Cookie Policy

I. What are cookies?

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They help the website remember your preferences, improve the user experience and allow traffic analysis. Cookies do not harm your device and do not contain viruses.

II. Operator

The operator of the website luxmotion.sk is Gaelta s. r. o., registered office Novomestská ulica 9514/9, 917 01 Trnava, Slovakia, Company ID: 55 966 357, operating the brand LuxMotion – Zážitková požičovňa áut (the “Operator”). Contact: [email protected], phone: +421 911 463 138.

III. Legal basis

The processing of cookies is governed by Regulation (EU) 2016/679 (GDPR), Slovak Act No. 18/2018 Coll. on personal data protection, Act No. 452/2021 Coll. on electronic communications (implementing the ePrivacy Directive) and Act No. 22/2004 Coll. on electronic commerce.

Strictly necessary cookies are processed on the basis of the Operator's legitimate interest (Art. 6(1)(f) GDPR) – they are necessary for the website to work and do not require your consent.

Analytics, functional and marketing cookies are processed only on the basis of your prior freely given, informed and unambiguous consent (Art. 6(1)(a) GDPR), which you give via the cookie bar on your first visit. Consent can be withdrawn at any time.

IV. Categories of cookies

A. Strictly necessary cookies (technical)

Essential for the proper functioning of the website, the cart and the ordering process. They do not require consent.

B. Analytics cookies

Help us understand how visitors use the website. The data is pseudonymous. They require your consent.

Session recordings (Microsoft Clarity): Records cursor movements, clicks and scrolling. Sensitive fields (passwords, payment data, document numbers) are masked automatically. Recordings are pseudonymous and kept for 30 days.

C. Marketing cookies

Used to show relevant ads, measure campaign effectiveness and track conversions. They require your consent.

D. Functional cookies

They enable extended functionality and personalisation. They require your consent. We currently do not use any functional cookies on the website.

V. Google Tag Manager (GTM)

To manage tracking scripts we use Google Tag Manager. GTM itself does not store analytics or marketing cookies. It serves as a container for loading other tools (GA4, Google Ads), which are activated only after the relevant consent is given via Google Consent Mode v2.

VI. Google Consent Mode v2

The website luxmotion.sk implements Google Consent Mode v2, which ensures that:

• no Google analytics or marketing cookies are loaded without your consent;
• without consent, Google tools work in a limited mode (no cookies, no identifiers);
• consent preferences are automatically passed to all connected Google services;
• full compatibility with the GDPR and the Digital Markets Act (DMA).

VII. PixelYourSite and Meta Conversions API (CAPI)

Event tracking for Meta (Facebook/Instagram) is implemented via the plugin PixelYourSite. The plugin tracks standard e-shop events:

• ViewContent – viewing the detail of a vehicle or service;
• AddToCart – adding to the cart;
• InitiateCheckout – starting an order;
• AddPaymentInfo – entering payment details;
• Purchase – completing an order (with value and currency);
• Lead – submitting a form / signing up for the newsletter.

Events are sent through two channels, only after marketing consent is given:

1. Meta Pixel (browser-side) – cookies _fbp a _fbc.
2. Meta Conversions API (CAPI) server-to-server – our server sends the event directly to Meta's servers using hashed (SHA-256) identifiers (e-mail, phone, name, IP address). Hashing makes it impossible to recover the original values. PixelYourSite ensures event deduplication via event_id.

Meta Platforms, Inc. and the Operator may be in this process joint controllers (Art. 26 GDPR, judgment C-40/17 Fashion ID). Details: Meta Controller Addendum.

VIII. Microsoft Clarity

Microsoft Clarity records interactions with the website and generates heatmaps. It is activated only after analytics consent is given.

• Recordings are pseudonymous – without name, e-mail or direct identifiers.
• Sensitive fields (passwords, payment data, document numbers) are masked automatically.
• Recordings are kept for at most 30 days, then deleted automatically.
• Microsoft is certified under the EU-U.S. Data Privacy Framework (DPF) + SCC.

More information: Official Microsoft Clarity website.

IX. Measurement via our server

Your browser does not send data for Google Analytics 4 directly to Google, but first to our server meranie.luxmotion.sk, which the Operator runs in a Hetzner Online GmbH data centre in the European Union. From there we pass them on to Google Analytics. This gives us better control over what data goes to third parties.

The consent rules apply in the same way: without your consent no analytics cookies are stored and Google only receives an anonymous signal without identifiers (Google Consent Mode v2).

X. How to manage cookies?

• Cookie bar: On your first visit you set your preferences for each category. You can change them at any time using the cookie button in the bottom left corner of the page.
• Browser settings: Chrome, Firefox, Safari, Edge.
• Opt-out tools: Google Analytics Opt-out, Meta ad settings, Your Online Choices.

Note: Blocking or deleting cookies may affect how the website works. Some functions may not be available.

XI. Changes to the cookie policy

The Operator reserves the right to update this policy at any time, in particular following changes in legislation or the technologies used. The current version is always available at www.luxmotion.sk/cookies.

XII. Contact

For questions about cookies or personal data protection, contact us: [email protected] or phone: +421 911 463 138.

Supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk.