Privacy Policy

We take the protection of your personal data seriously. This statement explains what data we process when you visit this website, why, and what rights you have. Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Data controller

The controller responsible for data processing on this website is:
LumenwerkLabs GbR
Cosimastraße 292
81927 Munich
Germany
Email: legal@lumenwerklabs.com
Full provider details are available in our imprint.

2. Scope of data processing

We process personal data only to the extent necessary to provide a functional website and our content and services. As a rule, we process personal data only with your consent or where processing is permitted by statutory provisions.

3. Hosting

This website is hosted by an external service provider (processor) on our behalf. The provider processes personal data only on our instructions and in accordance with a data processing agreement pursuant to Art. 28 GDPR. Hosting provider: DigitalOcean, Inc.

4. Server log files

When you visit our website, the hosting provider automatically collects and stores information in server log files that your browser transmits to us. This may include:

• browser type and version,
• operating system used,
• referrer URL,
• host name of the accessing device,
• date and time of the server request,
• IP address (typically shortened / anonymised).

This data is not merged with other data sources. Processing is based on Art. 6 (1)(f) GDPR; we have a legitimate interest in the technically error-free presentation and security of our website. Log data is typically deleted after 30 days unless longer retention is required to investigate a security incident.

5. Contact requests

If you contact us by email or via a form, the data you provide will be stored for the purpose of handling your request and any follow-up questions. The legal basis is Art. 6 (1)(b) GDPR where your request relates to a contract, otherwise Art. 6 (1)(f) GDPR (legitimate interest in answering enquiries). This data is deleted once it is no longer required and no statutory retention obligations apply.

6. Beta sign-up

If you sign up for the Skova beta, we process the contact details you provide (such as your email address) solely to contact you about beta access. The legal basis is your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time with effect for the future by contacting us; the lawfulness of processing carried out before withdrawal remains unaffected.

7. Cookies and similar technologies

This website uses only strictly necessary cookies / local storage required for the site to function, for example to remember your cookie choice. These are stored on the basis of Art. 6 (1)(f) GDPR and § 25 (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG), as they are technically necessary.

Any optional cookies or technologies for analytics or marketing are loaded only after you give consent via our cookie banner (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG). You can review or change your choice at any time using the “Cookie settings” link in the footer.

8. Analytics and marketing tools

We currently do not integrate any third-party analytics, marketing, or tracking services, and we do not load remote fonts or external media that would transmit your data to third parties. Should we introduce such services in the future, we will update this statement and obtain your consent beforehand where required.

9. International data transfers

Where data is processed outside the European Economic Area, we ensure an adequate level of protection through appropriate safeguards, such as the EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

10. Your rights

You have the following rights regarding your personal data:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to object to processing (Art. 21 GDPR),
• right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).

To exercise these rights, please contact us using the details above. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the data protection authority of your federal state.

11. Storage period

We store personal data only for as long as necessary to achieve the purposes described here, or for as long as statutory retention periods require.

12. Changes to this statement

We may update this privacy statement to reflect changes to our website or to legal requirements. The current version always applies, as indicated by the “Last updated” date above.