Data controller
The controller of personal data is Sweet Lava, ul. Czyżówka 14, 30-526 Kraków, Poland. Contact for data matters: hello@sweetlava.eu.
What data we process and why
Contact form: we process your name, email address and message content (optionally phone and budget) solely to answer your enquiry and, where applicable, prepare a proposal (Art. 6(1)(b) and (f) GDPR). Data is kept for the duration of the correspondence and then for up to 24 months for potential claims.
Site statistics: we use Google Analytics 4 (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It records the pages you view, where you came to the site from, your approximate location and the type of your device and browser. We never link any of this to your name or email address. The legal basis is your consent (Art. 6(1)(a) GDPR), given in the cookie banner. Without it the analytics does not start. Google deletes the collected data after 14 months.
Cookies
The site uses cookies. Essential (technical) cookies are always active – among other things they remember your language choice and your consent decisions, and the site would not work properly without them. All other cookie categories (e.g. functional, analytics, advertising) run only after you give consent.
We use CookieYes (provided by CookieYes Limited) to collect and document consents. Your decision is stored in the "cookieyes-consent" cookie for 12 months. You can change or withdraw your consent at any time by clicking "Cookie settings" in the site footer – withdrawal does not affect the lawfulness of processing carried out before it.
Google Analytics 4 writes two cookies of its own: "_ga" (tells visitors apart, valid for 2 years) and "_ga_LSS3XXHBE9" (keeps the measurement session, also 2 years; the suffix is the identifier of our data stream). They are created only once you accept the analytics category. If you don't consent, the analytics runs in Consent Mode v2, so nothing is stored on your device.
Your rights
You have the right to access, rectify and erase your data, restrict processing, data portability and objection, as well as to lodge a complaint with your supervisory authority. For any data matter, write to the address above.
Data recipients
Data may be entrusted to providers operating our infrastructure (hosting, email) under data-processing agreements, only to the extent necessary to run the site. We do not sell data and do not transfer it outside the mechanisms provided for by the GDPR.
Information about your cookie consents is processed on our behalf by CookieYes Limited – the provider of our consent-management tool – solely to document them as required by the GDPR.
Site statistics data is processed on our behalf by Google Ireland Limited. Google may transfer it outside the European Economic Area, to Google LLC in the United States. Such transfers rely on standard contractual clauses approved by the European Commission and on the adequacy decision for the EU-US Data Privacy Framework, under which Google LLC is certified.