Data Protection Notice

This data protection notice summarises the details of data processing on the www.lumiblu.com website operated by Lumiblu Kft., in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).


1. Data controller

  • Company name: Lumiblu Kft.

  • Registered office: 1031 Budapest, Keve utca 45/C, Hungary

  • Company registration number: 01-09-418857

  • Tax number: 32336924-2-41

  • E-mail: info@lumiblu.com

  • Website: www.lumiblu.com


2. Purpose and legal basis of data processing

The purpose of data processing is to enable Lumiblu to:

  • process and deliver orders,

  • keep in touch with customers,

  • send newsletters to subscribers,

  • improve the operation of the website and the user experience.


The legal basis for data processing is Article 6(1) GDPR:

  • point (a): the data subject’s consent,

  • point (b): necessary for the performance of a contract,

  • point (c): compliance with a legal obligation,

  • point (f): legitimate interests (e.g. customer service, web analytics).


3. Personal data processed

We may process the following personal data:

  • full name,

  • e-mail address,

  • phone number,

  • billing and delivery address,

  • IP address,

  • browsing history, cookie identifiers.


4. Retention period

We process personal data:

  • for 8 years from the fulfilment of the order (accounting obligation),

  • for marketing purposes until consent is withdrawn,

  • in the case of complaints, for the period specified by law.


5. Data processors and recipients

Only the following partners may access personal data, for the purpose of providing the service:

  • courier services: GLS, MPL, DPD, Packeta, Foxpost, DHL (delivery),

  • Webshippy (warehousing, packing, preparation of shipments),

  • Shopify International Ltd. (online store platform, hosting, Shopify Payments) and Stripe (payment processing behind Shopify Payments),

  • Klaviyo Inc. (newsletter and marketing messages),

  • Google Ireland Ltd. (Google Analytics statistics, Google Ads conversion measurement),

  • Meta Platforms Ireland Ltd. (Meta Pixel, ad measurement),

  • Microsoft Ireland Operations Ltd. (Microsoft Clarity: website usage analysis, heatmaps, session recordings),

  • Air Reviews (Avada, review management), Seal Subscriptions (subscription management), Pickupbird (parcel point selector),

  • accounting firm, IT service provider.

A data processing agreement is in place with every partner.

Some of our partners (Google, Meta, Microsoft, Klaviyo, Shopify) may also process personal data outside the European Union, primarily in the United States. Such transfers are based on certification under the EU-U.S. Data Privacy Framework or on the standard contractual clauses adopted by the European Commission.


6. Your rights

Under the GDPR, you have the following rights:

  • right to information,

  • right of access,

  • right to rectification,

  • right to erasure (“right to be forgotten”),

  • right to restriction of processing,

  • right to object to processing,

  • right to data portability,

  • right to lodge a complaint with a supervisory authority.


7. Legal remedies

If you believe that our data processing does not comply with the law, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):


8. Cookies

The website uses cookies to improve the user experience, analyse traffic and display targeted ads. The detailed rules are set out in our separate cookie policy:

Cookie Policy

 

9. Data security

Lumiblu takes all reasonable technical and organisational measures to protect personal data, including:

  • password-protected and encrypted systems,

  • regular backups,

  • logged access to administrative interfaces.

We consider data security a top priority.


Last updated: 15 October 2026