Privacy Policy

Privacy Policy

This policy describes what personal data we process when you visit the Limusha website, for what purpose, and what rights you have. It applies to this website only. The studio's products have their own policies, which you will find on each product's site.

1. Controller

The controller for this processing is:

Limusha — Lukas Stoll, Rhönstraße 17, 71083 Herrenberg, Germany. Privacy contact: legal@limusha.dev.

We are not legally required to appoint a data protection officer and have not done so. You can raise any data protection matter through the contact above.

2. Your rights

Under the GDPR you have the right to:

• Access the data held about you (Art. 15 GDPR),
• Rectification of inaccurate data (Art. 16 GDPR),
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• Data portability (Art. 20 GDPR),
• Object to processing based on legitimate interests (Art. 21 GDPR),
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7 (3) GDPR).

You also have the right to lodge a complaint with a supervisory authority — for us, the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. To exercise a right, write to legal@limusha.dev.

3. Data we process on this website

• Server log files — when you visit the website, our hosting records technical data (IP address, browser/user agent, date and time, the requested URL and the referrer). This is necessary to provide and secure the service. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a stable, secure website). These logs are retained only briefly (around 7 days) and are then deleted or anonymised, unless a specific incident requires longer retention.
• Contact by email — if you write to us, we process your address and your message in order to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR where the matter is (pre-)contractual, otherwise Art. 6 (1) (f) GDPR. We delete the correspondence once it is settled and no retention period stands in the way.
• Local storage — see section 4.

No audience measurement. This website currently uses no analytics at all, neither third-party nor self-hosted. No visitor profiles are built. Should that change, we will update this policy and, where required, obtain your consent beforehand.

No third parties. This website loads no fonts, scripts, maps, videos or other resources from external servers. Everything is served from our own server. Simply opening the page therefore creates no connection to a third party and no transfer to a third country.

4. Cookies and local storage

We use strictly necessary first-party storage only. Which entries these are and how long they last is set out in the Cookie Policy. The legal basis for storing strictly necessary entries is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

We use non-essential technologies only with your explicit consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). There is currently no such technology on this website.

5. Recipients and processors

The website runs on infrastructure we rent within the European Union. Our hosting provider processes the server log files named in section 3 on our behalf; the processing is governed by a contract under Art. 28 GDPR. Beyond that we disclose no personal data.

6. Retention

Server log files around 7 days. Email correspondence until your enquiry is settled, at the latest until statutory retention periods expire. Locally stored settings remain on your device until you delete them or the stated period elapses; we have no access to them.

7. Changes to this policy

We update this policy when the processing it describes changes. The version published on this page, carrying the date shown above, is the one that applies.

For details on the cookies we use, see our Cookie Policy.