By clicking “Accept”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
of
Lumis Student Living Ltd,Lumis Student Living GmbH and Lumis Living DE GmbH
("Lumis Living")
Last updated: 1st October 2025
This Privacy Policy governs the handling of personal data processed when visiting the website of Lumis Living. In the following, we will inform you about what data is being processed, how it will be processed and what rights you have in this regard, in accordance with the General Data Protection Regulation 2018 (“GDPR”).
It is important that you read and retain this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using that information and what your rights are under the data protection legislation.
The controller responsible for the processing of personal data in the United Kingdom:
Lumis Student Living Ltd
13 Berkeley Street
W1J 8DU London
United Kingdom
The controller responsible for the processing of personal data in in Austria is:
Lumis Student Living GmbH
Mariahilfer Straße 84/31
1070 Wien
Austria
The controller responsible for the processing of personal data in Germany is:
Lumis Living DE GmbH
Markgrafenstraße 33
10117 Berlin
Germany
For data protection related concerns and to exercise your rights under Art. 15 GDPR, please contact:
Whenever you visit the website, even if you only use the website for information purposes, we process personal data from you that your browser transmits.
The following personal data of yours will be processed:
The legal basis for processing this data is either Art. 6 (1) b) GDPR for entering into or pursuing a rental agreement or Art. 6 (1) (1) (f) GDPR -we have a legitimate interest in properly displaying the website to you.
The data regarding the website is deleted after 30 days.
We use the following cookies on our websites (for more information, see our cookie banner):
For more information, please refer to the information and further links of the respective cookie banner used.
When you rent a room through our website, we collect and store the following information;
• your first and last name;
• your address;
• your telephone number;
• your e-mail address; and
• Any documents you provide in connection with the room rental.
We process and use the personal data provided only for the purpose of renting the room.
The processing of your personal data is based on Art. 6 (1) (1) (b) GDPR, as it is necessary for the performance of the rental agreement. Your data will be deleted once the tenancy has ended and any claims arising from it are no longer enforceable.
If you submit an application to us, we store the following personal information;
• your first and last name;
• your telephone number;
• your e-mail address; and
• the application documents you provide(application letter, CV, certificates, etc).
We process and use the personal data provided only for the purpose of filling positions within our company.
For applications in Germany, the legal basis for processing the data under German regulation is Section 26 (1)Sentence 1 of the German Federal Data Protection Act (BDSG).
Your data will be deleted three months after completion of the application process, unless otherwise required by law.
If you contact us by email or using any of the contact forms on our website, we will store any of the following information that you provide;
• your email address;
• your first and last name;
• telephone number
We use this information to process your request and to contact you if necessary.
The legal basis for this processing is Article 6(1)(b) GDPR. Once the relevant purpose has been fulfilled, the personal data will be deleted.
We aim to ensure that the personal information we hold is accurate, up to date, and relevant for the purposes outlined in this privacy notice. If you believe any of your information is incorrect or outdated, you have the right to request its correction. Keeping your personal data accurate and current is important to us.
We may occasionally contract with third-party providers to deliver services or products to you. In certain situations, these third parties may need access to some of your personal information. Whenever your data is needed for this purpose, we will take all reasonable measures to ensure it is handled securely, safely, and in compliance with your rights and our obligations. An example of your data that could be shared is; email address, telephone number and first and last name. Examples of some third parties where your data will need to be shared in order to provide a service to you are;
• SmartPoint – a parcel management and delivery service company.
If you choose not to allow your personal information to be shared, we may be unable to provide the service or product. In such cases, we may need to cancel the service or product you currently have or wish to receive. The purpose for this is that your information is required in order to process your goods and/or service. In some circumstances, we may have to share information we hold, including your personal data, to comply with the law, such as in legal cases, court orders, or requests from government authorities
Please note that any change to your preferences reported to us will not apply to any third parties with whom we have shared your information, and you would need to contact them separately.
You have the right to withdraw consent at any time. To do so, simply go to the same link provided to you during the acceptance, insert your email and click decline. Once you withdraw, the third party will retain your personal data for one month from the withdrawal date, after which it will be deleted.
You have the right at any time to receive from us free of charge information about the data stored about you, its origin, recipients or categories of recipients to whom this data is disclosed, and the purpose of storage.
You have the right to request that we correct any inaccurate personal data concerning you.
After termination of the relationship, your personal data will be deleted, if applicable, after expiration of the tax and commercial law as well as other statutory retention and limitation periods, unless you have expressly consented to the further use of your data.
Provided that legal retention periods are not affected by this and your data is no longer required for the processing of the contract or your inquiry, you can request the deletion of your data at any time.
You have the right to request the restriction of the processing of your data if the relevant requirements under the GDPR are met.
If the data processing is based on consent or on the performance of a contract and if it is also carried out using automated processing, you have the right to receive your data in a structured, common and machine-readable format and to transfer it to another data processor.
If the processing is based on an overriding legitimate interest, you have the right to object to the processing of your data. We will then no longer process your data unless we have a legitimate interest in processing your data that outweighs your interests, rights and freedoms.
If the processing of data is based on consent, you have the right to revoke your consent to the use of your data at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You have the right to complain to a supervisory authority about the processing of your data.
We may change this Privacy Policy from time to time. Any changes will be immediately posted on ourwebsite and you will be deemed to have accepted the terms of the Privacy Policyon your first use of our website following the alterations. We recommend thatyou check this page regularly to keep up-to-date.