Privacy
What we collect, why, who receives it, how long we keep it, and what we deliberately do not do.
1. Controller
The controller responsible for processing personal data on this website and within the campaign is LUCERANTIS GROUP DOO. The address and contact options are set out in the imprint. Please direct privacy enquiries to the contact address given there.
2. What data we process
Order data: first name, last name, email address, country, the chosen spot and category, price and currency, time of the order, and your confirmations regarding the terms of purchase, image rights and minimum age. Portrait photo: the image you cropped, which is applied to the campaign vehicle as a tile. It is personal data of the person shown, even where that person is not you. Cropping happens in your browser; only the square crop is transmitted, and metadata of the original file such as GPS coordinates is discarded in the process. Session and technical data: a random session identifier, IP address, time and type of access, browser type, and an approximate country derived from the IP address. Payment metadata: payment provider, transaction or reference number, amount, currency and status. Card or account details never reach our servers; they are processed exclusively by the respective payment provider.
3. Purposes and legal bases
Conclusion and performance of the contract for a spot on the vehicle, including reservation, payment processing, photo review, printing, application, and confirmation and status emails: Art. 6(1)(b) GDPR. Public display of your photo in the online gallery or in campaign material: solely on the basis of your separate consent, Art. 6(1)(a) GDPR; application to the vehicle itself is the subject of the contract. Security and stability of the website, in particular protection against abuse, rate limiting and error analysis: legitimate interest, Art. 6(1)(f) GDPR. Compliance with commercial and tax retention obligations: Art. 6(1)(c) GDPR. Providing the order data is necessary to conclude the contract; without it no spot can be purchased.
4. Recipients and processors
Payment providers: depending on your choice, payments are processed via PayPal or via Stripe (card, Apple Pay, Google Pay, Klarna). These providers are independently responsible for the payment data; Klarna is integrated through Stripe. They receive from us the amount, an order reference and, where technically necessary, your email address. Hosting: the website and the uploaded photos are operated by a hosting provider acting on our behalf under a data processing agreement. Print and wrapping partner: to produce and apply the tiles we transmit the photo and the position number, but not your name or email address. Email delivery: confirmation and status emails are sent through a transactional email service. No data is passed on for third-party advertising; data is not sold.
5. Transfers to third countries
We store photos and order data on servers in the European Union. Individual service providers, in particular payment providers, may transfer data to countries outside the European Economic Area, for example the USA. In those cases we base the transfer on an adequacy decision of the European Commission or on the EU Standard Contractual Clauses together with supplementary measures. If you take part from outside the EU, your data is transferred to the EU to perform the contract and processed there under these rules.
6. Retention
We keep photos until the end of the campaign plus twelve months, unless you request deletion earlier or the photo is rejected; rejected photos are deleted once the replacement or refund process is complete. Order and payment records are kept for as long as commercial and tax law requires, generally ten years, and are then deleted or anonymised. Session identifiers expire with the reservation or the session. Technical access logs are deleted after a short period, generally within 30 days, unless a security incident requires longer retention.
7. Your rights
You have the right of access to the data stored about you (Art. 15 GDPR), to rectification of inaccurate data (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing based on a legitimate interest (Art. 21). An informal message to the contact address in the imprint is sufficient. You also have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence. Please note that a tile already physically applied cannot be removed retroactively from photographs and recordings made before the deletion request; the tile itself can be removed or obscured on request.
8. Withdrawal of consent
You may withdraw any consent you have given, for example to the display of your photo in the online gallery, at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected. After withdrawal we remove the photo from the gallery within a reasonable period.
9. Automated photo pre-filter, no identification, no profiling
On upload, an automated pre-filter (AWS Rekognition, Frankfurt region, acting as a processor) checks every photo: whether exactly one face is visible, an estimated age range and compliance with our photo rules. No person is identified, no biometric profiles are created, and no photo is stored at AWS – it is only analysed and the result returned. The final decision about every photo is always made by a human. There is no profiling and no merging with data from other sources.
10. Cookies
The website sets three functional cookies: a session identifier so that a reserved spot can be linked to your browser, and one setting each for language and currency. These cookies are necessary for operation and do not require consent. No tracking, analytics or advertising cookies are set, and there is no tracking across other websites. Payment providers may set cookies on their own pages; their privacy notices apply there.
11. Location and language
Only an approximate country is derived from your network address, in order to preselect language and currency. No precise location data is collected or stored. Your manual choice is stored in a cookie and always takes precedence.
12. Minors
The offer is aimed at persons aged 18 or over. By ordering you confirm that you are of legal age. Photos of minors may only be uploaded with the consent of the persons holding parental responsibility; we may request proof and reject photos without it.
13. Data security
Transmission is encrypted. Photos are stored encrypted, and access is limited to the people entrusted with review and production. Access is logged. We update this notice when the processing or the service providers change; the current version is always available on this page.
14. Exhibition, share picture, deletion and creator code
Your photo is applied to the exhibited vehicle and is publicly visible during the exhibition. The picture you receive after your purchase is meant for you; you decide whether to share it. After the exhibition ends we delete all face photos, including the generated share pictures; overview shots of the project in which no person is recognisable remain. If a creator code was used at checkout, we store that code with the order so the creator receives a commission; buyer data is never passed on to the creator.