Privacy policy

Effective from 7 October 2026.

1. Data controller

The controller of your personal data is Artem Hasiunas, carrying out individual business activity in Lithuania (individualios veiklos pažyma No. 1418506) under the Lumant brand. For anything related to personal data, write to hello@lumant.eu.

2. What data we collect

• Contact form: name, e-mail address, the service you chose, your message and which consents you gave.
• Proof of consent: date and time of submission, IP address, the wording of the consents you ticked and the language version of the page.
• E-mail correspondence: whatever you choose to send us.
• Visit statistics: anonymised traffic data (page, referrer, device type, country). The tool uses no cookies and does not let us identify you.
• Server logs: IP address, date, requested page and browser information — kept for a short time for technical reasons.

3. Purposes and legal bases

• Replying to your enquiry and preparing an offer — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and the consent you give in the form.
• Performing a contract, if we sign one — Article 6(1)(b) GDPR.
• Sending commercial information by e-mail — only on the basis of a separate, voluntary consent: Article 6(1)(a) GDPR and Article 398 of the Polish Electronic Communications Law.
• Invoicing and tax obligations — Article 6(1)(c) GDPR.
• Website security, statistics, spam protection, proof of consent and establishing or defending legal claims — our legitimate interest, Article 6(1)(f) GDPR.

Providing data in the form is voluntary, but without your name, e-mail address and consent to processing we cannot reply to your enquiry.

4. How long we keep data

• Enquiries that did not lead to a contract — up to 12 months after our last contact.
• Contract data — for the duration of the contract and then for the period required by tax and accounting law.
• Marketing consent — until you withdraw it.
• Proof of consent — while we process data on that basis and until any related claims become time-barred.
• Server logs — up to 30 days.

5. Who receives your data

We do not sell data. We use providers that process it on our behalf under data processing agreements:

• website and form hosting — Hetzner Online GmbH (servers in the European Union);
• e-mail — the provider of the hello@lumant.eu mailbox;
• new-enquiry notifications — Telegram messenger (if enabled; Telegram may process data outside the EEA under standard contractual clauses);
• visit statistics — Umami, running on our own server (data is not shared with third parties).

Public authorities may also receive data where the law requires it.

6. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability, and to object to processing based on our legitimate interest. You can withdraw consent at any time — just e-mail hello@lumant.eu or use the link in our message. Withdrawal does not affect the lawfulness of processing before it.

7. Complaints

If you believe we process your data unlawfully, you can lodge a complaint with the Lithuanian supervisory authority — Valstybinė duomenų apsaugos inspekcija (VDAI, vdai.lrv.lt) — or with the authority in your country of residence, e.g. the Polish UODO (uodo.gov.pl).

8. Cookies

This site uses no tracking or advertising cookies. Statistics are collected without cookies. Fonts and all page files are served from our own server — the site does not connect your browser to Google or other third parties.

9. Automated decisions

We do not make decisions based solely on automated processing and we do not profile you.

10. Changes

We will announce material changes to this policy on this page and update the effective date.