{"id":75727,"date":"2025-08-01T09:53:46","date_gmt":"2025-08-01T07:53:46","guid":{"rendered":"https:\/\/lumi-systems.io\/?page_id=75727"},"modified":"2026-11-07T11:58:26","modified_gmt":"2026-11-07T10:58:26","slug":"datenschutz","status":"publish","type":"page","link":"https:\/\/lumi-systems.io\/en\/datenschutz\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<style>\n\/* Rechtsseiten: Datenschutz und Impressum \u2014 gleiche Gestaltung wie die AGB-Seite *\/\n#lumi-recht {\n  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;\n  color: #1f2937;\n  line-height: 1.75;\n}\n#lumi-recht .recht-kopf { max-width: var(--lumi-maxw); margin: 0 auto 40px; padding: 0 20px; }\n#lumi-recht .recht-kopf h1 { font-size: 38px; font-weight: 800; color: #143852; margin: 0 0 10px; line-height: 1.2; }\n#lumi-recht .recht-kopf .recht-stand { font-size: 15px; color: #6b7280; margin: 0 0 20px; }\n#lumi-recht .recht-hinweis {\n  background: #f8fafc; border-left: 4px solid #1a56db; border-radius: 0 10px 10px 0;\n  padding: 18px 22px; font-size: 15px; color: #374151; margin: 0;\n}\n#lumi-recht .recht-hinweis p:last-child { margin-bottom: 0; }\n#lumi-recht .recht-raster {\n  max-width: var(--lumi-maxw); margin: 0 auto; padding: 0 20px 60px;\n  display: grid; grid-template-columns: 300px 1fr; gap: 48px; align-items: start;\n}\n#lumi-recht .recht-inhalt { min-width: 0; }\n#lumi-recht .recht-inhalt > section { max-width: 1000px; }\n#lumi-recht .recht-toc {\n  position: sticky; top: 110px; background: #f8fafc; border: 1px solid #e5e7eb;\n  border-radius: 12px; padding: 22px 20px; font-size: 14.5px;\n}\n#lumi-recht .recht-toc h2 {\n  font-size: 13px; font-weight: 700; letter-spacing: .09em; text-transform: uppercase;\n  color: #6b7280; margin: 0 0 12px; border: 0; padding: 0;\n}\n#lumi-recht .recht-toc ol { list-style: none; margin: 0; padding: 0; }\n#lumi-recht .recht-toc li { margin: 0 0 7px; }\n#lumi-recht .recht-toc a { color: #374151; text-decoration: none; display: block; padding: 3px 0; border-bottom: 1px solid transparent; }\n#lumi-recht .recht-toc a:hover { color: #1a56db; border-color: #1a56db; }\n#lumi-recht h2 {\n  font-size: 23px; font-weight: 700; color: #143852; margin: 42px 0 14px;\n  padding-bottom: 10px; border-bottom: 2px solid #1a56db; scroll-margin-top: 120px;\n}\n#lumi-recht h2:first-of-type { margin-top: 0; }\n#lumi-recht h3 { font-size: 17px; font-weight: 600; color: #143852; margin: 24px 0 8px; }\n#lumi-recht p { margin: 0 0 14px; color: #374151; }\n#lumi-recht ul, #lumi-recht ol { margin: 0 0 16px; padding-left: 22px; }\n#lumi-recht li { margin-bottom: 7px; color: #374151; }\n#lumi-recht a { color: #1a56db; }\n#lumi-recht strong { color: #143852; }\n#lumi-recht .recht-tabelle { width: 100%; border-collapse: collapse; margin: 0 0 20px; font-size: 15px; }\n#lumi-recht .recht-tabelle th, #lumi-recht .recht-tabelle td {\n  border: 1px solid #e5e7eb; padding: 10px 14px; text-align: left; vertical-align: top;\n}\n#lumi-recht .recht-tabelle th { background: #f8fafc; font-weight: 600; color: #143852; }\n#lumi-recht .recht-kasten {\n  background: #fffbeb; border: 1px solid #fcd34d; border-radius: 10px;\n  padding: 18px 22px; margin: 0 0 20px;\n}\n#lumi-recht .recht-kasten p:last-child { margin-bottom: 0; }\n@media (max-width: 1024px) {\n  #lumi-recht .recht-raster { grid-template-columns: 1fr; gap: 28px; }\n  #lumi-recht .recht-toc { position: static; }\n  #lumi-recht .recht-inhalt > section { max-width: none; }\n}\n@media (max-width: 600px) {\n  #lumi-recht .recht-kopf