Privacy Notice.

1. Who is responsible for your data

Lumis Aviation is the trading brand of Privé International s.r.o., a company registered in the Czech Republic, which is the data controller for the personal data described in this notice.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 of the GDPR. Privacy questions go to the address above and are handled directly.

2. What we collect

We collect very little, and only what you choose to send us.

Enquiry form and email

When you submit the enquiry form on this website, or email us directly, we receive:

• Your name
• Your email address
• Your operator or FBO, if you provide it
• The aircraft type, if you provide it
• The content of your message, and any later correspondence

Only your name and email address are required. Everything else is optional, and an enquiry is perfectly valid without it.

Technical data

Our hosting provider records standard server logs when a page is requested — including IP address, timestamp, the page requested, and browser user-agent. These are generated by the infrastructure for security and reliability, not by us for analysis, and we do not use them to build any profile of you.

What we do not collect

This site sets no cookies, runs no analytics, and carries no advertising, tracking pixels, or social media trackers. Fonts, scripts, and images are served from our own domain, so simply reading this site sends no data to any third party.

Because there are no cookies to consent to, the short privacy message shown on your first visit is a notice, not a consent request — there is nothing to accept or refuse, and nothing changes whether you dismiss it or ignore it. If you do dismiss it, your browser records a single preference so it is not shown again. That preference is held in your browser's local storage rather than in a cookie, contains only a version number, identifies nobody, and is never transmitted to us. Clearing your browsing data removes it.

The Lumis Aviation app

If your Lumis representative has invited you to the Lumis Aviation app, signing in and using it involves a little more, held securely in our backend so your fleet and its service history are ready when you open the app:

• Your email address — your sign-in identity. Access is by a one-time code emailed to you; there is no password.
• Your name, phone number and operator, as shown on your profile.
• Your aircraft and their service requests, jobs, timelines and notes.
• Before-and-after photographs of the work, taken by our team.
• If you allow notifications, a device token from Apple so we can send you job updates.

This information is linked to your account and used only to run the service for you. It is not used for advertising, and it is not shared with anyone to track you across other apps or websites. You can ask us to delete your account and its data at any time, and the app itself offers a self-service option to do so.

3. Why we use it, and on what legal basis

We do not send marketing emails, and we do not add enquirers to a mailing list. If that ever changes, it will be on the basis of separate, explicit consent that you can withdraw at any time.

4. Who else sees it

We do not sell personal data, and we do not share it for anyone else's marketing. It is disclosed only to the service providers that operate this website and our correspondence, each acting as a processor under contract:

We may also disclose data where we are legally required to, for example to a public authority acting within its powers.

Aircraft and operational information — tail numbers, movements, schedules, cabin imagery, and the identity of owners and passengers — is treated as confidential and is never published, shared, or used in marketing without written approval. This is a standing commitment of the service, independent of data protection law.

5. Transfers outside the EEA

Formspree and Vercel are established in the United States, so your enquiry may be processed outside the European Economic Area. The app's data is stored within the EEA (Supabase, Frankfurt), but sign-in and job emails (Resend) and push notifications (Apple) are handled by providers in the United States. Where data leaves the EEA, the transfer is protected by the European Commission's Standard Contractual Clauses, or by the provider's certification under the EU–US Data Privacy Framework. You can request details of the safeguards in place by writing to us.

6. How long we keep it

7. Your rights

Under the GDPR you may ask us to:

• Access the personal data we hold about you, and receive a copy
• Correct anything inaccurate or incomplete
• Erase your data, where we have no continuing basis to keep it
• Restrict or object to our processing, including any processing based on legitimate interest
• Port your data to another controller in a structured, machine-readable format
• Withdraw consent, where processing rests on consent — without affecting what was done beforehand

Write to hello@lumisaviation.com and we will respond within one month. There is no charge for a reasonable request.

If you believe we have handled your data improperly, we would prefer to resolve it with you directly — but you have the right to complain to the Czech supervisory authority:

If you are based in another EU or EEA country, you may also complain to your local supervisory authority.

8. Security

This website is served exclusively over HTTPS. Enquiries are transmitted over an encrypted connection, access to our mailbox and records is limited to the people who need it, and we hold no payment card details at any point.

9. Children

This is a business-to-business service. The site is not directed at children, and we do not knowingly collect data from anyone under 16.

10. Changes to this notice

If we change how we handle personal data, we will update this page and revise the version and date at the top. Material changes affecting existing clients will be communicated directly.