Data privacy statement

With this privacy policy, we would like to inform you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) about how our company processes personal data on the website https://luminovo.com/ and inform you about your rights. We process your personal data in compliance with the GDPR and all other applicable data protection regulations. The terms used, such as "user", are to be understood as gender-neutral.

1. Name and contact details of the responsible person

Luminovo GmbH

Schellingstr. 29

80799 Munich

+49 151 41801088

www.luminovo.com

Contact details of the data protection officer: security@luminovo.com

2. Definitions

This data privacy statement uses the terminology of the GDPR.

3. Data sources and categories of personal data

In the context of processing your personal data, we distinguish between data that we collect directly from you (including via the devices you use) and data that we obtain from other sources.

Personal data that we collect from you:

If you access and use our website for purely informational purposes, we only collect the data that is automatically transmitted by your Internet browser and, if necessary (with your consent), other data for the use or marketing of our website. If you contact us, the content data and contact details (name, e-mail address, telephone number, etc.) will also be processed. When you register for our newsletter, at least your e-mail address and possibly also your name will be processed.

If you apply for a job or apprenticeship with us, we will collect contact details (name, address, e-mail address, telephone number, etc.) as well as data relating to your education, work experience, time zone, availability and skills. You also have the option of sending us additional documents such as certificates, references or cover letters. This data transmitted by you will not be merged with other data.

If you are our supplier, business partner, a data processor or another contractual partner (or a representative of the contractual partner), we collect the personal data that we need in order to fulfil the contract. This usually includes contact data (name, address, e-mail address, telephone number, etc.), contract data, as well as content data (e.g. entries in the contact form).

4. Processing purposes

We process your data for one or more of the following purposes:

for the contact requested by you,
to process or initiate contracts with you,
for applications,
for advertising purposes,
for statistical evaluations and analysis, and/or
for the security and presentation of our website (log files),
Communication via social media.

5. Legal basis of the data processing

Your data is processed according to the following legal bases: your consent according to Art. 6 (1) a) GDPR or, if applicable, Art. 9 (2) a) GDPR, for the performance of a contract with you according to Art. 6 (1) b) GDPR or, if applicable, Art. 9 (2) b) GDPR, for the fulfilment of legal obligations according to Art. 6 (1) c) GDPR or for a legitimate interest according to Art. 6 (1) f) GDPR.

The legal basis for the processing of your data according to the stated processing purposes is:

Contacting: On our platforms, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. Our platforms also include a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. At the time the message is sent, the following data is stored: e-mail address, surname, first name, telephone / mobile phone number, date and time of contact. For the processing of the data, reference is made to this data privacy statement in the context of the sending process. If the contact is requested by you, for example, because you send us an e-mail message or write to us via a contact form, the legal basis is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in the complete processing of your contact. Since you are contacting us, we assume that there are no interests on your part that conflict with our processing of your request. If the contact is aimed at the conclusion of a contract or the fulfilment of a contract, the legal basis for the processing is Art. 6 (1) lit. b) GDPR. If consent is given, the legal basis for the processing for contacting you is Art. 6 para. 1 lit. a) GDPR or, if applicable, Art. 9 para. 2 lit. a) GDPR.
Contracts: The legal basis for the processing of your personal data for the execution or initiation of contracts is Art. 6 para. 1 lit. b) GDPR. In addition, we also process your data in accordance with statutory provisions, such as those arising from tax law. This type of processing is lawful under Art. 6 (1) (c) GDPR.
Applications: There is an application form on our website that can be used for electronic applications. If an applicant makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are first name, surname, telephone / mobile phone number, email address, CV, references, time zone, availability, referral contact. For the processing of your data, reference is made to this privacy policy as part of the sending process. Alternatively, you can also send us your application by e-mail. In this case, we will collect your e-mail address and the data you provide in the e-mail. After sending your application, you will receive an e-mail from us confirming receipt of your application documents. Your data will not be passed on to third parties. The data will be used exclusively for processing your application. The legal basis for the processing of your data is the initiation of a contract at the request of the data subject in accordance with Art. 6 para. 1 lit. b) GDPR and, if applicable, Art. 9 para. 2 lit. a) GDPR. In the case of applications that do not lead to a contractual relationship, we have a legitimate interest, pursuant to Art. 6 para. 1 lit. f) GDPR, in retaining the application data for a limited period of time in order to enforce our legal claims or defend ourselves against legal action.
Advertising purposes: We process your personal data for advertising purposes if we have your consent pursuant to Art. 6 (1) a) GDPR: For example, if you subscribe to our newsletter. A measurement of the success of the newsletter takes place. In a few cases, the processing of your personal data may take place due to our legitimate interest (Art. 6 para. 1 lit. f) GDPR) in advertising our products, for example, if you are an existing customer of our company (see also recital 47 GDPR and § 7 UWG).
Statistical evaluations and analysis: We process your personal data for statistical evaluations and analysis of our products (for example, via cookies and other technologies) as well as our services if we have your consent pursuant to Art. 6 (1) a) GDPR. By the necessity of accounting, it could come to an indirect statistical evaluation of your personal data due to a legal obligation (Art. 6 para. 1 lit. c) GDPR). In addition, processing of your data for the purpose of statistical evaluation of the key figures of our economic activity could take place. This represents a legitimate interest of our company according to Art. 6 para. 1 lit. f) GDPR, as it allows us financial planning as well as economic resource allocation.
Security and presentation of our website: Each time our website is accessed, our system automatically collects data and information from the system of the accessing device. The following data is collected: Information about the browser type and version used, the user's operating system, the user's internet service provider, the date and time of access, websites from which the user's system accesses our website, websites that are accessed by the user's system via our website. This data is stored in the log files of our system and does not include the user's IP address or other data that allows the data to be assigned to a user. This data is not stored together with other personal data of the user. The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR. The personal data processed during the form submission process is used to prevent misuse of the forms and to ensure the security of our information technology systems. This is also our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. In addition, cookies and other technologies may be necessary for the complete and correct display of our website. Unless otherwise specified, the complete and correct display is a legitimate interest on our part in this data processing in accordance with Art. 6 para. 1 lit. f) GDPR.
Social networks: We maintain various presences on different social networks. Our company presence on social networks is used, among other functions, for communication and information exchange with (potential) customers, applicants, business partners or employees. Personal data of the communication participants is processed in this context. If you wish to be contacted, the legal basis is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in the complete processing of your enquiry. Since you are contacting us, we assume that you have no interests that conflict with our processing of your enquiry. If the contact is aimed at the conclusion of a contract or the fulfilment of a contract, the legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. If consent has been given, the legal basis for processing for contacting us is Art. 6 para. 1 lit. a) GDPR or, if applicable, Art. 9 para. 2 lit. a) GDPR.