h1 { font-size: 28px; }\n  #lumi-recht h2 { font-size: 20px; }\n}\n<\/style>\n<div id=\"lumi-recht\">\n<div class=\"recht-kopf\">\n<h1>Privacy Policy<\/h1>\n<p class=\"recht-stand\">Version 2.1 \u00b7 valid from 9 October 2026<\/p>\n<div class=\"recht-hinweis\">\n<p><strong>In short:<\/strong> This website sets <strong>no cookies<\/strong>, unless you<br \/>\n      expressly consent, and loads <strong>no content from third-party servers<\/strong>. For<br \/>\n      reach measurement, we operate our own cookieless analytics on our server. We pass on data<br \/>\n      only where it is necessary for an order, a support request, or use of the AI assistant<br \/>\n      \u2014 this is described in detail below.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"recht-raster\">\n<nav class=\"recht-toc\" aria-label=\"Contents\">\n<h2>Contents<\/h2>\n<ol>\n<li><a href=\"#verantwortlicher\">1. Controller<\/a><\/li>\n<li><a href=\"#grundsaetze\">2. Principles<\/a><\/li>\n<li><a href=\"#logfiles\">3. Server log files<\/a><\/li>\n<li><a href=\"#cookies\">4. Cookies and consent<\/a><\/li>\n<li><a href=\"#matomo\">5. Reach measurement (Matomo)<\/a><\/li>\n<li><a href=\"#kontakt\">6. Contact<\/a><\/li>\n<li><a href=\"#ki\">7. AI support assistant<\/a><\/li>\n<li><a href=\"#shop\">8. Online shop, payment, shipping<\/a><\/li>\n<li><a href=\"#hosting\">9. Hosting<\/a><\/li>\n<li><a href=\"#empfaenger\">10. Recipients<\/a><\/li>\n<li><a href=\"#drittland\">11. Transfers to third countries<\/a><\/li>\n<li><a href=\"#speicherdauer\">12. Retention period<\/a><\/li>\n<li><a href=\"#rechte\">13. Your rights<\/a><\/li>\n<li><a href=\"#beschwerde\">14. Right to lodge a complaint<\/a><\/li>\n<li><a href=\"#automatisiert\">15. No automated decision-making<\/a><\/li>\n<li><a href=\"#pflicht\">16. Obligation to provide<\/a><\/li>\n<li><a href=\"#sicherheit\">17. Data security<\/a><\/li>\n<li><a href=\"#aenderung\">18. Changes<\/a><\/li>\n<\/ol>\n<\/nav>\n<div class=\"recht-inhalt\">\n<section id=\"verantwortlicher\">\n<h2>1. Controller<\/h2>\n<p>The controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:<\/p>\n<p><strong>Dimitri Rupp<\/strong><br \/>\nCompany name: Lumi-Systems.io<br \/>\nArnikaweg 47a\/3, 1220 Vienna, Austria<br \/>\nEmail: <a href=\"mailto:office@lumi-systems.io\">office@lumi-systems.io<\/a><br \/>\nPhone: <a href=\"tel:+436641617219\">+43 664 16 17 219<\/a><\/p>\n<p>We have not appointed a data protection officer because the legal requirements for doing so<br \/>\n(Article 37 GDPR in conjunction with Section 6 DSG) do not apply to us. Please direct data protection inquiries<br \/>\nto the address given above.<\/p>\n<\/section>\n<section id=\"grundsaetze\">\n<h2>2. Principles<\/h2>\n<p>We process personal data only insofar as this is necessary for the operation of this website, the<br \/>\nanswering of your inquiries, and the processing of orders. We do not sell any<br \/>\ndata, do not perform profiling, and do not use third-party advertising or analytics services.<\/p>\n<p>This website loads <strong>no resources from external servers<\/strong> \u2014 no fonts, no<br \/>\nmaps, no tracking pixels, no third-party scripts. Therefore, when a page is accessed, no contact is established<br \/>\nwith Google, Meta or other third parties.<\/p>\n<p><strong>Links to our profiles on Instagram and Facebook.<\/strong> We operate profiles on<br \/>\nInstagram and Facebook (both belong to Meta). On this website, they are, as<br \/>\n<strong>simple links,<\/strong> embedded \u2014 the brand icons are hosted on our own server,<br \/>\nthere are no <strong>none<\/strong> tracking pixels, buttons or embedded content from these providers.