Privacy policy

1. Controller

LB24 International GmbH, Jathostraße 11a, 30163 Hannover, Germany. Represented by Ugas Bassai. Email: legal@luxusbetten24.de, Phone: 0511 87989379.

2. Hosting and Database

The website and application are operated via Lovable Cloud; database, authentication and file storage are provided through Lovable Cloud. With every visit, technically necessary data (IP address, time, browser) is processed. The legal basis is Art. 6 Para. 1 lit. f GDPR (secure operation). Data processing agreements are in place with these providers; insofar as data is transferred to the USA, this occurs on the basis of Standard Contractual Clauses or the EU-US Data Privacy Framework.

3. Registration and Login

For an account, we process name, company name, email address, and an encrypted password; for Google logins, we also process profile data transmitted by Google. The legal basis is Art. 6 Para. 1 lit. b GDPR (contract).

4. Uploaded and Generated Images

Product photos you upload and the resulting images are stored in private storage accessible only to members of your workspace. Data remains stored until you delete them or your account.

5. Processing by AI Service Providers

For image generation, we transmit your product photos and scene descriptions to specialized AI service providers (currently fal.ai, Features & Labels Inc., USA). Processing is carried out on our behalf (Art. 28 GDPR); the third-country transfer is secured by Standard Contractual Clauses. Your data is not used for training models, insofar as the provider contractually guarantees this.

6. Email Delivery

We send confirmation, password reset, invitation and service emails under Article 6(1)(b) GDPR. For the waitlist, we process your email, company name, shop URL, industry and image requirements based on your consent under Article 6(1)(a) GDPR.

7. Payment Processing

Once paid plans launch, payment is processed via Stripe Payments Europe Ltd., Ireland. Stripe processes payment data under its own responsibility. The legal basis is Art. 6 Para. 1 lit. b GDPR.

8. Cookies, Consent, and Meta Pixel

We use technically necessary cookies and local storage (login, consent decision) (§ 25 Para. 2 TDDDG). Statistics and marketing services only load after your consent (§ 25 Para. 1 TDDDG, Art. 6 Para. 1 lit. a GDPR). The Meta Pixel from Meta Platforms Ireland Ltd. is loaded exclusively after consent in the "Marketing" category. You can revoke your consent at any time via "Cookie Settings" in the footer.

9. Retention Period

We store data as long as necessary for the respective purpose and delete it thereafter, provided no legal retention obligations (e.g., 6 or 10 years according to HGB/AO) exist. Waitlist data is deleted at the latest 24 months after entry or immediately upon request.

10. Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR) and can revoke granted consents at any time. You may lodge a complaint with a supervisory authority, in particular with: State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover.

11. Contact

For questions regarding data protection: legal@luxusbetten24.de.