Privacy policy
Last updated:
1. Data controller
Dawid Michal Nejman
erscheine.digital
Rankestraße 14, 76137 Karlsruhe, Germany
- hello@luumu.studio
- Phone
- +49 176 685 44 670
2. Website, hosting and server logs
When you visit this website, your IP address is processed to deliver content to your browser. Depending on the request, the requested address, time, technical browser and connection information and, where applicable, referring page are also transmitted.
Hosting provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Deutschland.
The purposes are website delivery, troubleshooting and protection against abuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a secure and reliable website. Processing technically necessary connection data is required to deliver the page.
Technical connection data is processed to deliver the requested content. Where server logs are stored for troubleshooting or protection against abuse, retention depends on the analysis necessary for these purposes. Entries concerning a specific error or security incident are retained until the necessary investigation and any necessary legal proceedings are completed. They are then deleted unless statutory retention obligations apply.
3. Contact and project enquiries
When you contact us by email or phone, we process your contact details, the content of your enquiry and any files you provide. We use them to respond and to discuss or work on your project.
Article 6(1)(b) GDPR applies to steps requested before entering a contract with you and to its performance. Other enquiries, including communication with company representatives, rely on Article 6(1)(f) GDPR; our legitimate interest is handling business correspondence. Statutory retention obligations are fulfilled under Article 6(1)(c) GDPR.
Email provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Deutschland.
Enquiries and associated personal data, including any copies, are deleted once the enquiry has been resolved and further storage is no longer necessary to perform a contract, meet statutory obligations or establish, exercise or defend legal claims. Where section 147 of the German Fiscal Code (AO) applies, business correspondence subject to retention obligations is generally retained for six years and accounting vouchers for eight years. The period starts at the end of the calendar year of receipt, dispatch or creation of the voucher; statutory extensions remain applicable. Retention for legal claims depends on the applicable limitation periods and, where relevant, the duration of ongoing proceedings.
Contacting us is voluntary. Without information necessary to handle your enquiry, we may be unable to respond or prepare a requested contract.
4. Consent settings
LUUMU Consent stores your choice in our first-party luumu_consent cookie for 180 days from the last save. It contains the consent version, timestamp, language and category choices. Processing takes place on our website; the manager does not send your choice to an external consent service.
The cookie is necessary to implement your chosen privacy settings (section 25(2)(2) TDDDG). Where personal data is processed, we rely on Article 6(1)(f) GDPR; our legitimate interest is reliably remembering and respecting your choice.
5. Google Analytics 4
With your voluntary consent, we use Google Analytics 4 to understand website usage and improve content and usability. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes analytics data as a processor under its data processing terms, involving affiliates and subprocessors where applicable.
Data includes page visits and interactions, timestamps, referring pages, cookie identifiers, and browser, device and approximate location information. Your IP address is processed for the connection and location derivation. Google states that EU users’ IP addresses are discarded after deriving location and are not logged or stored.
The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. The Google tag is not loaded before you accept analytics. Our integration denies consent to advertising storage, advertising data use and advertising personalization. You can use the website without consenting to analytics.
Google Analytics uses _ga to distinguish visitors and _ga_* cookies to maintain session state. Their default lifetime is two years and may be refreshed on subsequent use. You can also delete these cookies in your browser settings.
Retention is set to 2 months for event data and 14 months for user data. Google also applies the user-data period to key events. New user activity restarts the 14-month period. Expired data is deleted monthly; these periods do not apply to aggregated standard reports.
You can withdraw consent at any time through Cookie settings in the footer: disable analytics and save, or reject all optional categories. Withdrawal applies going forward and does not affect the lawfulness of earlier processing. Our integration disables further analytics and attempts to remove first-party Analytics cookies. This does not automatically delete data already transmitted. For erasure requests, use our contact details above.
Analytics data may be transferred in particular to Google LLC in the United States. For US transfers covered by its certification, Google relies on the EU-US Data Privacy Framework and the adequacy decision under Article 45 GDPR. Where adequacy does not apply, Google provides standard contractual clauses under Article 46 GDPR. The linked terms explain these safeguards and how to obtain them.
Google: data from websites and apps
6. Your rights
Subject to the applicable legal conditions, you have rights of access and a copy of your data (Article 15 GDPR), rectification (Article 16), erasure (Article 17) and restriction of processing (Article 18). Data portability (Article 20) applies to automated processing based on your consent or a contract.
To exercise your rights, contact hello@luumu.studio.
7. Right to object under Article 21 GDPR
You may object at any time to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. We will stop processing the data concerned unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or need the data for legal claims.
8. Complaints to a supervisory authority
Under Article 77 GDPR, you may complain to a data protection authority, particularly in the country of your habitual residence, workplace or the alleged infringement. The authority generally responsible for our location in Karlsruhe is the LfDI Baden-Württemberg:
Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg