LUYANTAAG.COM

Last updated: [23 February 2026]

This Privacy Policy explains how Luyanta AG processes personal data when you visit and use luyantaag.com (the “Website”). It also explains how we use cookies and similar technologies under applicable EU data protection law (GDPR) and German rules on storage/access to information on end-user devices.

1) Controller (Data Controller)
Luyanta AG
Dessauerstr. 6, 80992 München, Germany
Email: info@luyantaag.com
Phone: +49 697 137 318 0

2) Contact for privacy matters / Data Protection Officer
If you have questions about this Privacy Policy or want to exercise your rights, contact us at: info@luyantaag.com

Data Protection Officer:
Not appointed.

3) General principles, legal bases
We process personal data only where permitted by law. Depending on the context, processing is based on:
– Consent (Art. 6 (1) (a) GDPR)
– Performance of a contract / pre-contractual steps (Art. 6 (1) (b) GDPR)
– Legal obligation (Art. 6 (1) (c) GDPR)
– Legitimate interests (Art. 6(1) (f) GDPR), e.g., operating the Website securely and efficiently

4) Website access & server log data
When you visit the Website, your browser automatically transmits certain information to our server. This may include:
– IP address
– Date/time of access
– Requested page/file, HTTP status code
– Referrer URL
– Browser type/version, operating system, device information
– Access provider / network information (where applicable)

Purpose:
– Delivering the Website and ensuring functionality
– Security (e.g., preventing abuse, detecting attacks)
– Troubleshooting and optimizing performance

Legal basis:
– Legitimate interests (Art. 6(1) (f) GDPR)

Storage period:
We store server log data only as long as necessary for the purposes above, and then delete or anonymize it, unless longer storage is required to investigate security incidents or comply with legal obligations.
(Optional) Typical retention: up to [X] days.

5) Hosting (Website infrastructure)
Our Website is hosted by:
Garmtech — server location: Riga, Latvia (EU)

In this context, server and log data (see Section 4) may be processed to provide the Website, maintain security, and ensure stable operations.

Legal basis:
– Legitimate interests (Art. 6 (1) (f) GDPR)

6) Cookies & similar technologies (Consent management via CookiesYes)
We use cookies and similar technologies. Some are technically necessary for the Website to work; others are optional (e.g., analytics or embedded third-party services).

We use CookiesYes as our consent management tool to obtain and store your cookie preferences and consent choices.

a) Technically necessary cookies
These are required to provide the Website and features you explicitly request (e.g., essential security, basic page functions, storing your consent status).

Legal basis:
– Storage/access on your device: necessary technologies under applicable rules for end-user devices
– Subsequent personal-data processing (if any): Art. 6 (1) (f) GDPR (legitimate interests in operating a functional and secure Website)

b) Optional cookies / technologies (e.g., analytics, embedded media)
Optional technologies are used only if you give consent via our cookie banner/consent settings (CookiesYes).

Legal basis:
– Storage/access on your device: consent (opt-in)
– Personal-data processing: Art. 6 (1) (a) GDPR (consent)

Managing and withdrawing consent:
You can change or withdraw your consent at any time via:
– the cookie settings link on the Website (CookiesYes), or
– your browser settings (cookie deletion/blocking)

Please note: blocking necessary cookies may limit Website functionality.

7) Contact form & enquiries (email/phone)
If you contact us via the contact form, email, or phone, we process the data you provide (e.g., name, email, phone number, company, message content, and any attachments) as well as metadata (date/time).

Purpose:
– Handling your enquiry and responding
– Initiating business discussions and pre-contractual steps (where applicable)

Legal basis:
– Art. 6(1) (b) GDPR if your enquiry relates to entering into a contract or pre-contractual measures
– Otherwise Art. 6(1) (f) GDPR (legitimate interest in handling enquiries)

Storage period:
We store enquiry data only as long as needed to handle the request and any follow-up, and then delete it, unless retention is required for legal reasons (e.g., to document business communications or defend legal claims).

8) Google Analytics (Website analytics)
We use Google Analytics to understand how visitors use the Website and to improve content and performance.

Provider:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (with Google LLC and other Google group entities potentially involved in processing).

Data categories may include:
– Online identifiers (e.g., cookie IDs), device/browser information
– Usage data (pages viewed, interactions, approximate location derived from IP, timestamps)
– Technical information about your visit/session

Purpose:
– Statistical analysis and improvement of the Website
– Measuring performance of content

Legal basis:
Google Analytics is activated only if you give consent via CookiesYes (Art. 6(1) (a) GDPR).

International transfers:
Google may process data in countries outside the EEA (e.g., the USA). Where applicable, transfers are safeguarded by appropriate measures such as EU Standard Contractual Clauses and/or other approved mechanisms.

How to opt out:
– Withdraw consent anytime via cookie settings (CookiesYes).
– You can also use Google’s opt-out tool: https://tools.google.com/dlpage/gaoptout

9) Embedded YouTube videos
We embed videos hosted on YouTube (a service of Google). When a YouTube video is loaded (and/or played), your browser may connect to YouTube servers and transmit data (e.g., IP address, device/browser information, the page you visited, and interaction data). YouTube may also set cookies or use similar technologies.

Legal basis:
YouTube content is loaded only if you consent via CookiesYes (Art. 6 (1) (a) GDPR), unless the embedding is technically necessary for a feature you explicitly request.

Note:
If we use YouTube’s “privacy-enhanced mode” (youtube-nocookie.com), tracking may be reduced, but technical cookies may still be required for playback.

More information:
Google/YouTube privacy information: https://policies.google.com/privacy

10) Google Workspace (G Suite) for communication
We use Google Workspace for business email and internal collaboration. When you email us, your communication is processed through this service.

Legal basis:
Art. 6(1) (b) GDPR (pre-contractual/contract) and/or Art. 6 (1) (f) GDPR (legitimate interests in efficient communication).

International transfers:
Depending on configuration and support processing, data may be processed outside the EEA with appropriate safeguards.

11) Recipients / processors
We may share personal data with:
– Hosting provider: Garmtech (server location: Riga, Latvia)
– Service providers for analytics and embedded media (where consent applies): Google Analytics, YouTube
– Communication tooling: Google Workspace
– Professional advisors (e.g., legal/finance) where necessary
– Authorities/courts where we are legally required

Processors are bound by contractual obligations under Art. 28 GDPR (where applicable).

12) Transfers to third countries (outside the EEA)
We may transfer personal data outside the EEA only where necessary (e.g., when using Google services), and we ensure an adequate level of protection through appropriate safeguards (e.g., EU Standard Contractual Clauses) and additional measures where required.

13) Your rights
Under GDPR, you have the right to:
– Access (Art. 15)
– Rectification (Art. 16)
– Erasure (Art. 17)
– Restriction (Art. 18)
– Data portability (Art. 20)
– Objection to processing based on legitimate interests (Art. 21)
– Withdraw consent at any time (Art. 7 (3)) — withdrawal does not affect lawfulness before withdrawal

To exercise your rights, contact: info@luyantaag.com

14) Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. For Bavaria (Germany), a relevant authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Email: poststelle@lda.bayern.de
Phone: +49 981 180 093 0
Website: https://www.lda.bayern.de/de/

15) Updates to this Privacy Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. The “Last updated” date shows the latest revision.