Privacy Notice

This notice explains the processing of personal data by LUNITE LLC in connection with our website, business enquiries and recruitment services.

1. Controller

LUNITE LLC
3833 Powerline Rd, Suite 201
Fort Lauderdale, FL 33309
United States of America
Authorised member: Falko Eich
Privacy enquiries: f.eich@lunite.llc

2. Representative in the European Union

Our representative under Article 27 GDPR is:
Cloudkasten GmbH
Seestr. 20 G
50374 Erftstadt, Germany
Email: lunite@rep4.eu

Data subjects and data protection supervisory authorities may contact this representative about the processing of personal data by LUNITE LLC and the exercise of rights under the GDPR. LUNITE LLC remains responsible for its processing of personal data.

2a. Data Protection Officer

Our external Data Protection Officer is:
IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 Munich, Germany
Email: email@iitr.de
Telephone: +49 89 18917360

3. Visiting our website

When you visit our website, technical data required for delivery, security and troubleshooting is processed. This may include your IP address, time of access, pages or files requested, browser and device information, referrer information, and technical status and log data.
The purpose is to operate our website securely and reliably and to detect and prevent faults and misuse. To the extent that processing is necessary for these purposes, it is based on Article 6(1)(f) GDPR. Our legitimate interest is in operating a secure website.

4. Hosting and website operation

We use Infomaniak Site Creator to operate our website and its contact form. The provider is Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (GE), Switzerland.
Technical access data and information submitted through the contact form are processed for these services. Switzerland is covered by an adequacy decision of the European Commission.

5. Contacting us and using the contact form

If you contact us by email or through the contact form, we process the information you provide. This may include your name, company, email address, phone number, selected enquiry type and message content.
We use your information to respond to your enquiry. Where processing is necessary for a contract with you or to take steps at your request before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries and communications with business contacts, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is in responding appropriately to business enquiries.
You decide whether to contact us. Without the information needed to handle your enquiry and a way to contact you, we may be unable to respond.
The contact form requires your name, email address and message. Company, phone number and enquiry type are optional. A CV is not needed for an initial enquiry. Enquiries are initially handled solely by Falko Eich via f.eich@lunite.llc. Without the required information the form cannot be submitted; you can contact us by email instead.
The contact form uses the native Site Creator image-code protection served by this website to deter automated and abusive submissions.

6. Appointments and online meetings

You can arrange a conversation with us using an external link. We use Microsoft Bookings for appointments and Microsoft Teams for online meetings. Following the booking link opens a Microsoft service.
For scheduling, we process your name, email address, chosen appointment and any additional information you provide. Online meetings also involve technical connection data and the conversation, audio, video or chat content you transmit when using the relevant function.
The legal basis is Article 6(1)(b) GDPR where processing is necessary for a contract with you or to take steps at your request before entering into a contract. For other conversations, particularly with business contacts, the legal basis is Article 6(1)(f) GDPR. Our interest is in convenient scheduling and business communication.

7. Candidate research and direct approaches

We research professional profiles to connect suitable professionals and leaders with relevant opportunities. We may process names, professional contact details, employers, roles, career history, qualifications, skills, locations and other professional profile information.
Where we do not receive these details directly from you, they may come from professional networks such as LinkedIn or XING, company websites, other publicly accessible professional sources or personal referrals. We explain the specific source, including whether it is publicly accessible where relevant, in connection with the individual approach.
You may object as explained in section 16. Retention and deletion rules are described in section 14.

