As of 27 September 2026

Privacy policy

Anyone who writes to us should know exactly what happens to their data. This policy explains what happens when you visit this website, what happens to your message and which rights you have.

1. Controller

Individual Entrepreneur ILJA KRASEVSKIJ
Kukuri Gogiashvili I Lane 8, Apt 44, 3rd floor
0177 Tbilisi, Georgia
Tax number 305845128
Email: datenschutz@luxus-websites.com

Georgia is not a member of the European Union and is not covered by an EU adequacy decision. Where we process personal data of individuals in the EU, the EEA or Switzerland, we do so on the basis of the appropriate safeguards described in section 7.

2. Visiting this website

This website sets no cookies and uses no local storage, no analytics, no tracking pixels and no advertising tools. Fonts, images and videos load from our own domain. That is why you see no cookie banner here: there is nothing to consent to.

Server log files

When a page is requested, our hosting provider automatically records technical data: IP address, date and time, the page requested, referrer, browser and operating system. This is necessary to deliver the website and keep it secure (Art. 6(1)(f) GDPR). The provider deletes or anonymises the logs after a short period and does not combine them with other data. Hosting is provided by Vercel Inc. as our processor. Vercel delivers this website through its global network.

3. When you email or call us

When you contact us by email or phone, we process the information you provide, such as your name, your contact details and the content of your message. We use it to reply to you and to prepare a conversation.

To prepare, we look at your website and at publicly available information about your company, such as your visibility on Google and in AI answers, loading times and directory listings.

• Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in answering business enquiries).
• Provision: voluntary. Without contact details we cannot reply.
• Retention: we keep enquiries for up to 24 months so that we can continue conversations, and delete them afterwards. If you tell us you are not interested, we delete your enquiry within 30 days, except for what we must keep under tax or commercial law.
• Recipients: only your contact person with us and our email provider as processor. We do not sell enquiry data or pass it on for other purposes.

4. The appointment

If an appointment takes place as a video call, the conferencing service processes video, audio, names and technical connection data to the extent required for the call. We name the service in the invitation.

Recording only with your consent

We record a conversation only if you expressly agree at the start. We use the recording and its transcript solely to capture your wishes accurately and to prepare our proposal. For this we use Fathom (Fathom Video, Inc., USA) as our processor. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. We delete recordings no later than twelve months after the conversation, or immediately on request.

5. If you are our client

To carry out an assignment, we process your contract and contact data and the content you provide for your website and your brand (Art. 6(1)(b) GDPR). We keep invoicing data for the statutory periods. Where we process personal data on your behalf, for example when running your website or your enquiry form, we first conclude a data processing agreement with you.

6. Processors we use

• Vercel Inc. (USA): hosting of this website and server log files
• Email provider with a data centre in the EU: receiving and sending emails
• Fathom Video, Inc. (USA): recording and transcription of conversations, only with your consent

Each of them acts on our documented instructions on the basis of a data processing agreement.

7. International transfers

We are established in Georgia, and some of our processors are in the USA. Where personal data from the EU, the EEA or Switzerland is transferred to us or to these processors, the transfer is based on the European Commission’s standard contractual clauses, supplemented by technical measures, in particular encryption in transit. Where a provider is certified under the EU-US Data Privacy Framework, the transfer is additionally based on it. You can request a copy of the relevant safeguards from us.

8. Your rights

You have the right to access your personal data, to have inaccurate data corrected, to erasure, to restriction of processing, to data portability and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time with effect for the future.

To exercise these rights, contact datenschutz@luxus-websites.com. We reply within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority, in the EU usually the authority at your place of residence or work.

9. Security

Transmission is encrypted (TLS). Messages arrive in a protected mailbox that only your contact person can access. We secure accounts with strong passwords and, where available, two-factor authentication.

10. Changes

We update this policy when our processing changes. The date at the top always shows the current version.

This is a translation for your convenience. The German version is authoritative.