Privacy Policy for Lunulis

Last updated: August 18, 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Stefanie Markendorf
Frielinghausstr. 43
45966 Gladbeck, Germany

Email: Stefanie.markendorf@yahoo.de

Website: https://www.lunulis.com

Lunulis is a family-oriented service for children and parents. Protecting personal data, and particularly protecting children, is very important to us.

2. General Information

We process personal data only where this is necessary to provide our website, communicate with visitors, operate newsletter services, provide specific website functions, or where we have obtained valid consent.

We aim to limit the collection and processing of personal data to what is necessary.

We do not sell personal data.

We do not use children's personal data for personalized advertising.

We do not encourage children to provide unnecessary personal information.

The website currently offers the following functions in particular:

• Visiting the website

• Contacting us via Wix Forms

• Subscribing to our newsletter

• Displaying a Google Maps map

• External links to Amazon for purchasing the Lunulis book

We currently do not offer user accounts.

Visitors currently cannot upload their own images, videos, or other content to Lunulis.

3. Hosting and Technical Operation

Our website is operated using Wix.com Ltd. and technical services provided by the Wix group.

When the website is accessed, technically necessary information may be processed. This may include:

• IP address

• Date and time of access

• Pages visited

• Browser used

• Operating system

• Referrer URL

• Technical information required to provide and secure the website

This processing may be necessary to operate the website, maintain security, detect errors, and prevent misuse.

Where Wix processes personal data on our behalf, such processing is carried out on the basis of the applicable data processing agreements and privacy mechanisms provided by Wix.

Further information about Wix's processing of personal data can be found in Wix's privacy policy.

4. Legal Bases for Processing

Depending on the specific processing activity, personal data may be processed on the following legal bases:

• Article 6(1)(a) GDPR – consent

• Article 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract

• Article 6(1)(c) GDPR – compliance with a legal obligation

• Article 6(1)(f) GDPR – legitimate interests

When processing children's personal data, we take into account the applicable special legal requirements for the protection of children.

5. Children and Data Protection

5.1 Special Protection of Children

Lunulis is intended for children and parents.

We aim to provide children with a safe website that collects as little personal data as reasonably possible. We therefore currently do not offer:

• User accounts for children

• Public profiles

• Comment functions for children

• Upload functions for children

• Public messaging functions

• Personalized advertising directed at children

• The sale or rental of children's personal data

We generally ask children not to enter personal information such as their full name, address, telephone number, or private email address into free-text fields.

5.2 Contact Forms

Wix Forms is used primarily to communicate with visitors.

Please do not submit sensitive personal information through a contact form, particularly health information, medical information, or other special categories of personal data.

If a child contacts us and provides personal data, we will process that data only to the extent necessary for the specific communication and where such processing is legally permitted.

5.3 Consent from Children

Where processing is based on consent and applicable law requires consent from a parent or legal guardian, the necessary parental consent will be obtained before the relevant processing takes place.

The applicable legal requirements may differ depending on the child's country of residence.

For users in the European Union, this includes the requirements of the GDPR and applicable national rules concerning children's consent.

For users in the United States, we take into account the requirements of the Children's Online Privacy Protection Act (COPPA) where applicable.

6. Wix Forms

Our website may use forms provided by Wix.

When visitors submit a form, the following information may be processed, depending on the form:

• Name

• Email address

• Other information voluntarily provided by the visitor

• Technical information relating to the submission

The data is processed to handle the relevant request or provide the communication requested by the visitor.

Please do not provide unnecessary personal information through our forms and, in particular, do not provide health information concerning children or other individuals.

The legal basis depends on the specific purpose and may include Article 6(1)(a), (b), or (f) GDPR.

7. Newsletter

Visitors may subscribe to our newsletter.

When subscribing, we process the information necessary for the newsletter service, particularly the email address.

The newsletter is sent only where we have obtained the required consent or another legally permitted basis for sending it.

Where technically configured, we use a confirmation process such as double opt-in. After registering, the subscriber receives a confirmation email. The email address is activated for newsletter delivery only after confirmation.

We may retain information about the subscription and confirmation in order to document the consent provided.

Consent may be withdrawn at any time with effect for the future. The unsubscribe link included in each newsletter may be used for this purpose.

After unsubscribing, the email address will be removed from the active newsletter distribution list. Further retention may occur where necessary to document previously provided consent or to comply with legal obligations.

7.1 Children's Newsletter Subscriptions

Because Lunulis is also intended for children, the newsletter is not intended to encourage children to independently provide personal data.

Where applicable law requires parental consent for the processing of a child's personal data, such consent must be obtained before the relevant processing takes place.

We do not use children's personal data for personalized advertising.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

These may include:

Technically necessary technologies

These technologies are necessary to operate the website, maintain security, or provide functions requested by the visitor.

Non-essential technologies

Non-essential analytics, marketing, or similar technologies are activated only after obtaining consent where required by applicable law.

Our website therefore uses a cookie and consent banner.

Visitors can manage or withdraw their consent using the available consent settings.

The specific cookies and technologies used may change as a result of technical changes to the website, changes by Wix, or the addition of new functions.

9. Google Maps

Certain pages may contain Google Maps in order to display locations or geographic information.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When Google Maps is used, personal data may be processed and information may be transmitted to Google. This may include technical information such as the IP address, browser information, and information concerning use of the map function.

Where the integration is not technically necessary, it will, where required by applicable law, be activated only after the visitor has provided the necessary consent.

