Legal
Privacy Policy
Last updated May 27, 2026
This notice describes how Lumentic S.r.l. processes personal data collected through the lumentic.tech website and our products.
1. Data controller
The data controller is Lumentic S.r.l., based at Via F. Lattanzio 21, 70126 Bari, Italy, VAT 09187980728, certified email lumentic@pec.it. For any request regarding your data you can write to hello@lumentic.tech or to the certified email address above.
2. Data we process
Through the contact form we collect: name, email, optional company, message, browser language, and the product context you refer to. Server-side we also log IP address, user-agent and timestamp for security and spam prevention. We do not process special categories of data (Art. 9 GDPR) nor data of minors.
3. Purposes
We process your data to: (a) reply to your contact and project inquiries; (b) manage waitlists for upcoming products; (c) keep the site secure and prevent form abuse; (d) comply with legal, fiscal and accounting obligations.
4. Legal bases
We rely on the performance of pre-contractual measures taken at your request (Art. 6.1.b GDPR), our legitimate interest in responding and protecting the service (Art. 6.1.f GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).
5. Retention
We keep data of leads that do not convert into clients for 24 months. For actual clients we retain data for the duration of the relationship plus 10 years as required by Italian tax law. IP and user-agent logs for anti-spam are kept for 90 days.
6. Recipients and processors
To deliver the service we rely on third-party providers acting as data processors: Vercel Inc. (site hosting, EU region), Neon Inc. (database), Resend Inc. (transactional email), Upstash Inc. (rate limiting). We have a Data Processing Agreement in place with each of them. We never sell or share your data with third parties for commercial purposes.
7. Transfers outside the EU
Some providers are based in the United States. Transfers happen under the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
8. Your rights
You have the right to access your data, request rectification or erasure, restrict or object to processing, receive your data in a structured format (portability) and withdraw consent at any time, pursuant to Articles 15-22 GDPR. To exercise these rights write to hello@lumentic.tech or to lumentic@pec.it.
9. Right to lodge a complaint
If you believe the processing infringes GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
10. Changes
We may update this notice when providers, purposes or applicable laws change. The date above indicates the latest revision.