Privacy policy
1. Controller
LUMESCA GmbH
Gablonzer Strasse 28a
76185 Karlsruhe
Germany
2. Categories of Personal Data
We process personal data including:
- names
- billing and shipping addresses
- phone numbers
- email addresses
- payment information
- account information
- purchase history
- marketing preferences
- IP addresses
- browser and device information
- cookie identifiers
- app/session behavior
- consent records
3. Purposes of Processing
- order fulfillment
- customer service
- shipping operations
- fraud prevention
- marketing, with consent
- analytics and optimization
4. Legal Basis
- Art. 6(1)(b) GDPR, contract performance
- Art. 6(1)(a) GDPR, consent
- Art. 6(1)(f) GDPR, legitimate interest
5. Data Sharing
Data may be shared with:
- Shopify
- Shopify Payments
- PayPal
- shipping providers
- Google Analytics
- Meta/Facebook
- TikTok
- Mailchimp
- Shopify apps and technical service providers
6. International Transfers
Personal data may be transferred outside the EU/EEA, including to the United States and Canada.
Transfers are carried out using appropriate safeguards, including EU Standard Contractual Clauses where required.
7. Retention
Data is stored only as long as legally required or necessary for contract fulfillment.
8. Data Subject Rights
Users have rights of access, correction, deletion, restriction, and portability.
9. Cookies
Our website uses cookies and tracking technologies. Non-essential cookies are used only with consent.