Privacy policy

PRIVACY POLICY

Last updated: August 14, 2026

Lumérisa operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with our online shopping experience (the “Services”).

Lumérisa is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, process and disclose your personal information when you visit or use our website, make a purchase or other transaction, contact us, or otherwise interact with our Services.

For the purposes of the General Data Protection Regulation (“GDPR”), the responsible party for the processing of your personal data is:

Lumérisa
Am Hochholzergraben 10
69190 Walldorf
Germany
Email: info@lumerisa.de

Please read this Privacy Policy carefully.

1. PERSONAL INFORMATION WE COLLECT

“Personal information” or “personal data” means information relating to an identified or identifiable natural person.

Depending on how you interact with our Services, we may collect and process the following categories of personal information:

  • Contact information, including your name, email address, telephone number, billing address and shipping address.
  • Order and transaction information, including products viewed, added to your cart or purchased, order history, returns, exchanges and cancellations.
  • Payment information, including information necessary to process your chosen payment method. Payment information may be processed directly by Shopify and/or the relevant payment service provider.
  • Account information, including login information, preferences and settings where you create or use a customer account.
  • Communication information, including information you provide when contacting our customer service or otherwise communicating with us.
  • Device and technical information, including IP address, browser type, device information, operating system and other technical identifiers.
  • Usage information, including information about how you access, navigate and interact with our website and Services.
  • Marketing information, including your marketing preferences and, where applicable, your interaction with marketing communications and advertisements.

2. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

  • Directly from you, for example when you place an order, create an account, contact us, subscribe to marketing communications or otherwise provide information to us.
  • Automatically, when you visit or interact with our website, including through cookies and similar technologies where legally permitted.
  • From service providers, including Shopify, payment providers, shipping providers, analytics providers and other companies that assist us in operating our business.
  • From advertising and marketing partners, where permitted by applicable law and, where required, based on your consent.
  • From other third parties, where legally permitted.

3. PURPOSES AND LEGAL BASES OF PROCESSING

We process personal information only where we have an appropriate legal basis under applicable data protection law.

Performance of a Contract

We process personal information where necessary to perform a contract with you or to take steps at your request before entering into a contract.

This includes processing necessary to:

  • process and fulfill orders;
  • process payments;
  • arrange shipping and delivery;
  • process returns, refunds and exchanges;
  • provide customer accounts;
  • communicate with you regarding your order; and
  • provide customer service.

The legal basis is generally Article 6(1)(b) GDPR.

Compliance With Legal Obligations

We may process personal information where necessary to comply with legal obligations, including tax, accounting, commercial and regulatory requirements.

The legal basis is generally Article 6(1)(c) GDPR.

Legitimate Interests

Where permitted, we may process personal information where necessary for our legitimate interests or those of a third party, provided that your interests, fundamental rights and freedoms do not override those interests.

This may include:

  • preventing fraud and misuse;
  • securing our website and systems;
  • improving our Services;
  • handling and defending legal claims; and
  • operating and administering our business.

The legal basis is generally Article 6(1)(f) GDPR.

Consent

Where processing requires your consent, we process your information based on that consent.

This may apply in particular to certain:

  • marketing communications;
  • analytics technologies;
  • advertising technologies; and
  • non-essential cookies or similar technologies.

The legal basis is generally Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

4. ORDERS AND PAYMENTS

When you place an order, we process information necessary to complete the transaction, including your name, contact information, shipping and billing details and order information.

Payment information may be processed by Shopify and/or the payment service provider selected during checkout.

Depending on the payment method selected, information necessary to complete the transaction may be transmitted to the relevant payment provider.

The specific payment methods available to you are displayed during checkout.

5. MARKETING AND ADVERTISING

Where legally permitted, we may process personal information for marketing and advertising purposes.

This may include sending promotional communications by email and displaying advertisements for Lumérisa products on third-party websites and platforms.

Where consent is legally required for marketing or advertising technologies, such processing will take place only after obtaining the required consent.

You may unsubscribe from promotional emails at any time using the unsubscribe link included in our marketing emails.

Withdrawing from marketing communications does not prevent us from sending transactional or service-related communications, such as order confirmations, shipping updates or important information concerning your account or purchases.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies.

Some cookies are technically necessary for the operation of the website and the provision of requested Services.

Other cookies or technologies may be used for analytics, personalization or advertising purposes.

Where required by applicable law, non-essential cookies and similar technologies will only be used after you have provided the necessary consent.

