Privacy Policy

1. Introduction

Luminova Ltd ("Company", "we", "us" or "our"), registered in Bulgaria with its principal office in Sofia and trading as Luminova Labs, is committed to protecting your privacy. This Privacy Policy explains how we collect, use and safeguard information when you visit luminovalabs.net ("Website") or contact us through it.

We comply with the General Data Protection Regulation (GDPR) and applicable Bulgarian data protection legislation.

2. Data controller

Luminova Ltd, Sofia, Bulgaria
contact@luminovalabs.net

3. What data we collect

• Contact data. If you email us or use the contact form, we receive your name, email address, organisation (if provided) and the content of your message.
• Recruitment data. If you apply for a role via contact@luminovalabs.net, we process your CV, contact details and the information in your application for recruitment purposes, on the basis of your consent. We do not share your details with a client without your consent.
• Technical data. Standard server logs including IP address, browser type, operating system, referring URL and pages visited, collected by our hosting provider (Cloudflare).
• Cookies. This Website uses only strictly necessary cookies. We do not use analytics, advertising or tracking cookies.

4. How we use your data

• to respond to your enquiries;
• to maintain the security and performance of the Website;
• to comply with legal obligations.

5. Legal basis for processing

• Legitimate interest (Art. 6(1)(f) GDPR) for Website security and performance monitoring;
• Consent (Art. 6(1)(a)) when you voluntarily contact us;
• Legal obligation (Art. 6(1)(c)) where we are required to retain data by law.

6. Data sharing

We do not sell, rent or trade personal data. We share data only with processors acting on our behalf:

• Hosting and email routing. Cloudflare, Inc. — website hosting, contact-form processing and email routing.
• Email. Our email service provider, for handling correspondence.

We do not transfer personal data outside the European Economic Area unless adequate safeguards are in place in accordance with the GDPR.

7. Data retention

• Correspondence and contact-form submissions: up to 24 months after last contact, unless an ongoing business relationship exists.
• Recruitment applications: up to 12 months from receipt, or sooner on request.
• Server logs: deleted automatically by our hosting provider within 30 days.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. To exercise any of these rights, contact contact@luminovalabs.net. We respond within 30 days.

9. Children

This Website is not directed at individuals under 16. We do not knowingly collect personal data from children.

10. Third-party websites

This Website links to pragmaclinical.com and LinkedIn, each with its own privacy policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes are posted on this page with an updated revision date.

12. Supervisory authority

If you believe our processing of your personal data violates the GDPR, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.