Privacy

Who is responsible?

Scope

This page concerns visits to the Lumico website and contacting us by email. Data processing in the Lumico app is described separately; this notice does not replace it.

Visiting the website

This website is operated on our behalf by Host Europe GmbH, Hansestr. 111, 51149 Köln, as a processor under Article 28 GDPR. The servers are located in the EU.

When you open a page, the server processes the technical access data your browser sends: IP address, date and time, the requested resource, the status code, the amount of data transferred, the referring page and your browser identification. We need this to deliver the website and to keep it running securely. The legal basis is our legitimate interest in stable, secure operation (Article 6(1)(f) GDPR).

These log files are deleted after the period set by our hosting provider. We do not merge them with other data sources and do not use them to identify visitors.

No cookies, no tracking

This website sets no cookies and uses no analytics, advertising or social media services. There is no cookie banner because there is nothing to consent to.

Everything the page needs — fonts, images, scripts — is served from our own server. Opening this website does not make your browser connect to Google, Meta or a content delivery network.

Emailing us

The mailboxes we publish on this website are hosted by Host Europe GmbH, Hansestr. 111, 51149 Köln.

When you email us, we process your email address and whatever your message contains in order to answer it. The legal basis is Article 6(1)(b) GDPR where your request concerns a contract or its preparation, and otherwise our legitimate interest in responding to you (Article 6(1)(f) GDPR). We delete your message once it is no longer needed and no retention obligation applies. Please do not send us passwords or your child’s browsing history.

Who else receives data

Apart from our hosting provider we pass on no personal data from this website. Our hosting provider may use sub-processors for operating its data centres; these are bound by the same obligations.

Your privacy rights

Depending on the legal requirements, you may request access, correction, deletion, restriction of processing or data portability, and may object to processing. You can withdraw consent for future processing. You may also complain to a data protection authority.