Legal

Privacy Policy

Last updated: June 2, 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable national data protection laws is:

Marcel Hagmann
Friedrichstrasse 6
78147 Voehrenbach
Germany

Email: info@lumivor-design-award.com
Phone: +49 (0) 177 6143 992

2. General Information on Data Processing

As a rule, we process personal data of our users only to the extent necessary to provide a functional website and our content and services.

Personal data is generally processed only with the consent of the data subject or where processing is permitted by law.

3. Legal Bases for Processing

Where we obtain consent for processing personal data, Art. 6(1)(a) GDPR serves as the legal basis.

Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, Art. 6(1)(b) GDPR serves as the legal basis.

Where processing is necessary to comply with a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis.

Where processing is necessary for the purposes of a legitimate interest pursued by us or by a third party, and the interests, fundamental rights and freedoms of the data subject do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis.

4. Storage Period and Deletion

Personal data is deleted or blocked as soon as the purpose for storing it no longer applies.

Data may also be stored if this has been provided for by European or national legislators in EU regulations, laws, or other provisions to which we are subject.

Specific periods:

• Log data: 7 days
• Contact requests: until the matter has been fully processed, then in accordance with statutory retention obligations
• Submission-related communication: for the duration of the respective award cycle and beyond where legally required

5. Provision of the Website and Creation of Log Files

Each time this website is accessed, our system automatically collects data and information from the computer system of the accessing device.

This may include in particular:

• Browser type and browser version
• Operating system used
• Referrer URL
• IP address
• Date and time of access
• Pages/files accessed

This data is also stored in our system’s log files. This data is not stored together with other personal data of the user.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

6. Hosting

This website is hosted by:

Railway Corp.
San Francisco, CA, USA

Railway is a US-based provider. Data is transferred to the USA on the basis of appropriate safeguards pursuant to Art. 46 GDPR (standard contractual clauses). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

Further information on data protection at Railway: https://railway.com/legal/privacy

7. Contact by Email

If you contact us by email, the personal data transmitted (for example email address, name, and message content) will be stored by us for the purpose of processing your request.

Legal basis:

• Art. 6(1)(b) GDPR, if the request is related to pre-contractual or contractual matters
• Art. 6(1)(f) GDPR for other requests

8. Recipients of Personal Data

Within our organization, only those departments receive access to personal data that require it for the purposes described above.

Data may also be transferred to external service providers (for example hosting or form service providers) to the extent necessary for providing our services and where there is a valid data protection basis.

9. Transfers to Third Countries

Personal data is transferred to countries outside the EU/EEA only to the extent necessary for the services described and only where the legal requirements of Arts. 44 et seq. GDPR are met, in particular by using standard contractual clauses pursuant to Art. 46 GDPR.

10. Rights of Data Subjects

Under the GDPR, you have the following rights in particular:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw any consent given with effect for the future

To exercise these rights, please contact: info@lumivor-design-award.com

11. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement.

Competent supervisory authority:

The State Commissioner for Data Protection and Freedom of Information Baden-Wuerttemberg
Lautenschlagerstrasse 20
70173 Stuttgart
https://www.baden-wuerttemberg.datenschutz.de

12. Obligation to Provide Data

There is a legal or contractual obligation to provide personal data only insofar as this is necessary for the respective purposes, for example processing an inquiry or a submission.

13. Automated Decision-Making

There is no automated decision-making, including profiling, pursuant to Art. 22 GDPR.

14. Updates to This Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in this privacy policy.