Privacy Policy

1. Controller and contact

The controller is:
[FULL LEGAL BUSINESS NAME / NAME AND LEGAL FORM]
[FULL POSTAL ADDRESS]
Email: anfrage@luccito.com

Data protection officer, if appointed: [INSERT CONTACT DETAILS OR REMOVE THIS SENTENCE]

2. Website access and Wix hosting

Our website is technically provided through Wix. Accessing it transmits connection data to the servers involved, including your IP address, the time of access and information about the requested resource and browser. The purpose is to deliver the website and support its stability and security.

Article 6(1)(f) GDPR is the proposed legal basis for necessary website provision. Our legitimate interest is reliable and secure operation. Wix.com Ltd., based in Israel, and relevant Wix entities contribute to the technical provision.

[CHECK AND COMPLETE THE RELEVANT WIX CONTRACTING ENTITY, DATA PROCESSING ARRANGEMENT, ACTUAL LOG DATA AND LOG RETENTION PERIOD]

3. Contact forms and email enquiries

The contact form processes name, company, email address, selected topic and message. A telephone number may be provided voluntarily. The form uses Wix Forms. Enquiries are transmitted to our business for handling; notifications are sent to anfrage@luccito.com.

We use the information to respond and discuss a potential project. Where you are personally a contracting party and your enquiry relates to entering or performing that contract, processing relies on Article 6(1)(b) GDPR. For business contact persons or general enquiries, Article 6(1)(f) GDPR is the proposed basis; our interest is handling and answering the communication.

Required fields are identifiable in the form. We may be unable to handle an enquiry without the necessary contact information. Providing a telephone number is optional.

[INSERT THE EMAIL SERVICE PROVIDER, AUTHORISED RECIPIENTS AND SPECIFIC DELETION PERIOD FOR FORM AND COMMUNICATION DATA]

4. OpenStreetMap locations map

The homepages include an interactive map using OpenStreetMap data. Loading map tiles connects your browser to tile.openstreetmap.org. Your IP address, request information and other technical connection data may be processed by the OpenStreetMap Foundation and the services involved in tile delivery.

The OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, processes data relating to its map services under its own privacy policy. We use the map to illustrate our locations.

Technical position of this draft: the map currently loads when the page opens. Before approval, determine the legal basis and implement any required prior consent. This policy alone does not obtain consent.

[COMPLETE THE MAP LEGAL BASIS, NECESSARY LEGITIMATE-INTEREST ASSESSMENT OR CONSENT MECHANISM AND SPECIFIC TRANSFERS]

5. External map library via jsDelivr

The map uses Leaflet files loaded from cdn.jsdelivr.net. This connects your browser to jsDelivr and its delivery network. In particular, IP addresses and technical request information are processed to provide the map functions.

[VERIFY THE CURRENT PROVIDER, LEGAL BASIS, RECIPIENTS AND RETENTION AGAINST THE ACTUAL INTEGRATION]

The library files also currently load when the page opens. Reflect any future local hosting or consent mechanism in this section.

6. Cookies, browser storage and consent

Whether cookies or similar storage technologies are used, and which are necessary, also depends on the actual Wix configuration. Access to a device must be considered separately from subsequent personal data processing. Relevant rules include section 25 TDDDG and the GDPR.

Where device access or processing requires consent, an appropriate consent mechanism must be implemented in advance. Text on this page does not replace that technical control.

[COMPLETE THE ACTUAL COOKIE AND STORAGE INVENTORY, PROVIDER, PURPOSE, DURATION AND LEGAL BASIS; ADD ANY CONSENT TOOL AND WITHDRAWAL METHOD]

[DESCRIBE ENABLED ANALYTICS OR MARKETING FUNCTIONS SEPARATELY, OR REMOVE THIS EDITING NOTE AFTER VERIFICATION]

7. Recipients and international transfers

Data may be processed by the providers used for hosting, forms, maps and communication, and by authorised people within our business. Wix may involve affiliated entities and other providers. Global delivery networks can involve processing outside the European Economic Area.

Any such transfer must meet the applicable requirements of Articles 44 et seq. GDPR. Applicable adequacy decisions or contractual safeguards must be determined from the actual providers and contractual arrangements.

[INSERT SPECIFIC RECIPIENT COUNTRIES, APPLICABLE SAFEGUARDS AND HOW TO OBTAIN FURTHER INFORMATION]

8. Retention

We retain data only for as long as the relevant purpose requires or legal retention duties apply. It is then deleted or, where appropriate, processing is restricted. Enquiry data may need to be retained if a contract follows or claims need to be addressed.

[ADD SPECIFIC PERIODS OR CLEAR CRITERIA FOR SERVER LOGS, WIX FORMS, EMAILS AND CONTRACT RECORDS]

9. Your data protection rights

Subject to the relevant legal conditions, you may request access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests under Article 21 GDPR. Consent may be withdrawn for future processing.

You may also complain to a data protection supervisory authority. The relevant authority for our business is: [NAME AND CONTACT DETAILS OF THE COMPETENT AUTHORITY]. Other statutory complaint options remain available.

Use the contact details in section 1 to exercise your rights.

10. Further information and updates

Solely automated decisions producing legal or similarly significant effects are not intended for the website enquiries described here. [CONFIRM ACTUAL PRACTICES BEFORE APPROVAL OR ADJUST THIS SECTION]

Update this policy when functions, providers or processing purposes change. It does not state that all business processes or project services are already covered.