Privacy policy

1. Controller

Email

contact@loomaworks.com

Privacy contact

contact@loomaworks.com

2. Website access and server logs

When you access this website, the hosting provider processes technically necessary connection data so that the website can be delivered, operated reliably, and protected against attacks. This may include the IP address, date and time of access, requested URL, referrer URL, browser and operating-system information, HTTP status code, and amount of data transferred.

Purpose

Website delivery, system security, abuse detection, and error analysis.

Legal basis

Article 6(1)(f) GDPR; our legitimate interest in operating the website securely.

Recipient

Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA.

Retention period

Runtime logs are retained for no longer than 24 hours. Looma Works does not keep any additional server-side access logs in the current application code.

3. Contact and contact form

When you contact us by email, through the contact form, or by another means, we process the information you provide in order to respond to your enquiry and any follow-up questions. The contact form processes your name, email address, optional company name, and message in particular. Depending on the substance of the enquiry, the legal bases are Article 6(1)(b) GDPR (pre-contractual or contractual communication) and Article 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

The data is deleted once the enquiry has been conclusively handled, unless statutory retention obligations or legitimate interests require further storage.

Email, IT, and communications providers may act as recipients or processors when we handle enquiries. The contact form sends messages through Resend / Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. The recipient mailbox is operated through Google Workspace. Its data region is set to Europe.

4. Cookies, local storage, and similar technologies

This website currently uses no analytics or marketing cookies and embeds no external tracking services. A technically necessary local-storage entry records the privacy-notice preference in your browser. It contains no user ID and is not used for analytics or advertising.

Name

looma_cookie_notice_v1

Purpose

Records for 180 days after the notice is closed that it should not appear on every visit.

Legal basis

Section 25(2)(2) TDDDG; where the entry relates to an identifiable person, Article 6(1)(f) GDPR (legitimate interest in presenting the notice in a user-friendly manner).

Details are available in the cookie policy.

5. Recipients and processors

Personal data is disclosed only where this is necessary to provide the website, respond to your enquiry, comply with legal obligations, or protect legitimate interests. Where required, service providers are engaged as processors pursuant to Article 28 GDPR.

6. Requirement to provide data

When you visit the website for information only, you are not legally or contractually required to actively provide personal data. Connection data is nevertheless processed automatically to deliver the website; without this processing, the website cannot be delivered to your device.

When you contact us, the contact details you provide are required so that we can handle your enquiry. Without them, we may be unable to respond, or may only be able to respond to a limited extent.

7. International data transfers

Vercel Inc. and Plus Five Five, Inc. are based in the United States. Google Workspace may also use subprocessors and data centres outside the EU or EEA. Personal data may therefore be processed in third countries. According to Vercel, it is certified under the EU-US Data Privacy Framework. Where a transfer is not based on an adequacy decision by the European Commission, it is made on the basis of the European Commission's Standard Contractual Clauses under Article 46(2)(c) GDPR, incorporated into the respective providers' data processing terms.

Vercel, Resend and Google Workspace publish information about their safeguards and contractual documents. You may also request a copy of the safeguards relevant to the processing by contacting contact@loomaworks.com.

8. Your rights

Subject to the requirements of the GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Berlin is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany, mailbox@datenschutz-berlin.de.

9. Right to object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object to that processing at any time on grounds relating to your particular situation. Please send your objection to contact@loomaworks.com.