Privacy Policy

We appreciate your visit to our website. We want you to feel comfortable on our website and you don't have to worry about the confidentiality of your data. Transparency in handling your data is very important to us, so here is the info on what data we collect here and for what purpose.

Table of contents

§ 1 Information about the collection of personal data

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses and user behavior.

(2) The responsible party pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (DS-GVO) is:

Lumibit GmbH
Lena-Christ-Straße 2
82031 Grünwald
Mail: datenschutz@lumibit.io

(see our Imprint)

(3) When you write to us, we process your details as described in § 4.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below.

§ 2 Collection of personal data when visiting our website

In the case of purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 (1) (f) GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

§ 3 Use of Cookies

This website sets cookies that are not technically necessary only after you have agreed to them in our cookie banner. Until then, HubSpot’s tracking code is not loaded at all (see § 9). Your choice is stored for 12 months in a single cookie (lb_consent), so that the banner does not appear on every page; this cookie is technically necessary (§ 25 (2) No. 2 TDDDG).

With your consent, HubSpot sets cookies that recognise your browser across visits (see § 9): hubspotutk and __hstc for 6 months, __hssc for 30 minutes and __hssrc until you close the browser. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. If your browser sends a Global Privacy Control signal, we treat it as a refusal and do not show the banner.

You can change or withdraw your consent at any time with effect for the future: Cookie settings.

If you withdraw your consent, the HubSpot cookies are deleted and HubSpot’s tracking code is no longer loaded. You can also block or delete cookies in your browser settings.

§ 4 Contact form, chat and email

When you write to us through a contact form or the chat on this website, we use HubSpot, a service of HubSpot Ireland Ltd., 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. Your email address, your message, the page you write from and the time are sent to HubSpot and stored there. The data is stored in data centres in the EU. HubSpot may also transfer data to HubSpot, Inc. in the USA; this is based on the EU Commission’s Standard Contractual Clauses.

When you email us, we receive your email address and your message directly.

We use this data only to answer your request. The legal basis is Art. 6 (1) (b) GDPR where your request aims at a contract, and Art. 6 (1) (f) GDPR otherwise; our legitimate interest is answering your request. We delete the data once your request has been dealt with, unless legal retention obligations apply.

§ 5 Job listing and applications (Personio)

We show our open positions through Personio, a service of Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. The job listing on our career page is loaded directly from Personio, which receives technically necessary data such as your IP address.

If you apply, you enter your details directly with Personio, and we process them to carry out the application process (Art. 6 (1) (b) GDPR). For more information, please refer to Personio’s privacy policy.

§ 6 Your rights regarding the processing of your personal data

You have the following rights with respect to us regarding your personal data concerned:

  • Right to information pursuant to Art. 15 DS-GVO
  • Right to rectification pursuant to Art. 16 DS-GVO
  • Right to erasure pursuant to Art. 17 DS-GVO
  • Right to restriction of data processing pursuant to Art. 18 DS-GVO
  • Right to data portability pursuant to Art 20 DS-GVO
  • Right to object to processing pursuant to Art. 21 DS-GVO
  • Right to withdraw your consent pursuant to Art. 7 (3) DS-GVO

You can assert all of the above rights informally vis-à-vis the controller by e-mail or post. You also have the right to complain to the competent data protection supervisory authority if you consider that the processing of your data is unlawful. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach. You can find a list of all supervisory authorities and their contact details at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to object (Art. 21 GDPR)

Where we process your data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests. You can object to processing for direct marketing at any time, without giving reasons.

If you have any questions about data protection, please feel free to contact us, at datenschutz@lumibit.io.

§ 7 Social media presences

We have the following social media profiles:

  • Instagram
  • Facebook
  • LinkedIn

§ 8 Hosting

We host our website with Amazon Web Services (AWS), a service of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The website is stored in the AWS region Frankfurt (eu-central-1) and delivered through Amazon CloudFront, a content delivery network that serves each page from a server close to you. That server can be outside the EU.

To deliver the website, AWS processes the data listed in § 2, including your IP address, and we keep these access logs to keep the website secure and stable. They are deleted automatically after 7 days. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is a secure and reliable website.

Where data is processed outside the EU, this is based on the EU Commission’s Standard Contractual Clauses and the EU-U.S. Data Privacy Framework, under which Amazon.com, Inc. is certified.

§ 9 HubSpot tracking

With your consent, we use HubSpot’s tracking code (HubSpot Ireland Ltd., see § 4) to understand how our website is used and which content leads to enquiries. HubSpot then records the pages you visit, when, the website you came from, and your browser and device. If you later write to us through a form or the chat, HubSpot links these visits to your enquiry.

The data is stored in data centres in the EU; for transfers to the USA, § 4 applies. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Without your consent, HubSpot’s tracking code is not loaded, and HubSpot receives no data about your visit.

§ 10 Ahrefs Web Analytics

To count visits and see where our visitors come from, we use Ahrefs Web Analytics, a service of Ahrefs Pte. Ltd., Singapore. It sets no cookies and stores nothing on your device. To count a visit, your browser sends Ahrefs the page, the time, the website you came from, your browser and device type and your IP address. We only see aggregated figures, not individual visitors.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is knowing how our website is found and used. For transfers to Singapore, the EU Commission’s Standard Contractual Clauses apply.