At Luma, we respect your privacy and are committed to protecting the personal data you provide when you interact with this website. This Privacy Policy explains what personal data we collect, why we collect it and how we process it.

1. Data Controller

The person responsible for the processing of personal data collected through this website is Sofía Moreno Aguayo, a self-employed professional operating under the name Luma Lab. You can contact her regarding any matter related to the processing of your personal data at luma.labx@gmail.com

2. Personal Data We Collect

Luma Lab only collects personal data that you voluntarily provide through the contact form available on this website.

The data collected through the form may include your name, email address and any information you choose to include in your message.

We ask that you do not provide sensitive or unnecessary personal information through the contact form.

3. How We Use Your Data

The personal data you provide is used to:

• Respond to your enquiries and requests.

• Contact you regarding potential projects, collaborations or services.

• Assess and manage requests for information about Luma Lab's services.

• Maintain the necessary communication related to your enquiry or potential professional relationship.

Your personal data will not be used for purposes incompatible with those described above.

Luma Lab does not currently use the information collected through the contact form for advertising, profiling or commercial mailing lists.

4. Legal Basis for Processing

The processing of personal data submitted through the contact form is based on the steps taken at your request prior to entering into a potential professional or contractual relationship with Luma Lab.

Where processing is based on consent, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of any processing carried out before its withdrawal.

5. How Long We Keep Your Data

Your personal data will be kept for as long as necessary to respond to and manage your enquiry.

If your enquiry leads to a professional or contractual relationship, the relevant personal data may be retained for the duration of that relationship and for the periods required to comply with applicable legal obligations.

Once the data is no longer necessary for these purposes, it will be securely deleted or otherwise disposed of.

6. Who May Process Your Data

Your personal data may be processed by service providers that are necessary for the operation of this website and the management of contact requests.

Luma Lab currently uses:

Framer, the website design, hosting and form platform used to operate this website. When Framer processes personal data submitted through Luma Lab's contact form on Luma Lab's behalf, Framer acts as a data processor.

Google, through the email service used by Luma Lab to receive and manage contact form submissions.

These providers may process personal data only to the extent necessary to provide their respective services and in accordance with applicable data protection requirements.

Luma does not sell, rent or otherwise disclose your personal data to third parties for their own marketing purposes.

Personal data may also be disclosed where required by law or where necessary to comply with a legal obligation.

7. International Data Transfers

Some of the service providers used by Luma Lab may process personal data outside the European Economic Area.

Where such processing involves a transfer of personal data outside the European Economic Area, Luma Lab will ensure that the transfer is carried out in accordance with applicable data protection legislation and that the appropriate safeguards are in place, such as an adequacy decision or appropriate contractual safeguards where required.

8. Your Rights

You have the right, under applicable data protection legislation, to:

• Request access to your personal data.

• Request the correction of inaccurate or incomplete data.

• Request the deletion of your personal data.

• Request the restriction of its processing.

• Object to certain processing activities.

• Request the portability of your personal data where applicable.

• Withdraw your consent where processing is based on consent.

You may exercise these rights by contacting Sofía Moreno Aguayo at luma.labx@gmail.com

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if you believe that your personal data has been processed in breach of applicable data protection legislation.

9. Data Security

Luma Lab applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.

However, no method of transmission or storage over the internet can be guaranteed to be completely secure.

10. Changes to This Privacy Policy

Luma Lab may update this Privacy Policy from time to time to reflect changes to the website, the services used, the processing of personal data or applicable legal requirements.

Any updated version will be published on this page together with its corresponding date of update.

Last updated: September 2026