← Back to homepage

Privacy Policy

Last updated: May 20, 2026

1. Introduction

This Privacy Policy (the "Policy") explains how the controller processes users' personal data when using the application and related services (the "Services"). The controller respects your right to privacy and processes your personal data in accordance with the GDPR and Act No. 18/2018 Coll. on Personal Data Protection.

2. Controller

Kedros, a. s., with its registered office at Slávičie údolie 106, Bratislava - Staré Mesto district 811 02, Slovakia, registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sa, File No. 3373/B, Company ID No.: 35 893 907

Controller contact email for personal data protection:
support@loadtestlab.com

3. What personal data we process

3.1. Identification and contact details

  • first name, surname, permanent residence address
  • email address
  • any other data you decide to provide

3.2. Data on the use of the Services

  • IP address, country, region and city (derived from the IP address)
  • Geolocation data
  • device and browser data
  • logs and technical records
  • data on interactions with the Services
  • User and audience data (demographic data: age, gender and interests (if available). Language: browser language settings. User type: new vs. returning visitors.
  • Acquisition and traffic source data (source/medium: where users come from, e.g. Google / organic search, Facebook / CPC, direct access, referral). Campaign data: performance of marketing campaigns, including clicks on paid advertisements (Google Ads) and email marketing. Traffic channels: classification into organic search, direct access, social networks, email, etc.
  • Interaction and behavior data (event data: specific user actions such as page views, clicks, form submissions and video playback. Session data: how long users stay (session duration), how many pages they visit in one session. Page/screen views: which specific website pages or application screens are visited most frequently. Scroll tracking: how far users scroll down pages.)
  • Technology and device data (device category: use of mobile devices, desktop computers or tablets. Browser and operating system: specific browsers (Chrome, Safari, etc.) and operating systems (iOS, Android, Windows, Mac). Screen resolution: device screen sizes.)
  • E-commerce data: key events (goals): tracking completed actions such as form submissions, registration or button clicks. E-commerce data: purchases, transaction revenue, product performance and details of abandoned shopping carts.

3.3. Cookies and analytical data

What are cookies

Cookies are small text files that are stored on your device (computer, tablet or smartphone) when you visit a website. They allow the website to remember the Customer's actions and settings (e.g. language, login) so that the Customer does not have to re-enter them. The use of cookies in the Slovak Republic is governed by Act No. 452/2021 Coll. on Electronic Communications and Regulation (EU) 2016/679 (GDPR).

Types of cookies we use

Distinction between the product website and the web application

The product website (landing page) is used to present the Service, prices, content and to communicate with interested parties. The web application is the Application itself, available after registration or login, in particular at app.loadtestlab.com. The cookies and similar technologies listed in this section therefore apply depending on whether the Customer uses the product website or the web application.

Strictly necessary cookies (technical)

These cookies are necessary for the proper and secure functioning of the website. Without them, the website would not function properly. We do not require the Customer's consent to use them.

The session_id and csrf_token cookies are used only in the web application after registration or login, primarily to maintain the session and protect against security attacks. They are not used on the product website if the Customer only visits the public website. If strictly necessary storage is used on the product website to remember a choice in the cookie banner, it is used exclusively for this purpose and is not used for analytics or marketing.

NamePurposeValidity
session_idMaintaining the logged-in user session.Until the end of the session
csrf_tokenProtection against cyberattacks (CSRF).Until the end of the session
ltl-ab-variantRemembering the assigned A/B page variant for testing.1 year
ltl-langRemembering your selected language preference.1 year

Analytics and statistical cookies (product website)

These cookies allow us to measure traffic and track Customer behavior (e.g. how far they scrolled, where they clicked and how long they stayed on the page). These data are processed in anonymized or pseudonymized form and we use them only with the Customers' consent.

