Back to Home

Privacy Policy

General Information

This privacy policy contains detailed information about what happens to your personal data when you visit our website www.luminabyte.de. Personal data is all data with which you can be personally identified. We strictly adhere to the legal provisions when processing your data, in particular the General Data Protection Regulation ("GDPR"), and attach great importance to your visit to our website being absolutely secure.

Responsible Body

The party responsible under data protection law for the collection and processing of personal data on this website is:

Name: LuminaByte GmbH
Represented by: Antonio Skoko, Managing Director
Street, House Number: Julius-Hatry-Straße 1
Postal Code, City: 68163 Mannheim
Country: Germany
Email: ...
Phone: ...

Access Data (Server Log Files)

When you access our website, we automatically collect and store access data in so-called server log files that your browser automatically transmits to us. These are:

  • Browser type and browser version of your PC
  • Operating system used by your PC
  • Referrer URL (source/reference from which you reached our website)
  • Hostname of the accessing computer
  • Date and time of the server request

As a rule, we are not able to establish a personal reference and this is not intended. The processing of such data takes place in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interest in improving the stability and functionality of our website.

Cookies and Local Storage

Our website uses no tracking cookies, analytics cookies, or marketing cookies. We do not use any third-party tracking tools such as Google Analytics, Facebook Pixel, or similar services.

We only use your browser's local storage (localStorage) for the following technically necessary purposes:

  • Language preference: To save your preferred language (German/English)

This data is stored exclusively locally in your browser and is not transmitted to our servers or third parties. You can delete this data at any time via your browser settings.

Since we do not use non-essential cookies, no consent is required under TTDSG/GDPR. Storage is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in the technically error-free provision of our services).

Social Media

1. LinkedIn Plugin

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn").

To increase the protection of your data when visiting our website, the LinkedIn plugins are not fully integrated but only included using an HTML link (so-called "Shariff" solution from c't). This integration ensures that when a page of our website that contains such plugins is accessed, no connection is yet established with LinkedIn's servers. Only when you click on the LinkedIn button does a new window open in your browser and call up the LinkedIn page.

For information about the purpose and scope of data collection and the further processing and use of data by LinkedIn, as well as your rights and settings options to protect your privacy, please refer to LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy

Contact

If you contact us, including by email, the transmitted data including your contact data will be stored in order to process your inquiry or to be available for follow-up questions. This data will not be passed on without your consent.

When using our contact form, the following data is collected: name, email address, optionally phone number and company, and your message. Additionally, your IP address and the time of the inquiry are logged for security purposes.

Your data is processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. An informal notification by email is sufficient for revocation. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation.

Transmitted data will remain with us until you request deletion, revoke your consent to storage, or there is no longer any need for data storage. Mandatory legal provisions - in particular retention periods - remain unaffected.

Email Delivery (Resend)

We use Resend for sending emails from our contact form. The provider is Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA ("Resend").

When you use our contact form, your submitted data (name, email address, optionally phone number and company, message) as well as your IP address and the time of the inquiry are transmitted to Resend in the USA to deliver the email to us.

Resend is certified under the EU-US Data Privacy Framework and thus commits to complying with EU data protection standards. Additionally, we have concluded a Data Processing Agreement (DPA) with Resend that includes EU Standard Contractual Clauses.

Processing is based on your consent (Art. 6 Para. 1 lit. a GDPR), which you give by submitting the contact form. Email data is retained by Resend for up to 90 days after delivery.

For more information, see Resend's Privacy Policy.

Bot Protection (Cloudflare Turnstile)

We use Cloudflare Turnstile to protect our contact form from automated spam and abuse. This service analyzes your interaction with our website to distinguish humans from automated bots.

No cookies are set and no personal data is permanently stored. Processing is based on our legitimate interest in the security of our website (Art. 6 Para. 1 lit. f GDPR).

The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare is certified under the EU-US Data Privacy Framework. For more information, see Cloudflare's Privacy Policy.

Data Use and Disclosure

We will not sell or otherwise market the personal data you provide to us, e.g. by email (e.g. your name and address or your email address) to third parties. Your personal data will only be processed for correspondence with you and only for the purpose for which you provided us with the data. For payment processing, we pass on your payment data to the credit institution responsible for the payment.

The use of data that is automatically collected when you visit our website is only for the purposes mentioned above. The data is not used for any other purposes.

We assure you that we will not otherwise pass on your personal data to third parties unless we are legally obliged to do so or you have given us your prior consent.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Storage Duration

Personal data that has been communicated to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Insofar as commercial and tax retention periods have to be observed, the storage period for certain data can be up to 10 years.

Data Subject Rights

With regard to the personal data concerning you, you as a data subject have the following rights vis-à-vis the controller in accordance with the statutory provisions:

1. Right of Withdrawal

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke your consent to the processing of data at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. Storage of data for billing and accounting purposes remains unaffected by a revocation.

2. Right to Information

You have the right to request confirmation from us as to whether we are processing personal data relating to you in accordance with Art. 15 GDPR. If such processing exists, you have the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about the guarantees under Art. 46 GDPR when your data is forwarded to third countries.

3. Right to Rectification

You have the right to request immediate rectification of inaccurate personal data concerning you and/or the completion of incomplete data in accordance with Art. 16 GDPR at any time.

4. Right to Deletion

You have the right to request the deletion of your personal data in accordance with Art. 17 GDPR if one of the following reasons applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You revoke your consent on which the processing was based pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for the processing.
  • You object to the processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 Para. 2 GDPR.
  • The personal data has been processed unlawfully.
  • The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member State to which we are subject.
  • The personal data was collected in relation to information society services offered pursuant to Art. 8 Para. 1 GDPR.

5. Right to Restriction of Processing

You have the right to request the restriction of processing (blocking) of your personal data in accordance with Art. 18 GDPR. You can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing of your personal data.
  • If the processing of your personal data has happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
  • If you have lodged an objection pursuant to Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing of your personal data.

6. Right to Notification

If you have asserted the right to rectification, deletion, or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification or deletion of data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right under Art. 19 GDPR to be informed about these recipients upon request.

7. Right Not to Be Subject to a Decision Based Solely on Automated Processing

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you, in accordance with Art. 22 GDPR.

8. Right to Data Portability

If the processing is based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and is carried out using automated procedures, you have the right to receive your personal data that you have provided to us in a structured, common, and machine-readable format in accordance with Art. 20 GDPR and to transfer it to another controller or to request transfer to another controller, insofar as this is technically feasible.

9. Right to Object

Insofar as we base the processing of your personal data on the balancing of interests pursuant to Art. 6 Para. 1 lit. f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21 Para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21 Para. 2 GDPR).

10. Right to Complain to the Competent Supervisory Authority under Art. 77 GDPR

In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

P.O. Box 10 29 32
70025 Stuttgart

or:

Lautenschlagerstraße 20
70173 Stuttgart

Phone: 07 11/61 55 41-0
Email: poststelle@lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de

Validity and Amendment of This Privacy Policy

This privacy policy is valid from January 11, 2026. We reserve the right to change this privacy policy at any time in compliance with applicable data protection regulations. This may be necessary, for example, to comply with new legal provisions or to take into account changes to our website or new services on our website. The version available at the time of your visit applies.

Should this privacy policy be changed, we intend to announce changes to our privacy policy on this page so that you are fully informed about which personal data we collect, how we process it, and under what circumstances it may be shared.