Responsible Party
LUMENA LIFE
Chanyanuch Schildan
472 Moo 4
Ban Nong Taphao
Hin Lek Fai
Prachuap Khiri Khan 77110
Thailand
Phone: +66 61 982 7248
Email: info@lumena-life.com
Privacy Policy
1. Contact
If you contact us by email, via the contact form or by telephone, the information you provide will be stored solely for the purpose of processing your inquiry and any follow-up questions.
2. LINE
If you contact us via the LINE messenger service, the privacy policy provisions of the respective provider also apply. Please do not transmit sensitive health data via messenger.
3. Google Maps
This website may use Google Maps to display our location. When accessing the map, personal data, especially your IP address, may be transmitted to Google. Further information can be found in Google's privacy policy.
4. Contact Form
We use the data submitted via the contact form solely to process your inquiry. It will not be disclosed to third parties unless there is a legal obligation to do so.
5. Cookies
Our website uses cookies. Cookies are text files that are stored on a computer system via an internet browser.
Many websites and servers use cookies. Many cookies contain a cookie ID, a unique identifier consisting of a character string. This allows websites and servers to distinguish the specific browser in which the cookie was stored from other browsers.
Cookies can help us provide more user-friendly services and optimize information and offers on our website.
You can prevent cookies from being set at any time by changing the appropriate settings in your browser. Cookies that have already been set can also be deleted via your browser or other software. If cookies are disabled, some functions of this website may not be fully available.
6. Collection of General Data and Information
Each time this website is accessed, the server may collect general data and information in log files. This may include browser type and version, operating system, referrer, pages accessed, date and time of access, IP address, internet service provider and similar data used to protect our information technology systems against attacks.
This general information is not used to draw conclusions about an individual person. It is used to deliver website content correctly, maintain the functionality and security of our systems and, where necessary, provide information required for law enforcement following a cyberattack. Anonymous server log data is stored separately from personal data provided by an individual.
7. Contact via the Website
This website contains information that enables quick electronic contact with us, including an email address. If you contact us by email or via a contact form, the personal data you voluntarily transmit will be stored for the purpose of processing your inquiry and communicating with you. This personal data will not be disclosed to third parties unless legally required.
8. Routine Deletion and Blocking of Personal Data
Personal data is processed and stored only for the period necessary to achieve the purpose for which it was stored or for as long as required by applicable laws or regulations.
If the purpose for storage no longer applies or a statutory retention period expires, the personal data will be routinely blocked or deleted in accordance with the applicable legal provisions.
9. Rights of the Data Subject
a) Right to Confirmation
Every data subject has the right to request confirmation from the responsible party as to whether personal data concerning them is being processed. To exercise this right, the data subject may contact us at any time.
b) Right of Access
Every person affected by the processing of personal data has the right to obtain, free of charge, information about the personal data stored about them and a copy of that information.
This includes information about the purposes of processing, categories of personal data, recipients or categories of recipients, the intended storage period where possible, rights to rectification, erasure, restriction or objection, the right to lodge a complaint with a supervisory authority, available information about the source of data not collected from the data subject, and information about automated decision-making including profiling where applicable.
If personal data has been transferred to a third country or an international organization, the data subject also has the right to be informed about appropriate safeguards relating to that transfer.
c) Right to Rectification
Every data subject has the right to request the immediate correction of inaccurate personal data concerning them and, taking into account the purposes of processing, to have incomplete personal data completed.
d) Right to Erasure (Right to Be Forgotten)
Every data subject has the right to request the immediate erasure of personal data concerning them where the legal requirements are met and processing is no longer necessary.
This may apply in particular where the data is no longer necessary for its original purpose, consent is withdrawn and there is no other legal basis, a valid objection is made, the data was processed unlawfully, erasure is required by law, or the data was collected in relation to information society services under the applicable data protection rules.
