Privacy policy
Effective from: 26 Oct 2026
1. Who we are
The controller of your personal data is KALTA, razvoj programske opreme, Aljaž Hočevar, s.p., Trubarjeva cesta 19, 8310 Šentjernej, Slovenia (registration no. 7401736000, tax no. 57650098). LopOff is the brand under which the controller operates lop-off.com. For privacy questions, write to [email protected].
2. What we collect and why
lop-off.com is a presentation website. We only collect personal data that you give us:
“I’m interested” sign-up
- Data: email address, page language, the page you signed up on, sign-up and confirmation time, the version of the consent text, and a hashed (irreversibly masked) form of your IP address to prevent abuse.
- Purpose: to email you about the LopOff launch and product updates.
- Legal basis: your consent (GDPR Art. 6(1)(a)). You confirm your sign-up by clicking the link in our email (double opt-in). Without confirmation we won’t send you any email about the launch or product updates.
Messages via “Contact”
- Data: your email address and the content of your message.
- Purpose: to reply to your question.
- Legal basis: our legitimate interest in answering your message (GDPR Art. 6(1)(f)).
We don’t sell your data, profile you, or share it for advertising.
3. Cookies and tracking
This website does not use cookies, analytics, tracking or advertising tools, so there is no cookie banner.
4. How long we keep data
- “I’m interested” sign-up: until you unsubscribe, at most 12 months after sales start. Unconfirmed sign-ups are deleted after 30 days.
- Contact messages: as long as needed to reply, at most 2 years.
- Abuse protection (hashed IP): at most 30 days.
5. Where data is stored and who processes it
We store data on servers in the European Union (Slovenia, Germany) and work with processors under data processing agreements:
- NEOSERV d.o.o., Slovenia – hosting the form data, and sending confirmation, launch and product-update emails,
- Hetzner Online GmbH, Germany – hosting the LopOff service server,
- Cloudflare, Inc. – bot protection for the forms (Turnstile) and attack protection (may involve transfer to the USA under Standard Contractual Clauses / the EU-US Data Privacy Framework).
Our pages are delivered through Cloudflare, which processes technical request data, such as your IP address, to deliver them. The data you enter in the sign-up and contact forms does not go through Cloudflare: it goes straight to our server in the EU, and the forms use Cloudflare Turnstile as a check that you are human.
6. Your rights
You have the right to access, rectify, erase, restrict, port and object, and to withdraw your consent at any time – easiest via the “Unsubscribe” link in every email or by writing to [email protected]. Withdrawal doesn’t affect processing before it.
If you believe we process your data unlawfully, you can complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.
7. The LopOff app
This policy covers the website. A separate privacy policy will apply to the LopOff app and service at launch.
8. Changes
We may update this policy. The date of the last change is shown at the top.