Einen Moment
Free shipping within Germany · info@lumorani.com
This is a courtesy translation. The German version is legally binding.
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Who is responsible for data collection?
Data processing on this website is carried out by the website operator (see “Notice on the responsible party”).
How do we collect your data?
Your data is collected on the one hand when you provide it to us — for example when placing an order, signing up for the newsletter, or getting in touch. Other data is collected automatically by our IT systems when you visit the website (e.g. browser, operating system, time of the page request).
What do we use your data for?
Part of the data is collected to ensure the website is provided without errors. Order and payment data is processed to handle your purchase.
What rights do you have?
You have the right at any time to obtain free information about your stored data as well as to have it corrected or deleted. You can withdraw a given consent at any time. You also have a right to lodge a complaint with the competent supervisory authority.
We host the content of our website with the following provider:
The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit our website, Vercel, as our hosting and content-delivery provider, processes technical access data (e.g. IP address, browser type, time of access) required for the secure and performant delivery of the page.
This is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable and secure presentation of our website. A data processing agreement (DPA) is in place with the provider. The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
We use Vercel Web Analytics, a service of Vercel Inc., to measure reach. The service works without cookies and does not create a cross-device identifier. Only aggregated information such as the page visited, referrer, device type and country is recorded. We cannot draw conclusions about individual people and no personal profiles are created.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in a data-minimising analysis of which parts of our shop are used. As no cookies are set and no information is read from your device, consent under § 25 TDDG is not required — which is why we deliberately do not use a consent banner.
The party responsible for data processing on this website is:
Samir Sobhani, Bussardstraße 21, 68307 Mannheim, Germany
Email: info@lumorani.com
Unless a more specific storage period is stated, your personal data remains with us until the purpose for processing no longer applies. Statutory retention periods (e.g. under tax or commercial law) remain unaffected.
At any time you have: the right to information, correction and deletion, the right to restriction of processing, the right to data portability, the right to withdraw a given consent, the right to object under Art. 21 GDPR, and the right to lodge a complaint with the competent supervisory authority. For all matters you can reach us at info@lumorani.com.
For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar and the lock symbol.
This website only uses technically necessary storage mechanisms. In particular, we store your cart locally in your browser (local storage) so your selection is preserved. This data does not leave your device and serves solely the cart function (Art. 6(1)(f) GDPR, § 25(2) TDDDG). No analytics or marketing cookies are set without your consent.
When you contact us via the contact form or by email, the data you provide (name, email address, message) is processed for the purpose of handling your enquiry. Processing is based on Art. 6(1)(b) GDPR (contract / pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding).
For the technical delivery of messages sent via the contact form we use the service Resend (Resend, Inc., USA). Resend processes the data provided in the form solely to deliver the email to our inbox. Our email inbox is hosted with IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The necessary data processing agreements are in place or will be concluded with both providers; the transfer to the USA is based on appropriate safeguards (standard contractual clauses).
To protect against automated spam, our contact form uses a technical, invisible check field (honeypot). No additional personal data is collected in the process.
For payment processing we use the payment service provider Stripe. For customers in the EEA, the provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When you place an order, the data required for payment (e.g. name, billing and payment details) is transmitted directly to Stripe and processed there. We ourselves do not receive or store full payment data (e.g. card numbers).
Processing is based on Art. 6(1)(b) GDPR (performance of a contract). You can find more information in Stripe’s privacy policy: stripe.com/privacy.
If you subscribe to our newsletter, we need your email address as well as your consent to receive it. Processing is based solely on your consent (Art. 6(1)(a) GDPR). You can withdraw this at any time, for example via the unsubscribe link in every newsletter.
For a consistent display of fonts we use Google Fonts, installed locally on our server or with our hosting provider and not loaded from Google servers when the page is requested. No connection to Google takes place and no data is transferred to Google.