Privacy Policy

1. Data controller

The data controller for personal data collected through the website lorvero.com is:

• Owner: {{LEGAL_ENTITY}}
• Tax ID: {{LEGAL_NIF}}
• Address: {{LEGAL_ADDRESS}}
• Contact email: info@lorvero.com

2. Data we collect and purpose

The Site does not require registration or the direct provision of personal data. However, using the Site entails the automatic collection of certain data through the technical services described below:

2.1 Browsing data (analytics)

We use PostHog to analyze how the Site is used. When the user accepts analytics cookies, PostHog collects:

• IP address (anonymized)
• Pages visited, time on page, and navigation path
• Device type, browser, and operating system
• Country and region of origin (derived from IP)

This data is used solely to measure Site performance and understand user behavior in aggregate. PostHog is configured with person_profiles: 'identified_only', meaning no profiles are created for anonymous users.

2.2 Error logging data

We use Sentry to detect and diagnose technical errors. Sentry may automatically collect information about the error, the user's browser, and the URL where the error occurred. It does not collect personally identifiable data unless included in the URL itself or in the error message.

2.3 Infrastructure data (Cloudflare)

The Site is hosted on Cloudflare Pages. Cloudflare may temporarily log visitors' IP addresses as part of its content delivery network (CDN) and attack protection service. These logs are retained for a maximum of 24 hours.

3. Legal basis for processing

Consent for analytics is collected through the cookie banner displayed on the first visit. It may be withdrawn at any time via the cookie policy.

4. Recipients and international transfers

Data may be processed by the following third parties:

• PostHog, Inc. — Analytics provider. Data is stored on servers in the European Union (eu.i.posthog.com) under the GDPR. PostHog Privacy Policy →
• Functional Software, Inc. (Sentry) — Error monitoring provider. Based in the US; international transfers are covered by Standard Contractual Clauses approved by the European Commission. Sentry Privacy Policy →
• Cloudflare, Inc. — CDN and hosting provider. Based in the US; transfers are covered under the EU-U.S. Data Privacy Framework. Cloudflare Privacy Policy →

We do not share data with third parties for advertising or their own commercial purposes.

5. Data retention periods

• PostHog: 1 year from event collection (configurable).
• Sentry: 90 days from error occurrence.
• Cloudflare (CDN logs): maximum 24 hours.
• Cookie preference: 1 year in the user's browser (localStorage).

6. User rights

Under the GDPR, users have the following rights:

• Access — know what personal data we process about you.
• Rectification — correct inaccurate data.
• Erasure ("right to be forgotten") — request deletion of your data.
• Objection — object to certain processing activities.
• Restriction — restrict processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Withdrawal of consent — at any time, without retroactive effect.

To exercise these rights, write to us at info@lorvero.com, specifying the right you wish to exercise and providing a copy of your identification document. We will respond within one month.

7. Complaint to a supervisory authority

If you believe that the processing of your data violates data protection regulations, you have the right to lodge a complaint with the relevant supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD):

• Website: www.aepd.es
• Address: C/ Jorge Juan, 6, 28001 Madrid

For users in other jurisdictions, please contact your local data protection authority.

8. Changes to this policy

We may update this policy to reflect changes in our practices or applicable regulations. Significant changes will be communicated through a visible notice on the Site. The date of the last update appears at the top of this page.