Privacy Policy
Last updated: May 25, 2026
1. Data controller
Controller within the meaning of the General Data Protection Regulation (GDPR):
LumenwerkLabs GbR
Cosimastraße 292
81927 Munich, Germany
E-Mail: legal@lumenwerklabs.com
2. Scope of processing
We process personal data only to the extent necessary to provide a functional website and to respond to your requests. Any further processing only takes place on the basis of explicit consent or a statutory permission.
3. Hosting
This website is hosted by:
LumenwerkLabs GbR
Cosimastraße 292
81927 Munich, Germany
As part of providing the website, the provider may process personal data (in particular IP address, date and time of access, amount of data transferred) on our behalf and on our instructions under Art. 28 GDPR. A data processing agreement is in place.
4. Server log files
When you visit this site, your browser automatically transmits information to our hosting provider, which is temporarily stored in log files:
- truncated or anonymised IP address
- date and time of the request
- content of the request (page accessed)
- HTTP status code and amount of data transferred
- browser type, operating system and referrer URL
Legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest lies in stable and secure website operation. Log data is deleted or anonymised after no more than 30 days.
5. Contacting us
If you contact us by email, we process your information (name, email address, content of the message) solely to handle your enquiry. Legal basis is Art. 6 (1) lit. b GDPR if your enquiry aims at the conclusion of a contract, otherwise Art. 6 (1) lit. f GDPR (legitimate interest in efficient responses).
Your enquiry will be deleted as soon as it has been finally processed, provided no statutory retention obligations apply.
6. Cookies and similar technologies
We currently use only strictly necessary cookies and similar storage mechanisms (e.g. to remember your language preference and your cookie choice). They are required to operate the site; the legal basis is Art. 6 (1) lit. f GDPR and § 25 (2) no. 2 TDDDG.
Optional cookies or comparable technologies for statistics or marketing will only be loaded after your explicit consent under § 25 (1) TDDDG and Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time via the “Cookie Settings” link in the footer.
7. Analytics & marketing tools
At present, no analytics, tracking or marketing services are integrated into this website. Should this change, the services used will be named here and loaded only after your consent.
8. Processors
Where we engage service providers (e.g. hosting, email), we do so on the basis of a data processing agreement under Art. 28 GDPR. A list of processors is available on request.
9. International transfers
Personal data is transferred to countries outside the EU/EEA only if such transfers are safeguarded by appropriate guarantees under Art. 44 et seq. GDPR (e.g. standard contractual clauses, adequacy decision). If such transfers become necessary, we will inform you here separately.
10. Your rights
You have the following rights with respect to us:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
- withdrawal of granted consent (Art. 7 (3) GDPR)
To exercise your rights, an informal email to legal@lumenwerklabs.com is sufficient.
Without prejudice to any other legal remedy, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Competent authority for us: BayLDA - Bayerisches Landesamt für Datenschutzaufsicht
11. Storage period
We store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations (in particular HGB and AO). After that, data is deleted or anonymised.
12. Updates to this statement
We reserve the right to update this privacy statement so that it always meets current legal requirements or to reflect changes to our services.