<br \/>\nAs long as you do not click a link, no contact with Meta is established. Only by<br \/>\nclicking do you open the provider's page; from this point on, its terms and<br \/>\nprivacy policy apply, and your IP address is transmitted to it. We have no<br \/>\ninfluence over data processing there. Whether you visit our profiles is up to you.<\/p>\n<\/section>\n<section id=\"logfiles\">\n<h2>3. Server log files<\/h2>\n<p>When our website is accessed, the server automatically records:<\/p>\n<ul>\n<li>browser type and version as well as the operating system used<\/li>\n<li>the previously visited page (referrer), provided your browser transmits it<\/li>\n<li>the IP address of the accessing computer<\/li>\n<li>date and time of the request as well as the requested address<\/li>\n<\/ul>\n<p><strong>Purpose:<\/strong> establishing the connection, security and stability of operation, analysis of<br \/>\nmalfunctions and defense against attacks.<br \/>\n<strong>Legal basis:<\/strong> our legitimate interest in a secure and functional<br \/>\noperation (Art. 6(1)(f) GDPR).<br \/>\n<strong>Retention period:<\/strong> 14 days, after which the logs are deleted. They are stored longer<br \/>\nonly if a specific attack must be documented, until the matter is resolved.<\/p>\n<p>According to the case law of the European Court of Justice, the IP address is personal data<br \/>\n(Judgment of 19 October 2016, C-582\/14). A legally prescribed retention period for<br \/>\nserver logs does not exist; the 14 days are our own determination, justified above.<\/p>\n<\/section>\n<section id=\"cookies\">\n<h2>4. Cookies and consent<\/h2>\n<p><strong>When merely visiting, the server does not set any cookies.<\/strong> We have verified this: When<br \/>\ncalling up the pages, the server does not send a single <em>Set-Cookie<\/em>-header. A single<br \/>\nexception is created by your browser itself \u2014 the counter of the watchlist. It contains no identifier<br \/>\nand is discarded when the browser is closed; the line is in the following table.<\/p>\n<p>Cookies are only used where they are indispensable for a function you have requested:<\/p>\n<table class=\"recht-tabelle\">\n<tr>\n<th>Purpose<\/th>\n<th>When<\/th>\n<th>Legal basis<\/th>\n<\/tr>\n<tr>\n<td>Shopping cart and order process<\/td>\n<td>as soon as you put something in the shopping cart<\/td>\n<td>Performance of a contract, Art. 6(1)(b) GDPR<\/td>\n<\/tr>\n<tr>\n<td>Watchlist (wishlist)<\/td>\n<td>as soon as you use it<\/td>\n<td>Performance of a contract or your request, Article 6(1)(b) GDPR<\/td>\n<\/tr>\n<tr>\n<td>Wishlist: counter value<\/td>\n<td>on the first page view, for the duration of the visit<\/td>\n<td>legitimate interest in a functioning wishlist, Article 6(1)(f) GDPR<\/td>\n<\/tr>\n<tr>\n<td>Login and security of the administrative access<\/td>\n<td>only for logged-in users<\/td>\n<td>legitimate interest in system security, Article 6(1)(f) GDPR<\/td>\n<\/tr>\n<tr>\n<td>Your consent status<\/td>\n<td>when you use the consent notice<\/td>\n<td>legal obligation to provide evidence, Article 6(1)(c) GDPR<\/td>\n<\/tr>\n<\/table>\n<p>For anything beyond that \u2014 in particular for analytics or marketing cookies \u2014 we obtain your<br \/>\nconsent in advance. The legal basis for storing information on your device is<br \/>\nSection 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021); for the subsequent<br \/>\nprocessing, Article 6(1)(a) GDPR.