Privacy Policy

Last updated: November 2024

Adluna ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share the personal information you provide to us through our website (adluna.media) and our services.

1. Data Controller

The data controller responsible for your personal data is Adluna. For any questions regarding this policy or your data, contact us at privacy@adluna.media.

2. What Data We Collect

We may collect the following categories of personal data:

  • Contact information: name, email address, phone number, company name
  • Usage data: pages visited, time spent, referral source, device and browser type
  • Communication data: messages submitted through our contact form
  • Cookie data: as described in our cookie policy below

3. How We Use Your Data

We process your personal data for the following purposes:

  • Responding to your enquiries and providing our services
  • Sending relevant communications you have opted into (e.g., newsletter)
  • Improving our website and understanding how visitors use it
  • Complying with legal obligations

4. Legal Basis for Processing (GDPR)

We process data based on the following legal grounds:

  • Consent: When you voluntarily submit your information through forms or opt into communications
  • Legitimate interest: For analytics and website improvement, where it does not override your fundamental rights
  • Contractual necessity: When processing is required to deliver our services to you
  • Legal obligation: When we must comply with applicable laws

5. Cookies and Tracking

Our website may use the following types of cookies:

  • Essential cookies: Necessary for the website to function (e.g., theme preference)
  • Analytics cookies: Help us understand website usage (e.g., Google Analytics with IP anonymization)
  • Marketing cookies: Used to track advertising effectiveness (only with your consent)

We comply with ePrivacy and GDPR requirements. Non-essential cookies are only placed after you give explicit consent through our cookie banner.

6. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers: Hosting, email, and analytics platforms that process data on our behalf
  • Advertising platforms: Google Ads, Meta Ads (only for measurement, with consent)
  • Legal authorities: When required by law

7. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Retention

We retain personal data only as long as necessary for the purpose it was collected. Contact form submissions are retained for up to 24 months. Analytics data is retained per platform defaults (typically 14 months in GA4).

9. Your Rights

Under the GDPR, you have the right to:

  • Access — Request a copy of the data we hold about you
  • Rectification — Ask us to correct inaccurate data
  • Erasure — Ask us to delete your data ("right to be forgotten")
  • Restrict processing — Ask us to limit how we use your data
  • Data portability — Request your data in a machine-readable format
  • Object — Object to processing based on legitimate interest
  • Withdraw consent — Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email privacy@adluna.media. We will respond within 30 days.

10. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

11. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated on this page with an updated "Last updated" date.

12. Contact

If you have questions or complaints about this privacy policy or our data practices, contact us at:

Adluna
Email: privacy@adluna.media

You also have the right to lodge a complaint with your local data protection authority.