you (Art. 6(1)(f) GDPR) – when the inquiry is not directly related to a contract |
Retention Period | |
For the term of the agreement or – if the agreement is not concluded – until the expiry of the limitation period for claims (see point 3G)* | Until the expiry of the limitation period for claims (see point 3G) or until your objection to processing is upheld* |
Additionally, your data will be stored until the expiry of the period during which claims may be pursued – both from your side and ours (see point 3G below) | |
What happens if you do not provide your data? | |
We will not be able to respond to your question or handle your report | |
* depending on which applies in a given case
C. Service Satisfaction Surveys
Purpose |
|---|
Improving the quality of our services based on User opinions and ratings |
Legal Basis |
Our legitimate interest in measuring your satisfaction with our services (Art. 6(1)(f) GDPR) |
Retention Period |
5 years or until your objection to processing is upheld* |
Additionally, your data will be stored until the expiry of the period during which claims may be pursued (see point 3G below) |
What happens if you do not provide your data? |
We will not be able to take your opinion into account in further development of our services |
* depending on which applies in a given case
D. Browser Settings or Other Actions Permitting Marketing Activities
Purpose |
|---|
Direct marketing consisting of presenting personalized advertisements (read more in the “Profiling” and “Cookies” sections of this Policy) |
Legal Basis |
Our legitimate interest in processing data for the stated purpose (Art. 6(1)(f) GDPR) |
Retention Period |
Until the expiry or deletion by you of cookies used for marketing purposes* |
What happens if you do not provide your data? |
You will not receive product or service suggestions tailored to your interests |
* depending on which applies in a given case
E. Browser Settings or Other Actions Permitting Analytical Activities
Purpose |
|---|
Analysis of how you use the Service and application in order to improve their functionality (read more in the “Analytical Activities” and “Cookies” sections of this Policy) |
Legal Basis |
Our legitimate interest in processing data for the stated purpose (Art. 6(1)(f) GDPR) |
Retention Period |
Until the expiry or deletion by you of cookies used for analytical purposes* |
What happens if you do not provide your data? |
Your manner of using the Service and application will not be taken into account in their development |
* depending on which applies in a given case
F. Consent to Receive Marketing Content (e.g., Promotional Information)
Purpose | |
|---|---|
Sending marketing messages, including information about special offers | Analysis of the effectiveness of messages we send in order to determine general principles of effective marketing communication (read more in the “Analytical Activities” section) |
Legal Basis | |
Your consent to marketing activities (Art. 6(1)(a) GDPR) | Our legitimate interest in analyzing the effectiveness of mailings (Art. 6(1)(f) GDPR) |
Retention Period | |
Until you withdraw your consent – remember, you can withdraw it at any time; processing carried out before the withdrawal of consent remains lawful | Until your objection to processing is upheld |
Additionally, your data will be stored until the expiry of the period during which claims may be pursued – both from your side and ours (see point 3G below) | |
What happens if you do not provide your data? | |
You will not receive marketing materials from us, including information about current promotions and offers | |
G. Establishment, Pursuit, or Defense of Claims
Purpose |
|---|
Establishment, pursuit, or defense of potential claims related to the concluded agreement or services provided |
Legal Basis |
Our legitimate interest in processing data to protect our rights (Art. 6(1)(f) GDPR) |
Retention Period |
Until the expiry of the limitation period for claims or until your objection to processing is upheld* |
What happens if you do not provide your data? |
Inability to establish, pursue, or defend claims |
* depending on which applies in a given case
4. Profiling
Within the Service and the Gentlemen VIP application, we may use profiling – this will only take place with your consent. Profiling involves the automatic analysis of the content you browse in order to assess what products or services you may be interested in. This allows the ads and offers presented to you to be better tailored to your individual preferences.
The profiling we use does not produce any legal effects concerning you nor does it similarly significantly affect you.
5. Analytical Activities
We conduct analytical activities on the Service website and in the application, aimed at increasing their intuitiveness and accessibility – with respect to you, this will take place if you consent. As part of the analysis, we consider the way you navigate the interface – including how much time you spend in individual sections and which elements you click. This allows us to optimize the layout, appearance, and content so that the Service and application work better.
Additionally, if you consent to receive marketing messages from us, we may analyze the effectiveness of the mailings. For example, we check whether and how a given mailing influenced activity on our Service. Such activities allow us to establish general rules regarding effective marketing communication – e.g., regarding optimal sending times or the way content is formulated.
6. Data Security
All data transmitted through the Service and application is protected against unauthorized access. When processing your personal data, we apply organizational and technical measures in accordance with applicable law, including encryption of the connection using the SSL/TLS protocol.
7. Cookies
Our Service, like most websites, uses so-called cookies. These files:
- are stored in the memory of your device (computer, phone, etc.),
- do not cause changes to your device settings.
In our Service, cookies are used for the purposes of:
- ensuring the proper functioning of the Service,
- statistical and analytical purposes,
- marketing purposes.
To learn how to manage cookies, including how to disable them in your browser, you can use your browser’s help file (F1 key). You can also find relevant instructions on the following pages:
Below you will find information about the cookies we use, their functions, and validity periods:
Cookie Name | Validity | Purpose |
|---|---|---|
__stripe_mid / __stripe_sid | 180 days / 24 min | Essential – ensuring security and handling payment processes (Stripe). |
_ga / _ga_* | 180 days | Analytical – distinguishing users and collecting anonymous statistical data about website traffic (Google Analytics). |
gv_auth | 30 days | Essential – maintaining the session of a logged-in user in the application. |
cookieyes-consent | 180 days | Essential – remembering your cookie consent preferences. |
NEXT_LOCALE | Session | Essential – remembering your selected interface language (PL/EN). |
Using the appropriate options in your browser, you can at any time:
- delete cookies,
- block their use in the future.
In such cases, we will no longer process them.
8. Data Recipients and Transfer Outside the EU
We use the services of external entities that support us in conducting our business. We entrust them with the processing of your data – these entities process data only on our documented instructions.
Below you will find a list of recipients of your data:
Activity | Data Recipients | Transfer of Data Outside the European Union |
|---|---|---|
Any activity related to the Service and application | Cloud infrastructure provider (Google Firebase) | Yes – United States of America** |
Technology partners (Hostido – email and domain hosting) | No transfer | |
Individuals cooperating with us under civil law agreements, supporting ongoing operations | No transfer | |
Browsing the Service website with settings permitting analytical activities | Analytics service provider (Google Analytics) | Yes – United States of America** |
Use of paid services available in the Service | Payment operator (Stripe) | Yes – United States of America** |
Accounting office | No transfer |
Additionally: appropriate public authorities – to the extent that we are obligated to provide them with data under applicable law.
9. Transfer of Data to Countries Outside the European Union
** In connection with the above, your personal data may also be processed by entities headquartered outside the European Union. The appropriate level of protection for your data, including through the application of appropriate safeguards, is ensured by the participation of these entities in the so-called Data Privacy Framework – a program established by an implementing decision of the European Commission as a set of rules guaranteeing adequate privacy protection, in the case of entities from the United States of America.