Privacy Policy

Last updated: 1st January 2026

Introduction

LunarExpert AG ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website or use our services. As a German company, we comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data Controller Information

The data controller responsible for your personal data is:

Data We Collect

We collect and process the following types of personal data:

Information You Provide Directly

When you contact us or use our services, we may collect data you provide directly, including:

• Name and contact information (email address, phone number)
• Professional information (job title, organisation, institution name)
• Communication content (messages, inquiries, consultation requests)
• Service preferences and requirements

Automatically Collected Information

When you visit our website, we automatically collect certain data collection information:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Referral sources and website navigation patterns
• Cookie data and similar tracking technologies

How We Use Your Information

We use your personal data for the following purposes and legal bases under how we use your information guidelines:

Service Provision (Contract Performance)

• Responding to your inquiries and consultation requests
• Providing expert guidance and consultation services
• Delivering requested information about proctoring software solutions
• Managing our business relationship with you

Legitimate Business Interests

• Improving our website functionality and user experience
• Analysing website usage patterns and optimising our services
• Maintaining security and preventing fraud
• Internal business administration and record-keeping

Consent-Based Processing

With your explicit consent, we may use your data for marketing communications, newsletter subscriptions, and personalised service recommendations. You may withdraw your consent at any time.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data. We may share your information in the following limited circumstances:

• Service Providers: Trusted third-party service providers who assist us in operating our website and delivering our services
• Legal Compliance: When required by law, court order, or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or sale of business assets
• Consent: When you have given explicit consent for specific data sharing

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Specifically, we retain data for the following periods:

• Contact inquiries: 3 years from last contact for business relationship purposes
• Service agreements: 7 years after contract completion for legal and tax compliance
• Website analytics: 26 months as per Google Analytics standard retention
• Marketing communications: Until you withdraw consent or 3 years of inactivity

Your Rights

Under GDPR and applicable privacy laws, you have the following your rights regarding your personal data:

• Right of Access: Request information about how we process your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for consent-based processing

International Data Transfers

We primarily process your data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission. We will inform you of any such transfers and the safeguards applied.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal data, please contact us using the following information:

Supervisory Authority

You have the right to lodge a complaint with the relevant supervisory authority if you believe we have not complied with applicable data protection laws. For Germany, the relevant authority is the Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your local state data protection authority.

This Privacy Policy is effective as of the date stated above and applies to all information collected by LunarExpert AG through our website and services.