NameProviderPurposeValidity
_ga, _ga*Google AnalyticsTraffic analysis, measurement of time on page and scrolling.2 years
_clck, _clskMicrosoft ClarityCreating heatmaps (click maps) and recording user interactions.1 year / 1 day

Marketing and retargeting cookies (product website)

These cookies are used to track visitors across websites. The aim is to show you relevant advertising (e.g. on Facebook or LinkedIn after you leave our website). We use them only with the Customers' consent.

NameProviderPurposeValidity
_gcl_auGoogle AdsMeasuring conversions and optimizing Google advertising campaigns.90 days
_fbpMeta (Facebook)Tracking visits and displaying targeted advertising in the Meta network.3 months
bcookie, lidcLinkedInBrowser identification and advertising optimization on LinkedIn.1 year / 1 day
UserMatchHistoryLinkedInSynchronization of user ID for LinkedIn advertising audiences.30 days

How to manage cookies?

When first visiting our website, a cookie banner will be displayed, where the Customer can select which categories of cookies (other than strictly necessary cookies) they allow us to process. The Customer may change their consent at any time by clicking the "Cookie settings" link in the website footer.

The Customer can also manage or delete cookies directly in their browser:

  • Google Chrome: Settings -> Privacy and security -> Cookies
  • Safari: Settings -> Privacy -> Manage Website Data
  • Mozilla Firefox: Options -> Privacy & Security -> Cookies

Third-party technologies

Data from analytics and marketing cookies are processed by service providers:

  • Google Ireland Ltd. (Google Analytics, Google Ads)
  • Meta Platforms Ireland Ltd. (Facebook, Instagram)
  • LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag)
  • Microsoft Corporation (Microsoft Clarity)

In order for our website and Services to function properly, we may store cookies in your browser, either when you visit our website, when you log in to your account, or when you use any Service. Based on the default settings, we use only cookies that are strictly necessary for the functioning of our website and the Services you request.

Product statistics in the web application

In the web application, we may process product statistics on the use of Service features, such as creating or running a test, using a report, error messages, performance and technical events. These product statistics are obtained from server logs and application events, and we do not use product cookies, localStorage, sessionStorage or device fingerprinting for them. In the web application, we do not use Google Analytics, marketing cookies or retargeting technologies for this purpose.

4. Purposes and legal bases of processing

4.1. Provision and operation of services

  • ensuring the functionality of the Services
  • maintaining a user account

Legal basis: performance of a contract under Article 6(1)(b) GDPR

4.2. Improvement and optimization of the application

  • usage analysis
  • server-side product statistics in the web application without using cookies, localStorage or similar storage on the Customer's device
  • bug fixes and functionality improvements

Legal basis: legitimate interest under Article 6(1)(f) GDPR

4.3. Informing Customers

  • information about changes to services and terms

Legal basis: performance of a contract or legitimate interest

4.4. Marketing communications (only if relevant)

Legal basis: user consent under Article 6(1)(a) GDPR. Consent may be requested from you in specific situations where we consider this legal basis to be the most appropriate, or where required by law.

4.5. Compliance with legal obligations

obligations under accounting and tax regulations, in particular for invoicing, receiving and recording payments, handling complaints, exercising rights and fulfilling obligations under EU Regulation and special legal regulations

Legal basis: Article 6(1)(c) GDPR

4.5. Security

Ensuring network security, preventing fraud in the application, or analytically monitoring errors (crash reports) to improve stability

On this basis the user has the right to object to such processing

Legal basis: legitimate interest (Article 6(1)(f) GDPR)

5. To whom we disclose personal data

Your personal data may be made available to:

  • providers of IT services and cloud solutions
  • analytics tools (e.g. Google Analytics or another tool, if you use it)
  • contractual partners who ensure the operation of the Services

All recipients are bound by a personal data processing agreement under Article 28 GDPR.

We do not transfer data to third countries outside the EU/EEA unless expressly stated otherwise, and only in accordance with Chapter V GDPR.

