of
Lumis Student Living Ltd, Lumis Student Living GmbH and Lumis Living DE GmbH
("Lumis Living")
Last updated: 19th March 2024
This Privacy Policy governs the handling of personal data processed when visiting the website of Lumis Living. In the following, we will inform you about what data is being processed, how it will be processed and what rights you have in this regard.
The controller with regard to the processing of personal data when visiting the website and in the UK is:
Lumis Student Living Ltd
13 Berkeley Street
W1J 8DU London
United Kingdom
The controller with regard to the processing of personal data in Austria is:
Lumis Student Living GmbH
Mariahilfer Straße 84/31
1070 Wien
Austria
and in Germany is:
Lumis Living DE GmbH
Markgrafenstraße 33
10117 Berlin
Germany
For data protection related concerns and to exercise your rights under Art. 15 ff. GDPR, please contact:
Whenever you visit the website, even if you only use the website for information purposes, we process personal data from you that your browser transmits.
The following personal data of yours will be processed:
The legal basis for processing this data is either Art. 6 (1) b) GDPR for entering into or pursuing a rental agreement or Art. 6 (1) 1 lit. f) GDPR, as we have a legitimate interest in properly displaying the website to you.
The data regarding the website is deleted after 30 days.
We use the following cookies on our websites (for more information, see our cookie banner):
For more information, please refer to the information and further links of the respective cookie banner used.
If you submit an application to us via the application form on the website, we store your first and last name, your telephone number, your e-mail address and the application documents you provide ( application letter, CV, certificates, etc.).
We process and use the personal data provided only for the purpose of filling positions within our company.
The legal basis for processing the data is Section 26 (1) Sentence 1 of the German Federal Data Protection Act (BDSG).
Your data will be deleted three months after completion of the application process, unless otherwise required by law.
If you rent a room through the website, we store your first and last name, your address, your telephone number, your e-mail address and the documents you provide for the purpose of renting the room.
We process and use the personal data provided only for the purpose of renting the room.
The legal basis for processing the data is Art. 6 (1) 1 lit. b) GDPR. As soon as the tenancy has ended and and all claims are time-barred, the personal data will be deleted.
If you contact us by email or using the contact form on this Website, we will store your email address and, if you provide this information, your name and telephone number in order to be able to process your request and contact you.
In any case, we will collect, process and use the personal data provided in this way only for the purpose of responding to your query and/or giving you access to the information you requested.
The legal basis is Art. 6 (1) 1 lit. b) GDPR. Once the relevant purpose(s) is/are achieved, the personal data will be deleted.
For the technical infrastructure required for the operation of the website, the IT service providers commissioned by us receive your data as part of the technical support. All processors are contractually obligated to treat your data confidentially and to process it only within the scope of the commissioning by us.
You have the right at any time to receive from us free of charge information about the data stored about you, its origin, recipients or categories of recipients to whom this data is disclosed, and the purpose of storage.
You have the right to request that we correct any inaccurate personal data concerning you.
After termination of the relationship, your personal data will be deleted, if applicable, after expiration of the tax and commercial law as well as other statutory retention and limitation periods, unless you have expressly consented to the further use of your data.
Provided that legal retention periods are not affected by this and your data is no longer required for the processing of the contract or your inquiry, you can request the deletion of your data at any time.
You have the right to request the restriction of the processing of your data if the relevant requirements under the GDPR are met.
If the data processing is based on consent or on the performance of a contract and if it is also carried out using automated processing, you have the right to receive your data in a structured, common and machine-readable format and to transfer it to another data processor.
If the processing is based on an overriding legitimate interest, you have the right to object to the processing of your data. We will then no longer process your data unless we have a legitimate interest in processing your data that outweighs your interests, rights and freedoms.
If the processing of data is based on consent, you have the right to revoke your consent to the use of your data at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You have the right to complain to a supervisory authority about the processing of your data.