Lumube
Innovation, tracked.
Legal
Last updated: 20 July 2026
The controller of your personal data is Lumube, with its registered address at Polskiej Organizacji Wojskowej 16/lok. 5, Łódź, Poland. You can contact us regarding data protection matters at [email protected] or by post at the address above.
This Privacy Policy applies to all personal data collected through the website lumube.info and through any direct communications with us. It is written in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000).
We collect information in two ways. The first is information you provide directly. When you use the contact form on this website, you provide your email address and a message. You may optionally provide your name. We do not collect payment information, identity documents, or sensitive personal data through this website.
The second is information collected automatically. When you visit the website, our server records standard log data including your IP address, browser type, operating system, the pages you visit, and the time and date of your visit. This information is collected through standard server logging and, where you have consented, through cookies and similar technologies.
We use the information you provide through the contact form solely to respond to your inquiry. We do not use it for marketing, profiling, or any purpose other than the direct response to your communication.
Server log data is used for the purpose of maintaining website security, diagnosing technical issues, and understanding how the website is used in aggregate terms. This data is not used to identify individual visitors unless required for security or legal purposes.
Where you have provided consent to analytical cookies, we may use anonymised usage data to understand how visitors navigate the website and to identify areas for improvement.
Processing of data submitted through the contact form is based on Article 6(1)(b) GDPR, where processing is necessary to take steps at your request prior to entering into a contract, and Article 6(1)(f) GDPR, our legitimate interest in responding to inquiries about our services.
Processing of server log data for security purposes is based on Article 6(1)(f) GDPR, our legitimate interest in maintaining a secure and functional website.
Processing based on cookies or analytical tools is carried out under Article 6(1)(a) GDPR, your explicit consent, which you provide or withhold through our cookie consent mechanism.
Contact form data is retained for as long as necessary to handle your inquiry and any follow-up communication, and no longer than 24 months from the last contact. After this period, the data is deleted or anonymised.
Server log data is retained for a maximum of 12 months for security purposes and then deleted automatically.
Cookie-related data is retained in accordance with the individual cookie lifespans described in our Cookie Policy.
We do not sell or rent your personal data to any third party. We may share data with service providers who support our technical infrastructure, such as hosting providers and email service providers. These providers process data only on our behalf and under contractual data processing agreements that require them to protect your data in accordance with GDPR.
We may disclose personal data where required to do so by law, by a court order, or by a competent supervisory authority in Poland, which is the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych, PUODO).
We endeavour to keep all personal data within the European Economic Area. Where any transfer to a third country is necessary, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including standard contractual clauses approved by the European Commission.
As a data subject, you have the following rights under the GDPR:
Right of access (Article 15 GDPR): You may request a copy of the personal data we hold about you.
Right to rectification (Article 16 GDPR): You may request correction of inaccurate or incomplete data.
Right to erasure (Article 17 GDPR): You may request deletion of your data where the processing is no longer necessary or where you withdraw consent.
Right to restriction (Article 18 GDPR): You may request that we limit the processing of your data in certain circumstances.
Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
Right to object (Article 21 GDPR): You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month as required by GDPR.
We implement technical and organisational measures appropriate to the risk, including encrypted data transmission (TLS/HTTPS), access controls limiting data access to authorised personnel only, and regular review of our data handling practices.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority in Poland: the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland. Website: uodo.gov.pl.
We encourage you to contact us directly first at [email protected] so we have an opportunity to address your concern.
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The current version will always be available at lumube.info/privacy.html with the date of the most recent update shown at the top of the document.