Privacy policy

This is an English translation for convenience. The German version is legally binding.

Protecting your personal data is important to us. We process your data solely on the basis of the applicable law (GDPR, Austrian Data Protection Act – DSG, Telecommunications Act 2021 – TKG 2021).

1. Controller

Email: support@luntraweb.com

2. Principles and legal bases

We only process personal data where necessary: to perform a contract or pre-contractual measures (Art. 6(1)(b) GDPR), to comply with legal obligations (Art. 6(1)(c), e.g. tax retention), based on our legitimate interest (Art. 6(1)(f), e.g. website security) or with your consent (Art. 6(1)(a)). No automated decision-making or profiling takes place.

3. Hosting and server log files

This website is hosted by our web host. When you visit, technically necessary data is stored in server log files: IP address, date and time, page requested, referrer URL, browser and operating system. This serves security and stability (Art. 6(1)(f)) and is deleted after a short period according to the host’s policy. A data processing agreement is in place (Art. 28 GDPR).

4. Cookies and local storage

We only use technically necessary cookies or storage entries required for functions you expressly request (§ 165(3) TKG 2021); no consent is needed for these. See our cookie policy. Analytics or marketing tools are only used with your explicit consent via the cookie banner, which you can withdraw anytime via “Cookie settings” in the footer.

5. Customer account

If you create an account we store your name, email address, a hashed password and your language setting to show you order status, messages and downloads (Art. 6(1)(b)). You can delete your account anytime in the settings. Order data we must keep for tax purposes is detached from the account and retained until the statutory period ends.

6. Orders via the configurator

To build your website we process the information from the configurator: your contact details, business information, content, texts, design wishes, imprint details and uploaded files (logo, photos, documents), based on Art. 6(1)(b). To document your consent to the terms and the early start of performance, we store the time, a hashed value of your IP address and your browser type. Retention: invoice and order data for 7 years (§ 132 Austrian Federal Fiscal Code); uploads and the finished website for up to 3 years after delivery so you can download them again, or shorter on request.

7. Payment via Stripe

Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You are redirected to Stripe; your payment details are processed solely by Stripe. We transmit your email address, the amount, the order items and the order number. You enter your billing address (and optional VAT ID) directly with Stripe, which creates the invoice on our behalf and emails it to you. Stripe may transfer data to Stripe, Inc. in the USA; Stripe is certified under the EU-US Data Privacy Framework and standard contractual clauses apply. More: stripe.com/privacy.

8. Email communication

We send order confirmations, status updates, questions and the finished website by email via our host’s or email provider’s service (processor). We do not send marketing newsletters.

Contact form: If you write to us via the contact form, we process your name, email, optional phone and company and your message to answer your enquiry or prepare a quote (Art. 6(1)(b)). The enquiry is sent by email to support@luntraweb.com and deleted once handled, unless retention obligations apply.

9. No external services on page load

Fonts, scripts and graphics are loaded exclusively from our own server. No Google Fonts, social plugins, ad networks or external trackers.

10. Security

Transmission is encrypted via TLS. Passwords are stored only as secure hashes. Uploaded files are stored in a non-public area.

11. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and you may withdraw consent at any time. Contact: support@luntraweb.com. You may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.