<\/p>\n<p>You can withdraw your consent at any time with effect for the future. You can also<br \/>\ndelete or block cookies in your browser settings; the website then functions<br \/>\nwithout restriction; only the shopping cart and wishlist cannot then be used.<\/p>\n<\/section>\n<section id=\"matomo\">\n<h2>5. Reach measurement (Matomo)<\/h2>\n<p>We measure the use of our website with <strong>Matomo<\/strong> \u2014 a software that we operate<br \/>\n<strong>on our own server<\/strong> (matomo.lumi-systems.io). There is <strong>no transfer to<br \/>\nthird parties<\/strong> .<\/p>\n<p>The analytics are set up to work without cookies:<\/p>\n<ul>\n<li>Cookies are disabled (<code>disableCookies<\/code>) \u2014 no identifiers are stored in your browser.<\/li>\n<li>The IP address is truncated before it is stored.<\/li>\n<li>Recognition is not based on you, but on a daily, non-traceable identifier.<\/li>\n<li>The referrer to a previous page is stored without the appended parameters.<\/li>\n<li>No linking across multiple websites takes place.<\/li>\n<\/ul>\n<p><strong>Purpose:<\/strong> to understand which content is read in order to improve our offering.<br \/>\n<strong>Legal basis:<\/strong> our legitimate interest in a data-minimising analysis of the<br \/>\nown offering (Art. 6(1)(f) GDPR). Since no information on your device<br \/>\nis stored or read from it, \u00a7 165(3) TKG 2021 does not apply.<br \/>\n<strong>Objection:<\/strong> You can object to the analytics at any time (Art. 21 GDPR) \u2014 a<br \/>\nmessage to <a href=\"mailto:office@lumi-systems.io\">office@lumi-systems.io<\/a> suffices. We cannot<br \/>\ntechnically attribute individual visits, which is why there is no \u201eopt-out\u201c button.<\/p>\n<p>Please note: In Austria, there is no<br \/>\ndecision by the data protection authority on self-hosted, cookie-less web analytics. We therefore do not rely on such a decision, but<br \/>\ndescribe the actual configuration openly here so that you can assess the processing.<\/p>\n<\/section>\n<section id=\"kontakt\">\n<h2>6. Contact<\/h2>\n<p><strong>Request form on lumi-systems.io.<\/strong> Using the form at <a href=\"\/en\/anfrage\/\">\/anfrage\/<\/a> you can request an initial consultation or a project. The following data you provide will be processed: name, company, email address, phone number (optional), selected package and your message. Transmission takes place via our own WordPress installation and is delivered by email to office@lumi-systems.io; no third-party services (no captcha, no external form platform) are integrated. Purpose: processing and responding to your request and preparing an initial consultation. Legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR). Storage duration: until your request is completed; subsequently deleted after no more than 24 months, unless a statutory retention obligation exists.<\/p>\n<p>You can reach us via the contact portal <a href=\"https:\/\/contact.lumi-systems.io\/\">contact.lumi-systems.io<\/a><br \/>\nor by email. The contact portal is the recommended way for support and project enquiries.