1. Controller
The controller responsible for processing personal data on this website is:
A. Hornjak
Koppoldstr. 1
86551 Aichach
Germany
Email: office@lumaroshop.com
2. Website hosting
This website is hosted by NFSN Inc, 1540 International Parkway Ste 2000, Lake Mary, Florida 32746-5096, US. Technical connection data may be processed to deliver the website securely and reliably, including IP address, access time, requested URL, referrer, browser, operating system and server-log data.
The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in providing a secure and technically functional website.
Retention period: 7 Days.
3. Contact form and customer support
If you use our support form, we process the information you submit, including marketplace/platform, order number, issue category, email address, an optional telephone number and the content of your message. We use this information to identify your order, handle your request and communicate with you.
The legal basis is Article 6(1)(b) GDPR where the request concerns an existing or prospective contractual relationship. In other cases, Article 6(1)(f) GDPR may apply based on our legitimate interest in responding to inquiries and providing customer support.
Support requests are transmitted through our configured email service provider Add Rabbit LLC, 502 W 7th St, Suite 100, Erie, PA 16502 US.
4. hCaptcha
We use hCaptcha, a security service provided by Intuition Machines, Inc. (United States), to protect the support form against automated submissions, spam and abuse. When hCaptcha is used, technical and interaction data such as IP address, browser/device information and challenge interactions may be processed by hCaptcha for security and bot-detection purposes.
We use hCaptcha on the basis of Article 6(1)(f) GDPR, based on our legitimate interest in protecting this website and our support channels against automated abuse. Depending on applicable local law and your specific deployment, additional requirements may apply.
Further information is available in hCaptcha's Privacy Policy and Terms of Service.
5. Cookies and similar technologies
We use a technically necessary first-party session cookie named lumaro_session. It is used to protect the support form against cross-site request forgery (CSRF), to retain short-lived anti-abuse state and to display the submission result. It is not used for advertising or analytics and normally expires when the browser session ends.
hCaptcha may use technically necessary cookies or similar technologies as part of its anti-abuse service. We do not use advertising or analytics cookies of our own. If additional non-essential technologies are introduced later, this Privacy Policy and any consent mechanism must be reviewed before deployment.
6. Other third-party services and external content
Apart from hCaptcha and the configured email-delivery service, this website intentionally avoids embedded third-party content, social-media plugins, analytics services and externally hosted fonts. If further services are added later, this Privacy Policy must be updated before use.
7. Your rights
Subject to statutory requirements, you may have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may also withdraw consent where processing is based on consent.
You have the right to lodge a complaint with a data protection supervisory authority.