1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy set out below this text.
Data collection on this website
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the responsible party” in this privacy policy.
How do we collect your data? Your data is collected, on the one hand, by you providing it to us. This may, for example, be data you enter into a contact form or send to us by email. Other data is collected automatically or with your consent by our IT systems when you visit the website.
What do we use your data for? Some of the data is collected in order to ensure that the website is provided without errors. Other data can be used to analyse your user behaviour, provided the relevant consent has been given.
What rights do you have regarding your data? You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have a right to lodge a complaint with the competent supervisory authority.
2. Hosting
All-Inkl
The provider is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter “All-Inkl”). Details can be found in All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/ .
All-Inkl is used on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Insofar as corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG. Consent can be revoked at any time.
Order processing: We have concluded a data processing agreement (DPA) with the above-mentioned provider, which serves to protect your personal data.
3. General information and mandatory information
Information on the responsible party
The party responsible for data processing on this website is:
Munich Solutions GmbH
Schulstraße 11A
82205 Gilching
Germany
Managing directors: Cedric Bitenc, Leopold Lenz
Phone: (+49) 89 125037800
Email: sales@lumafy.de
Storage period
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing it (e.g. retention periods under tax or commercial law).
Legal bases of data processing
If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR. If you have consented to the storage of cookies or to access to information on your end device, the data processing additionally takes place on the basis of Section 25 (1) TTDSG. If your data is required for the performance of a contract or for carrying out pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. Data processing may furthermore take place on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
Withdrawal of your consent
Many data processing operations are only possible with your express consent. You can revoke consent already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object (Art. 21 GDPR)
If the data processing takes place on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation.
Information, correction, deletion and restriction
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction or deletion of this data. You also have the right to request the restriction of the processing of your personal data.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser line.
4. Data collection on this website
Cookies
Our web pages use what are known as “cookies”. Cookies are small data packets and do no harm to your end device. They are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
Cookies that are necessary to carry out the electronic communication process, to provide certain functions you have requested or to optimise the website (e.g. cookies for storing language settings) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. Insofar as corresponding consent was requested, the relevant cookies are stored exclusively on the basis of this consent (Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Server log files
The provider of the pages automatically collects and stores information in what are known as server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimisation of its website – for this purpose the server log files must be collected.
Inquiry by email or phone
If you contact us by email or phone, your inquiry including all personal data resulting from it (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided your inquiry is connected with the performance of a contract or is required for carrying out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR).
The data you send to us via contact inquiries remains with us until you ask us to delete it, revoke your consent to its storage or the purpose for the data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
5. Plugins and tools
Bunny Fonts
This website uses the web fonts service Bunny Fonts for the consistent display of fonts. The provider is BunnyWay d.o.o., Cesta komandanta Staneta 4A, 4260 Bled, Slovenia (hereinafter “Bunny”).
When you access this website, your browser loads the required fonts from Bunny’s servers into the browser cache in order to display text and fonts correctly. To do this, the browser you use must connect to Bunny’s servers. According to its own information, Bunny is a privacy-friendly provider based in the European Union and does not process personal data for advertising or tracking purposes. IP addresses are anonymised.
Bunny Fonts is used on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in the consistent presentation of the typeface on our website. Insofar as corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG.
Further information: https://bunny.net/privacy
Calendly
On this website you can, among other things, arrange online appointments. For appointment bookings we use the tool “Calendly”. The provider is Calendly LLC, 271 17th St NW, Atlanta, Georgia 30363, USA (hereinafter “Calendly”).
For the purpose of booking an appointment, you enter the requested data and your desired date into the form provided for this. The data entered is used for planning, carrying out and, where applicable, following up on the appointment. The appointment data is stored for us on Calendly’s servers, whose privacy policy you can view here: https://calendly.com/de/pages/privacy .
The data you enter remains with us until you ask us to delete it or the purpose for the data storage no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.
The legal basis for the data processing is Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in arranging appointments with prospects and customers as easily as possible. Insofar as corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG. Consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details: https://calendly.com/pages/dpa .
Order processing: We have concluded a data processing agreement (DPA) with the above-mentioned provider.
Shopify (for shop.lumafy.de)
Our online shop on the subdomain shop.lumafy.de is operated via the Shopify platform. The provider is Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.
When you visit shop.lumafy.de, personal data is processed in order to provide and secure the shop, to initiate and process contracts and to handle payments. For the shop area, Shopify’s privacy policy additionally applies, which can be viewed in the shop itself.
Shopify is used on the basis of Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in a secure and efficient shop solution). Further information: https://www.shopify.com/legal/privacy .
Order processing: A data processing agreement (DPA) has been concluded with Shopify.
6. Information on tracking and analytics tools
This website currently does not use any tracking or web analytics tools such as Google Analytics, Google Tag Manager, Meta Pixel or comparable services.
Should corresponding tools be integrated at a later point in time, this privacy policy will be updated accordingly and you will be asked for your consent via a cookie consent banner before these tools are used.