Legal
Privacy policy
This is a courtesy translation. The legally binding version is the German one at /de/datenschutz.
Controller
Lounara Systems GmbH i. G.
Kirchstr. 3
73092 Heiningen
Germany
abuse@lounara.io
What this site does not do
This site uses no advertising networks, no social media plugins, no profiling and no automated decision-making. There is no cookie banner because there is nothing to consent to: the single cookie in use is strictly necessary (see below), and audience measurement runs with no tracking script and no cookie in the browser (see "Audience measurement" below).
Fonts and all other design assets are served from our own server. Loading this page establishes no connection to Google, to a CDN, or to any other third party.
Visiting the site: server log files
Every request transmits technical data that our server records in log files:
- IP address of the requesting device
- date and time of access
- requested address and volume of data transferred
- whether the request succeeded
- referring page, where transmitted
- browser type and operating system
Purpose and legal basis: serving the page, stability, and detecting attacks. Legitimate interest under Art. 6(1)(f) GDPR. Logs are deleted after 14 days at the latest, unless a specific incident requires keeping them longer.
Cookies
Exactly one cookie is used, and only once you interact with the sign-up form:
a session cookie (PHPSESSID) that protects the form against
cross-site request forgery. It holds no personal content, is never evaluated
for analytics, and expires when you close your browser.
Legal basis: § 25(2) no. 2 TDDDG — the cookie is strictly necessary for the service you explicitly requested. No consent is required.
Audience measurement (Matomo)
For anonymous usage statistics (e.g. how many people visit the site) we use Matomo — entirely server-side: no tracking script loads in your browser, no additional cookie is set, and your device never opens a connection to the Matomo server itself. Instead, our own server reports technical details (page visited, referrer, browser type, IP address) to our Matomo instance whenever you view a page, submit the sign-up form, or confirm it.
The IP address is transmitted for the individual hit so Matomo can
determine country and approximate region. IP anonymisation must be
enabled on the Matomo instance (Administration → Privacy) so the address
is truncated before storage — to be verified before launch. A
Do-Not-Track header from your browser is honoured: if set, no
hit is recorded at all.
Legal basis: legitimate interest in anonymised audience measurement, Art. 6(1)(f) GDPR — with no cookie and a truncated IP address, no profile of an individual visitor is created or linked to the sign-up data above. This assessment must be reviewed by a lawyer before launch; depending on the Matomo instance's configuration and the competent authority's interpretation, consent may be required instead.
Signing up for launch notification
If you sign up to be notified at launch, we process:
- Email address
- to send you the confirmation email and, later, the launch notification
- Language
- so you receive our messages in the language you signed up in
- IP address and time of sign-up
- as evidence that the sign-up came from you
- IP address and time of confirmation
- as evidence that you opened the confirmation link yourself
Why we store IP address and time: we must be able to demonstrate that an address signed itself up and confirmed. Without that record we would not be permitted to write to you later. The data serves this purpose alone and is neither analysed nor combined with other data.
How it works: after signing up you receive an email with a confirmation link. The sign-up only takes effect once you open it. If you do not confirm, we delete the entry automatically and completely when the link expires after seven days.
Legal basis: your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future — informally to abuse@lounara.io or via the unsubscribe form right here. After withdrawal we delete your address.
Retention: until withdrawal, at most until the purpose no longer applies — that is, until the launch notification and a reasonable period thereafter.
Recipients of your data
- Email delivery
- Mailjet (Mailjet SAS, 13–13 bis rue de l'Aubrac, 75012 Paris, France), part of the Sinch group. Mailjet processes your email address solely on our instructions as a processor under Art. 28 GDPR. A corresponding agreement is in place.
- Hosting
- To be added. The provider processes the server log files described above on our instructions under Art. 28 GDPR.
- Audience measurement
- To be added. Our Matomo instance at
analytics.dnsroute.de. The operator processes the data described under "Audience measurement (Matomo)" on our instructions as a processor under Art. 28 GDPR.
Beyond that we do not share your data — not with advertisers and not with any other third party besides the processors named here. To the best of our knowledge, no transfer to countries outside the EU or EEA takes place.
Your rights
Under the GDPR you have the right to:
- access the data we hold about you (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw consent with effect for the future (Art. 7(3))
An informal message to abuse@lounara.io is enough. You do not have to give a reason.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die
Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
Changes
When the site changes, this text changes with it. The version published here is always the applicable one; the date below tells you which that is.
Last updated: August 27, 2026