Google may transfer data to countries outside the European Union or European Economic Area. Such transfers are subject to the applicable legal safeguards and mechanisms.

Further information can be found in Google's privacy policy.

10. Links to Amazon

Lunulis may contain links to external Amazon websites, particularly for purchasing the Lunulis book.

When a visitor clicks on an Amazon link, they leave the Lunulis website and are transferred to Amazon.

Amazon is solely responsible for the processing of personal data on its websites.

We do not have access to personal data processed by Amazon as part of a purchase unless Amazon provides such information to us on the basis of its own legal basis or a specific business relationship.

Amazon's privacy policy applies to such processing.

11. Giveaways and Competitions

Lunulis may offer giveaways and competitions in the future.

For each giveaway or competition, we will provide separate participation terms and, where necessary, additional privacy information.

Only personal data necessary to conduct the respective giveaway or competition will be collected.

Where children may participate, we will take into account the applicable child-protection and data-protection requirements, including specific requirements concerning children's personal data.

We will not request unnecessary personal information from children.

Where applicable law requires verifiable parental consent, this will be obtained before the relevant processing takes place.

Children's personal data will not be used for personalized advertising or unrelated purposes.

The privacy information for a specific giveaway or competition may supplement this Privacy Policy.

12. No Processing of Health Data for Medical Purposes

Lunulis is not a medical service, medical practice, healthcare provider, or medical platform.

Lunulis does not provide medical diagnosis, treatment, or individualized medical advice.

We do not ask visitors to provide health information.

Please do not submit medical information concerning children or other individuals through contact forms, newsletter registrations, or other communication channels.

If health information is nevertheless provided, we will not use it for purposes other than those for which lawful processing may be required.

Based on our current business structure, Lunulis is not a HIPAA-covered entity merely because it operates this website.

13. No Personalized Advertising for Children

Lunulis does not use children's personal data for personalized or behavioral advertising.

We do not sell children's personal data and do not provide such data to advertising networks for behavioral targeting.

If advertising or marketing technologies are introduced in the future, their use will be reviewed for compliance with applicable data-protection requirements before activation, and this Privacy Policy will be updated accordingly.

14. International Data Transfers

Because Lunulis is accessible worldwide and may use technical service providers, personal data may be processed outside the visitor's country of residence.

Where personal data from the European Union or European Economic Area is transferred to a third country, the transfer will take place only on a legally permitted basis under the GDPR, such as an adequacy decision, appropriate safeguards, or a legally recognized exception.

The applicable requirements under Articles 44 et seq. GDPR will be taken into account.

15. Data Retention

We generally retain personal data only for as long as necessary for the relevant purpose.

The specific retention period depends on the type of data and the purpose for which it is processed.

Data from contact requests will generally be deleted once the request has been fully resolved, unless legal retention obligations or legitimate reasons require further storage.

Newsletter data will be removed from the active distribution list after unsubscribing. Further retention may occur where necessary to document consent or comply with legal obligations.

When processing children's personal data, particular attention is paid to data minimization and appropriate retention periods.

16. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.

These measures include appropriate technical safeguards provided by the platforms and service providers we use, as well as organizational measures limiting access to personal data.

However, no transmission over the Internet or electronic storage system can guarantee absolute security.

17. Rights of Data Subjects

Subject to the applicable legal requirements, individuals have the following rights in particular:

• Right of access to their personal data

• Right to rectification of inaccurate data

• Right to erasure

• Right to restriction of processing

• Right to data portability

• Right to object to certain processing activities

• Right to withdraw consent

• Right to lodge a complaint with a data-protection supervisory authority

Where processing is based on consent, consent may be withdrawn at any time with effect for the future.

The lawfulness of processing carried out before withdrawal remains unaffected.

18. Rights of Parents and Legal Guardians

Parents or individuals exercising parental responsibility may contact us at any time with questions regarding the processing of their child's personal data.

Where provided for by applicable law, parents or legal guardians may in particular:

• Request access to their child's personal data

• Request correction of inaccurate data

• Request deletion of personal data

• Withdraw consent

• Object to further processing

To prevent unauthorized disclosure, we may request reasonable information necessary to verify the identity or parental authority of the person making the request.

19. Privacy Requests

Privacy-related requests can be sent to:

Stefanie Markendorf
Frielinghausstr. 43
45966 Gladbeck, Germany

Email: Stefanie.markendorf@yahoo.de

Please describe your request as specifically as possible.

We will process requests within the applicable statutory time limits.

20. Data Protection Officer

Where applicable law does not require us to appoint a data protection officer, no separate data protection officer has been appointed.

If a data protection officer has been appointed, their contact details are:

[Name / contact details, if applicable]

21. Right to Lodge a Complaint

Individuals have the right to lodge a complaint with a data-protection supervisory authority if they believe that the processing of their personal data violates applicable data-protection law.

A complaint may be lodged with the supervisory authority responsible for the individual's habitual residence, place of work, or the place of the alleged infringement, as applicable.

22. Changes to this Privacy Policy

We may update this Privacy Policy if our website, technical functions, service providers, or legal requirements change.

The current version will always be published on this website.

Last updated: August 18, 2026

Contact

If you have questions about privacy at Lunulis:

Stefanie Markendorf
Frielinghausstr. 43
45966 Gladbeck, Germany

Email: Stefanie.markendorf@yahoo.de

Lunulis – discovering, laughing, and making the world a little more magical together.