6. Legitimate interests

Unless otherwise stated in this data privacy statement and if we base the processing of your personal data on legitimate interests pursuant to Art. 6 (1) f) GDPR, such interests are the protection against misuse, the enforcement of our legal claims, the adaptation and evaluation of our offer and the processing of inquiries that arise.

7. Recipients or categories of recipients of the personal data

When processing your data, we cooperate with service providers who have access to your data. Possible recipients of your personal data are: (i) software companies that enable us to provide our services, help us to improve them and/or serve us for marketing purposes (for example, to manage customer contacts or applications); (ii) public bodies and administrations to the extent we are legally obliged to do so; (iii) hosting providers; (iv) service companies, such as tax advisors or lawyers.

For the purpose of fulfilling the contract, we may also transfer your personal data to anyone to whom we assign rights resulting from the contractual relationship with you.

Some of the recipients of your personal data are:

Cloudflare

Cloudflare serves as a DNS service for our website. Personal data may be passed on to Cloudflare in the process. This service is necessary for the operation of the website.

https://www.cloudflare.com/en-gb/privacypolicy/

Dreamdata

We use Dreamdata to analyse user behaviour. Personal data may be passed on to Dreamdata for this purpose. This service enables us to improve our marketing activities in order to provide a better user experience.

https://dreamdata.io/privacy-policy

Google Ireland Limited

We integrate Google services on our website in order to (i) analyse the use of our website, (ii) display advertising, and (iii) prevent spam. Personal data may be passed on to Google for this purpose. We use the aforementioned services to (i) understand the use of our website (Google Analytics, Google Tag Manager), to (ii) advertise our company (Google AdSense/DoubleClick), to (iii) minimise automated messages (reCaptcha).

https://policies.google.com/privacy?hl=de

https://business.safety.google/privacy/

Hubspot

We use Hubspot services for customer communication, newsletters, analyses, tracking and as a CRM system for making contact. Personal data may be passed on to Hubspot in this context. We use the aforementioned services to initiate and maintain future and current business relationships.

https://legal.hubspot.com/privacy-policy

Intercom

We integrate the Intercom chat on our website so that you can contact us directly. Personal data may be passed on to Intercom in this context, such as your name, your email address and the content of your message. We use this service to be able to respond to your enquiries quickly.

https://www.intercom.com/legal/privacy

LinkedIn Analytics & Insight Tag

We integrate LinkedIn services on our website. Personal data is passed on in the process. We use these services for advertising campaigns and to analyse our website.

https://linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

Livestorm

We use Livestorm to make our webinars available to users on demand. In doing so, you will be forwarded to Livestorm and personal data may be passed on to Livestorm.

https://livestorm.co/privacy-policy

Meta Platforms Ireland Limited

We integrate Instagram services on our website. Personal data is passed on in the process. We use these services for advertising campaigns.

https://privacycenter.instagram.com/policy

Microsoft Clarity

We use Microsoft Clarity to capture how you use and interact with our website through behavioral metrics. This helps us improve our services and site performance. Personal data and usage patterns are shared with Microsoft in this process.

https://www.microsoft.com/de-de/privacy/privacystatement

Notion

We use Notion to present the topics of data security and data protection, which also includes the privacy policy of our website. Personal data may be passed on to Notion.

