Privacy notice
Last updated: 19 October 2026
About this translation
Who is responsible for your data
The controller of the personal data processed on airspot.lumosstudio.ro is Lumos Studio, individual (not yet registered as a business), at Roman, Neamț County, Romania. Email: hello@lumosstudio.ro. Phone: +40 743 353 143.
You can write to the address above at any time with any question about your data.
What we process, why, and for how long
We only process the data we need. The table below lists all of it.
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Hosting and security | IP address, browser type, requested page, date and time | delivering the site, security and preventing abuse | legitimate interest (Art. 6(1)(f) GDPR) | a short period set by the hosting provider |
| Emails you send us | your name, email address and the message | replying to your message | legitimate interest (Art. 6(1)(f)) or steps before a contract (Art. 6(1)(b)) | for the conversation and up to 24 months after the last message |
| The waiting list | your email address, the page language and the page you signed up from | to tell you when accounts open and to give you your Founding Pilot spot. The email goes to Lumos Studio (a Supabase database in the EU), and the team gets a Telegram notification that someone signed up | your consent, given by sending the form (Art. 6(1)(a) GDPR) | until launch, or until you ask for deletion |
| Stars given to a spot | the number of stars (1–5), the spot and a random number of your browser (not your name or address), kept by us only as a cryptographic hash; the IP address is not kept | working out the average for the spot and limiting to one vote per browser (a second tap replaces the first). The vote goes to Lumos Studio (a Supabase database in the EU) | your consent, given by the act of voting (Art. 6(1)(a) GDPR) | while the spot exists or until you ask for deletion; the admin can delete all the votes of a spot |
| The map, place search and weather | the points you tap on the map and the place you search for | the zones and the verdict are worked out on our server; the weather is requested from Open-Meteo and NOAA by our server, with rounded coordinates (~5 km), without your details. The map background comes from OpenFreeMap, and place search goes straight from your browser to Nominatim (OpenStreetMap): those providers see your IP address | your request (Art. 6(1)(b) GDPR) | we do not keep the points you tap on the map |
We do not sell your data and do not use it for advertising or profiling.
We count visits without cookies and without tracking you: on every page you open, our content server (studio.lumosstudio.ro) adds up only the page address, the day and the kind of source (search engine, social network, direct or another site). We do not store your IP address, we set no cookies and we cannot tell who you are. If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is counted. For a gallery video, the preview image comes from YouTube (i.ytimg.com, Google), and the player loads only when you press it, from youtube-nocookie.com; YouTube’s (Google’s) rules apply to both
Who receives your data
We use providers that process data on our behalf under data processing agreements. We do not pass your data to anyone else unless the law requires it.
| Provider | What it does | Where | Their policy |
|---|---|---|---|
| Vercel Inc. | website hosting and delivery | USA (with EU data centres where available) | https://vercel.com/legal/privacy-policy |
| Supabase Inc. | database, sign-in and file storage | data is stored in an EU region | https://supabase.com/privacy |
| Telegram Messenger Inc. | internal notifications to our team | outside the EU | https://telegram.org/privacy |
| OpenStreetMap / furnizor de hărți | showing maps (the visitor's IP address reaches the map server) | EU / United Kingdom | https://osmfoundation.org/wiki/Privacy_Policy |
Transfers outside the European Economic Area
Some providers are outside the EEA. Transfers rely on the EU–US Data Privacy Framework (for certified providers) and/or the standard contractual clauses approved by the European Commission. You can ask us for a copy of the safeguards.
Cookies and browser storage
The details are on the cookies and storage page.
Your rights
You have the right to:
- find out what data we hold about you and get a copy (access);
- have incorrect data corrected;
- have your data erased (the “right to be forgotten”);
- restrict how we use your data;
- receive your data in a common format and pass it to someone else (portability), where we process it under a contract or consent;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting what happened before.
Write to hello@lumosstudio.ro. We reply within one month at most. We may ask for proof of identity so we do not hand your data to an impostor.
If you are not satisfied
You have the right to lodge a complaint with the supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București, https://www.dataprotection.ro, anspdcp@dataprotection.ro. We would appreciate the chance to fix the problem first.
Security
We use encrypted connections (HTTPS), limit access to data and choose providers with recognised security measures. No method is 100% safe; if an incident affects you, we will tell you and the authority where the law requires it.
Changes
When we change how we process data, we update this page and the date above.