Privacy Policy – LURA International

This translation is intended to provide you with complete information about the processing of your data in your language. In the event of discrepancies between the language versions, the German version prevails. Your rights under the General Data Protection Regulation remain unaffected.

1. Controller and contact

The controller responsible for processing personal data on this website is LURA International, proprietor Birol Seckin, Isarstraße 12, 90451 Nürnberg, Germany. Telephone: +49 911 96260810. Email: info@lura-international.com. Please direct privacy-related enquiries to this address.

2. Principles and legal bases

We process data to provide the website, respond to enquiries, plan demonstrations, process dealer applications, fulfil orders and provide the account and newsletter functions you request. Depending on the purpose, Article 6(1)(a) GDPR (consent), point (b) (contract and pre-contractual measures), point (c) (legal obligation) or point (f) (legitimate interests) may serve as legal bases. Legitimate interests are the secure operation of the website, the prevention of abuse and responding to general business enquiries. Section 25 TDDDG additionally applies to storage of and access to information on terminal equipment. Automated decision-making producing legal or similarly significant effects, including profiling under Article 22 GDPR, has not been implemented in the website functions reviewed. The website uses HTTPS; form entries are checked on the server. These measures do not guarantee complete security.

3. Hosting, database and technical logs

The website is provided through Lovable. Lovable Cloud is used to store demonstration requests and newsletter data and for sign-in. Cloudflare is involved in delivering the website. Technical connection data, in particular the IP address, requested address, time and technical browser information, are processed for delivery. If errors occur, technical error reports containing the error message, page accessed and technical environment may be transmitted to the Lovable platform. The purpose is stable and secure operation and troubleshooting; Article 6(1)(f) GDPR is the envisaged legal basis. Specific server locations and retention periods for these platform services are stated here only insofar as they have been confirmed.

4. Cookies and browser storage

No advertising or analytics tags have been implemented in the website functions reviewed. Locally stored information includes shopping cart items, the Shopify cart identifier and checkout address, the selected display mode, and the time and version of the acknowledgement of the data storage notice. This notice does not document consent to advertising. When a user account is used, sign-in and session information is also stored. Section 25(2), point 2, TDDDG is the envisaged basis for the technically necessary functions you request. You can delete local data through your browser. This does not delete any data already stored with Shopify, in the website database or in mailboxes. Shopping cart data are transmitted to Shopify as soon as items are added. You can reopen the data storage notice via “Cookie settings”.

Open cookie settings

5. Contact, demonstrations and dealer applications

Contact form and email

In the contact form, we process your name, email address, subject and message. The information is transmitted to info@lura-international.com through the Lovable email service; the email address provided is used as the reply-to address. Additional storage of the contact enquiry in the website database has not been implemented in this process. We use any additional information sent by email to process your enquiry. Article 6(1)(b) GDPR is envisaged for contract-related enquiries, and Article 6(1)(f) GDPR for general enquiries.

Demonstration requests

We process first and last name, street, house number, postcode, town or city, telephone number and email address, as well as optional information about the preferred date, preferred time, living situation, pets and message. The information is used to plan and coordinate a demonstration; Article 6(1)(b) GDPR is the envisaged basis. The website stores the information in Lovable Cloud and also transmits it by email to the business mailbox. After signing in, authorised AI applications can also create demonstration requests in the same database; this separate process currently does not send an internal notification email.

Dealer and distribution partner applications

The data processed include company name, first and last name, position, country and town or city, website, email address, telephone number, length of time in business, number of employees, product categories, brands, sales channels, number of sales representatives, sales regions, motivation, sales potential, interest in exclusivity and an additional message, insofar as provided. These data are used to assess potential cooperation; Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, as applicable, are the envisaged bases. The complete application is transmitted to info@lura-international.com, with a complete copy sent to birol@birolseckin.com. The latter is the personal mailbox of the proprietor, Birol Seckin, and is expressly used for LURA business enquiries; it does not belong to another business partner. Storage of the application in the website database has not been implemented in this process.

Email service providers and spam protection

Both mailboxes mentioned are hosted by STRATO. STRATO processes the message and connection data required to receive, store and retrieve business correspondence. A data processing agreement pursuant to Article 28 GDPR is in place with STRATO. Form notifications are technically sent through the Lovable email service. Forms use invisible check fields to detect automated entries; no external CAPTCHA service is integrated into the forms reviewed.

6. Newsletter and double opt-in

Newsletter subscriptions are currently paused. While confirmation emails are not being sent, the form does not accept new email addresses. A double opt-in procedure has been prepared but is not yet activated: once it is enabled at a later date, you will receive a confirmation link after subscribing. Deletion of unconfirmed subscriptions after 30 days is intended; this deletion procedure is planned but not yet activated. While subscriptions are paused, no new subscriptions are stored.

The address is enabled to receive newsletters only after confirmation and for as long as no unsubscribe request has been made. Article 6(1)(a) GDPR in conjunction with Section 7(2), point 3, UWG is envisaged for newsletters. Proof of consent serves the purposes of Article 7(1) GDPR. Any future newsletter must include an unsubscribe option. You may withdraw your consent at any time with effect for the future, including by email to info@lura-international.com. Unsubscribing on the website blocks the address from receiving newsletters; it does not automatically delete the record. Necessary proof and suppression data may be retained only for their specific purpose and for as long as legally necessary. The existing service for system messages is not used to send promotional newsletters.

