Introduction
LavX Managed Systems ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your personal information when you use our website and services.
Our Data Protection Representative is Laszlo Adam Toth, who can be contacted using the information provided in section 11.
Data we collect
We collect and process the following types of personal data:
- Chat data:
- Messages and information shared during chat sessions
- Browser fingerprint for session management
- Automatically extracted information like name, company, or project details
- All chat data is automatically deleted after 24 hours
- Contact form data:
- Name and email address
- Message content
- Subject of inquiry
- Technical data:
- Browser type and version
- Device information
- IP address
- Analytics data (if consented)
How we use your data
We use your personal data for the following purposes:
- Chat service:
- Providing real-time chat assistance
- Maintaining chat context and history (24-hour retention)
- Creating vector embeddings for better response relevance
- Analyzing chat content for lead generation
- Contact management:
- Responding to your inquiries
- Sending service-related communications
- Processing business inquiries and leads
- Service improvement:
- Analyzing service usage patterns
- Improving chat responses and user experience
- Website analytics (with consent)
Data storage and security
We use the following systems to store and process your data:
- Temporary storage (Valkey):
- Chat sessions and messages
- User information from chats
- Automatic deletion after 24 hours
- Vector storage (Qdrant):
- Message embeddings for context understanding
- Deleted along with chat sessions after 24 hours
- Email system:
- Contact form submissions
- Lead notifications
- Processed through secure SMTP
All data is stored within the European Union in compliance with GDPR regulations.
Automated processing
We employ automated processing in the following ways:
- Chat analysis for lead generation after 10 minutes of inactivity
- Vector embeddings creation for message context
- Automatic information extraction from chat conversations
You have the right to object to automated processing of your data at any time.
Your rights under GDPR
Under GDPR, you have the following rights:
- Right to access: Request a copy of your personal data
- Right to rectification: Correct your personal data
- Right to erasure: Request deletion of your data
- Right to restrict processing: Limit how we use your data
- Right to object: Object to processing of your data
- Right to data portability: Request transfer of your data
Most data is automatically deleted after 24 hours, but you can request immediate deletion at any time.
Analytics and tracking
7.1 Rybbit analytics (self-hosted)
We use Rybbit, a privacy-focused, self-hosted analytics platform to understand website usage patterns and improve our services. This service is hosted on our own infrastructure in Germany and collects:
- Usage data:
- Pages visited and time spent
- Interaction with website features
- Traffic sources and referrers
- Navigation paths through the website
- Technical information:
- Device type and screen size
- Browser type and version
- Operating system
- Geographic location (country level)
- Error monitoring:
- JavaScript errors and exceptions occurring in your browser
- Error stack traces and context for debugging
- Browser and environment information at time of error
- Session replays:
- Anonymous recordings of user interactions with the website
- Mouse movements, clicks, and scroll behavior
- Form interactions (sensitive fields are automatically masked)
- Page navigation and timing data
Privacy-first approach:
- No personal data or cookies are used for tracking
- IP addresses are anonymized
- Data is stored exclusively on our servers in Germany
- No data is shared with third parties
- Session replays automatically mask sensitive input fields (passwords, credit cards, etc.)
- Personal identifiable information is excluded from error logs
- GDPR compliant by design
The analytics service is available at tracking.lavx.hu and processes data for the following domains: lavx.hu, news.lavx.hu, and tools.lavx.hu.
7.2 Google Analytics
We also use Google Analytics to understand website usage patterns. This service collects:
- Usage data:
- Pages visited and time spent
- Interaction with website features
- Traffic sources and navigation paths
- Technical information:
- Device type and screen size
- Browser type and version
- Geographic location (country / city level)
Google Analytics data collection is subject to your consent. You can:
- Choose whether to allow analytics cookies
- Change your preferences at any time
- Use our services without analytics enabled
Data collected by Google Analytics is processed in accordance with Google's Privacy Policy and retained for 26 months.
Cloudflare services
We use Cloudflare for content delivery, security, and performance optimization. Cloudflare processes:
- Connection data:
- IP addresses
- Basic HTTP request data
- Browser type and version
- Security information:
- Security tokens and cookies
- Traffic patterns for threat detection
- DDoS protection metrics
Cloudflare's processing is essential for our website's security and performance. Their services comply with GDPR and other privacy regulations. For more information, you can review Cloudflare's Privacy Policy.
Data Processing Agreement (DPA)
For enterprise clients requiring a formal Data Processing Agreement under GDPR Article 28, we provide comprehensive DPA documentation covering:
- Data processing scope and purpose: Clear definition of processing activities and lawful basis
- Security measures and obligations: Technical and organizational security controls
- Sub-processor management: Transparent disclosure and management of third-party processors
- Data subject rights procedures: Processes for handling access, rectification, and deletion requests
- Incident response protocols: Data breach notification and response procedures
- International data transfers: Safeguards for transfers outside the EU / EEA
- Audit rights and compliance: Client audit rights and compliance verification
To request our standard DPA template or discuss custom terms, contact: [email protected]
Contact information
For any privacy-related questions or to exercise your rights, contact our Data Protection Representative:
- NameLaszlo Adam Toth
- Email[email protected]
- Phone+36-30-907-3238
- AddressBauer Sandor str. 1, 2nd door, Taksony, 2335, Hungary
We will respond to all legitimate requests within one month.
Updates to this policy
We may update this privacy policy from time to time. The latest version will always be posted on this page with the updated date at the top. Significant changes will be notified through our website or email.