You can manage your preferences through the cookie or privacy settings made available on our website.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to third parties where necessary for the operation of our business and Services or where otherwise permitted by applicable law.

Recipients may include:

  • Shopify, which provides the e-commerce infrastructure for our online store;
  • payment service providers used to process transactions;
  • shipping and fulfillment providers used to deliver orders;
  • IT and hosting service providers;
  • customer service providers;
  • analytics providers, where legally permitted;
  • marketing and advertising providers, where legally permitted and, where necessary, based on your consent;
  • professional advisers, such as legal, accounting or tax advisers where necessary; and
  • public authorities or courts, where disclosure is required by law.

We may also disclose information where necessary to establish, exercise or defend legal claims or protect our rights and the rights of others.

8. RELATIONSHIP WITH SHOPIFY

Our online store is powered by Shopify.

Shopify processes personal information in connection with providing its e-commerce infrastructure and related services.

Information you provide through our store may therefore be transmitted to and processed by Shopify and relevant service providers.

Shopify may also process certain information for its own purposes as described in its applicable privacy documentation.

You can find further information in the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

9. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal information outside Germany or the European Economic Area (“EEA”).

Where personal information is transferred to a country outside the EEA that has not been recognized as providing an adequate level of data protection, appropriate safeguards will be used where required.

These safeguards may include European Commission Standard Contractual Clauses or other legally recognized transfer mechanisms.

Where an adequacy decision applies, transfers may be based on that decision.

10. DATA RETENTION

We retain personal information only for as long as necessary for the purposes for which it was collected or as required by applicable law.

Retention periods may depend on:

  • contractual relationships with customers;
  • statutory tax and commercial retention obligations;
  • the need to establish, exercise or defend legal claims;
  • consent provided for specific processing; and
  • applicable legal requirements.

When personal information is no longer required and there is no legal basis for continued storage, it will be deleted or anonymized as appropriate.

11. DATA SECURITY

We take appropriate technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can guarantee absolute security.

You should therefore avoid transmitting sensitive information through insecure communication channels.

12. YOUR RIGHTS UNDER THE GDPR

Subject to the applicable legal requirements, you may have the following rights concerning your personal information:

  • Right of access – You may request information about the personal data we process about you.
  • Right to rectification – You may request correction of inaccurate or incomplete personal data.
  • Right to erasure – You may request deletion of your personal data where the legal requirements are met.
  • Right to restriction of processing – You may request that processing of your personal data be restricted in certain circumstances.
  • Right to data portability – Where applicable, you may request to receive personal data you provided to us in a structured, commonly used and machine-readable format.
  • Right to object – You may object to certain processing based on legitimate interests.
  • Right to withdraw consent – Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
  • Right to lodge a complaint – You have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact us at info@lumerisa.de.

We may need to verify your identity before fulfilling certain requests where legally permissible or required.

13. RIGHT TO OBJECT

Where we process your personal data on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes.

14. CHILDREN'S DATA

Our Services are not specifically directed at children.

We do not knowingly collect personal information from children where such processing would be unlawful.

If you are a parent or legal guardian and believe that a child has provided personal information to us unlawfully, please contact us at info@lumerisa.de.

15. THIRD-PARTY WEBSITES AND LINKS

Our Services may contain links to third-party websites or online services.

Third parties operate their websites independently and are responsible for their own privacy and security practices.

We recommend reviewing the privacy policies of third-party services before providing personal information to them.

We are not responsible for third-party websites or their processing activities to the extent such activities are outside our control.

16. AUTOMATED DECISION-MAKING

Where we use automated processing or profiling that produces legal effects concerning you or similarly significantly affects you, we will comply with applicable requirements under Article 22 GDPR.

Ordinary personalization, analytics or advertising activities do not necessarily constitute automated decision-making within the meaning of Article 22 GDPR.

17. COMPLAINTS

If you have concerns regarding our processing of your personal information, please contact us first at:

info@lumerisa.de

You also have the right to lodge a complaint with a competent data protection supervisory authority.

For customers in Germany, you may contact the data protection supervisory authority responsible for your place of residence or the authority responsible for Lumérisa.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our Services, processing activities, technologies or legal requirements.

When we update this Privacy Policy, we will publish the revised version on our website and update the “Last updated” date.

Where required by law, we will provide additional notice or obtain consent.

19. CONTACT

For questions about this Privacy Policy, our privacy practices or the exercise of your data protection rights, please contact:

Lumérisa
Am Hochholzergraben 10
69190 Walldorf
Germany

Email: info@lumerisa.de