Your rights
If the GDPR applies to our processing of your personal data, you may have the right to be informed, access your data, correct inaccurate data, request deletion, restrict processing, receive portable data, object to processing, and withdraw consent. You also have rights related to solely automated decisions. Lucky Lummi does not currently use personal data to make solely automated decisions with legal or similarly significant effects.
Make a request
Email privacy@luckylummi.com with the subject “GDPR request” and describe what you need. Include only enough information for us to identify the relevant interaction or connected account. We may request reasonable verification before disclosing or deleting data so that it is not released to the wrong person.
We aim to respond without undue delay and ordinarily within one month. Complex or numerous requests may take longer where the GDPR permits, in which case we will explain the extension. Requests are normally free, though manifestly unfounded or excessive requests may be refused or charged where permitted by law.
Disconnect social access
You can withdraw authorization through the connected platform's account settings. Google and YouTube permissions can be revoked from Google Security Settings. You may also ask us to disconnect an integration and delete the related authorized API data. Revoking access does not remove content already published to a social platform; delete that content on the destination platform or ask us for assistance.
Deletion and exceptions
After a valid deletion or revocation request, we delete or anonymize data that is no longer needed. Limited information may be retained when required for legal compliance, payment and tax records, security, fraud prevention, or establishing and defending legal claims. Stripe and social platforms may retain information independently under their own policies.
Complain to a supervisory authority
You may lodge a complaint with the data-protection authority where you live, work, or believe an infringement occurred. In the Czech Republic, the authority is the Office for Personal Data Protection (ÚOOÚ) . The European Data Protection Board lists other EU and EEA supervisory authorities.
More detail
The Privacy Policy explains the categories of data, purposes, legal bases, recipients, retention, and international transfers in more detail.