Privacy policy

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Benjamin Okkenga, Wieselweg 7, 49733 Haren (Ems), Germany, email: mail@luna-and-elio.com.

The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

If you use our website for information purposes only, that is, if you do not sign up for the newsletter or send us information in any other way, we only collect the data your browser transmits to the server (known as server log files): the page visited, the date and time of access, the amount of data sent, the source or referrer from which you reached the page, the browser used, the operating system used and the IP address used.

Processing takes place pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. We do, however, reserve the right to review the server log files retrospectively should concrete indications suggest unlawful use.

For security reasons and to protect the transmission of personal data, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string https:// and the padlock symbol in your browser bar.

We use Lovable Labs Incorporated for hosting our website and displaying its content. All data collected on our website is processed on this provider's servers. We have concluded a data processing agreement with the provider which safeguards the data of our visitors and prohibits unauthorised disclosure to third parties.

We also use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA. This service enables us to deliver page content faster through a network of regionally distributed servers. Processing takes place to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 (1) (f) GDPR. We have concluded a data processing agreement with this provider as well.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

This website sets no cookies. It embeds no web analytics and no advertising services, no maps, no videos and no fonts from third-party servers. All fonts and images are hosted on our own server. That is why there is no cookie consent tool here either: there is nothing to consent to.

Your browser only stores your scroll position in session storage so that you return to the same place when going back. That entry contains no personal data and is deleted as soon as you close the tab.

When you contact us (for example by email), personal data is processed exclusively for the purpose of handling and answering your enquiry and only to the extent necessary for that purpose. The legal basis for processing this data is our legitimate interest in answering your enquiry pursuant to Art. 6 (1) (f) GDPR.

Your data is deleted once the circumstances indicate that the matter concerned has been conclusively settled, provided that no statutory retention obligations prevent this.

If you sign up for the newsletter, we process your email address, the time of sign-up and the language version you used.

Sign-up uses double opt-in: you first receive an email with a confirmation link. Only when you click it do we add you to the list. This makes sure nobody can enter somebody else's address.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw it at any time with effect for the future, through the unsubscribe link in every email or informally to the address given above. Withdrawal does not affect the lawfulness of processing carried out beforehand.

We use the following provider to send the newsletter: Brevo GmbH, Koepenicker Str. 126, 10179 Berlin, Germany. We have concluded a data processing agreement with the provider which protects the data of our visitors and prohibits disclosure to third parties.

Your address remains stored until you unsubscribe. After that we keep it only as long as necessary to prevent it being added again.

Applicable data protection law grants you the following rights vis-a-vis the controller regarding the processing of your personal data: right of access pursuant to Art. 15 GDPR; right to rectification pursuant to Art. 16 GDPR; right to erasure pursuant to Art. 17 GDPR; right to restriction of processing pursuant to Art. 18 GDPR; right to notification pursuant to Art. 19 GDPR; right to data portability pursuant to Art. 20 GDPR; right to withdraw consent given pursuant to Art. 7 (3) GDPR; right to lodge a complaint pursuant to Art. 77 GDPR.

Right to object: where we process your personal data on the basis of our overriding legitimate interest following a balancing of interests, you have the right at any time to object to this processing with effect for the future on grounds relating to your particular situation. If you exercise your right to object, we will end the processing of the data concerned. Further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object to this processing at any time. If you exercise that right, we will end the processing for direct marketing purposes.

The supervisory authority responsible for us is the State Commissioner for Data Protection of Lower Saxony, Prinzenstrasse 5, 30159 Hannover, Germany.

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and, where applicable, the relevant statutory retention period.

Where processing is based on express consent pursuant to Art. 6 (1) (a) GDPR, the data concerned is stored until you withdraw your consent.

Where processing is based on Art. 6 (1) (f) GDPR, the data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Otherwise, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.