Lumea
Privacy

Privacy policy.

We process as little personal data as possible. This policy describes what we process, when, and why.
1. Data controller

Who is responsible for this website?

The data controller in the sense of the GDPR is:

Lumea Technologies GmbH
Schubertstr. 3
51375 Leverkusen, Germany
Email: hello@lumea-technologies.com

2. Server access data

What does our server log?

When you visit this website, your browser transmits the following data to our hosting provider, which is stored in server logfiles for a maximum of 14 days:

  • IP address (anonymised)
  • Date and time of access
  • Requested URL and HTTP status code
  • Amount of data transferred
  • User-agent (browser and operating-system information)
  • Referrer URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the website).

3. Cookies

What cookies do we use?

This website uses Google Analytics 4 (GA4), a web-analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). GA4 sets the following cookies:

  • _ga (expires after 2 years) — distinguishes visitors
  • _ga_* (expires after 2 years) — distinguishes sessions
  • _gid (expires after 24 hours) — distinguishes days

These cookies are only set after your explicit consent. You can grant or refuse consent via the cookie banner. You can withdraw consent at any time by re-opening the banner via the link in the footer.

This site also stores an entry in your browser's localStorage (lumea_consent) to remember your consent choice. That data does not leave your device.

Processed data: Google Analytics collects anonymised data such as pages visited, time on page, browser and device information. The IP address is anonymised (IP anonymisation enabled). No merging of this data with other Google services takes place without separate consent.

Data transfer: The data collected by GA4 is transmitted to Google Ireland Limited as data processor. A data processing agreement under Art. 28 GDPR is in place.

Legal basis: Art. 6(1)(a) GDPR (consent). Consent is obtained via the cookie banner and can be withdrawn at any time.

Retention: Data retention in Google Analytics is limited to 14 months.

For more information, see Google Privacy and Google Analytics Terms of Service.

4. Fonts

Google Fonts via Next.js.

We use the Sora typeface via the Google Fonts API. Through the next/font/google integration the font files are downloaded to our server at build time and served from our own infrastructure — your browser does not communicate directly with Google servers when you load this website. No data is transmitted to Google.

5. Cal.com bookings

When you book a meeting.

On the contact / demo page and via the "Request a demo" buttons we embed the booking interface of Cal.com, Inc. (548 Market St #83767, San Francisco, CA 94104, USA). When you book a meeting, the data you enter (name, email address, any further mandatory or free-text fields) and technical information about your device are transmitted to and stored by Cal.com.

The data-processing agreement with Cal.com is based on the Cal.com standard DPA. Cal.com is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(a) GDPR (consent given by clicking the booking button). You may forgo the booking interface and contact us instead at hello@lumea-technologies.com.

6. Hosting

Where does this website run?

This website is hosted in a data centre inside the European Union (provider: Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland). A data-processing agreement under Art. 28 GDPR is in place with the hosting provider.

7. Your rights

What you can do as a data subject.

You have the right at any time to:

  • Access (Art. 15 GDPR) — what data we process about you
  • Rectification (Art. 16 GDPR) — correct inaccurate data
  • Erasure (Art. 17 GDPR) — have your data fully removed
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR) — receive your data in a machine-readable format
  • Objection (Art. 21 GDPR) — to the processing
  • Complaint to a supervisory authority — the competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)

Please send requests informally to hello@lumea-technologies.com. We respond within the statutory one-month deadline.

8. Changes

Version of this policy.

This privacy policy is current as of June 2026. We reserve the right to update it when the legal situation or our data processing changes. The version in effect is always available on this page.