https://www.notion.so/Terms-and-Privacy-28ffdd083dc3473e9c2da6ec011b58ac

Outgrow

We integrate Outgrow services on our website. If you use our ROI calculator, your personal data may be passed on to Outgrow.

https://outgrow.co/privacy-policy/

Vercel - Hosting

We use Vercel to host and deliver our website. Personal data may be passed on to Vercel in the process, in particular the data that your browser automatically transmits when accessing our website. We use the aforementioned services in order to be able to offer a website.

https://vercel.com/legal/privacy-policy

Ashby

We use Ashby to present our careers page and to get in touch with potential new employees. If you apply for a job or contact us as part of an application, personal data may be passed on to Ashby.

https://www.ashbyhq.com/resources/privacy

8. International data transfers

There is a transfer of data to third countries outside the European Union or the European Economic Area. Information we collect from you could be processed in the United States or other third countries. Some third countries, such as the United States, have not currently received an adequacy decision from the European Union under Article 45 of the GDPR, which means that your data may not receive the same level of protection there as under the GDPR.

International data transfers usually take place on the basis of contractual or other regulations provided for by law, which are intended to ensure adequate protection of your data and which you can view on request. In doing so, we rely on the provisions set forth in Article 49 of the GDPR or, where applicable, on safeguards pursuant to Article 46 of the GDPR. We and our processors strive to apply appropriate safeguards to protect the privacy and security of your personal data. Therefore, we process your personal data only in accordance with the practices described in our data privacy statement.

9. Storage period

We store your personal data only as long as it is necessary to achieve the purpose of processing. We store your data, if you have consented to the processing, at most until you revoke your consent, if we need the data to perform a contract, at most as long as the contractual relationship with you exists, if we use the data on the basis of legitimate interest, at most as long as your interest in deletion or anonymization does not prevail.

In addition, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. In these cases, the data is deleted when a storage or retention period prescribed by the aforementioned standards expires.

We store application documents for a period of six months if the application does not lead to an employment relationship and no further storage has been agreed. This period results from possible legal action against the person responsible in accordance with the General Equal Treatment Act (AGG).

We store data for the provision of the website (log files) until the respective session has ended.

10. Your rights

As a data subject, you may have the right under applicable data protection law to:

Information: In accordance with Art. 15 GDPR, you can request information about your personal data processed by us,
Correction: Pursuant to Art. 16 GDPR, you may request that your personal data be corrected or completed,
Data erasure ("right to be forgotten"): Pursuant to Art. 17 GDPR, you may request the deletion of your personal data stored by us,
Restriction: Pursuant to Art. 18 GDPR, you may request the restriction of the processing of your personal data,
Data portability: Pursuant to Art. 20 GDPR, you may request to receive your personal data in a structured, commonly used and machine-readable format and or you may request the transfer to another controller,
Objection: Pursuant to Art. 21 GDPR, you may object to certain data processing.

Information on the right to object pursuant to Art. 21 (4) GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

Withdrawal of consent

You also have the right to revoke consent to the processing of personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

To exercise your rights, you can contact us via our contact details.

11. Right of appeal to a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR or other data protection provisions.

12. Requirement or obligation to provide data

Unless expressly stated at the time of collection, the provision of data is not required or obligatory. Such an obligation may result from legal requirements or contractual regulations. Failure to provide required personal data generally means that a contract cannot be concluded and/or that we cannot provide a requested service. Our employees will clarify on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data, and what the consequences of not providing the personal data would be.

13. Automated decisions

We do not use any mechanisms for automated decision-making -including profiling- that have legal effect vis-à-vis the data subject or significantly affect him or her in a similar way.

14. Data backup

We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. The security measures include in particular the encrypted transmission of data between your terminal device and our server.

15. Cookies

Our products use cookies and similar technologies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user calls up an Internet page or, in our case, an online platform, a cookie may be stored on the user's operating system. Cookies contain a characteristic string of characters that can enable the browser to be uniquely identified when a website is called up again. Similar technologies are used to refer to other technical tools that enable the identification of Internet users, such as tracking pixels.

Technically necessary cookies and technologies are those without which our products are not functional and usable. This category contains only cookies and technologies that ensure basic functions and security features of the products or platforms. Technically necessary cookies and technologies can be set without the consent of the user.

Non-essential cookies are all cookies and technologies that are not particularly necessary for the functioning of the products or platforms and are used specifically to collect personal data of the user via analytics, ads and other embedded content. Non-essential cookies and technologies (for example, cookies for marketing, advertising or customer analysis purposes) require the consent of the website visitor.

Please refer to our Cookie Consent banner to see which cookies and technologies we use and for what purpose.

By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for the platforms, it may no longer be possible to fully use all functions of the products.

16. Status of this data privacy statement & Changes

We reserve the right to change this data privacy statement at any time with effect in the future.

17. Final provisions

Die deutschsprachige Fassung dieser Datenschutzerklärung hat Vorrang vor der englischsprachigen Fassung.