Privacy Policy

Last updated: March 2026

1. Controller and contact

The data controller responsible for this website is:

Nandor Babina
c/o MDC Management#6302
Welserstraße 3
87463 Dietmannsried
Germany

For privacy-related requests, contact us at legal@lumierault.com. We are not required to designate a data protection officer for our current scale of processing.

2. Data we collect and why

Contact form

When you submit the contact form, we collect your name, email address, reason for contact, and message. We use this data to respond to your inquiry. The legal basis is your consent (Art. 6(1)(a) GDPR). We also process your IP address for rate limiting and security. That processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in preventing abuse.

Waitlist

When you join the waitlist, we collect your email address. We use it to notify you when our product is available. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the waitlist at any time here.

Technical data

Our hosting and infrastructure may log IP addresses and other technical data for security and operation. Such data is kept only as long as necessary for those purposes.

3. Cookies and similar technologies

We do not use cookies, or local or session storage, on this website.

4. Recipients and hosting

Personal data is processed within the European Union. Our website is hosted on Vercel (EU), and contact and waitlist data are stored in our own database in the EU (e.g. on EU-based infrastructure). We do not transfer your data to countries outside the EU/EEA for the purposes described in this policy.

5. Retention

Contact form submissions and waitlist signups are kept for up to one year, or until you ask us to delete them, whichever is sooner. Technical and log data are retained only as long as needed for security and operation (typically a short period). After the retention period, we delete or anonymise the data.

6. Your rights

Under the GDPR, you have the right to:

  • request access to your personal data (Art. 15);
  • request rectification of inaccurate data (Art. 16);
  • request erasure of your data (Art. 17);
  • request restriction of processing (Art. 18);
  • data portability where applicable (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3));
  • lodge a complaint with a supervisory authority, in particular in the EU member state of your residence or the place of the alleged infringement. For Germany, you may contact the competent state data protection authority (e.g. the Hessian Commissioner for Data Protection and Freedom of Information if our processing falls under Hesse).

To exercise these rights, contact us at legal@lumierault.com.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, in line with the risks associated with the processing.

8. Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top will be revised when we make material changes. We encourage you to review this page periodically.

For our legal notice and imprint, see our Legal Notice.