LULUART / INFORMATION
Privacy notice
Last updated: 2026-10-18
Controller and scope
The controller of the luluart.me portfolio website is Tresó Pál. Privacy contact: [email protected]. This notice covers browsing, email enquiries and optional visitor analytics.
Website delivery and security
The website is hosted on Cloudflare Pages. Delivery may involve processing IP addresses, request timestamps and URLs, browser/device information, HTTP headers and security events. Purposes: content delivery, troubleshooting and abuse prevention. Legal basis: GDPR Article 6(1)(f), the legitimate interests of the operator and visitors in a functioning, secure website. This application does not maintain its own visitor log database. Retention of service-provider technical data: This site keeps no visitor log database. Provider retention is determined by the time necessary for delivery, security, incident handling and legal obligations under applicable Cloudflare terms; see the provider privacy policy..
Email enquiries
If you email [email protected], we process your email address, any name supplied, subject, message, attachments and technical email data to respond. General enquiries rely on Article 6(1)(f), our legitimate interest in handling correspondence. Unnecessary correspondence is deleted within 12 months after the enquiry is closed. Data required for a legal claim or statutory obligation is retained only for the applicable period. Without the necessary contact information we may be unable to reply. Please do not send sensitive or unnecessary third-party data.
Visitor analytics
Cloudflare Web Analytics loads only after permission. Purpose: aggregate analysis of page views, referring sites, country, browser, device and performance data. Legal basis: GDPR Article 6(1)(a), consent. Cloudflare states that this analytics does not use analytics cookies or browser fingerprinting. Network communication can still involve technical data processing. Retention: Cloudflare Web Analytics provides access to statistics for the previous 6 months. The provider stores unsampled measurement data for 7 days, then aggregates and samples it for longer-term storage.. You can withdraw consent in “Privacy settings” in the footer; withdrawal does not affect prior lawful processing.
Cookies and local browser storage
The site’s own code does not set advertising or profiling cookies. Your privacy choice is stored under luluart-privacy-v1 in localStorage, with a version, timestamp and yes/no analytics setting, for up to 180 days. This remembers your choice and can also be removed by clearing browser data. Enabled Cloudflare security features may use essential technical cookies; see the linked provider documentation.
Recipients and international transfers
Hosting, delivery and security provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Email service provider/processor: Google Workspace – Google Cloud EMEA Limited (verify against the account agreement); address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. Email processing location: Google and subprocessor infrastructure, with possible processing inside and outside the EEA. Any non-EEA email transfer and safeguards: Google Workspace CDPA and applicable transfer safeguards, including SCCs where required. Cloudflare’s global network may involve processing outside the EEA; applicable contractual safeguards are described in its data processing terms and standard contractual clauses. Other recipients receive data only when necessary and lawful.
Your rights and remedies
Subject to the GDPR conditions, you may request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Contact [email protected]. We normally respond within one month and notify you of any permitted extension. You may complain to Hungary’s NAIH (1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; [email protected]; naih.hu), another competent supervisory authority, or seek a judicial remedy. Check NAIH’s website for formal complaint procedures.
Further information
LuluArt is currently a non-commercial hobby portfolio. It does not offer sales or commissions and has no account registration or newsletter sign-up. It does not make automated decisions with legal effects or perform profiling. External websites have their own privacy practices. This notice will be updated when new functions or processing activities are introduced.