Privacy policy

1. Controller

Lumina Technologies
Théodore Wanner
Binzallee 7, 8055 Zürich, Switzerland
Email: theodore@getlumina.org

This policy applies under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

2. Visiting the website (server log files)

This website is hosted on Google Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you visit it, Google processes technically necessary data: IP address, date and time, page requested, browser and operating system. This is required to deliver the website securely and reliably (Art. 6(1)(f) GDPR). Data may be transferred to the USA in the process; Google is certified under the EU-US Data Privacy Framework. Log data is not combined with other data.

3. Contacting us

If you write to us by email or via the contact form, we process your details (name, institution, email address, message) solely to handle your request (Art. 6(1)(b) and (f) GDPR). The form opens your email program; no data is sent to third parties in the process. We delete your request once it has been dealt with, unless statutory retention obligations apply.

4. Sample audio guide and voice samples

The home page links to a sample audio guide (QR code and link). Only when you open it is our Lumina player loaded from guide.getlumina.org (hosted by Cloudflare), which transmits your IP address and technical data to Cloudflare. Within the player we collect anonymous usage statistics (e.g. chapters played, language setting) using rotating session IDs, with no personal reference (Art. 6(1)(f) GDPR). Voice samples and the player preview image are loaded directly from this website.

5. Fonts and local storage

All fonts are served from our own server; there is no connection to Google or other providers. We store your chosen language in your browser’s local storage (localStorage) so you don’t have to pick it again next time. This information never leaves your device. We do not set cookies.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time with effect for the future. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), or in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC). Simply write to us at the address above.

7. Data security

This website is served exclusively over an encrypted connection (HTTPS). We take appropriate technical and organizational measures to protect your data.

8. Changes

We update this privacy policy when our website or the legal situation changes. The current version on this page applies.