GDPR Compliance
Last updated: January 16, 2026
1. Our Commitment to GDPR
QUBE d.o.o. ("LovePay") is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have implemented policies and procedures to comply with the General Data Protection Regulation (GDPR).
Data Controller:
QUBE d.o.o.
Ulica Josipa Huttlera 34
Email: support: qube.reach@gmail.com
OIB: 05419427342
2. Lawful Basis for Processing
Under GDPR, we process personal data based on the following lawful bases:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for the performance of a contract with you
- Legitimate Interests: Processing is necessary for our legitimate interests, provided your fundamental rights do not override those interests
- Legal Obligation: Processing is necessary to comply with the law
3. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
3.1 Right to Access (Article 15)
You have the right to obtain confirmation as to whether we process personal data concerning you, and if so, to request access to that personal data and information about how we process it.
3.2 Right to Rectification (Article 16)
You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.
3.3 Right to Erasure (Article 17)
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.
3.4 Right to Restriction of Processing (Article 18)
You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
3.5 Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
3.6 Right to Object (Article 21)
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
3.7 Rights Related to Automated Decision-Making (Article 22)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
4. How to Exercise Your Rights
To exercise any of your GDPR rights, you can:
- Email us at qube.reach@gmail.com with your request
- Contact us by phone: +385 99 828 1832 (Marko)
- Write to us at: QUBE d.o.o., Ulica Josipa Huttlera 34
We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days, but we will notify you of any extension and the reasons for it.
5. Data Processing Activities
5.1 Image Processing
When you upload images to LovePay for analysis, we process these images to provide our reverse image search services. Images are processed in real-time and are not stored permanently unless you opt for monitoring services.
5.2 Account Information
We process account information (email, name, billing details) to manage your subscription and provide customer support.
5.3 Analytics Data
We process website analytics data to improve our services and user experience.
6. Data Protection Measures
We implement appropriate technical and organizational measures to ensure data security, including:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication mechanisms
- Staff training on data protection
- Incident response procedures
- Regular backups and disaster recovery plans
7. International Data Transfers
When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Other lawful transfer mechanisms under GDPR
8. Data Breach Notification
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights and freedoms.
If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
9. Data Protection Officer
For all GDPR-related inquiries, please contact:
Marko
QUBE d.o.o.
Email: support: qube.reach@gmail.com
OIB: 05419427342
10. Right to Lodge a Complaint
If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
11. Updates to This Policy
We may update this GDPR compliance page from time to time. We will notify you of any material changes by posting the updated page and revising the "Last updated" date.