Privacy Policy

Last updated: March 12, 2026

We take the protection of your data seriously. This privacy policy explains what data we collect and why. Before each section you will find a short summary.

The full text is always legally binding — the summaries are for orientation only.

1. Data Controller

In short

This is who we are — and how to reach us.

Nicole Koch & Jan Tammen
Engertstraße 16
04177 Leipzig, Germany
Email: datenschutz@hiluno.com

2. Data Collected

In short

When signing up for the waitlist we only collect what is necessary.

When signing up for the list we collect:

Email address
Role (yoga teacher or studio/space provider)
Time of registration

3. Purpose

In short

We let you know when luno launches. No advertising, no data sharing.

Your data is used exclusively to inform you about the launch of luno. We do not send advertising and do not share your data with third parties.

4. Service Provider

In short

Brevo sends our emails. Servers in the EU, GDPR-compliant.

For email delivery we use Brevo (formerly Sendinblue), Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France. Brevo processes data in compliance with GDPR with servers in the EU.

5. Double Opt-In

In short

You will receive a confirmation email. Only after clicking the link are you signed up.

After signing up you will receive a confirmation email. Your email address will only be added to our list after you click the confirmation link.

6. Web Analytics (PostHog)

In short

We use PostHog to understand how our site is used. Your data stays in the EU. We do not store IP addresses.

We use PostHog Cloud EU (PostHog Inc., servers in Frankfurt, Germany) to analyze website usage. PostHog collects pseudonymized usage data such as page views, clicks, and scroll behavior. No personal data is transferred to third parties outside the EU.

Data collected: Page views, click behavior, device information (browser, operating system, screen size), approximate location (based on IP address, which is not stored).

Session Replay: To improve usability, we record anonymized session replays. All form inputs are automatically masked.

Legal basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR (optimization of our service).

More information: PostHog Privacy Policy

7. Hosting & CDN (Cloudflare)

In short

Cloudflare delivers our pages quickly and securely. Technical connection data is processed briefly in the process.

This website is hosted via Cloudflare Pages (Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare also serves as CDN and reverse proxy, temporarily processing technically necessary connection data (including IP address, HTTP headers) to deliver content and protect against attacks.

Cloudflare is certified under the EU-U.S. Data Privacy Framework and has received the EU Cloud Code of Conduct compliance mark.

Legal basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR (secure and performant delivery of our website).

More information: Cloudflare Privacy Policy

8. Your Rights

In short

You are in control of your data. Access, deletion, objection — one email is enough.

You have the right to access, rectification, deletion, restriction of processing, data portability, and objection at any time. Contact us at datenschutz@hiluno.com.

You also have the right to lodge a complaint with a supervisory authority. The responsible authority is the Saxon Data Protection and Transparency Commissioner.

Operator

Nicole Koch & Jan Tammen
Engertstraße 16
04177 Leipzig, Germany
Email: datenschutz@hiluno.com