GDPR
Last updated: [date]
1. Who We Are (Data Controller)
Lumeo Vision s.r.o.
Jazdecká 2365/5
57421323
Contact email: business@lumeovision.sk
2. What Personal Data We Collect
We collect the following personal data when you visit our website or make a purchase:
- Name and email address
- Billing address and payment details (processed securely by our payment provider — we do not store full card numbers)
- IP address and browser/device information (via cookies and analytics)
- Purchase history and order details
3. Why We Collect This Data (Legal Basis)
| Purpose | Legal Basis |
|---|---|
| Processing your order and delivering the product | Contract (Art. 6(1)(b) GDPR) |
| Sending order confirmations and support emails | Contract |
| Sending marketing emails (newsletters, offers) | Consent (Art. 6(1)(a) GDPR) |
| Fraud prevention and legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
| Website analytics and improving our service | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Who We Share Your Data With
We may share your data with trusted third-party service providers, including:
- Shopify — our e-commerce platform (data processor)
- Payment processors (e.g. Shopify Payments, PayPal, Revolut) — to process transactions
- Email marketing tools (e.g. Klaviyo, Mailchimp) — if you opt in to marketing
- Analytics providers (e.g. Google Analytics, Meta Pixel) — for website performance and ad tracking
We never sell your personal data to third parties.
5. International Data Transfers
As we serve customers globally, your data may be transferred outside the European Economic Area (EEA), including to the United States. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or transfer under an adequacy decision.
6. How Long We Keep Your Data
We retain your personal data only as long as necessary for the purposes described above, or as required by law (e.g. tax/accounting obligations typically require records to be kept for [X years, e.g. 10 years under Slovak law]).
7. Your Rights Under GDPR
If you are located in the EEA/UK, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interest or direct marketing
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at [your email]. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority (in Slovakia: Úrad na ochranu osobných údajov SR, dataprotection.gov.sk).
8. Cookies
Our website uses cookies to improve your browsing experience, analyze traffic, and support advertising. You can manage cookie preferences via the cookie banner shown on your first visit, or through your browser settings. See our [Cookie Policy] for full details.
9. Data Security
We implement appropriate technical and organizational measures (SSL encryption, secure hosting via Shopify, restricted access) to protect your personal data against unauthorized access, loss, or misuse.
10. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.