Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when using our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Andreas Unterkofler, Lunatre GmbH, Sankt Ruprechterstraße 90, 9020 Klagenfurt, Austria, Tel.: +436506605000, Email: office@lunatre.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

When you use our website merely for informational purposes, i.e. when you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The website you visited
  • Date and time at the moment of access
  • Amount of data sent in bytes
  • Source/reference from which you arrived at the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymised form)

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

3) Contacting Us

When you contact us (e.g. via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry, and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided no statutory retention obligations apply.

4) Data Processing for Order Fulfilment

To the extent necessary for contract fulfilment for delivery and payment purposes, the personal data we collect is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.

Insofar as we owe you, on the basis of a corresponding contract, updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order in order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact details will be used strictly for the specific purpose of notifying you about updates owed by us, and will be processed by us for this purpose only to the extent necessary for the respective information.

To process your order, we furthermore work with the service provider(s) listed below, who assist us fully or partially in fulfilling concluded contracts. In accordance with the following information, certain personal data is transmitted to these service providers.

5) Rights of the Data Subject

5.1 Applicable data protection law grants you the following rights (rights of access and intervention) as a data subject with respect to the controller regarding the processing of your personal data, whereby reference is made to the stated legal basis for the respective requirements for exercising these rights:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to notification pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent given pursuant to Art. 7 (3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

5.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

6) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and, where applicable, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of explicit consent pursuant to Art. 6 (1) lit. a GDPR, the data concerned is stored until you withdraw your consent.

If statutory retention periods exist for data processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer required for the fulfilment of the contract or the initiation of a contract, and/or we no longer have a legitimate interest in its continued storage.

When personal data is processed on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise indicated by other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.