Privacy statement

This statement covers the website lumyo.com. It explains what personal data we receive through it, why we hold it and for how long, and what you can ask us to do with it. It does not cover the Lumyo verification service itself; that is governed by the agreement with the customer whose cameras we verify.

Who is responsible

The controller for the data described here is:

Lumyo BV

Industrieweg 30H, 4283 GZ Giessen, The Netherlands

Chamber of Commerce [KvK number] · VAT [VAT number]

info@lumyo.com · +31 (0)40 711 7258

What we collect

What you send us

The demo form asks for your name, your company, your email address and a description of your situation. You decide what goes in that last field, so please keep it to the business question. We also receive whatever you put in an email or say on the phone when you contact us directly.

What the server records

Our hosting provider logs ordinary technical data for every request: IP address, the time, the page requested, and the browser and operating system you use. That happens for security and to keep the site working, not to build a profile of you.

What we do not do

This site sets no cookies and stores nothing on your device. There is no analytics, no advertising, no tracking pixels, and no social media buttons. Nothing on the page is loaded from a third party, so no other company sees your visit. The cookie policy says a little more about that.

Why we hold it, and on what basis

• To answer your request. If you ask for a demo or a quote, we need your details to reply and to prepare one. The legal basis is the steps taken at your request before entering into a contract (GDPR article 6(1)(b)).
• To run and protect the site. Server logs exist so we can keep the site available and investigate abuse. The basis is our legitimate interest in a working, secure website (article 6(1)(f)).
• To meet our own obligations. Where the law requires us to keep records, for instance for tax, we do (article 6(1)(c)).

Who else sees it

We do not sell personal data and we do not share it for anyone else's marketing. Two providers process data on our behalf, under a processing agreement:

• Cloudflare hosts the site and handles the request logs described above.
• Migadu carries the email that the form produces. Migadu operates from Switzerland, which the European Commission has recognised as offering an adequate level of protection.

Beyond that, we pass data on only where we have to: to our own advisers under a duty of confidence, or to an authority that is legally entitled to it.

How long we keep it

• Demo requests and the correspondence that follows: two years after our last contact, so we can pick up the thread if you come back.
• Records that become part of a customer file: for as long as the agreement runs, and afterwards for the periods the law requires.
• Server logs: one day.

What you can ask us to do

Under the GDPR you can ask us for a copy of the data we hold about you, to correct it if it is wrong, or to delete it. You can also ask us to limit what we do with it, object to processing based on legitimate interest, or receive your data in a portable form.

Write to info@lumyo.com and we will respond within one month. We may ask you to confirm who you are first, so that we do not hand your data to someone else. If you are not satisfied with how we handle it, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Keeping it safe

The site is served over HTTPS and the mail it generates travels over an encrypted connection. Access to the mailbox that receives demo requests is limited to the people who need it.

Changes

If we change how the site handles data, for instance by adding analytics, we update this statement and change the date at the top. Material changes will be announced on the site itself rather than quietly rolled in.