7. Shopify shopping cart and checkout

Product data and product images are provided through Shopify. Browser requests to Shopify technically transmit, in particular, the IP address and request information. A Shopify shopping cart is created as soon as an item is first added, unless one already exists; when changes are made, item or variant identifiers and quantities are transmitted. The browser stores the cart identifier and checkout address. Name, delivery address and payment data are not requested in the reviewed add-to-cart process.

When you start checkout, you are redirected to Shopify. Contact, delivery, billing, order and payment information may be processed there; the actual payment methods and payment services involved depend on the selection made there. Shopify may use its own technically necessary storage and cookies; the exact cookies and storage periods depend on the shop and checkout settings. Article 6(1)(b) GDPR is envisaged for the shopping cart and orders, and Article 6(1)(f) GDPR for providing the product range. A Data Processing Addendum is in place for processing by Shopify. Further information: https://www.shopify.com/legal/privacy.

8. User account, Google sign-in and authorised AI applications

The existing sign-in function enables access by authorised AI applications through approval of a connection. Account sign-in uses Lovable Cloud. When signing in with an email address and password, the email address, authentication information and an account identifier are processed. Google sign-in may optionally be used; in that case, the account information released by Google for sign-in, in particular the email address and identifier, and, where applicable, profile information are processed. Google processes the sign-in in accordance with its own terms: https://policies.google.com/privacy.

Following your approval, connected AI applications can use the tools you have authorised in each case, for example to retrieve accessory information or create demonstration requests. Data you disclose to an external AI application are additionally processed by its provider in accordance with that provider’s terms. This is not a generally embedded chatbot on the website. Article 6(1)(b) GDPR is the envisaged basis for the account and an expressly requested connection. You may contact us to have your account deleted. No automatic account deletion period is guaranteed here.

9. Fonts, social media, Google reviews and image content

The font files used are provided locally with the website; no request to Google Fonts has been configured in the files reviewed. Instagram and YouTube are included as external links, not as social plugins or embedded video players. On the German product page, an external link leads to the Google Business Profile of LURA International. These are business reviews, not separate product reviews; no Google map or review widget is embedded. Merely displaying these links does not initiate a request to the respective destination provider in the process reviewed. Once you click a link, that provider’s privacy information applies.

No Google Analytics, Tag Manager, advertising pixel, reCAPTCHA or comparable tracking integrations were identified in the website functions reviewed. This is not a guarantee regarding unknown settings of external providers. Individual illustrative images were created or edited with AI assistance; displaying these static images does not trigger AI processing of your inputs. The separate account function for authorised AI applications remains unaffected. An AI advisory chat for visitors is currently not publicly available on the website; this privacy policy will be supplemented accordingly before any possible activation.

10. Retention periods and deletion

Personal data are intended to be stored only for as long as the respective purpose or a statutory obligation requires. Data in Lovable Cloud, messages in both STRATO mailboxes, messages held by the sending service, Shopify data and backup copies must be considered separately. Deleting data in one location does not automatically delete them in other locations. Statutory retention obligations under Section 257 HGB and Section 147 AO must be assessed for each document; depending on the document, periods of 6, 8 or 10 years in particular may be relevant. No blanket period applies to every enquiry.

Unless a statutory retention obligation prevents this, the following periods are intended (planned rules):

• Demonstration requests: deletion 12 months after documented completion.
• Dealer and distribution partner applications not followed by cooperation: deletion 6 months after discussions have concluded.
• Contact enquiries: deletion after final processing.
• Unconfirmed newsletter subscriptions: deletion after 30 days (deletion procedure planned, not yet activated).
• Business records: retention for the duration of the applicable statutory periods.

Current status: a regular manual deletion check is intended but has not yet been set up organisationally. Automatic deletions are not configured. Until then, the storage period is determined by the criteria stated above: the purpose of processing, completion of the matter and statutory retention obligations.

11. Recipients and possible transfers to third countries

Recipients may include persons at LURA International authorised to process the data, STRATO for both mailboxes, Lovable and subcontracted service providers actually involved in hosting, the database, sign-in, error reports and system email sending, Cloudflare for delivery, Shopify and the payment services actually used at checkout, and Google when Google sign-in is used voluntarily. External AI applications receive data within the scope of the connection you have authorised in each case. For purely external review and social media links, contact with the destination provider is initiated by your click.

Data processing outside the EU or EEA may take place depending on the provider and configuration. The requirements of Articles 44 et seq. GDPR must be examined for specific transfers. Article 45 GDPR or appropriate safeguards under Article 46 GDPR may be considered only if the respective requirements are actually met.

12. Your rights and required information

Subject to the provisions of the GDPR, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may object to processing based on legitimate interests under Article 21 GDPR. Consent may be withdrawn at any time with effect for the future under Article 7(3) GDPR; this does not affect the lawfulness of processing carried out previously. You have the right to lodge a complaint under Article 77 GDPR, in particular with the Bavarian State Office for Data Protection Supervision (BayLDA), https://www.lda.bayern.de/. To exercise your rights, simply send a message to info@lura-international.com.

Providing information is generally voluntary. Without the mandatory information required for the desired function, we may be unable to process the enquiry, subscription, sign-in or order. You may omit optional additional information.

13. Language versions and changes

The Privacy Policy will be adapted to changes to the website, the services used or the legal situation.