Legal notices
Privacy & Cookies
This page explains what data we collect, why, and how we use it. We respect your privacy and only collect what is strictly necessary.
1. Data controller
The data controller is:
LB STUDIO Lara Buh s.p.
Pot v Bitnje 6, 4000 Kranj, Slovenia
Email: info@lb-studio.si
Phone: +386 40 348 543
2. What data is collected
The website lb-studio.si collects the following data:
- Server technical data: IP address, browser type, operating system, time of visit, pages visited. This is part of standard server logs and kept for up to 30 days.
- Mouseflow analytics (only with your consent): mouse movements, clicks, scrolling, time on page, device type and screen size. Sensitive inputs (password fields, emails, phone numbers, message bodies) are automatically masked and not stored.
- Data you provide via the contact form or by email (name, email, message). We use this only to reply to your enquiry.
3. Legal basis and purpose
We process data on the following legal bases:
- Consent (Art. 6(1)(a) GDPR) — for Mouseflow analytics. You may withdraw consent at any time.
- Legitimate interest (Art. 6(1)(f) GDPR) — for basic server logs (security, debugging, traffic statistics).
- Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR) — to reply to your enquiries.
4. Cookies and local storage
The website uses the following storage in your browser:
- Strictly necessary: stores your consent choice (accept or decline). Without this you would be asked again on every visit. Very small, no tracking purpose.
- Mouseflow cookies (only with consent): allow visitor session recognition across pages and recording of interactions. More: Mouseflow Cookie Policy.
You can withdraw consent at any time by clearing your browser data for this site or by contacting us at info@lb-studio.si.
5. Recipients of the data
We do not share data with third parties, except:
- Mouseflow ApS (Denmark, EU) — analytics processor. EU-based, GDPR-compliant.
- Hosting provider — technically necessary for the site to operate. Server is in the EU.
We do not sell data and do not use it for third-party advertising.
6. Retention
- Mouseflow sessions: up to 12 months, then automatically deleted.
- Server logs: up to 30 days.
- Contact form messages: until the conversation is closed, max 3 years.
7. Your rights
Under the GDPR you have the right to:
- access your data,
- rectify inaccurate data,
- erase data («right to be forgotten»),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time (withdrawal does not affect prior processing).
Send any request to info@lb-studio.si. We respond within 30 days.
You also have the right to lodge a complaint with the Slovenian Information Commissioner: www.ip-rs.si.
8. Changes to this policy
We may update this policy occasionally. Material changes will be posted on this page with the date of the last update.
Last updated: 8 May 2026