<\/p>\n<p><strong>Processed data:<\/strong> the contact details you provide (name, email address,<br \/>\norganisation, phone number), your request including the selected category, priority and<br \/>\nEnvironment and technical details about the request:<\/p>\n<ul>\n<li>a reference number that we generate from the date and a random identifier<\/li>\n<li>a <strong>truncated hash value<\/strong> your IP address (privacy-friendly, not reversible)<\/li>\n<li>your browser identifier (User-Agent)<\/li>\n<\/ul>\n<p>Your request is recorded as a work order in our self-hosted GitLab instance so that it<br \/>\ncan be processed in a traceable manner.<\/p>\n<p><strong>Purpose:<\/strong> Processing and answering your request, traceability of the process,<br \/>\nPrevention of abuse.<br \/>\n<strong>Legal basis:<\/strong> Performance of pre-contractual measures and fulfilment of contracts<br \/>\n(Art. 6(1)(b) GDPR), for the technical details our legitimate interest in<br \/>\nabuse prevention (Art. 6(1)(f) GDPR).<br \/>\n<strong>Retention period:<\/strong> until your request is completed; afterwards we delete it after<br \/>\nat most 24 months, unless a statutory retention obligation exists or retention is necessary for<br \/>\nthe assertion or defence of claims.<\/p>\n<p>There is no statutory retention period for contact requests \u2014 this period is our own<br \/>\ndetermination based on the principle of storage limitation (Art. 5(1)(e) GDPR).<\/p>\n<\/section>\n<section id=\"ki\">\n<h2>7. AI support assistant<\/h2>\n<p>On the page <a href=\"\/en\/ai-support-assistent\/\">AI Assistant<\/a> an AI-powered assistant is available<br \/>\nthat answers questions about our services.<\/p>\n<p><strong>Processed data:<\/strong> Your inputs in the chat \u2014 text as well as images or files that you<br \/>\nupload \u2014 and the conversation history that your browser sends along with each request.<\/p>\n<p><strong>Storage with us:<\/strong> The conversation history is <strong>not on our server<br \/>\nstored<\/strong>. We only create an anonymous count to prevent overload<br \/>\n(number of requests per hour), and log technical errors <em>without<\/em> your inputs. The<br \/>\nhistory remains in your browser and ends when you leave the page or clear the history.<\/p>\n<div class=\"recht-kasten\">\n<p><strong>Important \u2014 Transfer to China:<\/strong> To answer, your input is sent to the<br \/>\n  interface of <strong>DeepSeek<\/strong> transmitted and processed there. The provider is<br \/>\n  <em>Hangzhou DeepSeek Artificial Intelligence Co., Ltd.<\/em>, People's Republic of China. According to their<br \/>\n  privacy policy, the data are <strong>stored and processed in China<\/strong> and may<br \/>\n  be used to improve the models.<\/p>\n<p>For China, there is <strong>no adequacy decision<\/strong> of the European Commission. The<br \/>\n  transfer is therefore based on the standard contractual clauses pursuant to Article 46(2)(c) GDPR in<br \/>\n  conjunction with an assessment of the safeguards. You can obtain a copy of the guarantees upon request<br \/>\n  at <a href=\"mailto:office@lumi-systems.io\">office@lumi-systems.io<\/a>.<\/p>\n<p><strong>Please do not enter any sensitive personal data<\/strong> \u2014 no<br \/>\n  health data, no ID document data, no access credentials, and no third-party data without their<br \/>\n  Consent.<\/p>\n<\/div>\n<p><strong>Purpose:<\/strong> Answering your question.<br \/>\n<strong>Legal basis:<\/strong> Your consent by actively using the assistant<br \/>\n(Art. 6(1)(a) GDPR) as well as our legitimate interest in efficient support<br \/>\n(Art. 6(1)(f) GDPR). You can stop using it at any time and instead contact us via the<br \/>\ncontact portal \u2014 there your request remains exclusively with us.