6. Retention period

We retain personal data only for the necessary period:

  • data necessary to provide the service: for the duration of the contractual relationship
  • analytical data and logs: generally 12 months
  • data processed on the basis of consent: until consent is withdrawn
  • data retained for legal reasons: according to special regulations (e.g. 10 years for accounting documents)

7. Personal data security

The Provider implements appropriate technical and organizational measures under Article 32 GDPR to protect personal data against:

  • unauthorized access
  • loss, destruction or damage
  • disclosure or misuse

The measures include, in particular, encryption, pseudonymization, access control and regular security audits.

The Provider implements appropriate technical and organizational measures to ensure a level of security appropriate to the potential risks. We make every effort to ensure the ongoing confidentiality, integrity, availability and resilience of data processing systems and services. In the event of a data breach that results in a risk to your rights and freedoms, we are prepared to notify the competent supervisory authority as well as end users as data subjects.

8. The Provider undertakes to:

  • process personal data solely on the basis of documented instructions from the Customer and ensure the confidentiality of data by all persons who process personal data,
  • adopt appropriate technical and organizational measures to ensure an adequate level of personal data protection,
  • assist the Customer in fulfilling its obligations under the GDPR, in particular in connection with the exercise of data subjects' rights,
  • after termination of the provision of the Services, delete or return all personal data unless legal regulations require their retention,
  • make available to the Customer, upon request, all information necessary to demonstrate compliance with its obligations under the GDPR.

The Provider, as controller, is obliged to ensure that compliance with generally binding legal regulations on personal data protection is also maintained on its side. In particular, it is obliged to:

  • ensure a legal basis for the processing of personal data in the Application,
  • properly inform data subjects about the processing of their data within the meaning of Articles 13 and 14 GDPR,
  • keep records of processing activities if required to do so by the GDPR.

The Provider ensures that personal data will be processed exclusively within the European Union, or in a third country with an adequate level of protection guaranteed by a decision of the European Commission.

8. Rights of the Customer as a data subject

You have the right:

  • to access your personal data (Article 15 GDPR)
  • to rectification of inaccurate or incomplete data (Article 16)
  • to erasure (the right to be forgotten, Article 17)
  • to restriction of processing (Article 18)
  • to object to processing based on legitimate interest (Article 21)
  • to data portability (Article 20)
  • to withdraw consent at any time if processing is based on consent
  • to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic

9. Automated decision-making and profiling

Within the provision of the Services, we do not use profiling or automated decision-making with legal or similarly significant effects.

10. Customer declaration

The Customer declares that they have familiarized themselves with the information on the processing of personal data intended for data subjects, published at loadtestlab.com/cookies and during registration.

11. Changes to this Policy

We may amend this Policy from time to time at our discretion. We will send you an email notice with a link to the amended Policy or notify you of the amended version by means of a notice on the website or by other means of electronic communication. If you do not agree with the amended Policy or cannot comply with its terms, you must stop using the account and the Services and uninstall them as necessary.

11. Contact

In case of any questions you may contact the person responsible for personal data protection:

support@loadtestlab.com

We use cookies

By default, this landing page stores only the cookie consent choice needed to remember your preferences. With your consent, we may also use analytics/statistics and marketing cookies. See our Cookie Policy for details.

Cookie settings

Choose which cookie categories we may use on this device. The consent preference cannot be disabled because it remembers your cookie choice. See our Cookie Policy for more information.

Necessary preferences

This landing page stores ltl-ab-variant and ltl-lang to remember the assigned page variant and selected language. Your banner choice is stored locally and is always active.

Always active

Analytics and statistics cookies

They help us measure traffic and visitor behavior such as time on page scrolling clicks and heatmaps. Google Analytics uses _ga and ga*; Microsoft Clarity uses _clck and _clsk. Disabled until you consent.

Marketing and retargeting cookies

Used to measure conversions optimize campaigns and show relevant advertising after you leave our website. Google Ads uses _gcl_au Meta uses _fbp and LinkedIn uses bcookie lidc and UserMatchHistory. Disabled until you consent.