8. Candidate support and placements

If you express interest in an opportunity or provide documents to us, we may process your CV, professional contact details, qualifications, project experience, availability, salary or fee expectations, preferences and relevant conversation notes. We use this information to discuss opportunities with you, assess suitability for a specific role, prepare an introduction and support the selection process.
We process this information to assess suitable opportunities, discuss them with you, prepare an introduction to a company and support the selection process. Our support is free of charge for candidates; companies engage us. Necessary processing for a specific placement relies on Article 6(1)(f) GDPR. Our legitimate interest and that of the engaging companies is to connect suitably qualified candidates with appropriate roles. We take account of your expectations, confidentiality interests and decisions about how the process proceeds.
We share identifiable candidate documents only after documenting our agreement with you on the specific company, role and information to be shared. General descriptions of expertise used to approach prospective clients are treated as non-personal only where they have genuinely been anonymised; simply removing your name is not sufficient.
Candidate documents and conversation notes are managed centrally in LUNITE’s business Microsoft 365 account. Within LUNITE, access is initially restricted to Falko Eich. Conversation notes are written personally in Word. This process does not envisage audio recordings or automatic transcription.
If you would like to be considered for future opportunities, you may voluntarily join our talent pool. We obtain separate consent under Article 6(1)(a) GDPR for this purpose. Consent covers twelve months from the date it is given and may be withdrawn at any time with effect for the future using the contacts above. Refusal or withdrawal does not affect support for a specific placement. We may ask for renewed consent before expiry; without renewed consent, the data held for the talent pool is deleted.
Please provide only information needed for professional recruitment. Health data, religious beliefs and other particularly sensitive information are not needed for a general enquiry.

9. Clients, prospective clients and business partners

For prospective business relationships and ongoing assignments, we process names, professional contact details, roles and companies of contact persons, business correspondence and information about assignments, vacancies and projects.
Article 6(1)(b) GDPR applies where the individual is a contracting party or requests steps before entering into a contract. Otherwise, necessary business communication relies on Article 6(1)(f) GDPR. Our interest is in establishing, conducting and maintaining business relationships.

10. Recipients of personal data

Depending on the activity, recipients may include IT, hosting, communication and scheduling providers, a company involved in a specific placement, and, where necessary, professional advisers bound by confidentiality or competent authorities. Each disclosure requires an appropriate purpose and legal basis.

11. Processing outside the European Economic Area

LUNITE LLC is registered in Florida, United States. Its operations are conducted predominantly from Paraguay. Personal data may be processed or accessed from Paraguay and, during business travel, from other countries. The registered business address therefore does not represent the sole processing location.

12. Cookies and similar technologies

Our website uses technical functions provided by Infomaniak Site Creator, including an image-code check for contact-form submissions and a cookie-choice interface. External font resources are provided through Bunny Fonts. Infomaniak also includes a Sentry diagnostic script.

13. External links

Our website links to services including Microsoft Bookings, LinkedIn and XING. Following a link opens the external service. That provider's privacy information applies to its own processing.
This description of links does not replace information about services loaded when you visit our website.

14. Retention

We retain personal data for as long as needed for its purpose or required by an applicable legal obligation. When the purpose has ended and there is no further reason for retention, the data is deleted. A legitimate need to establish, exercise or defend legal claims must be assessed separately and limited to the data necessary for that purpose.
For straightforward enquiries, retention is determined by completion of the response and any follow-up still needed to resolve the enquiry. If an enquiry develops into an assignment or placement process, the rules for that activity apply.
Straightforward enquiries that do not develop into an assignment or placement are deleted three months after the enquiry is finally resolved. Information no longer needed is deleted earlier. Documents relating to a completed placement process are deleted no later than six months after completion, unless further limited retention is necessary. Separately consented talent-pool retention ends twelve months after consent was given; earlier withdrawal is respected. Where statutory retention obligations apply, or limited retention is necessary to establish, exercise or defend legal claims, only the information needed for that purpose is retained. Falko Eich reviews scheduled deletions monthly.

15. Your data protection rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability.
Where processing is based on your consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before it was withdrawn.
You may exercise your rights using the contacts listed in sections 1, 2 and 2a.

16. Right to object

Where we process data on the basis of Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. We will stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing is needed to establish, exercise or defend legal claims.
You may object to processing for direct marketing at any time. We will then no longer process the data concerned for that purpose. This also applies to profiling insofar as it relates to such direct marketing.

17. Right to lodge a complaint

You may complain to a data protection supervisory authority, particularly in the Member State where you habitually reside, work or where an alleged infringement occurred.

18. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

19. Data security

We take technical and organisational measures to protect personal data from loss, unauthorised access, alteration and disclosure.

20. Updates to this Privacy Notice

We update this information when our processing activities, services or legal requirements change.
Last updated: 26 October 2026.