Privacy Policy — LUNA PRIME

1. Data controller

The controller of your personal data is LUNA PRIME sp. z o.o., ul. Szlak 77, 31-153 Kraków, Polska, NIP (tax ID) 6762716651 (“we”). For any question about your data, contact us: [email protected].

2. What data we process

We process the data you give us in the forms on lunaprime.pl or in correspondence: your request, email address and — if you provide them — your name or company, phone or WhatsApp number, country and attached files. We also record the page the form was sent from, campaign parameters (UTM), a hash of your IP address and browser information to protect the site against spam.

3. Purposes and legal bases

Answering your request and preparing an offer — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Correspondence and business contact, including cooperation with producers — our legitimate interest (Art. 6(1)(f) GDPR).
Protecting the site against abuse and spam — legitimate interest (Art. 6(1)(f) GDPR).
Visit statistics (Google Analytics) — only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time: .
Legal obligations, e.g. accounting and tax after a contract is signed (Art. 6(1)(c) GDPR).

4. Who receives the data

We share data only with providers that help us run the site and handle requests, under data processing agreements or standard contractual clauses:

Contabo GmbH (Germany) — server hosting,
Cloudflare, Inc. — DNS, attack protection, incoming mail and anti-spam verification (Turnstile),
Sendinblue SAS / Brevo (France) — sending emails,
Telegram — internal notifications to our team about new requests,
Google Ireland Ltd. — statistics, only if you consent.

Where preparing an offer requires it, we share the necessary details of your request with producers and carriers (without your contact details unless agreed otherwise). Some providers may process data outside the European Economic Area — then on the basis of a European Commission decision (e.g. the EU–US Data Privacy Framework) or standard contractual clauses.

5. How long we keep the data

Requests sent through the forms are kept for 24 months and then deleted automatically together with their attachments. If we sign a contract, contract-related data is kept for the period required by law (including tax law). Data processed on the basis of consent is kept until consent is withdrawn.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent at any time; this does not affect the lawfulness of processing before the withdrawal. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

7. Voluntary provision

Providing data is voluntary, but without an email address and a description of your request we cannot reply. We do not make automated decisions or use profiling.

8. Cookies

See the Cookie Policy for information about cookies.