LUMEN
GLASS ART
Preferences
Language
Currency
Lumen Glass Art · Legal

Privacy Policy

Effective date: 10 october 2026

1. Data Controller

The LumenGlass website (the “Website”) is operated by:

  • Name / Business name: Bíró István EV
  • Registered address: Hungary 4400 Nyíregyháza Sarló utca 21.
  • Tax identification number: HU67091968
  • Email: [email protected]
  • Website: https://lumenglass.art

The operator acts as the data controller for the processing activities described in this Privacy Policy and is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Hungarian law.

2. General Information

LumenGlass is an online art gallery presenting original contemporary artworks.

Visitors may contact the gallery to enquire about individual artworks or purchase selected pieces through direct Stripe payment links.

The Website does not operate a traditional shopping cart or its own payment card processing interface.

Personal data is collected only for specified, lawful purposes and is retained for no longer than necessary.

3. Enquiries and Contact

When visitors contact the gallery by email or through a contact form, we may process:

  • Name
  • Email address
  • Telephone number, if provided
  • Subject and content of the enquiry
  • Related correspondence

Purpose: responding to enquiries, providing information about artworks, and communicating before a potential purchase.

Legal basis: Article 6(1)(b) GDPR for steps taken at the visitor's request before entering into a contract; Article 6(1)(f) GDPR (legitimate interests) for general enquiries.

Retention: enquiries that do not result in a purchase are generally retained for 12 months after the last communication, unless longer retention is justified by legal claims or statutory requirements.

4. Purchases and Stripe Payments

Selected artworks may be purchased through direct payment links provided by Stripe.

Clicking a payment link redirects the visitor to a secure payment page operated by Stripe.

Payment card information is entered and processed within Stripe's systems. LumenGlass does not collect or store full payment card numbers or card security codes.

Depending on the transaction, we may receive and process:

  • Customer name
  • Email address and contact details
  • Billing and shipping information, where required
  • Purchased artwork and transaction amount
  • Currency, transaction identifier, payment date and status
  • Information relating to refunds or payment disputes

Purpose: fulfilling purchases, verifying payments, arranging delivery or collection, communicating with customers, issuing invoices, and handling complaints or refunds.

Legal basis: Article 6(1)(b) GDPR (performance of a contract); Article 6(1)(c) GDPR (legal obligations relating to accounting and taxation); and, where applicable, Article 6(1)(f) GDPR (legitimate interests in establishing or defending legal claims).

Payment service provider: Stripe, which may act as a processor or an independent controller depending on the processing activity.

Stripe Privacy Policy: https://stripe.com/privacy

5. Invoicing and Accounting

For completed purchases, we process personal data necessary to issue invoices and comply with accounting and tax obligations.

This may include the customer's name, billing address, invoice details, and transaction information.

Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.

Retention: accounting documents are generally retained for at least eight years under applicable Hungarian accounting legislation.

Invoicing provider: [TO BE COMPLETED, IF APPLICABLE]

6. Google Analytics 4

The Website may use Google Analytics 4 (GA4) to understand how visitors interact with its content.

Depending on the configuration, information may include visited pages, session duration, traffic sources, device and browser characteristics, and online identifiers.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: website traffic analysis and improvement of functionality and user experience.

Legal basis: Article 6(1)(a) GDPR – the visitor's consent.

Google Analytics is activated only after the visitor has provided prior consent. If consent is refused, Google Analytics data collection does not take place on the Website.

Visitors can withdraw or change their consent at any time using the Cookie Settings function.

GA4 data retention setting: [INSERT ACTUAL CONFIGURED PERIOD].

Google Privacy Policy: https://policies.google.com/privacy

7. Cookies

The Website may use strictly necessary cookies and optional analytics cookies.

Strictly necessary cookies may support website security, essential session functionality, and the storage of cookie preferences. Where strictly necessary for a service requested by the visitor, these cookies do not require separate consent.

Analytics cookies may be placed by Google Analytics 4 following consent. These may include `_ga` and `_ga_<identifier>`, which distinguish visitors and sessions. Their default lifetime may be up to two years, subject to browser restrictions and configuration.

Visitors may also manage or delete cookies through their browser settings.

8. Technical Logs and Website Security

When the Website is accessed, the hosting infrastructure may process technical information such as:

  • IP address
  • Date and time of access
  • Requested URLs and HTTP status codes
  • Browser and device information
  • Error logs and security events

Purpose: operating the Website, troubleshooting, maintaining security, and preventing misuse.

Legal basis: Article 6(1)(f) GDPR – legitimate interests.

Retention: [INSERT ACTUAL SERVER LOG RETENTION PERIOD].

9. Service Providers and International Data Transfers

The LumenGlass website operates on a privately managed server located in Hungary.

The following external services are used:

  • Payment provider: Stripe
  • Web analytics: Google Ireland Limited (Google Analytics 4)
  • Email delivery provider: Resend
  • Invoicing provider: Szamlazz.hu

These providers may process personal data necessary to deliver their services. The use of Google, Stripe and Resend may involve transfers of personal data outside the European Economic Area. Such transfers must be supported by appropriate safeguards under the GDPR.

10. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, and disclosure.

Measures may include HTTPS encryption, restricted administrative access, security updates, and appropriate backup procedures.

11. Your Rights

Subject to the conditions and limitations of the GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure
  • Request restriction of processing
  • Request data portability
  • Object to processing based on legitimate interests
  • Withdraw consent at any time

Statutory retention obligations may limit certain requests.

Requests may be submitted to [CONTACT EMAIL]. We will normally respond within one month, subject to applicable GDPR provisions.

12. Complaints

If you have concerns about our processing of personal data, you may contact us or lodge a complaint with a competent supervisory authority.

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Website: https://www.naih.hu

You may also have the right to seek a judicial remedy or contact another competent EU supervisory authority.

13. Changes to This Policy

This Privacy Policy may be updated to reflect changes in legal requirements, service providers, or data processing practices.

The latest version will be available on the Website.