––––––––––––––––––––

Controller

This website is jointly operated by:

Lumia GmbH

Stella-Klein-Löw-Weg 8

1020 Vienna

Austria

and

Startup House V2 e.U.

Stella-Klein-Löw-Weg 8

1020 Vienna

Austria

Email: info@lumia.wien

Phone: +43 670 1832744

Lumia GmbH and Startup House V2 e.U. act as joint controllers within the meaning of Art. 26 GDPR and applicable Austrian data protection law.

––––––––––––––––––––

Scope of Processing

We process personal data only to the extent necessary to provide a functional website, to respond to inquiries and to prepare or establish contractual relationships.

Processing is carried out exclusively in accordance with the GDPR and the Austrian Data Protection Act (DSG).

––––––––––––––––––––

Hosting

This website is hosted by netcup GmbH on servers located in Vienna, Austria.

In the course of hosting, personal data such as IP addresses and server log data may be processed on our behalf.

Hosting is based on Art. 6 (1) lit. f GDPR (legitimate interest in secure and efficient website operation).

––––––––––––––––––––

SSL/TLS Encryption

This website uses SSL/TLS encryption (Let’s Encrypt). Data transmitted between your browser and our website is encrypted.

––––––––––––––––––––

Server Log Files

When accessing this website, the hosting provider automatically collects and stores information in server log files.

This may include IP address, date and time of access, requested page, browser type and version, operating system and referrer URL.

Log files are used exclusively to ensure system security, stability and technical administration. They are not merged with other data sources.

Processing is based on Art. 6 (1) lit. f GDPR.

––––––––––––––––––––

Contact Form

If you contact us via the contact form or by email, the data you provide will be processed for the purpose of handling your inquiry and any related follow-up communication.

Before submitting the contact form, you must actively confirm your consent to the processing of your personal data.

Processing is based on Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. b GDPR (pre-contractual measures).

––––––––––––––––––––

Locally Hosted Fonts

This website uses locally hosted fonts.

No connection to external font providers, including Google Fonts, is established when accessing this website.

Personal data is not transferred to third parties in connection with the use of fonts.

––––––––––––––––––––

Google Analytics 4

Google Analytics 4 (GA4) is planned and technically integrated via Google Tag Manager.

Analytics processing will only take place after explicit user consent via the consent management tool in accordance with Art. 6 (1) lit. a GDPR.

IP anonymisation is automatically integrated in GA4. The IP address is automatically shortened and not permanently stored.

Google Signals is currently not activated.

A data processing agreement (DPA) with Google is concluded under Google’s data processing terms in connection with GA4 usage.

Where data is transferred to the United States, such transfer is based on appropriate safeguards in accordance with Art. 44 et seq. GDPR.

––––––––––––––––––––

Google Tag Manager

This website uses Google Tag Manager to manage website tags.

Google Tag Manager itself does not store personal data but enables the integration of other services. Such services are only activated after user consent, where legally required.

––––––––––––––––––––

Consent Management

We use the Complianz GDPR/CCPA Cookie Consent Plugin to manage and document user consent.

The tool stores consent preferences to ensure compliance with legal requirements.

Processing is based on Art. 6 (1) lit. c GDPR (legal obligation) and Art. 6 (1) lit. f GDPR (legitimate interest in compliant consent management).

––––––––––––––––––––

Social Media Profiles

This website contains links to our social media profiles on LinkedIn and Instagram.

When clicking such links, you leave our website. The respective provider is responsible for data processing on their platform.

––––––––––––––––––––

Data Retention

Personal data is stored only for as long as necessary to fulfil the respective purpose or to comply with statutory retention obligations.

––––––––––––––––––––

Your Rights

Under applicable data protection law, you have the right of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent at any time.

To exercise your rights, please contact info@lumia.wien.

––––––––––––––––––––

Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority.

Österreichische Datenschutzbehörde

Barichgasse 40–42

1030 Vienna

Austria

––––––––––––––––––––

Updates

We reserve the right to update this Privacy Policy to reflect changes in legal requirements or technical developments.
––––––––––––––––––––