Where personal data has been made public and we are legally obliged to erase it, reasonable measures may be taken, taking available technology and implementation costs into account, to inform other responsible parties processing the data of the erasure request where required by law.
e) Right to Restriction of Processing
Every data subject has the right to request restriction of processing where the accuracy of the data is contested, processing is unlawful but erasure is opposed, the data is required for legal claims although no longer needed for processing purposes, or an objection has been made and the balancing of interests has not yet been completed.
f) Right to Data Portability
Where the legal requirements are met, every data subject has the right to receive personal data they have provided in a structured, commonly used and machine-readable format and to transmit that data to another responsible party without hindrance.
Where technically feasible and legally permitted, the data subject may also request that personal data be transmitted directly from one responsible party to another.
g) Right to Object
Every data subject has the right, on grounds relating to their particular situation, to object at any time to processing based on the applicable legal provisions, including profiling based on those provisions.
If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to processing for such marketing, including related profiling. Following such an objection, the data will no longer be processed for direct marketing purposes.
h) Automated Individual Decision-Making, Including Profiling
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except where such processing is legally permitted.
Where automated decision-making is permitted, appropriate measures will be taken to safeguard the data subject's rights, freedoms and legitimate interests, including human intervention where required.
i) Right to Withdraw Data Protection Consent
Every data subject has the right to withdraw consent to the processing of personal data at any time. To exercise this right, the data subject may contact us at any time.
10. Data Protection Provisions Regarding Facebook
If Facebook components are integrated into this website, use of those components may result in data being transmitted to Facebook. Facebook may associate visits or interactions with a Facebook account when a user is logged in.
Users who do not want such information transmitted to Facebook should log out of their Facebook account before visiting pages containing Facebook components. Further information is available in Facebook's applicable privacy information.
11. Data Protection Provisions Regarding Google+
The original privacy policy referred to Google+ components. Google+ has since been discontinued. Any legacy references are retained here only to reflect the source policy and should be reviewed if no Google+ functionality is used on this website.
12. Data Protection Provisions Regarding Instagram
If Instagram components are integrated into this website, use of those components may result in data being transmitted to Instagram. Instagram may associate visits or interactions with an Instagram account when a user is logged in.
Users who do not want such information transmitted to Instagram should log out of their Instagram account before visiting pages containing Instagram components. Further information is available in Instagram's applicable privacy information.
13. Data Protection Provisions Regarding YouTube
If YouTube components or videos are integrated into this website, accessing a page containing such content may result in data being transmitted to YouTube and Google. If a user is logged in to YouTube, the visit may be associated with their YouTube account.
Users who do not want such information associated with their YouTube account should log out before visiting pages containing YouTube components. Further information is available in Google's applicable privacy information.
14. Legal Basis of Processing
Depending on the purpose of processing, personal data may be processed on the basis of consent, performance of a contract or pre-contractual measures, compliance with a legal obligation, protection of vital interests, or legitimate interests, in accordance with the applicable data protection provisions.
15. Legitimate Interests Pursued by the Responsible Party or a Third Party
Where processing is based on legitimate interests, our legitimate interest is the conduct of our business activities for the benefit of our organization and the people connected with it, subject to the rights and interests of the data subject.
16. Period for Which Personal Data Is Stored
The criterion for the duration of storage of personal data is the applicable statutory retention period. After that period expires, the corresponding data is routinely deleted unless it is still required for the performance or initiation of a contract or another legal obligation applies.
17. Legal or Contractual Requirements to Provide Personal Data
Providing personal data may be required by law or by contractual provisions. In some cases, personal data may be necessary to enter into a contract. Before providing personal data, you may contact us to clarify whether providing the data is legally or contractually required, whether it is necessary for a contract, and what consequences may result from not providing it.
18. Automated Decision-Making
As a responsible organization, we do not use automated decision-making or profiling.
19. Changes to Our Privacy Policy
We reserve the right to amend this Privacy Policy from time to time so that it remains consistent with current legal requirements or reflects changes to our services. The updated Privacy Policy will apply to subsequent visits.