Privacy Policy
Last updated: 2026-05-01
1. Who Is Responsible for Your Data
| Data Controller | Gergely Kiss |
| Website operated under | the LiveSystems brand |
| NIF | [PENDING] |
| Address | Avinguda de Joan Miró, 20 1/2, Ponent, 07014 Palma, Illes Balears, Spain |
| [email protected] |
This Privacy Policy applies to the website livesystems.space and describes how personal data is collected, used, stored, and protected in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2. What Data We Collect and Why
2.1 Contact Form
When you submit the contact form, the following data is collected and stored.
Data you provide directly:
| Field | Purpose |
|---|---|
| Full name | To identify and address you in our response |
| Email address | To respond to your enquiry |
| Phone number | To contact you if requested or appropriate |
| Company name | To understand the context of your enquiry |
| Message | To process and respond to your request |
Data collected automatically at the time of submission:
| Field | Purpose |
|---|---|
| Form source / CTA identifier | To understand which part of the website led to contact |
| Language preference | To respond in your preferred language |
| Device information (OS, browser type, screen dimensions, device type, user agent string) | To maintain system security and diagnose technical issues |
| Google Analytics Client ID | To link your submission to an existing analytics session for service improvement |
| PostHog Distinct ID and Session ID | To link your submission to an existing analytics session for service improvement |
| IP address | For security, fraud prevention, and Cloudflare Turnstile bot protection |
Legal basis: Article 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a contract, and Article 6(1)(f) GDPR — legitimate interests in maintaining system security and improving our services.
Please note: Your contact form submission is linked to your analytics profile. This means that if you have been assigned a Google Analytics or PostHog identifier during your visit, that identifier is stored alongside your personal data. You may prevent this by clearing your cookies before submitting the form or by declining analytics cookies via our cookie consent banner.
2.2 Website Analytics
We use two analytics tools to understand how visitors use our website.
Google Analytics 4 (GA4) Operated by Google LLC. GA4 collects data such as pages visited, time on site, browser and device type, and approximate geographic location via IP anonymisation. Data is processed under Google's terms as a data processor. Data may be transferred to the United States under Standard Contractual Clauses approved by the European Commission.
PostHog (EU Cloud) Operated by PostHog, Inc., hosted within the European Union. PostHog collects behavioural data including page events, session recordings (if enabled), and user interactions. As data is hosted in the EU, no international data transfer occurs.
Legal basis: Article 6(1)(a) GDPR — your consent, given via the cookie consent banner on the website.
2.3 Bot Protection (Cloudflare Turnstile)
Our contact form is protected by Cloudflare Turnstile, a bot detection service operated by Cloudflare, Inc. Turnstile may process your IP address, browser characteristics, and interaction patterns solely to verify that you are a human user. This processing occurs before form submission and the data is not stored by us. Data may be transferred to the United States under Standard Contractual Clauses.
Legal basis: Article 6(1)(f) GDPR — legitimate interest in protecting our website and services from automated abuse.
3. How Long We Keep Your Data
| Data | Retention period |
|---|---|
| Contact form submissions (all fields) | 2 years from the date of submission, or until you request deletion |
| Google Analytics data | 14 months (as configured in GA4) |
| PostHog analytics data | 12 months |
| Cloudflare Turnstile processing data | Not retained by us; governed by Cloudflare's own retention policy |
4. Who Has Access to Your Data
Your data is not sold, rented, or shared with third parties for marketing purposes. Access is limited to:
- Gergely Kiss — as data controller, for the purpose of responding to your enquiry
- Google LLC — as data processor for Google Analytics and Google Sheets / Apps Script (contact form data storage). Google's Privacy Policy
- PostHog, Inc. — as data processor for website analytics. PostHog's Privacy Policy
- Cloudflare, Inc. — as data processor for bot protection via Turnstile. Cloudflare's Privacy Policy
All third-party processors are bound by data processing agreements and, where applicable, Standard Contractual Clauses for international data transfers.
5. International Data Transfers
Three of our data processors are based in the United States: Google LLC, Cloudflare, Inc., and PostHog, Inc. (for certain operational functions). Data transfers to these processors are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission under Article 46(2)(c) GDPR, providing appropriate safeguards for your data.
PostHog analytics data is stored exclusively in the European Union.
6. Your Rights
Under GDPR and LOPDGDD, you have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Ask us to delete your data ("right to be forgotten") |
| Restriction | Ask us to limit how we process your data in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Where processing is based on consent, withdraw it at any time without affecting prior processing |
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may request proof of identity before processing your request.
If you believe your rights have not been respected, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.
7. Cookies
For detailed information about the cookies used on this website and how to manage your preferences, please refer to our Cookie Policy.
8. Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), access controls, and the use of vetted third-party processors.
No method of transmission over the internet is 100% secure. We will notify you and the relevant supervisory authority in the event of a data breach that poses a risk to your rights and freedoms, in accordance with Article 33 GDPR.
9. Amendments
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version is always available at livesystems.space/privacy-policy. Continued use of the website after an update constitutes acknowledgment of the revised policy.