Privacy

LunaLEC AB (org. no. 556894-6486) is the data controller for personal data processed on lunalec.com.

We only process personal data you actively share with us, plus minimal technical data needed to operate the site.

• Contact form submissions. Name, email, company (optional), area of interest (optional), and the message you write. We use this strictly to respond to your enquiry.
• Browser preferences. Theme (light/dark) and the accent color you pick from the spectrum slider are stored locally in your browser via localStorage so the site remembers your choice. This never leaves your device.
• Server logs. Our hosting provider (Vercel) records standard request data such as IP address, user-agent, and timestamp for security, reliability, and basic site operations. Logs are kept short-term and not used for profiling.

Contact form submissions are processed on the basis of consent (Article 6(1)(a) GDPR) and, where applicable, the necessity to take pre-contractual steps (Article 6(1)(b)).

Functional storage of your theme and accent preferences is based on our legitimate interest in providing a working website (Article 6(1)(f)). No tracking, no profiling.

Server logs are processed for legitimate interest in operating and securing the service.

We use a small number of third-party services that may process limited personal data on our behalf:

• Formspree (Hookform LLC, USA) — relays contact-form submissions to info@lunalec.com and stores them in their dashboard. Their privacy policy: formspree.io/legal/privacy-policy.
• Vercel (Vercel Inc., USA) — hosts the website and serves static assets. Their privacy policy: vercel.com/legal/privacy-policy.

Both providers transfer data to the United States. Transfers rely on the EU–US Data Privacy Framework and Standard Contractual Clauses as appropriate safeguards.

We keep contact-form submissions for as long as needed to handle your enquiry and any resulting business correspondence — typically up to 24 months from your last interaction, unless an ongoing relationship requires longer retention.

Browser preferences live in your browser's storage until you clear them. Server logs are kept for a short period by our hosting provider.

The site does not use tracking cookies, advertising pixels, or third-party analytics that build profiles. The only browser storage we set is functional — theme and accent preferences in localStorage.

If we ever introduce analytics or marketing tools that would require consent, we will add a cookie banner and update this policy.

As a data subject in the EU/EEA you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (right to be forgotten).
• Object to or restrict our processing.
• Withdraw consent at any time where processing is based on consent.
• Receive your data in a portable format.

Email info@lunalec.com to exercise any of these rights. We respond within one month.

You also have the right to lodge a complaint with the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY).

We may update this policy from time to time as the site or our practices evolve. The date at the top reflects the latest version. Material changes will be highlighted on the site.