Legal

Privacy policy

Last updated: 13 October 2026

At llume we take your privacy seriously. This policy explains what personal data we process, why, and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

• Controller: llume
• Email: info@llume.net

2. What data we process and where it comes from

This website does not store data on its own servers. The contact form opens your email app with a ready-made message, and we only receive the data you choose to send us: what you need, your name and phone number and, optionally, your company and email. If you email us directly, we process the data included in your message.

Our hosting provider processes technical data, such as your IP address, to serve the website and protect it from attacks. We count visits with cookie-free analytics that do not identify you.

3. What we use it for

• To handle your enquiry and call you to arrange the meeting you request.
• To prepare and send you a proposal, if you ask for one.
• If we end up working together, to manage the professional relationship and meet our legal, tax and accounting obligations.

We do not make automated decisions or build profiles with your data, we will not send you advertising without your permission, and we do not sell or share your data for commercial purposes.

4. Legal basis

• Your consent when you send us your request (Article 6.1.a GDPR). You can withdraw it at any time.
• Pre-contractual measures taken at your request, such as preparing a proposal (Article 6.1.b).
• Compliance with legal obligations, if we work together (Article 6.1.c).

5. How long we keep it

For as long as the conversation or professional relationship lasts and, afterwards, for the periods required by law. If we do not end up working together, we delete your data within one year of the last contact.

6. Who else may access it

We do not share your data with third parties unless required by law. Some providers have access to it as data processors, under contracts that comply with the GDPR:

• Google (Google Workspace): email.
• Cloudflare: hosting, security and cookie-free visit statistics.

7. International transfers

These providers may process data outside the European Economic Area, mainly in the United States, under the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission, which guarantee an adequate level of protection.

8. How we protect it

We apply appropriate technical and organisational measures: encrypted connections (HTTPS) across the whole site, access to data limited to those who need it, and providers that meet recognised security standards.

9. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@llume.net and stating which right you wish to exercise. We will reply within one month.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with your local supervisory authority.

10. Minors

This website is aimed at companies and professionals. We do not knowingly collect data from children under 14.

11. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The current version will always be published on this page with its update date.