<br \/>\n<strong>Representation in the EU:<\/strong> DeepSeek has appointed a representative in the Union pursuant to Art. 27 GDPR<br \/>\nappointed (Prighter Group) and can be reached at <a href=\"mailto:rep_deepseek@prighter.com\">rep_deepseek@prighter.com<\/a><br \/>\nreachable.<\/p>\n<\/section>\n<section id=\"shop\">\n<h2>8. Online shop, payment and shipping<\/h2>\n<p>In the <a href=\"\/en\/shop\/\">online shop<\/a> you can order devices and books. For the processing<br \/>\nwe process the order data you enter: name, address, email address, ordered<br \/>\nitems and invoice amount.<\/p>\n<p><strong>Legal basis:<\/strong> Performance of the purchase contract (Art. 6(1)(b) GDPR) as well as<br \/>\nCompliance with legal obligations (Art. 6(1)(c) GDPR).<\/p>\n<h3>Payment<\/h3>\n<p>We offer payment by credit card, via <strong>Stripe<\/strong> and over <strong>PayPal<\/strong> comes in.<br \/>\nPayment processing is carried out exclusively by the respective payment service provider; we receive<br \/>\nno complete card data, only the information whether the payment was successful.<\/p>\n<table class=\"recht-tabelle\">\n<tr>\n<th>Service provider<\/th>\n<th>Purpose<\/th>\n<th>Note<\/th>\n<\/tr>\n<tr>\n<td>Stripe Payments Europe, Ltd.<\/td>\n<td>Card payment and other payment methods<\/td>\n<td>Stripe uses a technically necessary cookie for fraud detection<\/td>\n<\/tr>\n<tr>\n<td>PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A.<\/td>\n<td>Payment via a PayPal account<\/td>\n<td>Their privacy policies also apply<\/td>\n<\/tr>\n<\/table>\n<p>Depending on the payment method chosen, your payment service provider may require its own details from you. Please<br \/>\nread the privacy notices there.<\/p>\n<h3>Shipping<\/h3>\n<p>For delivery, we pass on your name and address to the commissioned shipping company.<br \/>\nYour email address is transmitted only to the extent necessary for the delivery notification.<\/p>\n<h3>Retention<\/h3>\n<p>We retain invoices and the associated receipts in accordance with \u00a7 132(1) of the Federal Fiscal Code<br \/>\n<strong>for seven years<\/strong> ; the period runs from the end of the calendar year in which the service<br \/>\nwas provided.<\/p>\n<\/section>\n<section id=\"hosting\">\n<h2>9. Hosting<\/h2>\n<p>Our website is operated by a hosting provider in the European Union. The provider<br \/>\nprocesses on our behalf the data arising during access (in particular server log files) and is<br \/>\nbound by a data processing agreement pursuant to Art. 28 GDPR.<\/p>\n<p>The AI assistant and the online shop run on the same infrastructure. Our GitLab instance, in which<br \/>\nsupport requests are recorded as work orders, we also operate ourselves.<\/p>\n<\/section>\n<section id=\"empfaenger\">\n<h2>10. Recipients<\/h2>\n<p>Recipients of your data are exclusively:<\/p>\n<ul>\n<li>our hosting provider (processor pursuant to Art. 28 GDPR)<\/li>\n<li>the payment service provider selected by you, insofar as required for the payment<\/li>\n<li>the contracted shipping company, to the extent necessary for delivery<\/li>\n<li>DeepSeek, insofar as you use the AI assistant<\/li>\n<li>our tax advisor and the tax authorities, insofar as statutory obligations exist<\/li>\n<\/ul>\n<p>We do not sell personal data and do not disclose it for advertising purposes.<\/p>\n<p><strong>Not in this list:<\/strong> If you click a link to our profiles on Instagram<br \/>\nor Facebook, <em>your browser<\/em> transmits your IP address to the respective<br \/>\nprovider (see Section 2). This is not triggered by us, but by your click; the provider is<br \/>\nin this respect the controller in its own right. <strong>As long as you do not click, no transmission occurs<br \/>\n.