Privacy Policy

1. General Information

This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website www.lumoluxled.com (the “Website”).

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, “GDPR”).

By using our Website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

We act as the data controller within the meaning of Article 4(7) GDPR.

Our details are as follows:

Lumolux Sp. z o.o.
ul. Stefana Batorego 18, lok. 231
02-591 Warsaw, Poland

KRS: 0001164775
NIP: 7011253582
REGON: 541348980

You may contact us regarding data protection matters at:
Email: privacy@lumoluxled.com

3. Personal Data We Collect

We collect and process the following categories of personal data:

      ● identification data such as name and surname

      ● contact data such as email address and telephone number

      ● business-related data such as company name, VAT number, and address details

      ● technical data such as IP address, browser type, operating system, and device information

      ● usage data relating to your interaction with our Website, including pages visited and time spent

      ● any information you voluntarily provide to us via contact forms, email, or other communication channels

We do not knowingly collect or process special categories of personal data within the meaning of Article 9 GDPR.

4. How We Collect Your Data

We collect personal data directly from you when you:

      ● submit a contact form on our Website

      ● communicate with us via email or other communication channels

      ● browse or interact with our Website, in which case certain technical data is collected automatically through cookies and similar technologies

5. Purposes of Processing

We process personal data for the following purposes:

      ● to respond to your enquiries and communicate with you

      ● to take steps prior to entering into a contract or to perform a contract with you

      ● to provide information about our products and services

      ● to operate, maintain, and secure our Website

      ● to improve our Website, services, and user experience

      ● to analyse Website traffic and user behaviour

      ● to comply with applicable legal obligations

6. Legal Basis for Processing

We process personal data on the following legal bases under Article 6 GDPR:

      ● Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures

      ● Article 6(1)(c) GDPR – compliance with legal obligations

      ● Article 6(1)(f) GDPR – our legitimate interests, including business communication, Website operation, and security

where required, Article 6(1)(a) GDPR – your consent

7. Cookies and Similar Technologies

We use cookies and similar technologies to ensure the proper functioning of our Website and to analyse its performance.

We use:

      ● strictly necessary cookies, which are required for Website operation

      ● analytical cookies, which help us understand how users interact with our Website

We activate non-essential cookies only after obtaining your consent, where required by applicable law.

You may manage or withdraw your consent at any time through your browser settings or the cookie consent tool available on our Website.

8. Analytics Tools

We use analytics services, including Google Analytics, to understand how users interact with our Website.

These services may process technical data such as IP address (where applicable and anonymised), browser information, and interaction data.

We ensure that such processing is subject to appropriate data protection agreements in accordance with Article 28 GDPR.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

In particular:

      ● we retain contact enquiry data for up to 24 months

      ● we retain contractual and business data for the duration required by applicable legal obligations

      ● we retain analytics data in accordance with the retention settings of the relevant providers

After the retention period expires, we delete or irreversibly anonymise the data.

10. Data Sharing

We may share personal data with the following categories of recipients, where necessary:

      ● IT service providers, including hosting and infrastructure providers

      ● analytics and marketing service providers

      ● professional advisors, including legal, accounting, and tax advisors

      ● business partners involved in fulfilling your requests

      ● public authorities, where required by law

All such entities process personal data on the basis of appropriate agreements and in compliance with GDPR.

11. International Data Transfers

We may transfer personal data outside the European Economic Area (EEA), including to countries such as the United States.

Where such transfers occur, we ensure appropriate safeguards in accordance with Article 46 GDPR, including the use of Standard Contractual Clauses approved by the European Commission.

12. Your Rights

You have the following rights under GDPR:

      ● the right to access your personal data

      ● the right to rectification of inaccurate or incomplete data

      ● the right to erasure (“right to be forgotten”)

      ● the right to restriction of processing

      ● the right to object to processing

      ● the right to data portability

      ● the right to lodge a complaint with a supervisory authority.

You may exercise your rights by contacting us at: privacy@lumoluxled.com.

We will respond to your request within one month, in accordance with GDPR requirements.

13. Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data.

These measures are designed to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updated version will be published on this Website and will become effective upon publication.

We encourage you to review this Privacy Policy periodically.

15. Contact

If you have any questions regarding this Privacy Policy or our data processing practices, you may contact us at:

Email: privacy@lumoluxled.com

Last updated: April 2026