Privacy policy

1. Privacy at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

Data collection on this website

Who is responsible?
Data processing on this website is carried out by the website operator, whose contact details you can find in the "Responsible party" section below.

How do we collect your data?
Your data is collected automatically by our IT systems when you visit the site — mainly technical data (e.g. browser, operating system, time of the request). This site deliberately processes as little data as possible: there is no contact form and no user accounts.

What do we use your data for?
Part of the data is collected to ensure the site is provided without errors. A small part is used for anonymous, cookieless audience measurement.

2. Hosting

Server (VPS)

This website runs on a virtual private server (VPS) of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The server is rented by our managing director Vincent Schweden, who operates it for us as a processor (contract under Art. 28 GDPR). It is served via a reverse proxy (Traefik) and an nginx web server with automatic TLS encryption via Let's Encrypt. No external CDN or Cloudflare service is used. The basis is our legitimate interest in reliable, secure provision (Art. 6(1)(f) GDPR).

3. General information and mandatory notices

Responsible party

The party responsible for processing data on this website is:

LunaBytes UG (haftungsbeschränkt)
Am Seerhein 6
78467 Konstanz
Deutschland

Email: info@lunabytes.de
Phone: +49 (0) 160 9010 5256

Storage period

Unless a more specific storage period is stated in this policy, your personal data remains with us until the purpose for processing no longer applies.

Objection and withdrawal

Where we process data on the basis of legitimate interests (e.g. cookieless audience measurement with Umami), you can object to that processing at any time with effect for the future (Art. 21 GDPR). Processing based on your consent (Google Analytics) can be withdrawn at any time by clearing your cookie decision in the browser.

SSL / TLS encryption

For security reasons this site uses SSL/TLS encryption, recognisable by "https://" in your browser's address bar.

Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection at any time, as well as the right to lodge a complaint with a supervisory authority. Contact info@lunabytes.de to exercise these rights.

4. Data collection on this website

Server log files

The web server automatically records information in server log files transmitted by your browser: browser type and version, operating system, referrer URL, time of the request and a shortened/hashed IP address. The basis is Art. 6(1)(f) GDPR (secure, error-free provision). The data is stored only briefly.

Referral-link click counter

Clicks on our referral button are counted purely for statistics via our own redirect endpoint ("/go") before you are forwarded to the partner site. We store only aggregated data that cannot be traced back to you: timestamp, language and a one-way hashed (anonymised) IP address. No cookies are set and no personal profiles are created (Art. 6(1)(f) GDPR).

5. Web analytics

Umami (cookieless, consent-free)

For audience measurement we use the software Umami. It runs on our analytics server analytics.lunabytes.de at netcup GmbH in Germany; the server is operated for us by our managing director Vincent Schweden as a processor. When a page loads, the Umami script reads your screen size, language setting, Do Not Track setting and local storage (localStorage, the entry that switches measurement off) in your browser; it sets no cookies. It sends screen size and language to the server together with the address and title of the page visited and the referring page (referrer); as with every request, the server also receives your IP address and browser identifier (user agent). From these it derives browser, operating system, device type and approximate location (city at most) and forms an identifier for counting visits that changes every month. The IP address itself is not stored, no cross-device profiles are created and only aggregated figures are evaluated; no data is transferred to third parties or third countries. The data is deleted automatically after 6 months, or earlier at your request.

We base reading this information from your device on Section 25(2) No. 2 TDDDG, because privacy-friendly audience measurement is strictly necessary to operate this website; we do not ask for consent for it. The legal basis for the further processing is our legitimate interest in privacy-friendly audience measurement (Art. 6(1)(f) GDPR).

Google Analytics 4 (only with consent)

In addition we use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) — only if you agree via the cookie banner. Before your consent, no analytics script is loaded and no cookie is set. IP anonymisation is enabled. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which can be withdrawn at any time with effect for the future. This may involve a transfer to the USA.

Local storage (consent)

We store your cookie decision in your browser's local storage ("sc-consent"). It is technically necessary and contains no personal data.

6. External links / affiliate

Our buttons link to Roberts Space Industries or a partner/affiliate link. When you click, you leave this website and the privacy policy of the respective provider applies.