<\/strong><\/p>\n<\/section>\n<section id=\"drittland\">\n<h2>11. Transfers to third countries<\/h2>\n<p>A transfer to a third country only takes place if you use the AI assistant: Your input<br \/>\nis then sent to <strong>DeepSeek in the People's Republic of China<\/strong> transmitted.<\/p>\n<p>For China, there is <strong>no adequacy decision<\/strong> of the European Commission. The<br \/>\nThe transfer is based on the standard contractual clauses pursuant to Art. 46(2)(c) GDPR<br \/>\n(Implementing Decision (EU) 2021\/914) in conjunction with an assessment of the circumstances and additional<br \/>\nsafeguards. A copy of these guarantees is available on request.<\/p>\n<p>Otherwise, we process your data exclusively in the European Union. For the USA, there is<br \/>\nan adequacy decision (Data Privacy Framework), but we do not transfer any data there.<\/p>\n<p>Regarding the links to Instagram and Facebook mentioned in Section 2: <strong>We ourselves transmit<br \/>\nno data in the process.<\/strong> Only when you click a link does your browser establish a connection<br \/>\nto the respective provider. What the provider then does with the data \u2014 including a possible<br \/>\nforwarding to a third country \u2014 is governed by its terms and conditions and lies outside our<br \/>\ncontrol.<\/p>\n<\/section>\n<section id=\"speicherdauer\">\n<h2>12. Retention period<\/h2>\n<table class=\"recht-tabelle\">\n<tr>\n<th>Data<\/th>\n<th>Duration<\/th>\n<\/tr>\n<tr>\n<td>Server log files<\/td>\n<td>14 days<\/td>\n<\/tr>\n<tr>\n<td>Reach measurement (Matomo)<\/td>\n<td>truncated IP is not stored; analyses without personal reference<\/td>\n<\/tr>\n<tr>\n<td>Contact and support requests<\/td>\n<td>until completion, thereafter at most 24 months<\/td>\n<\/tr>\n<tr>\n<td>Inputs in the AI assistant<\/td>\n<td>are not stored by us<\/td>\n<\/tr>\n<tr>\n<td>Invoices and receipts<\/td>\n<td>7 years (Section 132(1) BAO)<\/td>\n<\/tr>\n<tr>\n<td>Order data not constituting an invoice<\/td>\n<td>until the expiry of the warranty and limitation periods<\/td>\n<\/tr>\n<\/table>\n<p>Where no statutory period exists, we determine the duration in accordance with the principle of storage limitation<br \/>\n(Art. 5(1)(e) GDPR) ourselves and review it regularly.<\/p>\n<\/section>\n<section id=\"rechte\">\n<h2>13. Your rights<\/h2>\n<p>You have the following rights vis-\u00e0-vis us at any time:<\/p>\n<ul>\n<li><strong>Access<\/strong> to the data processed concerning you (Art. 15 GDPR)<\/li>\n<li><strong>Rectification<\/strong> of inaccurate or incomplete data (Art. 16 GDPR)<\/li>\n<li><strong>Erasure<\/strong> of your data, insofar as no retention obligation precludes this (Art. 17 GDPR)<\/li>\n<li><strong>Restriction<\/strong> of processing (Art. 18 GDPR)<\/li>\n<li><strong>Data portability<\/strong> in a common, machine-readable format (Art. 20 GDPR)<\/li>\n<li><strong>Objection<\/strong> to processing based on our legitimate interest (Art. 21 GDPR)<\/li>\n<li><strong>Withdrawal<\/strong> of consent granted with effect for the future (Art. 7(3) GDPR)<\/li>\n<\/ul>\n<p>To exercise them, it is sufficient to send a message to <a href=\"mailto:office@lumi-systems.io\">office@lumi-systems.io<\/a>.<br \/>\nWe respond within one month.<\/p>\n<\/section>\n<section id=\"beschwerde\">\n<h2>14. Right to lodge a complaint<\/h2>\n<p>If you believe that the processing of your data infringes data protection law, you can<br \/>\nlodge a complaint with the supervisory authority:<\/p>\n<p><strong>Austrian Data Protection Authority<\/strong><br \/>\nBarichgasse 40\u201342, 1030 Vienna<br \/>\nPhone: +43 1 52 152-0<br \/>\nEmail: <a href=\"mailto:dsb@dsb.gv.at\">dsb@dsb.gv.at<\/a><br \/>\n<a href=\"https:\/\/www.dsb.gv.at\/\" target=\"_blank\" rel=\"noopener noreferrer\">www.dsb.gv.at<\/a><\/p>\n<\/section>\n<section id=\"automatisiert\">\n<h2>15. No automated decision-making<\/h2>\n<p>Automated decision-making, including profiling, under Article 22 GDPR does not<br \/>\ntake place. The AI assistant does not make any decisions with legal effect vis-\u00e0-vis you; its<br \/>\nanswers are non-binding information.<\/p>\n<\/section>\n<section id=\"pflicht\">\n<h2>16. Obligation to provide<\/h2>\n<p>You are not obliged to provide any details. However, to complete an order, we require the<br \/>\ndetails required for contract performance and invoicing \u2014 without them we cannot<br \/>\nconclude the contract. Use of the AI assistant is voluntary; if you do not wish to transmit any data to<br \/>\nDeepSeek, please write to us via the contact portal.<\/p>\n<\/section>\n<section id=\"sicherheit\">\n<h2>17. Data security<\/h2>\n<p>We take technical and organizational measures to protect your data against loss, alteration and<br \/>\nunauthorized access. Transmission is encrypted throughout via HTTPS (TLS).<br \/>\nAccess is restricted; servers and applications are updated regularly.<\/p>\n<\/section>\n<section id=\"aenderung\">\n<h2>18. Changes<\/h2>\n<p>We will update this statement if processing or the legal situation changes. For your<br \/>\nsubsequent visit, the version published here then applies. The date of the version is stated above.<\/p>\n<\/section><\/div>\n<\/p><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Datenschutzerkl\u00e4rung Fassung 2.1 \u00b7 g\u00fcltig ab 9. Oktober 2026 Kurz gesagt: Diese Webseite setzt keine Cookies, solange Sie nicht ausdr\u00fccklich einwilligen, und l\u00e4dt keine Inhalte von fremden Servern. Zur Reichweitenmessung betreiben wir eine eigene, cookielose Auswertung auf unserem Server. Daten geben wir nur weiter, wo es f\u00fcr eine Bestellung, eine Support-Anfrage oder die Nutzung des&#8230;<\/p>","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_kad_post_transparent":"","_kad_post_title":"hide","_kad_post_layout":"fullwidth","_kad_post_sidebar_id":"","_kad_post_content_style":"unboxed","_kad_post_vertical_padding":"hide","_kad_post_feature":"hide","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"class_list":["post-75727","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/lumi-systems.io\/en\/wp-json\/wp\/v2\/pages\/75727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lumi-systems.io\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/lumi-systems.io\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/lumi-systems.io\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/lumi-systems.io\/en\/wp-json\/wp\/v2\/comments?post=75727"}],"version-history":[{"count":11,"href":"https:\/\/lumi-systems.io\/en\/wp-json\/wp\/v2\/pages\/75727\/revisions"}],"predecessor-version":[{"id":76641,"href":"https:\/\/lumi-systems.io\/en\/wp-json\/wp\/v2\/pages\/75727\/revisions\/76641"}],"wp:attachment":[{"href":"https:\/\/lumi-systems.io\/en\/wp-json\/wp\/v2\/media?parent=75727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}